Contributors: A-Z Index

A

Name Photograph Title / Role Contributions / Notes
Allen Ellis Image Founder

Original designer for ocPortal

Also conceived and coded the Theme Wizard and Point Store

Son of one of the early inventors of Internet protocols (Usenet, aka Internet newsgroups)

Token non-brit

View

C

Name Photograph Title / Role Contributions / Notes
Chris Graham Image Founder

Original developer of ocPortal, former lead developer of Composr CMS

Masters degree in Computer Science from The University Of Sheffield

Undertaken work for over 15 FTSE-100 companies, as well as many small and mid-sized organisations. Includes a number of banks and major brands.

View
Chris Warburton developer for ocProducts

Made some key contributions to ocPortal

View

H

Name Photograph Title / Role Contributions / Notes
Haydn Maidment project manager for ocProducts

None available

View

J

Name Photograph Title / Role Contributions / Notes
Jim Davidson contributor

written many tutorials via Arvixe

View

P

Name Photograph Title / Role Contributions / Notes
Patrick Schmalstig Image Lead Developer

Joined Chris Graham behind the scenes in the development of Composr CMS in 2016.

Took on the lead developer role in 2023 when Chris Graham stepped back to attend to his new lifestyle changes.

Spearheaded the development of Composr CMS v11 and the new website, Composr.app.

Formed the company PDStig, LLC to take on professional support and development for Composr CMS users especially after the discontinuation of ocProducts, Ltd.

View
Philip Withnall Early Developer

Coded the chatroom, blogging support, the analytics system, and OcCLE (now Commandr)

Masters Degree in Computer Science degree from The University Of Cambridge

Other work has included helping out with Firefox, and ongoing work on GNOME

View

R

Name Photograph Title / Role Contributions / Notes
Robert Goacher Image Founder

Ran some of the early websites where ocPortal came from

Technically the original developer of ocPortal, in that he wrote the first few lines of code

Heavily involved in the feature design process

Hosted some of our early meet-ups

View

S

Name Photograph Title / Role Contributions / Notes
Steve Jarvis project manager for ocProducts

Wrote many tutorials via Arvixe

View

Newest 10 Entries

Question How can I control who can view specific pages or categories?
Answer You can manage access control for zones, pages, and categories primarily through the Permissions Tree Editor (Admin Zone > Security > Permissions Tree Editor). This tool provides a central location to set view permissions for different usergroups. You can also edit individual zone and category permissions through their respective editing interfaces, but the Permissions Tree Editor offers a more streamlined and efficient approach.
Question What is the difference between access permissions and privileges in Composr?
Answer Access permissions control whether members of a certain usergroup can view specific areas of your site, such as zones, pages, and categories. A member only needs one of their usergroups to have access permission to view the content. But permissions work on a deny-first policy; if one of the permissions applicable to viewing something is denied for a usergroup, then the whole thing is denied for that usergroup (e.g. even if a download itself grants access, access will be denied if its category denies access).

Privileges, on the other hand, dictate what actions a usergroup is allowed to perform across the website, like using advanced Comcode or bypassing the word filter.
Question How can I change the news archive display to show summaries instead of just headlines?
Answer By default, the news archive screen shows only headlines. To display summaries like the news block, add :inline=1 to the page-link. For example, if your news archive page-link is site:news, modify it to site:news:inline=1. This will show summaries instead of just the headlines in the archive view.
Question What are Trackbacks and how do they work in Composr?
Answer Trackbacks are a blogging feature that creates a link from an article on one blog to an article on another, acting as a citation mechanism.

How Trackbacks Work:
  • The original article includes a "trackback" link in its HTML.
  • When another blogger writes an article referencing the original, their software uses the trackback link to inform the original site.
  • Composr receives the trackback and displays a list of articles linking back to the original.

To enable trackbacks, go to Admin Zone > Setup > Configuration > Feature options and check the "Trackbacks" option. You can then enable trackbacks for individual content items.
Question How can I filter the news archive to show specific content?
Answer The news system allows advanced filtering:
  • Blog vs. Non-Blog Posts: Choose to display blog posts only, regular news posts only, or both.
  • Category Filtering: Limit results to specific news categories.
  • Double Filtering: Apply a second category filter for a two-level categorization system (useful for large sites).

