I currently use 2.0.18.1 , and

Quote:

The phpinfo() says 'Server API CGI ' , so I assume php runs in CGI mode.

These are the only modules I currently use:

Liaise - 1.26
protector - 3.4
Site Map - 1.30
Smartobject - 0.9
Smartsection - 2.13
Wflinks - 1.03C
Xhld0 - 3.07

I see protector is now in the core 2.5 , so I don't have to be concerned about that.

What about those other modules ? Are they still in use, safe to use with 2.5, safe to upgrade to, or even, should I use a different module (like Smartsection has gone over to ??cube or something).

I have always had to modify XOOPS userinfo.php as follows (lines added between //BEGIN and //END statements)



This was always added, because I never liked the fact that a guest user could do this:

http://www.example.com/userinfo.php?uid=1

and find out the username of 'admin' ; not real good for security. Hopefully XOOPS has come a bit further now, in that respect, and there would be no need for that mod.

What about the security side of things (apart from installing protector) ? I used to have some php settings like ..



but I don't think I can have them like that with php running as CGI

Are they still needed, or need to be different values, or other settings now ?

Thanks,

Pete

Quote:
Switch to Publisher

Quote:

Thanks, will do. I may be better to do a clean install also, as there may be a need to cleanup files a bit.

Liaise - 1.26 - I may be better to go for one that has a 'captcha', like Contact 1.7 by trabis, or I see XForms has a captcha

Site Map - 1.30 - still seems 'current' and okay.

Wflinks - 1.03C - seems not to have been updated for ages, and weblinks may be better ??

Xhld0 - 3.07 - D3 Pipes may be better, later version

Thanks,

Peter