-
Nucleus CMS 3.51 released
The Nucleus CMS core development team has released Nucleus CMS v3.51. This release includes only bug fixes: Mainly there are bug fixes for the upgrade files that solves problems if you are upgrading from Nucleus 3.40. The other changes fixes some typos in the Nucleus core which can cause warnings.
You can find a full list with the new features in the extented part of this item.
There are no urgent security fixes in this release so that you have not to hurry up. But we recommend to update so that your blog software is up to date and work with all plugins.
Nucleus v3.51 (November 1, 2009)
- FIX: fix warning caused by unreachable code in PDO (admun)
- FIX: fix typo in NP_Ping (admun)
- FIX: fix typo in XMLRPC api (admun)
- FIX: Bug in upgrade procedure where no check to verify new column does not currently exist before running the add query. See this thread (ftruscot)
- FIX: Bug where activation not completed. See this thread (ftruscot)
-
Nucleus CMS 3.50 released
The Nucleus CMS core development team has released Nucleus CMS v3.50. This release has serveral improvements and a lot of bug fixes. Two new plugins are delivered with the core System: NP_Text eases the translation of Skins and NP_SecurityEnforcer improves the security of the core. Some new skinvars are added. The first step to an universal SQL API is done. Some changes are made to make Nucleus CMS compatible to PHP5.3.
You can find a full list with the new features in the extented part of this item. An online version of the change log can be found here.
There are no urgent security fixes in this release so that you have not to hurry up. But we recommend to update so that your blog software is up to date and work with all plugins.
List of all new features in Nucleus CMS 3.50:
- Officially end support for PHP4, though no effort has been made yet to implement any PHP5-only things, so it is likely to work in PHP4 still.
- Start moving toward use of complete sql_* api for access to database. This should allow easier use of other backend db engines, like pdo or sqlite, but only MySQL will be officially supported in 3.5. Plugin developers should start making their plugins support the sql_* api once 3.5 is out and builds an install base. (supportsFeature SqlApi)
- Ping removed from core completely into NP_Ping
- NP_Text included and installed by default
- New API events to allow for some password checking and failed login attempt limits
- NP_SecurityEnforcer included with core to make use of above events
- Plugin help file now links to english and japanese plugin repositories
- New variables:
- <%catiscurrent%>, <%currentcat%> - Category List, yes if category is currently selected, otherwise no
- <%sticky(itemid,template)%> - skin var, simple sticky (or display item anywhere)
- <%archiveyearlist(template,category,limit)%> - skinvar, list archives by year.
- <%otherarchiveyearlist(blogname,template,category)%> - skinvar, list archives by year for given blog
- Active check in admin page for new nucleus version including alert if newer version is available.
- selectSpecilaSkinType() function added to globalfunctions to permit selecting a special skin part in an index file
- New variable $CONF['ActivationDays'], settable manually in config.php, to customize how long users have to activate account. default is still 2 days.
- Some changes to handle oddities of PHP5.3
- Various bug fixes.
-
Nucleus v3.41 released
The Nucleus CMS core development team has released Nucleus CMS v3.41. This release fixes a bug in the configuration variables and has reordered English languages files to ease the translation. All changes can be found in the history of the included documentation (an online version can be found here).
There are no security updates in this release so that you have not to hurry up. But we recommend to update so that your blog software is up to date and work with all plugins.
-
Nucleus v3.40 released
The Nucleus CMS core development team has finished a new release. Nucleus CMS version 3.40 has a long list of changes with Security Improvements, Feature Enhancements and Bug Fixes.
Some highlights of the new version are: a new member option makes it possible to decide if the autsave function is used, numerous new plugin events will improve the plugin development and published items can easily moved back to drafts.
Nucleus CMS version 3.40 is available as full package on the download page. To upgrade from a previous version you can download two zip packages that are used to upgrade the database structure and to upgrade the files. More information can be found on the upgrade page.
