Please report issues about the beta inside this thread. Do not consider to use this beta for production, a couple of security audits are missing at the moment it was released.

Releases

• Multi database support (MySQL, PostreSQL and SQLite)
• Installation via CLI
• Support for cloud hosting like Heroku

http://beta.redaxscript.com/?dir=releases

Modules

• Styled pseudo tags inside Editor module
• Update Share This module with API key
• Refactoring for modules
  • Renamed $_module to $_moduleArray
  • Renamed access => 0 to access => null

http://beta.redaxscript.com/?dir=modules

Languages

• New Japanese translation

http://beta.redaxscript.com/?dir=languages

Templates

http://beta.redaxscript.com/?dir=templates

Extend ruleset.xm with this rule and refactor the core to validate.

< rule ref="Squiz.PHP.NonExecutableCode" / >

At this moment, I have no idea how this will be possible within the routing() because removing "return" after "break" causes unwanted outputs.

Quite sure this is not the best way to ask help... but just as so many people today, we refuse to join Facebook, so this might be second best.

We are webdev company, tried today to first time install but no way could get rid of "Connection to database failed: No database selected." message... although we are sure we set up all required db fields:

* Host: localhost
* Name: rs_dev
* User: root
* Password: (password that works to login PhpMyAdmin)
* Prefix:

What could be wrong?

There is a problem in writing the New comment with a user name in Arabic Author ... When you are writing a comment as a user in the Arabic language as an error message in the attached picture show.

The PHP constants used throughout Redaxscript prevent us moving towards unit testing. We need some kind of testable "constants" object... https://gist.github.com/GaryA/7975594 http://codepad.org/nObiuyh4

Conversation from Facebook:

Hey Henry, I have an idea for replacing the constnats defined in startup.php, see what you think... https://gist.github.com/GaryA/7975594 Henry Ruhs 17:40 Henry Ruhs

hello gary

just checked it out

without a use case or lets say way to use it i cannot understand what this is for

and you repeat yourself very often

constants are for a reason constants and not globals, you should only read and not write them Gary Aylward 17:44 Gary Aylward

I agree - so why is there an undefine() function in startup.php? Which doesn't work BTW Henry Ruhs 17:44 Henry Ruhs

there is an undefine to set a constant to ''

instead of being undefined what caused errors once you are checking it Gary Aylward 17:46 Gary Aylward

But undefine fails if the constant is already defined. I found this when running with all errors reported - only happens under certain circumstances, I think it's to do with RENDER_BREAK... Henry Ruhs 17:46 Henry Ruhs

of course it fails then

undefine is just to define a constant to be empty

our "constant" class should be a static holder for the constants

like constant::firstTable

or like constant::now

for the unit test we need to set the constants to dummy values

so the constant class needs to have a setter of course

anything else is not needed i think Gary Aylward 17:49 Gary Aylward

But then you can only run a test once - since you can't change the values of the constants Henry Ruhs 17:49 Henry Ruhs

you have to run it in multiple instances, yeah

maby we also write a "clear" method then Gary Aylward 17:50 Gary Aylward

Perhaps what we need is read-only data in a class, so the data can only be set by the constructor, with a get method to allow read-nly access? Henry Ruhs 17:50 Henry Ruhs

but i found it confusing if some code was able to change a "constant" because i always want to have it the same value

readonly by default, yeah

thats also good

and for unit test we can disable this

we do not need the undefine() stuff then

if constant does not exists we return false Gary Aylward 17:52 Gary Aylward

We really need a set method that is only available in uit testing - I'm not sure that's possible though

If a constant doesn't exist shouldn't we return NULL ? Henry Ruhs 17:52 Henry Ruhs

we should, yeah

ok, so do a get and a set

get and set method, thats it

KISS principle

let me write some "idea" code

hold one Gary Aylward 17:55 Gary Aylward

As much as I hate global constants etc, perhaps we could have a TEST constant set during testing which is checked by the set method - if TEST is not defined, set fails Henry Ruhs 18:02 Henry Ruhs

http://codepad.org/nObiuyh4

that would be inside migrate.php

could you please open an issue on Github

and put your gist and this link into

i guess its for 2.1.0

When running Redaxscript (as HTTP apache2/php), behind a HTTPS proxy (so only one application listens to HTTPS port), it does not work.

Why

Because Redaxscript defines URLs all absolute: http://www.example.local/

Modern browsers refuse to load HTTP elements when connected through HTTPS.

Solution

It would help if resources would be referenced by /resouces/image.jpg, instead of http://www.example.local/resources/image.jpg.

It would also help if the protocol / method was omitted, resulting in //www.example.local/resources/image.jpg.

Hello! I already spoke with you last year about launching your system on a local server under the operating system Windows. In the version of your cms 3.3.2 - the same problem. When running on a local server - a white screen, nothing happens. CMS version 3.2.3 - runs fine.

Hi every one.

I am very exited to discover this CMS. Very fast and flexible.

But I have a problem with the admin bar. I can not access "content", 'access" or "system" after 5 minites after installation. the buttons are there but the click does not work.

So I tried redaxscript with Wamp for local server and I test it with Xamp to. That the same issue.... Xamp 1.8.2 on Win XP PHP Version 5.4.27

Thanks for answering ...

Even removing everything and simplifying the data base name, DB user name and DB password to 6 alpha numeric characters results in an "incorrect password" error message. I've simplified it so much that the DB user's password is now "123456" and it still won't connect.

I am using a localhost connection and I am able to connect successfully from the command line (e.g. mysql -u XXXXX -p). I have tried changing this to 127.0.0.1 as well as "%" with no success.

Despite the error message, the installer is writing the credentials to the file but none of the tables are being created. Yes, I know I can create the manually by running the SQL statement. However, I don't want to do this. I need something that works flawlessly for my customers and a broken installer isn't getting things off on the right foot.

SHA1 is not much better than MD5 right now. The reference implementation lacks security for stored passwords on this current path. My suggestion is to replace it with bcrypt for having rounds and easier replaceability of hash algorithms in future.

• split off pwd handling from reset-form etc.
• abondon sha1 and hash-specific implementation
• use bcrypt
• add configuration option for rounds (could be special for user groups)
• add configuration option for hash to be used - standard should be whirlpool/blowfish
• add user defined salt (pseudorandom)
• add user defined salt and bind email address to password (some hash of email, e.g. sha512)
• take care of change email address feature

advantages:

• brute forcing and rainbow tables are much less effective
• upgrading hash algo is easy. just change the option
• current algo and rounds are defined in db as salt is

Hello There is a problem in writing the article titles in English writes Alias automatically The Arabic language is not handled and must be hand-writing and English