Those little GIFs bring a tear to my nostalgic eyes.
Welcome to the community ;-)
Show HN: I made CMS less than 15 kilobytes, flat file
11–20 of 45 posts
Re: Show HN: I made CMS less than 15 kilobytes, flat file
#12[flagged]
Re: Show HN: I made CMS less than 15 kilobytes, flat file
#13As who has endured the old Web 1.0 era with PHP, I can immediately see that the author didn't have any benefit of hindsight: no error handling, no XSS protection, no CSRF protection, no atomic file writing, no correct permission in the data directory (which means that some settings are still required depending on your webserver), no real way to change password which is built into admin.php, no constant-time comparison on login, no correct template handling (it may or may not recursively expand included files depending on the order!), unlimited writes to the session even when credentials do not match, and of course no protection against any attempt to use fopen wrappers after login. And the supposed "content" management system doesn't allow any file uploading.
The author needs to be a lot more careful about security at the very least. To be precise, PHP is not the culprit here, but does enable lots of easy ways to make your program immediately insecure due to its interface and one has to learn how to avoid them systematically.
Re: Show HN: I made CMS less than 15 kilobytes, flat file
#14[flagged]
thanks for the feedback, welcome to the community, by the way, cms was tested under dos, several enthusiasts sent me screenshots
https://i.imgur.com/7uoP1lO.jpeg
Re: Show HN: I made CMS less than 15 kilobytes, flat file
#15Nice but calling this a CMS is a little bit over the top
Re: Show HN: I made CMS less than 15 kilobytes, flat file
#16As who has endured the old Web 1.0 era with PHP, I can immediately see that the author didn't have any benefit of hindsight: no error handling, no XSS protection, no CSRF protection, no atomic file writing, no correct permission in the data directory (which means that some settings are still required depending on your webserver), no real way to change password which is built into admin.php, no constant-time compariso…
thank you very much for your feedback, I am very grateful to you for studying the script in detail, I have not had such detailed criticism from anyone before. I will gradually take your comments into account, because what I do is very important to me, and I also want it to be useful for others. useful and painless. If you can help me at least a little with solutions - I will really look forward to your letter downgrade@meta.ua
Re: Show HN: I made CMS less than 15 kilobytes, flat file
#17Nice but calling this a CMS is a little bit over the top
The main thing is that the script does its job, right?
Re: Show HN: I made CMS less than 15 kilobytes, flat file
#18Are you commenting on your own posts from different accounts?
kopakobana and joobadze only comment on and promote your things.
Re: Show HN: I made CMS less than 15 kilobytes, flat file
#19Are you commenting on your own posts from different accounts? kopakobana and joobadze only comment on and promote your things.
These guys have been using hosting for a long time, I asked them to support me. One is Georgian, the second is from Western Europe.
Re: Show HN: I made CMS less than 15 kilobytes, flat file
#20As who has endured the old Web 1.0 era with PHP, I can immediately see that the author didn't have any benefit of hindsight: no error handling, no XSS protection, no CSRF protection, no atomic file writing, no correct permission in the data directory (which means that some settings are still required depending on your webserver), no real way to change password which is built into admin.php, no constant-time compariso…