Web Hosting Talk







View Full Version : News publish php script help


hyjlmc
04-04-2009, 08:44 AM
Hi,
I'm looking for a script that can use to publish the news in the site.

And also need to have the News archive function.

Last requirement is able to publish rss news.

---------------------------------------------

I want to use this script like this:

* Put the news section in the main page(index.html) of my site, and I can select publish 2 or 3 or any amount of news.

* And the visitor can read our latest news as well as access to our News archive section to read all the archived news.

* The news which I published also can auto convert into rss, so that all visitors can read it.

Meanwhile i need a php scripts that can work with the news announcement as well as auto update/create rss news.

Any idea which script can do it?

I prefer php4, or php5, with or without mysql also ok.

Please PM me or post here.

Thank you.


Regards,

greg2007
04-04-2009, 12:49 PM
Why not just use something like Wordpress?

vibrokatana
04-04-2009, 01:01 PM
Why not just use something like Wordpress?

Obviously people enjoy reinventing the wheel, introducing tons of security exploits and pulling their hair out.

In all honesty most CMS I have seen do this rather easily.

hyjlmc
04-04-2009, 01:06 PM
I would not consider to use wordpress or CMS,because they have no all the function I want.

For wordpress,it's hard to configure for just html site which just need the latest news, news archive and rss function.

So,any recommendation?

greg2007
04-04-2009, 01:57 PM
I would not consider to use wordpress or CMS,because they have no all the function I want.It does EVERYTHING you mentioned in your first post

You are either being ignorant and childish OR you haven't given a decent reason why you wont use Wordpress OR you simply do not know what Wordpress can do.

Read the features on this following link then come back and tell me that isn't EXACTLY what you asked for in your first post!
http://wordpress.org/about/features/

Seriously, I'm not pushing Wordpress for some affiliated reason, it does exactly what you have asked for.
It's a CMS that lets you show "latest news" "archive" "by catgory" "number of posts you want" "ever post is auto added to an RSS feed"
Isn't that what you want?



Any idea which script can do it?Yeah, Wordpress :D


For wordpress,it's hard to configure for just html site which just need the latest news, news archive and rss function."Just HTML"?
If you are only wanting to achieve this with HTML then you are in for a very rough ride I'm afraid.
If that's what you want, then you wont get ANY script to do that, sorry.

You either need a bunch of PHP scripts that will allow you to enter news articles, store them in a db and retrieve them later, OR you will have to code every HTML page by hand for EVERY news article you write including your header, images, side bars, graphics. You need a server side like PHP/ASP for this and a DB.

So installing Wordpress and learning how to use it is probably less time than coding all this in PHP yourself.



So,any recommendation?No more than I've already given. Wordpress is a script, I don't see the logic in wanting to download or use an unknown script to do the same thing a well known and secure one already does.



Obviously people enjoy reinventing the wheel, introducing tons of security exploits and pulling their hair out.You must be psychic :D

CorvetteX
04-04-2009, 02:02 PM
I would not consider to use wordpress or CMS,because they have no all the function I want.

For wordpress,it's hard to configure for just html site which just need the latest news, news archive and rss function.

So,any recommendation?

There are plugins available for Wordpress to make it function the way you described. I don't know which ones off the top of my head but I've seen them around.

Cross site scripting(XSS) and SQL injections are widespread right now. There are literally hundreds of thousands of (infected)computers searching for vulnerable websites every day. You don't want to be one of them.

Spend the time making Wordpress function the way you want it rather than using an insecure script. I do a lot of security auditing and I'd say more than 75% of scripts are vulnerable to some sort of XSS or SQL injection attack. Didn't you hear about Google, Facebook, MySpace and Twitter all having vulnerabilities?

If they can be hacked, so can you. Using Wordpress will save you a lot of time & frustration in the long run. They are pretty good about keeping their stuff secure.

hyjlmc
04-05-2009, 10:55 AM
let me show you an example site:
mcfreehosting.com (this is not my site and I'm not advertise it,ok)

you can see the news section on the left side,there published 2 news.

when you click on the news,then it will bring you here : news.runhosting.com -- news archive, all the news since the site opened also present here.

and also rss present, but i want the rss button show like in WHT, can see on behind the url.

