This is the talk page for discussing improvements to the PHP-Nuke article. This is not a forum for general discussion of the article's subject. |
Article policies
|
Find sources: Google (books · news · scholar · free images · WP refs) · FENS · JSTOR · TWL |
![]() | This article is rated Start-class on Wikipedia's content assessment scale. It is of interest to the following WikiProjects: | ||||||||||
|
(Previous talk page deleted, see history) JamesHoadley 10:26, 8 November 2005 (UTC)
This is news to me. Firstly, PHP-Nuke non-patched has holes that a truck could drive through. Secondly, what about Chatserve's patch series? I've got it, and used it up to 7.6, and it seems to close all SQL injection holes. Does TinyMCE introduce new issues, like XSS? JamesHoadley 10:29, 8 November 2005 (UTC)
This has been going on for sometime. I would like to know if anyone thinks hitwalker is a notable site for the PHP-Nuke community. It has been added and removed many times. If you don't think it should be listed please say why. -- murder1 04:43, 8 December 2005 (UTC)
As i was pointed to this old article i would like to explain a few things.Phpnukefiles doesnt excist longer then Phpnuke database.Also the Phpnukefiles website is not well maintained and not uptodate.So in my believes you should not publish or write about something you dont know much off,and specially if its done by a 16 year old,that doesnt realy qualify as having the proper knowledge.At Phpnuke database quality is more important the quantity.
I was wondering, would it be beneficial to have a link to a free PHP-Nuke site? PHP-Nuke was released as a multi-version recently, and hence my business partner decided to take it up, adding to his free phpbb and invision forum host. Although it is not released yet, it is ready, and the website is: easynuke.org I posted this here now, incase anybody had any problems with me editing the main page when easynuke is actually released. It would be beneficial for those seeking a free, easily set up (litirally a few clicks, no messing with servers) PHP-Nuke setup. PAz 13:48, 23 December 2005 (UTC) Alex
Hey, I'd like to know more about the supposed lack of security in PHPNuke.
The article currently claims "Because PHP-Nuke is so widely known, it is a frequently attacked target of those looking for security flaws." Umm, rubbish, this argument has been refuted many times in case of many other programs. For example, Windows isn't insecure because a lot of people use it and thus hack it, it's because it's not designed with security in mind at all. And that's exactly what I heard about PHPNuke: Sloppy coding practices and no security consciousness among the developers.
Yet, even when that particular sentence has to go, I can't go claiming the abovementioned things in the article right off without sources - just hearsay and lots of people saying "PHPNuke sucks". Does anyone know any real published researched critique of PHP-Nuke? I think it's pretty easy to find security advisories and stuff like that though. --wwwwolf (barks/growls) 14:41, 17 January 2006 (UTC)
Looks like someone removed this: 18:20, 17 January 2006 Drmike (→Lack of security - Removed Trolling) Let's ignore that. My intention was not to troll or anything - I'm looking for constructive, sourced criticism of the project whose security and efficiency has been doubted a lot. PHP-Nuke has faced some severe allegiations along these lines. I just think these facts are not covered to necessary extent in the article. --wwwwolf (barks/growls) 10:23, 18 January 2006 (UTC)
I'm actually concerned myself. I've been thinking about using PHP-Nuke for something, but I'm not sure. The article here is very vague and to be perfectly honest, it's not very convincing about security vulnerabilities. The citations list vulnerabilities for 7.x and 8.x. There's considerably fewer in 8.x than in 7.x, so I'd say that "and nearly all of them are left unpatched by the author." is subjective since as 8.x's vulnerabilities are completely unpatched as listed on the citation, it has a fraction of the vulnerabilities listed for 7.x. It seems 8.x actually patched a LOT of issues. The issues on 8.x appear to be mostly that 8.x isn't properly sanitizing the data posted by users. Those should be fairly easy to fix and judging on the time they were posted, there's PROBABLY third party fixes for all four of them. More citations, and even rewriting the concerns to be list the chronology of the concerns wouldn't be a bad idea. 24.254.163.150 (talk) 02:39, 2 May 2008 (UTC)
I don't know whether PHP Nuke is still problematic but I ran it in early 2004 with a phpBB installation and my site got vandalized via a PHP Nuke exploit in just two days. I uninstalled and was fine after that. Never ran PHP Nuke again. It remains one of the few applications I'll never touch again. -Rolypolyman (talk) 15:15, 29 May 2008 (UTC)
http://www.hitwalker.nl recently changed to Phpnuke Database- Phpnuke Database , as in http://www.phpnuke-database.com
The hitwalker sites are available for the whole world to see , visitors who get 403 forbidden are with their ip in a spam or hacking ip range that has been blocked.
--Hitwalker 14:18, 25 March 2007 (UTC)
maru (talk) contribs 04:28, 27 July 2006 (UTC)
This article should have a history section. Personally, I came to find what it was first created.
