SCMS is a secure content management system. Some
of its features are a role-based object-oriented
design, conformance to XHTML 1.0 Transitional,
strict I/O (input/output) validation, a custom
session implementation, support for SSL and
cookies (when run over SSL), session identifier
regeneration, idle session expiration, account
locking, account unlocking methods, encryption
(with MD5, AES, SHA1, SHA256, SHA512, or
WHIRLPOOL), and event logging.
License: GNU General Public License (GPL)
Changes:
The php.ini settings "allow_url_fopen" and "allow_url_include" were changed to "off" in scms_config.php by default. A new named constant, scmsHexLinx, was defined and implemented in scms_config.php to enable hexing of URLs. It is on by default. Authentication error numbers 4 and 7 were removed and instead were made the same as 3, since they made username guessing possible. An error was fixed in UnlockCode Sending via email link.