This is just a placeholder site for Composr CMS 11 beta. It will become the new homesite once version 11 reaches stable. For the current v10 homesite, click here. Please also use the v10 tracker to report v11 issues.

Contributors: A-Z Index

A

Name	Photograph	Title / Role	Contributions / Notes
Allen Ellis		Founder	Original designer for ocPortal Also conceived and coded the Theme Wizard and Point Store Son of one of the early inventors of Internet protocols (Usenet, aka Internet newsgroups) Token non-brit	View

C

Name	Photograph	Title / Role	Contributions / Notes
Chris Graham		Founder	Original developer of ocPortal, former lead developer of Composr CMS Masters degree in Computer Science from The University Of Sheffield Undertaken work for over 15 FTSE-100 companies, as well as many small and mid-sized organisations. Includes a number of banks and major brands.	View
Chris Warburton		developer for ocProducts	Made some key contributions to ocPortal	View

H

Name	Photograph	Title / Role	Contributions / Notes
Haydn Maidment		project manager for ocProducts	None available	View

J

Name	Photograph	Title / Role	Contributions / Notes
Jim Davidson		contributor	written many tutorials via Arvixe	View

P

Name	Photograph	Title / Role	Contributions / Notes
Patrick Schmalstig		Lead Developer	Joined Chris Graham behind the scenes in the development of Composr CMS in 2016. Took on the lead developer role in 2023 when Chris Graham stepped back to attend to his new lifestyle changes. Spearheaded the development of Composr CMS v11 and the new website, Composr.app. Formed the company PDStig, LLC to take on professional support and development for Composr CMS users especially after the discontinuation of ocProducts, Ltd.	View
Philip Withnall		Early Developer	Coded the chatroom, blogging support, the analytics system, and OcCLE (now Commandr) Masters Degree in Computer Science degree from The University Of Cambridge Other work has included helping out with Firefox, and ongoing work on GNOME	View

R

Name	Photograph	Title / Role	Contributions / Notes
Robert Goacher		Founder	Ran some of the early websites where ocPortal came from Technically the original developer of ocPortal, in that he wrote the first few lines of code Heavily involved in the feature design process Hosted some of our early meet-ups	View

S

Name	Photograph	Title / Role	Contributions / Notes
Steve Jarvis		project manager for ocProducts	Wrote many tutorials via Arvixe	View

Newest 10 Entries

Question	How does Composr protect against Cross-Site Scripting (XSS) attacks?
Answer	Composr utilizes multiple layers of defense against XSS attacks: HTML Filtering: Configurable levels of filtering prevent malicious script injection. Content Security Policy (CSP): Restricts the sources from which scripts and other resources can be loaded. Input Sanitization: Data is sanitized before being processed to prevent malicious code execution. Output Encoding: Data displayed to users is properly encoded to prevent interpretation as active code.

Question	What are the different types of security alerts in Composr?
Answer	Composr has a variety of hack-attack codenames that trigger security alerts and logging. Some common examples include: DODGY_GET_HACK: Suspicious URLs with potentially harmful characters. EVIL_POSTED_FORM_HACK: Possible CSRF attempts via malicious form submissions. SCRIPT_UPLOAD_HACK: Attempts to upload PHP scripts, potentially malicious. DOWNLOAD_PRIVATE_URL_HACK/TRY_TO_DOWNLOAD_SCRIPT: Attempts to download sensitive files. BRUTEFORCE_LOGIN_HACK: Repeated failed login attempts. SQL_INJECTION_HACK: Attempts to exploit SQL queries for data extraction. You can customize alert handling for each type in data_custom/xml_config/advanced_banning.xml (Admin Zone > Security > Configure advanced banning).

Question	What are some tips for secure website maintenance?
Answer	Avoid FTP: Use secure alternatives like SFTP or SSH for file transfer. Secure Email: Enable SSL for IMAP and POP3 email protocols. Strong Passwords: Use unique and complex passwords for different services. Secure Computers: Keep your own devices patched and secure. Maintenance Password: Remove the maintenance password from _config.php when not in use.