If I create a site, and manually insert the news into index.html, then go to insert to news-archive.html, the insert into news.rss .

Every time when I want to publish a news,then I have to do 3 times work, but I don't want. I'm looking a good php script that can just do that for me by do 1 time work.

I already have a site, but it still under develop. I want to use SSI for insert the php script for the index.html latest news section, and also SSI for news archive page, as well as php script auto create news.rss for me.

If I turn to use wordpress, then I have to rebuild all my site content, tension...

I searched lot of news publish php script like phpnews etc, but I still couldn't find the script for all the purpose I need...

greg2007, I'm not ignorant and childish, I used wordpress before, and I'm sure this is not what I want...

I just want to get my job more easier...

beside wordpress, any recommendation please??

CorvetteX
04-05-2009, 01:13 PM
This is the programming forum, anyone here is going to look at your example and wonder why you don't just create it yourself. It is very basic. Couple divs, a few lines of CSS, and a quick PHP function. Basic knowledge of those could be helpful to you in the future anyways.

I recommend www.tizag.com for learning some basics.

hyjlmc
04-06-2009, 01:12 AM
This is the programming forum, anyone here is going to look at your example and wonder why you don't just create it yourself. It is very basic. Couple divs, a few lines of CSS, and a quick PHP function. Basic knowledge of those could be helpful to you in the future anyways.

I recommend www.tizag.com for learning some basics.
Beside learn from the basic,no any other php script can do it?

I believe there are some scripts present,please advice...

DHD-Chris
04-06-2009, 05:17 AM
Maybe you could do something like this? feel free to PM me or add me on IM.

<?php
include("includes/dbc.php");//include the database connection file

$n = $_GET['n'];//get the news ID
$sql = mysql_query("SELECT * FROM news WHERE id = '$n'");//select the news ID from the GET eg news.php?n=...
$r = mysql_fetch_array($sql);//fetch the news array from MYSQL
$title = $r['title'];//Assign variables
$article = $r['article'];
$date = $r['date'];
?>
<p class="menuheader"><?php echo $title; ?> - <?php echo $date; //echo the title and date?></p>
<p><?php echo $article; //echo the article?></p>

Cyrus_vtn
04-06-2009, 07:14 AM
don't see why WP wouldn't work for you ...

hyjlmc
04-06-2009, 10:23 AM
Maybe you could do something like this? feel free to PM me or add me on IM.

<?php
include("includes/dbc.php");//include the database connection file

$n = $_GET['n'];//get the news ID
$sql = mysql_query("SELECT * FROM news WHERE id = '$n'");//select the news ID from the GET eg news.php?n=...
$r = mysql_fetch_array($sql);//fetch the news array from MYSQL
$title = $r['title'];//Assign variables
$article = $r['article'];
$date = $r['date'];
?>
<p class="menuheader"><?php echo $title; ?> - <?php echo $date; //echo the title and date?></p>
<p><?php echo $article; //echo the article?></p>
thanks for the code, can you tell me please, from which php scripts software you use?

DHD-Chris
04-06-2009, 10:32 AM
thanks for the code, can you tell me please, from which php scripts software you use?

That perticular one was one I made to show news on my games website.

vibrokatana
04-06-2009, 11:14 AM
That perticular one was one I made to show news on my games website.

So your games website is vulnerable to SQL injection?

DHD-Chris
04-06-2009, 11:20 AM
So your games website is vulnerable to SQL injection?

You can not possibly inject SQL on this because there is no way to inject the data and with news I will be the only one to update however usually with things like comments then I would use real_escape_strings and strip_tags.

greg2007
04-06-2009, 11:52 AM
You can not possibly inject SQL on thisI stopped your quote there as there is no "because" to come after that as it is an incorrect statement.
You can get any data with your code, not just from the news table. It's not all about sanitising the data on insert, there are MANY other security issues.

You use $_GET data directly into a mysql statement without any checking or sanitisation at all. Even kids know how to exploit that.

ESPECIALLY as posting it in a public forum for another member to use you could have at least spent the 5 seconds it would have taken to write
$n = mysql_real_escape_string($n);Even then it's only very basic code. You don;t check after the query if you even get any rows found, you just assume it was ok and go ahead and plant potentially null data into variables.
That adds loads of potential issues for the page where this script is being used.


