Quick installer: Our self-extractor allows faster uploads and will automatically set permissions.

Wizard-based installation

Auto-scans for compatibility problems: Be informed of problems before installing

Get your site up and running in just a few minutes

Keep your site closed to regular visitors until you're happy to open it

Configures server: Automatically generates an htaccess file for you (for Apache).

Auto-detection of forum settings for easy integration

Install test content

Add virtually unlimited pages to your site

WYSIWYG editor (powered by CKEditor)

Convenient edit links: Staff see “edit this” links at the bottom of every page.

PHP support: Upload your PHP scripts and run them inside Composr (may require adjustments to the script code).

Hierarchical page structure: Supports parent and child pages

Periodic content reviews: Helping you ensure ongoing accuracy of your content.

Add Comcode pages (the default) or static HTML pages

Supports revisions and revision control systems (such as git); add new pages as files, and Composr will automatically register them in its system.

Clear organisation: Uses a tree structure for unlimited categorisation.

Anti-leech protection: download links contain a session ID

Community-centred: Allow users to comment upon and rate downloads

Many ways to add new files: Upload files. Link-to existing files. Copy existing files using a live URL. Batch import links from existing file stores.

Author support: Assign your downloads to authors, so users can find other downloads by the same author.

Set licences: Make users agree to a licence before downloading.

Images: Show images along with your downloads (e.g. screen-shots) (this implicitly uses galleries).

Basic file versioning support

Control monthly bandwidth use site-wide

Think “structured wikis”.

Create an encyclopaedic database for your website

Use a tree-structure or traditional cross-linking

Supports revisions: Track changes

Display the tree structure of your entire Wiki+

Allow users to jump in at random pages

Make your pages either wiki-style or topic-style

Allow members to contribute to Wiki+ pages by adding Wiki+ posts

Run a competition: Choose winners randomly from those who passed the quiz.

Surveys: Gather data and find trends.

Tests: Test members' knowledge on a variety of topics.

Cheat prevention: Settings to prevent cheating, such as time limits, question / answer shuffling, and re-testing rules.

Integration with points: Charge points to enter a competition, or award points for winning.

Member blogs: Allow members to have their own blogs on their profile

RSS and Atom support: Export and import feeds.

Trackback support: Send and receive trackbacks.

Scheduled publishing

Ping support and RSS Cloud support

Multiple news categories and filtering

Multiple ways to integrate news into your website

Import from RSS feeds

Supports geotargeting

Members can rate and comment on news articles and blog posts

Send out a news article as a newsletter

Day/week/month/year views

Advanced “recurring event” settings

Event subscriptions: Receive reminders and notifications by event or event type

Warnings about conflicting events

Microformats support

Integrate a calendar month view, or an upcoming events view, onto your design

Supports categories: Have multiple event types

Multiple time zones: Have different events in different time zones with configurable conversion settings.

Priority flagging: Choose between 5 priorities

Programmers can even use the calendar to schedule custom tasks (Commandr) to be run

RSS and Atom support: Export support, but also support for overlaying news feeds onto the calendar.

Supports geotargeting

Feedback: Allow members to comment and rate events. Segregate feedback on recurring events by date.

Multimedia: Supports images, videos, audio, and more.

Personal galleries: Allow your members to create their own galleries which show up on their profile.

Support for embedding YouTube videos: Save on bandwidth.

Auto-detection of video length and resolution (most file formats)

Full tree-structure support: Have galleries within galleries within galleries.

Multiple display modes

View entries as a slideshow

Automatic thumbnail generation

Mass import: Also supports importing metadata

Optional watermarking: To guard against thieving swines .

Geotargeting

Adjustments: Automatic size and orientation adjustments according to metadata.

Think “databases on my website”.

Flexible data control: Set up multiple catalogues, each with its own set of fields. There are many types of fields, such as short text fields, upload fields, and date fields.

Multiple display modes: Display the contents of categories using tables, boxes, or lists.

Powerful structure: Each catalogue contains categories which contain entries. Catalogues can have a tree structure of categories and/or work from an index.

Configurable searching: Choose which fields are shown on categories, and which can be used to perform searches (template searches).