Question	What are the main security features of Composr?
Answer	Composr has a robust set of security features to protect your website, including: Passwords: Visual representation of password quality and enforcement of complexity rules. Password expiry and prevention of re-use. Secure password hashing, even if the database is compromised. Temporary passwords for staff setup. Login Restrictions: Two-factor authentication via IP address approval. IP address banning, including wildcard banning. Session locking to IP addresses. Configurable session expiry times. Ability to prevent privileged actions from auto-logged in sessions. Optional member approval process. Auditing Systems: Comprehensive audit logging of administrative actions. Logging of user actions and IP address history. Tools to analyze audit logs. Failed login logging. Hack attack detection, logging, and banning. Email notifications for changes to user credentials. Framework Security: Protection against CSRF attacks. Click-jacking prevention via CSP implementation. Secure coding standards and scanning techniques. Configurable HTML filtering to prevent XSS attacks. Secure code modularization standards. Other features: Granular privileges and access permissions. Content submission validation process. Rootkit detection system. Spam prevention systems. Web application firewall rules. Moderation systems.

Question	Why are my searches slow, and how can I improve search speed?
Answer	Slow searches can occur when dealing with large amounts of content. Here are some workarounds and solutions: MySQL timeout setting: For MySQL 5.7+, set a query timeout to prevent searches from locking up your database. Composr automatically sets this, but you can configure it manually if needed. Use InnoDB tables: Switching to InnoDB tables in MySQL can prevent slow queries from affecting other users on your website. Note that InnoDB is not officially supported by Composr yet. Enable the fast custom index: As mentioned earlier, the fast custom index is optimized for handling large datasets and filtered searches, potentially leading to significant speed improvements.

Question	How does the search engine handle different languages?
Answer	Composr's fast custom index supports multiple languages. Content is indexed based on its translated version, ensuring that you get relevant results even when searching in a different language.

Question	What are quoted phrases and how do they work?
Answer	Quoted phrases allow you to search for an exact sequence of words. For example, searching for "red apple" will only return results containing that exact phrase. Keep in mind that enabling quoted phrases can increase disk space usage.

Question	How do stop words affect search results?
Answer	Stop words are common words (like "the", "a", "is") that are ignored by the search engine because they add noise and don't contribute to the meaning of the search query. You can customize the list of stop words for the fast custom index. See the search tutorial for more information.

Question	How can I improve my search results?
Answer	Here are some tips for improving search results: Use specific keywords: The more specific your keywords, the better your results. Use boolean operators: Use "+", "-", and quotation marks to refine your search. Optimize content titles and meta keywords: These fields are given priority during search, so make sure they accurately reflect your content. Consider enabling the fast custom index: Especially beneficial for large websites or frequent filtered searches.

Question	What is the fast custom index and why should I use it?
Answer	The fast custom index is Composr's own search engine, designed to be faster and more efficient than MySQL full-text search, especially for large websites and filtered searches. Benefits of the fast custom index: Faster filtered searches: Significantly improves search speed when you add filters like category or author. Configurable stop words: Control which common words are ignored during search. Better stemming: More accurately recognizes variations of words (e.g., "like" and "liking"). Multilingual support: Indexes content based on different language translations. Downsides of the fast custom index: Slight lag in indexing new content: New content takes a short time to be indexed. Less accurate ranking: Ranking is based on the most obscure keyword, not a blend of all keywords. Cannot perform blank searches: You must enter at least one keyword.

Top 10 Entries

Question	How can I control who can view specific pages or categories?
Answer	You can manage access control for zones, pages, and categories primarily through the Permissions Tree Editor (Admin Zone > Security > Permissions Tree Editor). This tool provides a central location to set view permissions for different usergroups. You can also edit individual zone and category permissions through their respective editing interfaces, but the Permissions Tree Editor offers a more streamlined and efficient approach.

Question	What is the difference between access permissions and privileges in Composr?
Answer	Access permissions control whether members of a certain usergroup can view specific areas of your site, such as zones, pages, and categories. A member only needs one of their usergroups to have access permission to view the content. But permissions work on a deny-first policy; if one of the permissions applicable to viewing something is denied for a usergroup, then the whole thing is denied for that usergroup (e.g. even if a download itself grants access, access will be denied if its category denies access). Privileges, on the other hand, dictate what actions a usergroup is allowed to perform across the website, like using advanced Comcode or bypassing the word filter.

