Convert from other software: See our importing tutorial for a list of importers.

Use an existing member system: See our download page for a list of forum drivers.

Convert an HTML site into Composr pages

LDAP support for corporate networks (Conversr only)

HTTP authentication: Tie into an existing HTTP authentication-based login system (Conversr only)

Proxying system: Programmers can integrate any existing scripts using our sophisticated proxying system (which includes full cookie support).

Minimodules and miniblocks: Programmers can port existing PHP code into Composr itself without having to strictly conform it to Composr's framework

Intuitive sitemap editor: Visually browse your site structure.

Menu editor: Our user friendly editor can work with several different kinds of menu design (drop-downs, tree menus, pop-ups, etc)

Zones (sub-sites): Organise your pages into separate zones. Zones can have different menus, themes, permissions, and content. They can also use a sub-domain.

Full structural control: Edit, move, and delete existing pages and modules.

Redirects: Set up redirects if you move pages, or if you want pages to appear in more than one zone.

Use Composr for clients and pretend you made it.

We ensure Composr is not hard-coded anywhere in the software where it would appear to an average user.

Responsive design and hi-dpi images

True and correct XHTML5 markup

WCAG, ATAG: Meeting of accessibility guidelines in full.

Tableless CSS markup, with no hacks

Support for all major web browsers

Inbuilt tools for checking webstandards conformance of XHTML5, CSS, and JavaScript

Extra markup semantics including Dublin Core support, schema.org, Open Graph, and microformats.

Standards-based JavaScript (modern DOM and AJAX, no DOM-0 or innerHTML)

Automatic cleanup of bad XHTML5: HTML outside your control (e.g. from RSS) will be cleaned up for you.

Highly optimised code

Can run CDNs

Multiple levels of caching

Sophisticated template compiler

Self-learning optimisation system

Automatic pruning of old cache files when caches get large

Translate Composr into your own language

Translate content into multiple languages

Custom time and date formatting

Language packs: Download new language packs as users post them; host multiple languages on your website at the same time.

Time zone support: Members may choose their own time zones, and dates / times will adapt to them.

Support for different character sets and Unicode

Serve different theme images for different languages

Right-to-left languages possible

Professionally designed user interfaces

AJAX techniques: Streamlined website interaction.

WYSIWYG editing

Tutorials: Over 200 written tutorials, and a growing collection of video tutorials.

Displays great on mobiles: Mobile browsers can be automatically detected, or the user can select the mobile version from the footer. All public website features work great on QVGA or higher. The default theme is also responsive and will adapt to the client screen size.

A consistent and fully integrated feature-set: Breadcrumb navigation, previews, and many other features we didn't have space to mention here – are all present right across Composr.

Supports different URL schemes and textual monikers

Automatic site-map generation: Both XML Sitemaps and sitemaps for users.

Metadata: Meta descriptions and keywords for all content. Auto-summarisation.

Keyword density analysis when previewing content

Correct use of HTTP status codes

Content-contextualised page titles

Semantic and accessible markup (e.g. ‘alt tags')

Compliance with major data protection legislation such as the GDPR

Allow members to download or purge their personal data from their profile. Set a limit on the number of days between downloads / purges to preserve server resources.

Also manage member data to a more technical degree in the Administration Zone.

Allow members to purge their data upon deleting their member account

Composr is careful to maintain important data (such as warnings or bans) when members request their data to be purged from their profile. But this data can still be purged on the admin side (in the Admin Zone).

Automatic generation of a basic Privacy Policy based on site settings and installed addons

Cookie Consent notice

Set declarations on the rules page which members must agree to on registration (or whenever they are changed) which are also stored in the database and e-mailed to the member as a written copy

Automatic detection, logging, notifying, and banning of hackers

2-factor-authentication: E-mail based 2-factor-authentication security when unrecognised IP addresses are used with certain usergroups (optional, Conversr-only).

Password strength checks: Enforce minimum password strengths based on length and use of upper / lower case, numbers, and symbols, and avoiding repeated characters (Conversr-only).

Architectural approaches to combat all major exploit techniques

A JavaScript framework that makes XSS attacks virtually impossible

Defence-in-depth: Multiple layers of built-in security.

Encrypted custom profile fields: Once set the CPF can't be read unless a key password is entered (Conversr-only, requires OpenSSL).

Extensive support and use of Content Security Policy (CSP)

Track failed logins and automatically ban brute-force attacks

HTML filtering

Protection against CSRF attacks: Forms and AJAX requests make use of randomly generated POST tokens

Root-kit detection kit for developers

Cookies are secure and HttpOnly where possible to prevent session hijacking

Set number of days that passwords expire or must be changed

• CAPTCHA: A visual or audio test that humans can easily pass but bots struggle with. This helps prevent automated spam submissions.
• Heuristics: If Composr thinks an action is spam based off of configurable criteria, it can either flag the content for validation, block the attempt, or ban the IP address outright.
• Public block lists: Composr can utilize the Stop Forum Spam system or other block list systems to identify and block known spammers based on IP addresses, usernames, and email addresses.
• Link posting restrictions: Disallowing links in member profiles for users with no posts and adding "nofollow" attributes to links discourages spammers seeking backlinks.
• Black hole fields: Hidden form fields that should remain empty. Bots often fill these in, allowing Composr to identify them.
• Project Honey Pot integration: A system that places hidden links on pages, attracting and identifying spam bots.
• Content/post reporting: Users can report spam, enabling staff to take action.
• Guest posting limitations: Restricting guest permissions raises the bar for spammers.
• Advanced techniques: Developer addons like "antispam_question" or probation systems provide additional layers of protection.

• Generating menus.
• Creating the user-facing sitemap page.
• Generating the XML Sitemap for search engines.
• Providing a visual representation of your website structure in the Sitemap editor and Permissions tree editor.

• /pg/ (e.g., /pg/home)
• .htm (e.g., /home.htm)
• Simple unadorned URLs (e.g., /home)

• Improved user experience with more readable URLs.
• Potential SEO benefits, as some believe search engines favor cleaner URLs.
• Easier sharing on social media and other platforms.

• Default Menu: Generated automatically from the Sitemap, reflecting the structure of your content.
• Editable Menus: You can create and fully customize these menus, adding links to specific content or external websites.

• Welcome Zone: The initial landing page, often used for login/signup.
• Site Zone: Your main website content, with features for viewing, submitting, editing, and deleting content on the member level.
• Admin Zone: For site administrators to manage the website.
• Content Management Zone: Where content is added, edited, and deleted, typically by site staff.
• Forum Zone (if using Conversr): Houses the forum section of your site.

• Zones, Pages, and Categories: Control which usergroups can view specific zones, pages, and categories (permissions).
  • Admin Zone > Security > Permissions Tree Editor, or on the UI for the Zone / Page / Category.
• Global Privileges: Define permissions for actions like using advanced Comcode or bypassing the word filter, applicable across the entire site.
  • Admin Zone > Security > Global privileges
• Module/Page Overrides: Tailor privileges for particular content types by overriding them on the controlling module or page.
  • Admin Zone > Security > Permissions Tree Editor [> Content permissions]
• Category Overrides: Modify privileges for specific categories, allowing fine-grained control over actions within those categories.
  • Admin Zone > Security > Permissions Tree Editor
• Match-key Permissions: Implement ad-hoc access control based on specific match-keys, offering flexibility beyond traditional permission structures.
  • Admin Zone > Security > Match-key page restrictions