EDIT:
In fact, if you feel the code is so secure, why not post here the URL where the file is that has that data in it?
Give someone 5 minutes and they will be posting back telling you they have managed to log into your admin area and insert some data into your table and want a few hundred $$ to give you the new admin passwords!


I don't want to sound like I am just picking it to bits, but it is very novice coding without ANY security or ANY clauses for potential mishaps.

DHD-Chris
04-06-2009, 12:05 PM
Okay, well if you really want to inject a new news article then feel free... I do not use any admin area and if I did then I would certainly have secured it from injections. But I have not seen anyone else giving this user any code examples so far.

greg2007
04-06-2009, 12:27 PM
Okay, well if you really want to inject a new news article then feel free...Ok, thanks. So I can insert a bunch of links to many pages for all my websites? And an article on your site about my web development services and contact numbers? And spam some affiliate viagra posts.. and you don't mind? Cool.

Besides, you missed the point I was making. It's not about INSERTING it's about SELECTING any data. Passwords, email addresses, logins, anything.
If you don't have anything like that you can argue "who cares".
But that's like not locking your car because you are insured.

Well, apart from I could eventually change all your current news articles to my own posts/spam/site links/affiliate stuff.


But I have not seen anyone else giving this user any code examples so far.Well, many of us have suggested Wordpress, and although the OP said they tried that and it's no use to them, they are then going to have to write the code themselves.

What are we to do, write out a full site script with 10-20 hours work in a forum for free?
I truly don't mind helping people, and often go out of my way to do so, but I'm not going to write a full website for someone to add and retrieve news posts adn archives, RSS feeds and probably an admin area to add and edit the news feeds in a forum post.

DHD-Chris
04-06-2009, 12:35 PM
They just wanted to know how to add a simple news system to their site, as for the news system goes, I would never create a PHP script for myself without making sure it was secure enough also if you really want to select some news then fine go ahead, it is what it is there for. That is like padlocking a public park but giving everyone the key. Stop being a nuisance.

greg2007
04-06-2009, 12:48 PM
also if you really want to select some news then fine go ahead, it is what it is there for. You really think you know better don't you. And don't take any notice of advice other people give you.
IT'S NOT ABOUT SELECTING SOME NEWS.
Just because in your highly insecure and novice scripts you "select news" doesn't stop me selecting anything I want, from any table. If I tried, with your level of security, I could probably INSERT something.

That is like padlocking a public park but giving everyone the key.That's an absurd example.
It's not LIKE anything, IT IS however making a website with a database and not securing it so anyone can access any part of it.

Stop being a nuisance.I'm not. But I will stop giving you any advice as you seem to be one of these people who don't listen and never ask the question "hmm, could I be wrong?".

A person who thinks they know everything truly has a lot to learn!
And your posts here really give me inspiration to use your hosting services. (/sarcasm)

I sincerely hope some people come along and back me up. Not for my sake, I know I'm right, but for YOUR sake.

DHD-Chris
04-06-2009, 12:54 PM
At no point did I say that I knew everything, in fact I only really started PHP last year however looking at your previous posts you like to act big headed towards others. I hope people do come but not to back you up but to tell you to lay off.

greg2007
04-06-2009, 01:00 PM
At no point did I say that I knew everything, in fact I only really started PHP last year however looking at your previous posts you like to act big headed towards others. I hope people do come but not to back you up but to tell you to lay off.Here we go again with people getting all tetchy and upset by forum posts. "Someone said something to me and now I may need to go in the corner and cry about it."

BTW..
I would never create a PHP script for myself without making sure it was secure enough also if you really want to select some news then fine go ahead, it is what it is there for. That is like padlocking a public park but giving everyone the key. Was you not taking my advice as you kept arguing to me that your scripts are fine and secure.

Stop being a nuisance.And that was you telling me I was being a nuisance when all I was trying to do was help you.


You think that's me being big headed? How does it affect me if your site gets hacked? Stolen? Abused?
None.

And that's what I get for spending my time trying so hard to push to you how insecure your site may be.
Great!

Have a nice day

hyjlmc
04-06-2009, 02:53 PM
greg2007, thanks for your comment in my thread...

anyway, if you are willing to help, please welcome...

otherwise, I would suggest you comment to DHD-Chris by PM ?