Image:PHPNukeWebsite.gif is being used on this article. I notice the image page specifies that the image is being used under fair use but there is no explanation or rationale as to why its use in this Wikipedia article constitutes fair use. In addition to the boilerplate fair use template, you must also write out on the image description page a specific explanation or rationale for why using this image in each article is consistent with fair use.
Please go to the image description page and edit it to include a fair use rationale. Using one of the templates at Wikipedia:Fair use rationale guideline is an easy way to insure that your image is in compliance with Wikipedia policy, but remember that you must complete the template. Do not simply insert a blank template on an image page.
If there is other other fair use media, consider checking that you have specified the fair use rationale on the other images used on this page. Note that any fair use images uploaded after 4 May, 2006, and lacking such an explanation will be deleted one week after they have been uploaded, as described on criteria for speedy deletion. If you have any questions please ask them at the Media copyright questions page. Thank you.BetacommandBot 05:14, 6 June 2007 (UTC)
Whats the point in adding any info here or joining this whatever discussion if its all deleted again. The whole phpnuke article at wik in this phpnuke talk page which i didipedia is becoming one big joke as its content is constantly censored.(owner of phpnuke-database.com 10:22, 26 June 2007 (UTC)) —Preceding unsigned comment added by Hitwalker (talk • contribs)
I would like to know (as this is a discussion page) that when i added the download resource Phpnuke Database why it was considdered to be spam or whatever.How can that be spam as im a respected source and known person?.May i remind any reader that adding that resource site isn't against any wikipedia guidelines as wikipedia knows many pages with external links to respected resources dealing on the subject of that page.Its also not a matter of linking,and we know about the nofollow rule,all that is known and not important. Fact is,if you present a page talking about phpnuke it seems obvious you also include some good resources (also a common thing in wp).Long ago when my resource was added an editor here suggested i would do any recommendations in the phpnuke talkpage which i did.As we know by now i received absolutely no reply.So after that i added my resource again and to my surprise it was left alone for a long time.But that came to an end when the ext links were edited again and yes i edited it again,over and over.I always noticed the messages and it wasnt that i didn't wanted to reply to it,but merely cause i knew what was in it.So i still would like to see the resource added to the external links.--owner of phpnuke-database.com 18:48, 2 July 2007 (UTC) —Preceding unsigned comment added by Hitwalker (talk • contribs)
regards, Nachoman-au 12:26, 3 July 2007 (UTC)
the article lists this as GPL. the infobox lists it as proprietary. which is it? --Black Butterfly 15:01, 20 September 2007 (UTC)
Black Butterfly, I see your point. Despite them charging for it, PHP-nuke is still Free software (as in freedom). Therefore, it should probably say GPL. I will change it tommorow (if I remember :P) FSHero 20:35, 28 September 2007 (UTC)
I propose merging Nukesentinel here. The stub on its own lacks notability Nearly Human 11:19, 30 September 2007 (UTC)
While I'm cool with narrowing down the security bashing now that phpNuke is more stable, I think the current incarnation is a bit ambiguous. Currently it reads:
"PHP-Nuke has in the past been plagued by security holes. However, no security flaws have been reported in the last year."
That's it.
Let's expand this some. What notable security holes in the past? "no security flaws" is a very big statement for any piece of software. Anyone got a source for that or an appropriate time frame other than "last year"?
In light of my previous participation in the security controversy of phpNuke, my only edit is to ask for facts. I'd really like to see this article cleaned up. Even though my view of the software's security may be negative (from several experiences), I still see it as a slightly seminal step toward today's internet. Compare it's use several years ago to the penetration of WordPress among novices today. It also helped the penetration of PHP itself among novices in a small way. (Badmonkey skulks away ducking incoming flames for that WordPress remark :P) badmonkey (talk) 04:22, 18 December 2007 (UTC)
Unfortunately, that statement is no longer true: http://secunia.com/advisories/28624. —Preceding unsigned comment added by 12.10.223.130 (talk) 01:26, 14 February 2008 (UTC)
There is a hidden subdomain on the PHP-Nuke site — downloads.phpnuke.org — which is not the same as Downloads section of the main site. I found it through a suspicious spam letter, which used an intermediate link obfuscation and redirection facility.
The mentioned subdomain invites to download popular games, claiming that there is no “trick” nor piracy, — those games are either demo versions, or shareware, or freeware. It also claims that those downloads are 100 % virus- and spyware-free. But, in fact, all downloadable “installers” are essentially the same 3-megabyte archive, containing nothing more than a browser toolbar add-on.
At first, I thought that it's a kind of web-server hijacking that the legitimate site owners are unaware of. But MyWOT comments on the same issue are dated as early as January 2009, so I doubt that the existence of malicious site is an outsider's job and couldn't be connected with PHP-Nuke authors.
I think, it should be noted in the article, that, although PHP-Nuke itself is a well-known software, “donwloads” subdomain simply exploits the long-time gained trust to spread malware by deception. Unfortunately, I myself am not connected with PHP-Nuke community, nor am aware of the details of this story — to be able to describe it correctly. 217.172.21.161 (talk) 10:48, 27 November 2010 (UTC)