Yet another Slash Site system, including a storytelling sys, advanced user management, polling system, comments and general forums, style installation, Hebrew support and more.Written in PHP and uses mySQL for db manipulation.
Be the first to post a text review of SODA News System. Rate and review a project by clicking thumbs up or thumbs down in the right column.
SODA 0.8.3d: * "password" field in soda_users is now blob, to protect the case of the word. + function do_template() maintains almost all work with templates (some still works manually, because it's built so that templates are stored in a var and then used in many loop instances. should work on that). * NEW ADMIN AREA: all admin areas have been substitued with the new admin.php, written from scratch, which is far more advanced, secured and customizable. took me all day :O * all details on current user are now stored in global array $curr_details, instead of a var for each data type. + mysql connection is now done using the function connect_mysql(), instead of including the files. therefore no more conn.inc.php. database link is stored in global var $db. + changed all callings to mysql_query(), to call query_mysql(), a new function which, in case of an error, prints a friendly error message. + re-documented funcs.inc.php * changed news' titles and comments' subjects in the database to TINYTEXT (255). * fixed a bug with sql calling on the comments system. apprently mysql_fetch_array doesn't like to get the db parameter anymore. fine with me :) * fixed some designing problems in admin.news.php and admin.foot.php. * a few bug fixes.
SODA NS v0.8.3c is out, and it is a Major Security Update. On version 0.8.3b, database settings were moved to soda.cfg so that there would only be one settings file. But stupid me, I forgot that soda.cfg is a plain text file which is accessable by any browser, and people can get information on mysql db (including hostname, username and password - enough to hack into the database) by going to http://server/soda/soda.cfg . This was easily fixed by renaming soda.cfg to soda.cfg.php, so that PHP would interpret it. A simple tweak, but a critical one. Upgrade your soda now. Sorry.
SODA 0.8.3c (security update): * MAJOR SECURITY BUG fixed: soda.cfg file contained sensible database information such as db username and password, and was available for all to access. Fixed by renaming the file to "soda.cfg.php", so that server would interpret it if requested. * source.php no longer shows the source of soda.cfg(.php). Dumb, dumb mistakes.
Partial changelog (I've started writing one in the middle of the development...): * date details are not stored in the database as a Unix timestamp in INT (instead of DATETIME in soda_stories, soda_sumitted and soda_comments). + hebrew_date() function added in order to properly view timestamp, featuring a way to design the date viewing format. - hebdt() and hebdate() have been canceled, hebrew_date() does their work and is much more advanced. + added a "GMT Offset" setting - all dates are stored in GMT, and displayed using the defined gmt_offset setting. - strmaxwordlen() have been canceled, it became useless over the time and even created some problems. * soda_forum table changed to soda_comments. - path settings - path is now calculated automatically and stored in global var $path. * conn.inc.php settings moved to soda.cfg. There is no need to edit conn.inc.php anymore. * include.php renamed to include.inc.php. - google box is down temporarily because of a very weird problem. + install.php has now default header and footer so that it would look okay on first installation. * fixed *many* typos in README file. * minor bug fixes. As always, the source package is available to download from the sourceforge servers right now. You are welcome to contact me with any question on the code or on usage.
SODA 0.8.3b: * date details are not stored in the database as a Unix timestamp in INT (instead of DATETIME in soda_stories, soda_sumitted and soda_comments). + hebrew_date() function added in order to properly view timestamp, featuring a way to design the date viewing format. - hebdt() and hebdate() have been canceled, hebrew_date() does their work and is much more advanced. + added a "GMT Offset" setting - all dates are stored in GMT, and displayed using the defined gmt_offset setting. - strmaxwordlen() have been canceled, it became useless over the time and even created some problems. * soda_forum table changed to soda_comments. - path settings - path is now calculated automatically and stored in global var $path. * conn.inc.php settings moved to soda.cfg. There is no need to edit conn.inc.php anymore. * include.php renamed to include.inc.php. - google box is down temporarily because of a very weird problem. + install.php has now default header and footer so that it would look okay on first installation. * fixed *many* typos in README file. * minor bug fixes. [ChangeLog not documented above 0.8.3b]
Be the first person to add a text review.
Copyright © 2009 Geeknet, Inc. All rights reserved. Terms of Use
Thanks for your rating!
Would you also like to write a review?