Thank you...

greg2007
04-06-2009, 03:53 PM
anyway, if you are willing to help, please welcome...
otherwise, I would suggest you comment to DHD-Chris by PM ?
Thank you...While I apologise for the few off topic comments, the majority of the comments I have given relating to Chris concerns YOU as well as the code is not secure and you seemed to want to use it.

People including myself have suggested Wordpress to you as it will suit the requirements you listed in your first post. As you stated Wordpress is not what you want and wont suit your requirements, then perhaps your request and description of what you want is unclear, inaccurate or I and others have misunderstood.

As such it sounds like you want specific functionality, and if you are not prepared to make use of a decent pre-made CMS like Wordpress, then for that you will have to code it yourself, or someone else do it for you.

This in my opinion, unfortunately, is a requirement outside the realms of a help and support forum, as what you want is a large amount of code, not just a quick small few lines of PHP that someone can post for you here like Chris did (no offence to Chris who was trying to help). If that was the case I would gladly do it myself, but what you need will be a lot of work.

Storing and retrieving large blocks of data (your news) in specific areas, categories and archives all with RSS feeds isn't a task that a few lines of code will do. It will need security and many checks for things such as if the data is retrieved from the DB is as expected, is there any data found and if not show some other message, and more 'if this' and 'if that' etc.

You will also need a way to enter this data. Presumably an admin input area. Again, requiring a lot of coding to allow for updating and inserting and deleting of data in a database. Which will also require some security and other checks to ensure you are not entering bad data or something incorrectly - we all make mistakes so your code inserting and updating to a DB for data that will be visible to public should check for this.

What if you have images or other content in your news article? the images have to be uploaded and retireved and importantly they have to be associated with the correct news article.

And that is why something like Wordpress may be a better solution to you.
I know many extremely professional and fast coders who rattle off PHP scripts in no time, but still they use Wordpress rather than making their own. Simply because it is a full CMS, and when you have a large amount of articles like news, it is better within a structured setup where you can enter, edit, delete and manage articles with ease, rather than simply inserting and retrieving data from the DB with some basic PHP code.

Why make your own when there is a fantastic one already there to be used for free?
Unless you want basic things, which although you state you do, I disagree and think you need a lot more than you seem to think you do.

Wordpress also has decent plugins and widgets that provide a great deal of functionality. There are auto sitemap generators that submit your site, all articles and any updates you make to all major search engines automatically. You can have friendly URL's and other settings and plugins that make your site very good for Search Engine Optimisation.


I'm not saying doing it yourself is a difficult task, but it will be time consuming. There may be a script out there for what you need, and perhaps similar to Wordpress, unfortunately I don't know of one and to be honest, you are better of using a well known CMS.
Security, bugs and other support and issues are maintained in the popular ones ike Wordpress and Drupal, whereas the lesser known ones are more likely to have security issues, bugs and no support.


Use Chris' code if you want, but apart from being extremely unsecure, it is also very basic and all it does is retrieves data from a DB.
That is about 0.5% of the code you will need to accomplish you task in a decent, secure and well organised manner.

If I could help you further than all this information and my suggestion to use Wordpress I would.

I hope you find a solution to your requirements.

hyjlmc
04-06-2009, 04:38 PM
;)

I understand that this may be need lots of coding, but what I want is just a software like phpnews etc which can do the function of what i want.

I found another good example site which have all the things i want :

rmvalues.com

in their index page, there present latest news, only latest 2 news.

then when go to archive, can read all their news.

and they have rss too.

so this is what i want by just using a simple/complicated software to do it.

so that i no need to edit index page, then edit news archive page, then edit rss. 3x works load.

if any php software can do it by only 1x work load and do all these 3 things i want, then that's awesome...

