FRIHOSTFORUMSSEARCHFAQTOSBLOGSDIRECTORY
You are invited to Log in or Register a Frihost Account!

CMS trial and error

 


microkosm
When I applied for hosting at frihost several days ago, my original goal was to install flatpress as the basis for a personal blog. I was looking for a standards-compliant lightweight blogging platform which wouldn't require too much maintenance. Since that original and noble goal I've installed SEVEN different content management systems ranging from the above mentioned all the way to heavy hitters like wordpress and movabletype. Here is what I remember from this ordeal:

    flatpress: easy install, flat-files, no sql database required, not too many themes available (mostly copies of wordpress themes), couldn't get xml-rpc working

    habari: advertised as wordpress killer, nice demo, couldn't get installed (prerequisites too steep for frihost?)

    textpattern: easy install, interface seems outdated though it worked fine, limited out-of-the-box themes, uses textile (too bad i'm into reST now), couldn't get xml-rpc working

    pivotx: easy install, has option of using flat-files or database (nice flexibility; I opted for install w/o db), successor to the 2001-looking pivot, very nice eye-candy for the dashtop (very AJAXy), could NOT get xml-rpc working

    nucleus CMS: simple install, intuitive, forgettable, didn't explore much else (probably didn't give it a chance)

    movabletype: comparatively large install file, based on cgi not php, install ultimately failed (due to cgi permissions or other restrictions?), wanted it to work for the nerd factor and also b/c it seems like a secure version of wordpress

    wordpress: read the directions and it's a 5 minute install, security problems galore (i've bookmarked numerous "hardening" tips), themes-galore, xml-rpc doesn't work


Ultimately I compromised and installed wordpress several times for practice and it's what I settled with. With nearly every CMS that I successfully installed I tried to get remote posting to work via the xml-rpc protocol but it failed every time. After a bit of googling, I came across this forum thread: http://wordpress.org/support/topic/240683 which states that an apache module (mod_security) is often setup to block anything with xmlrpc on a webpage.

So, I'm wondering if that's indeed the situation here at frihost. Is there any possibility that the moderators could alter this situation? If not, my plan is to compile the original post in restructuredText, output to html, then copy and paste into wordpress editor.
Agent ME
I ran into a similar problem with mod_security. I tried to make a blog post talking about usage of 'wget', but I got an error whenever I tried to submit the post. If I took out the word 'wget', it was fine.

(Try to make a post here with the word 'wget' and then a space, and you'll see the same error I was getting.)

It took me a while to figure out what was possibly wrong. Eventually I found out it was mod_security, and I figured out how to disable it for a directory.

Put a file named .htaccess in your public_html directory with this text. (If you're on windows, you might have to make the file named something like "a.htaccess", and then rename it once you've sent it over to the server.)
Code:
<IfModule mod_security.c>
    SecFilterEngine Off
    SecFilterScanPOST Off
</IfModule>

That will disable mod_security for everything under that directory.
_________________

By the way, what problems do you have with WordPress? I'm using it, but not aware of any security problems. I've been keeping it updated, so maybe I'm not at risk.
microkosm
Quote:
Put a file named .htaccess in your public_html directory with this text.

That's awesome.Very Happy I just tried it out and it works just like you described! Now I can access the xml-rpc via an external blogging client. If only I had known about this workaround when I was testing the other CMS's. Oh well, wordpress is just fine once you tweak it. BTW your tidbit of knowledge about mod_security should be stickied so other frihosters are at least aware of what's going on. I know it was frustrating trying to troubleshoot the remote posting issue.

Quote:
By the way, what problems do you have with WordPress? I'm using it, but not aware of any security problems. I've been keeping it updated, so maybe I'm not at risk.

There's no outstanding issues although there are exploits in the wild if you don't take basic precautions like deleting install.php, upgrade.php, etc. By the fact that wordpress is the most popular CMS and also used by security-uncouncious bloggers, hackers/crackers take advantage of the situation. It's kind of like MS windows having so many security issues being the most popular OS. For hardening tips my simple google search brought up the following:
http://www.smashingmagazine.com/2009/01/26/10-steps-to-protect-the-admin-area-in-wordpress/, http://samdevol.com/6-simple-steps-to-hardening-wordpress/

One of those states changing the permission of wp-config.php to 600 but that just breaks my wordpress and I can't access anything.
Related topics

Have you ever.....?
How tough is PHP?
Javascript newbie in trouble!
Wanted logodesigners! Will pay 40 Frih$ for basic one!
What are the features of LINUX OPERATING SYSTEM!!

I got one of those Webpage Design programs....
Error with MySQL and PHP script in my CMS
How about some feedback on site.
Sql Error: 1017. Missing all the indexes files of phpbb
500- Internal Server Error - DONT START NEW THREADS

Problem in creating a dynamic form
Internal Server Error in Joomla, Please help!
Error 500 when turning off register_globals (server 1)
the "BBBBBBBBBBBBB" error on IE7
How to preset the MySQL error?
Reply to topic    Frihost Forum Index -> Scripting -> Website Software

FRIHOST HOME | FAQ | TOS | ABOUT US | CONTACT US | SITE MAP
© 2005-2007 Frihost, forums powered by phpBB.