Compliance with data protection legislation: Specify which fields may contain sensitive data. These fields will be anonymised as appropriate when members download or purge their data.

Entirely customisable: Full support for customising catalogues, categories, and entries, exactly as you want them- field by field. You can even make custom page templates per-catalogue.

Classified ads: Entries can automatically expire and get archived. You can also send out view reports.

Community interaction: You can allow users to comment upon and rate entries.

Import data from CSV files

Periodic content reviews: Helping you ensure ongoing accuracy of your data.

Joined Chris Graham behind the scenes in the development of Composr CMS in 2016.

Took on the lead developer role in 2023 when Chris Graham stepped back to attend to his new lifestyle changes.

Spearheaded the development of Composr CMS v11 and the new website, Composr.app.

Formed the company PDStig, LLC to take on professional support and development for Composr CMS users especially after the discontinuation of ocProducts, Ltd.

PDStig, LLC

• Confirmed: When you actively log in with your credentials.
• Non-confirmed: When you return to the site and are automatically logged in via cookies.

• Choose a Secure Host: Opt for hosts that offer suEXEC and open_basedir for better account isolation.
• Test Security: Verify the host's security measures with the provided filesystem_browser.php script.
• Restrict _config.php: Remove world-writable permissions from _config.php after installation.

• HTML Filtering: Configurable levels of filtering prevent malicious script injection.
• Content Security Policy (CSP): Restricts the sources from which scripts and other resources can be loaded.
• Input Sanitization: Data is sanitized before being processed to prevent malicious code execution.
• Output Encoding: Data displayed to users is properly encoded to prevent interpretation as active code.

• DODGY_GET_HACK: Suspicious URLs with potentially harmful characters.
• EVIL_POSTED_FORM_HACK: Possible CSRF attempts via malicious form submissions.
• SCRIPT_UPLOAD_HACK: Attempts to upload PHP scripts, potentially malicious.
• DOWNLOAD_PRIVATE_URL_HACK/TRY_TO_DOWNLOAD_SCRIPT: Attempts to download sensitive files.
• BRUTEFORCE_LOGIN_HACK: Repeated failed login attempts.
• SQL_INJECTION_HACK: Attempts to exploit SQL queries for data extraction.

• Avoid FTP: Use secure alternatives like SFTP or SSH for file transfer.
• Secure Email: Enable SSL for IMAP and POP3 email protocols.
• Strong Passwords: Use unique and complex passwords for different services.
• Secure Computers: Keep your own devices patched and secure.
• Maintenance Password: Remove the maintenance password from _config.php when not in use.

• Visual representation of password quality and enforcement of complexity rules.
• Password expiry and prevention of re-use.
• Secure password hashing, even if the database is compromised.
• Temporary passwords for staff setup.

• Two-factor authentication via IP address approval.
• IP address banning, including wildcard banning.
• Session locking to IP addresses.
• Configurable session expiry times.
• Ability to prevent privileged actions from auto-logged in sessions.
• Optional member approval process.

• Comprehensive audit logging of administrative actions.
• Logging of user actions and IP address history.
• Tools to analyze audit logs.
• Failed login logging.
• Hack attack detection, logging, and banning.
• Email notifications for changes to user credentials.

• Protection against CSRF attacks.
• Click-jacking prevention via CSP implementation.
• Secure coding standards and scanning techniques.
• Configurable HTML filtering to prevent XSS attacks.
• Secure code modularization standards.

• Granular privileges and access permissions.
• Content submission validation process.
• Rootkit detection system.
• Spam prevention systems.
• Web application firewall rules.
• Moderation systems.

• MySQL timeout setting: For MySQL 5.7+, set a query timeout to prevent searches from locking up your database. Composr automatically sets this, but you can configure it manually if needed.
• Use InnoDB tables: Switching to InnoDB tables in MySQL can prevent slow queries from affecting other users on your website. Note that InnoDB is not officially supported by Composr yet.
• Enable the fast custom index: As mentioned earlier, the fast custom index is optimized for handling large datasets and filtered searches, potentially leading to significant speed improvements.