Question	How can I change the news archive display to show summaries instead of just headlines?
Answer	By default, the news archive screen shows only headlines. To display summaries like the news block, add :inline=1 to the page-link. For example, if your news archive page-link is site:news, modify it to site:news:inline=1. This will show summaries instead of just the headlines in the archive view.

Question	What are Trackbacks and how do they work in Composr?
Answer	Trackbacks are a blogging feature that creates a link from an article on one blog to an article on another, acting as a citation mechanism. How Trackbacks Work: The original article includes a "trackback" link in its HTML. When another blogger writes an article referencing the original, their software uses the trackback link to inform the original site. Composr receives the trackback and displays a list of articles linking back to the original. To enable trackbacks, go to Admin Zone > Setup > Configuration > Feature options and check the "Trackbacks" option. You can then enable trackbacks for individual content items.

Question	How can I filter the news archive to show specific content?
Answer	The news system allows advanced filtering: Blog vs. Non-Blog Posts: Choose to display blog posts only, regular news posts only, or both. Category Filtering: Limit results to specific news categories. Double Filtering: Apply a second category filter for a two-level categorization system (useful for large sites). These filters are controlled through parameters passed to the news blocks and carried through navigation links. When viewing a news post, you can also filter by the categories associated with that post.

Question	How do I display external RSS feeds on my Composr website?
Answer	Composr offers two blocks for displaying RSS and Atom feeds in a news-like format: main_rss block: Suitable for main content areas side_rss block: Designed for sidebars and smaller spaces To add a block, use the Block Construction Assistant or insert the following Comcode into your page: `[block="http://example.com/feed.xml"]main_rss[/block]` `[block="http://example.com/feed.xml"]side_rss[/block]` Replace "http://example.com/feed.xml" with the actual feed URL. Important: Exercise caution when using external feeds. Ensure the source is trustworthy, as malicious feeds can contain harmful code.

Question	What are RSS/Atom feeds and how do they benefit my website?
Answer	Feeds, in formats like RSS and Atom, are XML files that syndicate your website content, making it accessible beyond your website. They can be viewed using feed reader applications (e.g., Feedly, Vienna) or integrated into other websites or web browsers. Composr supports both RSS and Atom for syndicating news and other content. While RSS is more common, Atom is a cleaner, standardized format. Both effectively share your content updates. Benefits: Wider audience reach: Your content becomes accessible to those using feed readers and aggregators. Content repurposing: Other websites can incorporate your feed, increasing visibility. Increased traffic: Users discovering your content in feeds may visit your website directly. Staying on top: Those who use your RSS feeds will see when you post new news articles.

Question	What are Personal Categories/Blogs in Composr? How do I create one?
Answer	Composr allows members of permitted usergroups to have their own personal news categories, also known as "blogs". These blogs appear as a tab on the member's profile (Conversr-only) and may also appear in the main news block depending on your configuration. To create a blog, a member simply adds a news post and selects their personal category. If the category doesn't exist, it will be automatically created upon submission. A dedicated "Blogs" CMS module (Admin Zone > Content > Blogs) is available if the "Separate blogs" configuration option is enabled. This simplified module focuses on blog posting and can be used to restrict members from submitting to general website news.

Question	What is "pinging" and how does it work in Composr?
Answer	In blogging, "pinging" is an automatic notification sent to blog search engines and other services when you publish a new post. Composr can automatically ping services defined in Admin Zone > Setup > Configuration > Feature options. These services then index your new article, making it searchable. A default ping service (`http://pingomatic.com/ping/?title=title&blogurl=url&rssurl=rss`) is pre-configured to relay your ping to numerous other services. You can customize the ping URL with these placeholders: title: The article title url: The article URL rss: The URL of your news RSS feed Pinging only occurs for news categories accessible to the public (guests).

Question	How do I schedule a news post to be published at a specific time?
Answer	Once you have enabled the system scheduler (requires the Composr calendar and commandr addons), an advanced scheduling option will appear when adding or editing news posts. By setting a future date and time, your post will remain unvalidated until the chosen time, at which point it will be automatically validated and published.

Statistics

Forum statistics:	45 topics, 14 posts, 2 members Our newest member is test