;)

hope you and all other WHT members get my idea now and hope suitable software is here.... ;)

php,perl or cgi also is ok. ;)

thanks

DHD-Chris
04-06-2009, 05:04 PM
Here is the kind of thing you would need to get your news going. I don't want people to rage at me about it, this would get you the first 5 results depending on the date that they were posted. Would need more work for RSS and stuff but it's a start.
<?php
/*
CREATE TABLE `news` (
`id` int(20) NOT NULL auto_increment,
`title` varchar(40) NOT NULL,
`article` text NOT NULL,
`date` varchar(30) NOT NULL,
PRIMARY KEY (`id`)
)
*/

$dbname = 'DBNAME';
$link = mysql_connect("localhost","DBUSER","DBPASS");
if(!$link) {
die("Couldn't make connection.");
}

$db = mysql_select_db($dbname, $link);

if(!$db) {
die("Couldn't select database");
}

$sql = mysql_query("SELECT * FROM news ORDER BY date DESC LIMIT 5");
while($r = mysql_fetch_array($sql)) {
$title = $r['title'];
$id = $r['id'];
$article = $r['article'];
$date = $r['date'];

echo "Title:$title
<br />
Date: $date
<br />
Article:$article
";
?>

hyjlmc
04-08-2009, 07:22 PM
Here is the kind of thing you would need to get your news going. I don't want people to rage at me about it, this would get you the first 5 results depending on the date that they were posted. Would need more work for RSS and stuff but it's a start.
<?php
/*
CREATE TABLE `news` (
`id` int(20) NOT NULL auto_increment,
`title` varchar(40) NOT NULL,
`article` text NOT NULL,
`date` varchar(30) NOT NULL,
PRIMARY KEY (`id`)
)
*/

$dbname = 'DBNAME';
$link = mysql_connect("localhost","DBUSER","DBPASS");
if(!$link) {
die("Couldn't make connection.");
}

$db = mysql_select_db($dbname, $link);

if(!$db) {
die("Couldn't select database");
}

$sql = mysql_query("SELECT * FROM news ORDER BY date DESC LIMIT 5");
while($r = mysql_fetch_array($sql)) {
$title = $r['title'];
$id = $r['id'];
$article = $r['article'];
$date = $r['date'];

echo "Title:$title
<br />
Date: $date
<br />
Article:$article
";
?>
thanks for the script....

but,do you have any script software recommend?

can phpnews do it? cutenews? or any... ?

mwatkins
04-09-2009, 12:01 AM
but,do you have any script software recommend?

Wordpress can do it, as others have already and repeatedly told you.

And to repeat what was asked earlier, why are you asking in a programming forum for this? Simply repeating the same question over and over won't change that fact, and it is clear have no intention of trying to learn how to program. This isn't the "suggest a random script to meet my requirements" forum.

<shakes head and walks away>

greg2007
04-09-2009, 12:56 PM
This relates to both Chris AND hyjlmc, before I get shouted at for being off topic and attacking people.

Here is the kind of thing you would need to get your news going. I don't want people to rage at me about it, this would get you the first 5 results depending on the date that they were posted.
Don't take this as a "rage", but as you seem to insist on providing code for what will be days/weeks of work for a decent and fast coder, I cannot help but ask you things like HOW will this retrieve any data when you haven't given any code to allow data to be entered?

Your "select * FROM news" will return null, and give an error on mysql_fetch_array being an invalid result resource.
Even if you gave the OP code to enter data, if the query failed (for one of possibly thousands of reasons) then it echoes out - as per your code -
Title:
Date:
Article:

A) they will be blank on mysql data retrieval failure, and needs a fail safe "Sorry this news article couldn't be found, please try again blah yadda"
B) where is the CSS? HTM? You think echoing out "Title, Date, Article" simply like that as text is going to be a good site structure, where's the style/layout?

Again, I know you are only trying to help, but this needs A LOT of code.

Your "die("Couldn't make connection.");" is hardly fitting for a statement for public to see is it?
User tries to view a news article and gets a white page with "Couldn't make connection".

Why do you have a column size of 20 on an int?
Why store dates in a varchar? You lose ALL functionality of the great time and date functions. Especially for a NEWS site where dates are very meaningful, as then you cannot get posts from between xx date and xx date, or all from January etc.

This all needs to be thought out a little more than giving someone some quick and nasty code that simply gets all data from a DB table.
What you provide is basic, not well thought out and has no fail-safes at all.


ORDER BY date DESC LIMIT 5"What if he wants to show ALL from a specific category? All news from a date? All RSS feeds?
I state again, this is a TINY fraction of the code hyjlmc requires, and while I know you are trying to help, I am trying to get across to you and hyjlmc that posting bits of code in here that wont make anything do anything is pointless.

He needs a full script or a lot of time to make it himself or get/pay someone else to make the site code.