These filters are controlled through parameters passed to the news blocks and carried through navigation links. When viewing a news post, you can also filter by the categories associated with that post.
Question How do I display external RSS feeds on my Composr website?
Answer Composr offers two blocks for displaying RSS and Atom feeds in a news-like format:
  • main_rss block: Suitable for main content areas
  • side_rss block: Designed for sidebars and smaller spaces

To add a block, use the Block Construction Assistant or insert the following Comcode into your page:

[block="http://example.com/feed.xml"]main_rss[/block] [block="http://example.com/feed.xml"]side_rss[/block]
Replace "http://example.com/feed.xml" with the actual feed URL.

Important: Exercise caution when using external feeds. Ensure the source is trustworthy, as malicious feeds can contain harmful code.
Question What are RSS/Atom feeds and how do they benefit my website?
Answer Feeds, in formats like RSS and Atom, are XML files that syndicate your website content, making it accessible beyond your website. They can be viewed using feed reader applications (e.g., Feedly, Vienna) or integrated into other websites or web browsers.

Composr supports both RSS and Atom for syndicating news and other content. While RSS is more common, Atom is a cleaner, standardized format. Both effectively share your content updates.

Benefits:
  • Wider audience reach: Your content becomes accessible to those using feed readers and aggregators.
  • Content repurposing: Other websites can incorporate your feed, increasing visibility.
  • Increased traffic: Users discovering your content in feeds may visit your website directly.
  • Staying on top: Those who use your RSS feeds will see when you post new news articles.
Question What are Personal Categories/Blogs in Composr? How do I create one?
Answer Composr allows members of permitted usergroups to have their own personal news categories, also known as "blogs". These blogs appear as a tab on the member's profile (Conversr-only) and may also appear in the main news block depending on your configuration.

To create a blog, a member simply adds a news post and selects their personal category. If the category doesn't exist, it will be automatically created upon submission.

A dedicated "Blogs" CMS module (Admin Zone > Content > Blogs) is available if the "Separate blogs" configuration option is enabled. This simplified module focuses on blog posting and can be used to restrict members from submitting to general website news.
Question What is "pinging" and how does it work in Composr?
Answer In blogging, "pinging" is an automatic notification sent to blog search engines and other services when you publish a new post. Composr can automatically ping services defined in Admin Zone > Setup > Configuration > Feature options. These services then index your new article, making it searchable.

A default ping service (http://pingomatic.com/ping/?title=title&blogurl=url&rssurl=rss) is pre-configured to relay your ping to numerous other services.

You can customize the ping URL with these placeholders:
  • title: The article title
  • url: The article URL
  • rss: The URL of your news RSS feed

Pinging only occurs for news categories accessible to the public (guests).
Question How do I schedule a news post to be published at a specific time?
Answer Once you have enabled the system scheduler (requires the Composr calendar and commandr addons), an advanced scheduling option will appear when adding or editing news posts. By setting a future date and time, your post will remain unvalidated until the chosen time, at which point it will be automatically validated and published.

Top 10 Entries

Question How does Composr protect against Cross-Site Scripting (XSS) attacks?
Answer Composr utilizes multiple layers of defense against XSS attacks:
  • HTML Filtering: Configurable levels of filtering prevent malicious script injection.
  • Content Security Policy (CSP): Restricts the sources from which scripts and other resources can be loaded.
  • Input Sanitization: Data is sanitized before being processed to prevent malicious code execution.
  • Output Encoding: Data displayed to users is properly encoded to prevent interpretation as active code.
Question What are the different types of security alerts in Composr?
Answer Composr has a variety of hack-attack codenames that trigger security alerts and logging. Some common examples include:
  • DODGY_GET_HACK: Suspicious URLs with potentially harmful characters.
  • EVIL_POSTED_FORM_HACK: Possible CSRF attempts via malicious form submissions.
  • SCRIPT_UPLOAD_HACK: Attempts to upload PHP scripts, potentially malicious.
  • DOWNLOAD_PRIVATE_URL_HACK/TRY_TO_DOWNLOAD_SCRIPT: Attempts to download sensitive files.
  • BRUTEFORCE_LOGIN_HACK: Repeated failed login attempts.
  • SQL_INJECTION_HACK: Attempts to exploit SQL queries for data extraction.

