SV650.org - SV650 & Gladius 650 Forum
Page 1 of 2 1 2
Show 40 post(s) from this thread on one page

SV650.org - SV650 & Gladius 650 Forum (http://forums.sv650.org/index.php)
-   Idle Banter (http://forums.sv650.org/forumdisplay.php?f=116)
-   -   Mambo CMS (http://forums.sv650.org/showthread.php?t=83481)

Demonz 04-02-07 11:03 PM
Mambo CMS
 
Any of you web gurus used it before? I am having trouble with my menu alignment on our work website. Its only occurring with the new IE7. Would appreciate some some help to figure it out if you have any ideas.

Cheers,
Grant

TSM 04-02-07 11:45 PM
If you find open the template_css.css and find the below and change. Hopefully it will work fine.

You also seem to have the class tags on the bit that is wrong set to 'mainlevel-nav' but that CCS ref does not exist. I have not gone though everything, but you are probably having hierarchy problems in your css, unfortunately IE & FF sometimes render differently so its wise to declare your css fully with alignment etc.

Code:
table.moduletable td {
        font-family: Trebuchet MS, Verdana, Arial, Helvetica, sans-serif;
        font-size: 10px;
        font-weight: normal;
        }
to

Code:
table.moduletable td {
        font-family: Trebuchet MS, Verdana, Arial, Helvetica, sans-serif;
        font-size: 10px;
        font-weight: normal;
        text-align: left;
        }

Baph 05-02-07 12:22 AM
Please please please tell me that you're not allowing the world & their dog access to a server running Mambo.

PLEASE tell me.

(if you are, it's a bad thing to do btw, just so were clear. If it's private corporate use only, it's not so bad).

EDIT: I've just seen the link in your signature. Oh dear :( Personally, I recommend e107 for CMS work, but so long as you migrate away from Mambo, you stand a better chance of the website being comprimised (yes, mambo is THAT bad).

timwilky 05-02-07 06:48 AM
I would suggest a CMS swap as well, for a freeby I would recommend Jahia, see http://www.jahia.org/jahia/page712.html

My company used it for some pretty big sites and only abandoned it for commercial (not technical) reasons)

TSM 05-02-07 09:45 AM
Quote:
Originally Posted by Baph
Please please please tell me that you're not allowing the world & their dog access to a server running Mambo.

PLEASE tell me.

(if you are, it's a bad thing to do btw, just so were clear. If it's private corporate use only, it's not so bad).

EDIT: I've just seen the link in your signature. Oh dear :( Personally, I recommend e107 for CMS work, but so long as you migrate away from Mambo, you stand a better chance of the website being comprimised (yes, mambo is THAT bad).
What about Jomla, yes i know its a branch from Mambo but they split branches because of developers annoyed with security risks etc..

I remember you telling me about e107, have not given it a try yet though.

Baph 05-02-07 10:16 AM
Joomla (not Jomla :P) 1.x has it's problems too.

The latest branch of Joomla was released on 12/25/2006 & the latest publicised vulnerabilities were on 29/12/2006.

The majority of the problems it has a XSS (Cross site scripting), however, the grapevine says that it still has issues with SQL injection that haven't been brought to public attention. At worst, this would probably reveal passwords (remember, encrypted passwords are no longer safe after projects like GData).

So long as your password for Joomla is only for Joomla, and you run it with the usual user level restrictions you should be safe.

As I always do though, if you're worried, run Apache in a jail (assuming *nix server). At least that way, problems are minimised (but even jails aren't a foolproof answer).

Demonz 05-02-07 11:46 AM
Thanks for the comments - I guess I need to look into the security issues you have highlighted and do some cost benefit analysis. I looked at Joombla a year or so back and havent bothered updating any of our backend server stuff to this - mainly as we have been happy with the template the site was based around.

I guess worst case scenario for business is someone hacks it and deletes some files. Our server is hosted by an outside organisation so I am not concerned about this.

From here its a couple of days to reinstall and get it back online from our backups.

The other option is to learn and install a new system - sort out the templates and put the site together to how it currently is and away I go... I am not sure how long this will take here.

Jabba 05-02-07 12:50 PM
I use xoops............... :P

Baph 05-02-07 12:54 PM
Quote:
Originally Posted by Jabba
I allow Cross Site Scripting, SQL Injection, remote code execution & probably Private Message disclosure............... :P
:shock:

Well, whatever floats your boat I suppose ;)

The Internet aint a safe place to play :)

Jabba 05-02-07 12:59 PM
Quote:
Originally Posted by Baph
Quote:
Originally Posted by Jabba
I allow Cross Site Scripting, SQL Injection, remote code execution & probably Private Message disclosure............... :P
:shock:

Well, whatever floats your boat I suppose ;)

The Internet aint a safe place to play :)
Depends upon what you install and how you configure it and the server :P

All CMS systems have their issues in this regard.........and phpbb (this site's software) isn't immune either :wink:


All times are GMT. The time now is 07:43 AM.
Page 1 of 2 1 2
Show 40 post(s) from this thread on one page

Powered by vBulletin® - Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.