Where is the code to edit the news articles? Or delete, reorder, update, unpublish, move to another category?
How does he upload, edit, delete, display and associate images with the relevant article?

How does he allow comments, store them , administrate them, check them for hack attempts or spam?
Are you going to provide him with all this code too? Are you going to provide code to store all this data, to upload his news articles, delete them, edit them, assign images and categories, check it for errors and security, all the HTML and CSS divs, margins, colours, spans, classes, id's, tables, floats etc etc etc?
Of course not, and again while you are only trying to help, being blunt, I have to say you are not helping as all your code does is get all data from a table.

how is that helping someone who needs a huge amount of functionality and code?
Even hyjlmc has stated a few times now "thanks for the code, but have any script software recommend"


Again, giving people bits of code to make a complex site cannot be done in a forum. All we can do here is suggest pre-made CMS's or help and assist with bits of code where people are writing their own.

hyjlmc
04-10-2009, 01:51 PM
...
never mind,i will keep edit index, news archive and rss manually...
as i dont see any full scripts able to handle this...

mwatkins
04-10-2009, 04:17 PM
Editing RSS by hand is going to take you far longer than learning how to customize a blog product - like Wordpress - which will save yourself some time in the long run.

Good luck.

CorvetteX
04-10-2009, 05:40 PM
...
never mind,i will keep edit index, news archive and rss manually...
as i dont see any full scripts able to handle this...

The problem here is that you need software("script") and no matter how many bits and pieces of code we show you, you aren't a programmer and you have hinted to us that you have no interest in programming it yourself.

The problem is that programmers are telling you it is a lot of work to create what you want, especially a version that won't get you hacked. You don't see what we are saying because to you(a non-programmer) it seems like a simple task.

I suggest going to www.rentacoder.com and create a listing for someone to make the script for you. You'll need to accurately describe the project in your listing to make sure you get what you asked for. You will probably pay no more than $10-$20 for it. Make sure you specify that the script must be secure from XSS & SQL injections. It may also be useful to specify that you want it created using PHP & MySQL. You'll need to tell them exactly what you want, if you don't specify you need an admin area, they probably won't give you one.

You don't want to use any code people give you here, they are giving it to you to give you a place to start, but you are looking for a complete script.

/thread

mwatkins
04-10-2009, 06:32 PM
I suggest going to www.rentacoder.com and create a listing for someone to make the script for you. You'll need to accurately describe the project in your listing to make sure you get what you asked for. You will probably pay no more than $10-$20 for it. Make sure you specify that the script must be secure from XSS & SQL injections.

What sort of quality can you get for 10 or 20$? Just curious.

You don't want to use any code people give you here, they are giving it to you to give you a place to start, but you are looking for a complete script.

Indeed, no one here is going to write him a complete site management script within the thread, nor even scour the internet for something that matches his "specifications".

But I wonder how smart it is entrust the work to some nameless face on the internet for a sawbuck or two, especially when the buyer has no possible means of reviewing the code for completeness let alone safety. For all the buyer knows he could be unwillingly hosting exploits or back doors of various sorts.

hyjlmc
04-10-2009, 06:50 PM
PHP_html_news_poster
PHP_html_dynamic_news_poster
rss2html

Actually I found above 3 scripts which can do the particular things I need, just need to integrate it.

So I'm looking for another complete script which can do it all without extra work.

I, myself is not a PHP programmer, but I know CGI and I learned it about 8 years ago, but recent few years I didn't write, almost forget what I learn...

Never mind, thanks for all the comments and help.

Mod, this thread can be closed. ;)

greg2007
04-10-2009, 06:58 PM
What sort of quality can you get for 10 or 20$? Just curious.I don't know the answer to that, but I'm sure Wordpress is quite reasonably priced .. .oh, wait... it's free.

...as i dont see any full scripts able to handle this...
So I'm looking for another complete script which can do it all without extra work.You say you want news, articles, archives, RSS, admin area to input, secure site, comments, free, easy to install and use, you say you want all this in full out-of-the-box script? Wordpress does exactly this.

And although you have said numerous times Wordpress doesn't suit your needs, all the things you say you want IS EXACTLY what Wordpress is!

