Hacker News new | past | comments | ask | show | jobs | submit
XSS in action: http://old.net.eu.org/index.php?p=</title><script>alert('xss...
There is a newer version on GitHub, and the very first version is on this site. Compare them and you will see the difference.
I compared them - and you're still not sanitising the $_POST inputs amongst some other bad practices. So it's great that you've made this and put a substantial number of hours into creating themes for it - but in it's current state (looking at all the branches in your github) it's not fit for purpose.

If you hosted this online, you're simply providing a platform for malicious users to gather targets or worse.

What was/is the goal of this project? To make the smallest CMS? To try your hand at making a CMS and to learn from it? This is unclear.

On github under the first two screenshots I very clearly expressed why I created this, the root cause was and remains the same, I want to continue to improve this script, but the most important task for me was backward compatibility, and simplicity. I love old time-tested technologies, this script (but improved) with additional functionality works as an admin panel on the hosting. I indicated this in the topic. on the hosting site there is our common goal - we are creating a community

if you have a solution - I will be happy to consider it and use it

P.S. the script does not collect cookies and works on text files. That's probably why this method

loading story #41454697