You can customize alert handling for each type in data_custom/xml_config/advanced_banning.xml (Admin Zone > Security > Configure advanced banning).
Question What are some tips for secure website maintenance?
Answer
  • Avoid FTP: Use secure alternatives like SFTP or SSH for file transfer.
  • Secure Email: Enable SSL for IMAP and POP3 email protocols.
  • Strong Passwords: Use unique and complex passwords for different services.
  • Secure Computers: Keep your own devices patched and secure.
  • Maintenance Password: Remove the maintenance password from _config.php when not in use.
Question What are the main security features of Composr?
Answer Composr has a robust set of security features to protect your website, including:

Passwords:
  • Visual representation of password quality and enforcement of complexity rules.
  • Password expiry and prevention of re-use.
  • Secure password hashing, even if the database is compromised.
  • Temporary passwords for staff setup.

Login Restrictions:
  • Two-factor authentication via IP address approval.
  • IP address banning, including wildcard banning.
  • Session locking to IP addresses.
  • Configurable session expiry times.
  • Ability to prevent privileged actions from auto-logged in sessions.
  • Optional member approval process.

Auditing Systems:
  • Comprehensive audit logging of administrative actions.
  • Logging of user actions and IP address history.
  • Tools to analyze audit logs.
  • Failed login logging.
  • Hack attack detection, logging, and banning.
  • Email notifications for changes to user credentials.

Framework Security:
  • Protection against CSRF attacks.
  • Click-jacking prevention via CSP implementation.
  • Secure coding standards and scanning techniques.
  • Configurable HTML filtering to prevent XSS attacks.
  • Secure code modularization standards.

Other features:
  • Granular privileges and access permissions.
  • Content submission validation process.
  • Rootkit detection system.
  • Spam prevention systems.
  • Web application firewall rules.
  • Moderation systems.
Question Why are my searches slow, and how can I improve search speed?
Answer Slow searches can occur when dealing with large amounts of content. Here are some workarounds and solutions:
  • MySQL timeout setting: For MySQL 5.7+, set a query timeout to prevent searches from locking up your database. Composr automatically sets this, but you can configure it manually if needed.
  • Use InnoDB tables: Switching to InnoDB tables in MySQL can prevent slow queries from affecting other users on your website. Note that InnoDB is not officially supported by Composr yet.
  • Enable the fast custom index: As mentioned earlier, the fast custom index is optimized for handling large datasets and filtered searches, potentially leading to significant speed improvements.
Question How does the search engine handle different languages?
Answer Composr's fast custom index supports multiple languages. Content is indexed based on its translated version, ensuring that you get relevant results even when searching in a different language.
Question What are quoted phrases and how do they work?
Answer Quoted phrases allow you to search for an exact sequence of words. For example, searching for "red apple" will only return results containing that exact phrase. Keep in mind that enabling quoted phrases can increase disk space usage.
Question How do stop words affect search results?
Answer Stop words are common words (like "the", "a", "is") that are ignored by the search engine because they add noise and don't contribute to the meaning of the search query. You can customize the list of stop words for the fast custom index. See the search tutorial for more information.
Question How can I improve my search results?
Answer Here are some tips for improving search results:
  • Use specific keywords: The more specific your keywords, the better your results.
  • Use boolean operators: Use "+", "-", and quotation marks to refine your search.
  • Optimize content titles and meta keywords: These fields are given priority during search, so make sure they accurately reflect your content.
  • Consider enabling the fast custom index: Especially beneficial for large websites or frequent filtered searches.
Question What is the fast custom index and why should I use it?
Answer The fast custom index is Composr's own search engine, designed to be faster and more efficient than MySQL full-text search, especially for large websites and filtered searches.

Benefits of the fast custom index:
  • Faster filtered searches: Significantly improves search speed when you add filters like category or author.
  • Configurable stop words: Control which common words are ignored during search.
  • Better stemming: More accurately recognizes variations of words (e.g., "like" and "liking").
  • Multilingual support: Indexes content based on different language translations.

Downsides of the fast custom index:
  • Slight lag in indexing new content: New content takes a short time to be indexed.
  • Less accurate ranking: Ranking is based on the most obscure keyword, not a blend of all keywords.
  • Cannot perform blank searches: You must enter at least one keyword.