I apologise for beating the same drum, but the drum beat is your tune mate.

mwatkins
04-10-2009, 06:59 PM
Maybe you should dust off your CGI skills. This advisory was found after 6 seconds of searching on Google. Do you know if the scripts you are downloading are "safe"?

Let me pose a scenario for you. You have a headache. You go downtown to this place where only strangers congregate and you ask someone for a "headache pill". They give you a choice of the blue pill or a red pill.

Which do you choose?

Hint: if you took either, you aren't playing safe. Such is the same with the Internet. Unless you know what you are installing, or there is a big, verifiable, community standing behind it, DO NOT INSTALL IT.

http://xforce.iss.net/xforce/xfdb/24547

EasyPageCMS index.php cross-site scripting
easypagecms-index-xss (24547) Medium Risk
Description:

EasyPageCMS is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the index.php script. A remote attacker could exploit this vulnerability using the cat parameter to execute script in a victim's Web browser within the security context of the hosting Web site, allowing the attacker to steal the victim's cookie-based authentication credentials.


<still shaking head>

mwatkins
04-10-2009, 07:06 PM
I don't know the answer to that, but I'm sure Wordpress is quite reasonably priced .. .oh, wait... it's free.

I'm very supportive of Open Source and contribute myself so its not the fee or lack thereof that makes me ask.

It is different when someone is on the hunt for a coder-for-hire, and the rate is 10 or 20 bucks to deliver what you and I know to be much more than an hour's work (or 10 or 20 minutes work at those prices), well, one should wonder what kind of quality they are going to find.

Price, or lack thereof, certainly don't speak to quality. There seem to be an awful lot of exploits for free and paid-for PHP code out there. ;-)

The OP could easily find something out there in the Open Source community to fill his needs, for free. WAIT... it's WordPress!

LOL

I'm sure the OP just has a problem visualizing how Wordpress could be bent to do what he wants in a way that is visually appealing to him. It's the right sort of solution for someone who doesn't have the skills to do much more than use the product, that's for sure.

And if it's the name "Wordpress" which is throwing him off, he could pretend it is spelled backwards and install it while standing on his head saying "Sserpdorw"!

greg2007
04-10-2009, 07:10 PM
he could pretend it is spelled backwards and install it while standing on his head saying "Sserpdorw"!It doesn't work doing it like that, I tried it and got numerous errors.

hyjlmc
04-11-2009, 12:48 PM
And although you have said numerous times Wordpress doesn't suit your needs, all the things you say you want IS EXACTLY what Wordpress is!

I apologise for beating the same drum, but the drum beat is your tune mate.

let refer to the example site:
rmvalues.com/index.html index page the latest news section (1)
rmvalues.com/news.html news archive page(2)
rmvalues.com/rmvalues.rss (3)

if i want to build a site 90% similar to rmvalues.com , then how can the wordpress make the menu on right side, footer, header, content, ssi and the whole site?

i'm not quite familiar with wordpress as i just ever used it for 2 times for testing purpost.

if i simply want just news,archieve and rss, i understand that wordpress and almost all blogging software can achieve it,but what for if that's not what i want?

i'm sorry for i don't know how to express well that how and what 100% exactly what i want,as english isn't my native language...

mwatkins
04-11-2009, 02:56 PM
Your issue isn't language - we understand what you want.

Why don't you use the time you are spending on repeating the same thing over and over to search the web?

http://lmgtfy.com/?q=customize+wordpress+news+archive+site

(and variations of that same query) returns, among some 3 MILLION other responses, some how-to links.

Nothing you want to do is "new". Therefore invest your energy into finding someone that has gone 80 or 90% along the road you wish to travel.

greg2007
04-12-2009, 07:37 AM
if i want to build a site 90% similar to rmvalues.com , then how can the wordpress make the menu on right side, footer, header, content, ssi and the whole site?Wordpress uses core PHP files for it to work, all the goings on behind the scenes etc.
But the CMS also uses Themes, where you can style your own site using the theme files.

These files include: header.php, footer.php, 404.php, style.css, print.css. These are self explanatory and editing the two CSS files allows you to change or add styling as you want. The PHP files allow you to change or add the styles you made in CSS files.

There are also these files in the Themes: page.php, archive.php, index.php, comments.php.
Page, Archive and index are you main pages and you can also edit these files to make your own layout and styling and make it call whatever you want. Such as all news articles, all from January, all from 2008, all from a specific category, then additional options from there such as with or without comments, etc.


There is also a file called sidebar.php, which is a right or left menu (depending on if you float it left or right in your styles.css) that holds external links, archives, search by category, search by month and whatever you want it to have.

Each page has functions called on, which are a learning curve but once you grasp the basics of the loop and the functions, you can place them wherever you want and make them call whatever data you need.
This has all been setup in the core PHP that you don't need to change. You just need to place and change the simple functions such as "get_archives()" or "get_comment()"

All that said, the internet has a lot of ready made styles that you can browse, and find one you want and installing it is simply clicking install and activate in the admin area.

i'm not quite familiar with wordpress as i just ever used it for 2 times for testing purpost.Whatever software/scripts you decide to use, you will need to spend a little time learning how it works so you can make it work and look how you want.
With Wordpress and the themes area this is made as easy as possible, and of course there is a dedicated forum to help you with stuff as well as lots of documentation about all the functions, and a full tutorial for beginners.

And because its VERY popular help and support is everywhere. A smaller unheard of script may have a few thousand users, which isn't likely going to have much in the way of support.

if i simply want just news,archieve and rss, i understand that wordpress and almost all blogging software can achieve it,but what for if that's not what i want?Then what do you want?
You keep asking for a news blog script, with archives, RSS etc. Wordpress is for that exact requirement.
If you don't want Wordpress, then search google for things like "php news script".

But don't complain when it breaks, is hard to change to your requirements and has little support, is your site gets hacked through a vulnerability. There will be decent secure scripts out there, but amongst them will also be bad ones.

let refer to the example site:
rmvalues.com/index.html index page the latest news section (1)
rmvalues.com/news.html news archive page(2)
rmvalues.com/rmvalues.rss (3)ok, here's some sites that use Wordpress (they are not mine before anyone complains about free advertising)

www.devoracles.com (http://www.devoracles.com) - This site is heavily modified in terms of CSS styling, but all the main stuff is called by Wordpress.

http://www.webdesignerwall.com/wp-content/uploads/2008/11/default-homepage.gif - This I found by a Google search, and is something you should look at. It shows the header etc, but this is the default Wordpress theme which can be edited and styled however you want, or install a totally new theme!

hyjlmc
04-12-2009, 08:06 AM
Then what do you want?
You keep asking for a news blog script, with archives, RSS etc. Wordpress is for that exact requirement.
If you don't want Wordpress, then search google for things like "php news script".


I don't want blog script as I'm not developing a blog.
I'm making an information site, I tried to gather all the information,tutorials and tips etc.
and I just wish to add an annoucement/news section for telling the visitor about the latest news and also another section for them to read the archive news.
of course rss feed should not be forget.
and this is the only thing i want.
doesn't matter vulnerable or invulnerable the news srcipt,if they want to hack,what can i do?
the most important of my site is the information,tutotials and tips...

greg2007
04-12-2009, 09:23 AM
doesn't matter vulnerable or invulnerable the news srcipt,if they want to hack,what can i do?You can use secure scripts like Wordpress. Or check yourself or get someone to check the code for a script you download.
One of the scripts you mentioned you found, someone else here posted a report on that script having security vulnrabilities. This is often (not always) the issue with lesser known scripts.

Even without credit card detals or people's names, emails or addresses, they could wipe your DB clean, empty your server files, upload their own scripts and spam the entire site to link to their sites.


They could use it to do scrupulous things like hack other sites and people's PC's and even download stuff they shouldn't like illegal content.
Then it's YOU whose server IP gets flagged with authorities and you who has to explain things and provide server logs for an investigation.

It is very unlikely someone will find a security issue and hack the site, people tend to pick on larger sites where they can access data that can be sold or used themselves - email addresses and credit cards etc.
But security is important, however unlikely a hack might be. It's a nightmare knowing someone has been in your system.You might have to re-install everything, restore the database and site files, and possibly lose everything from the last backup.
You then have to find the security vulnerability where they got in and fix it, or they'll just do it again.
Also, while you are fixing all this, your visitors see the site is down and may not come back.

Security is important in any site.


Again, if Wordpress truly isn't what you need, then you are looking for a specific script or making your own.