We recommend Nucleus CMS v3.40 for new installations. If you are running a Nucleus CMS v3.3x installation you can benefit from the various feature improvements and bug fixes. Under certain server configurations the new version can help you to avoid security risks.
You can find a comprehensive list of the changes in Nucleus CMS v3.40 in the extended part of this item:
Security Improvements
- Address possible directory traversal vulnerability in the media manager under certain configurations.
- Include and recommend .htaccess files in media/, and skins/ folders to restrict execution of PHP code from these locations.
- Include and recommend .htaccess files in nucleus/libs/ folder to prevent direct web server access to the nucleus core PHP files.
Feature Enhancements
- New member-level option to disable the auto-save feature.
- Numerous new Plugin API events and class methods for use by plugin developers.
- Improved handling of special skin parts.
- Prevention of double comments.
- Various improvements to data presentation in admin area.
- Update of help files, for users and developers.
- New global configuration setting to set the default size of lists in the admin area.
- New global configuration setting to enable debug mode for nucleus variables.
- Allow published items to be moved back to drafts.
- Install script now ready for non-english languages.
- New parameters on bloglist skin variable to customize the sort order of the listed blogs.
Bug Fixes
- Comment user names cleared from database when user registers with name longer than 16 characters.
- Ping does not occur when item is added by New Category.
- Database backup not generating standard mysql syntax.
- Plugin option not generated properly under certain conditions.
- Permission settings of uploaded files not effecive.
- Admin area generates invalid XHTML code.
- ValidateForm event not working properly.
- Time generation error when editing item.
- Plugin API, incorrect operation order.
- <%itemtitle%> variable not correct in COMMENT template fields.
- Bookmarklet height increased.
- Case sensitivity of ItemVars causing issues.
- Global redirect function blocking URLs with valid * character.
- Content type of bookmarklet causing errors for users with certain plugins installed.
- Global $CONF['Self'] variable is set improperly.
- bloglist variable causes errors with certain parameters.
-
Plans for 2009
A little bit late we wish all users and supporters of Nucleus CMS a happy and successfull new year. :-)
In the next weeks we will release the new version 3.40. The Nucleus CMS developers have finished the release candidate so that expierenced users can test the new version. More information can be found in the Nucleus forum: Nucleus CMS 3.40 RC finished.
The versions 3.4x will be the last that are compatible to PHP 4. The version 3.3x and 3.4x are running on PHP 4 and PHP 5. Because PHP 4 is outdated and no security updates are available we recommend to use PHP 5 for all current versions of Nucleus CMS.
With version 3.50 we will switch to PHP 5 only. So we can use the new features of PHP 5 for the Nucleus CMS core development. We hope that most webhosting companies and administrators will have switched to PHP 5 in the next months.
-
Nucleus v3.33 Released
We have released Nucleus v3.33. This release fixes a recently discovered security issue. While there are no new features in this release, upgrading is strongly recommended.
-
New cross reference for Nucleus CMS
A new cross reference for Nucleus CMS 3.32 is available in the Nucleus Development area. The cross reference makes it possible to read the code online and to see where the classes, functions and variables are used in the script. So it makes it easy to understand the dependencies in the code.
The reference was built with PHPXref, a very useful and sophisticated script that makes life easier for PHP developers.
The cross reference can be valuable for the Nucleus CMS support, for plugin developer (that want to know the truth about Nucleus) and for the core development. And for all people that like to read PHP code. :-)
-
Nucleus v3.32 Released
We have released Nucleus v3.32. This release fixes a recently discovered cross site scripting issue. While there are no new features in this release, upgrading is recommended.
-
The Nucleus CMS team wishes everyone a good year 2008!
The year 2007 is coming to an end and soon a new year will begin. A lot has happened with Nucleus CMS in 2007. We're up to version 3.31 and development is more active than ever before. There are a lot of plans for future releases and a roadmap to the next version is being made.
Both the development team and the support team have expanded with a few members. The support forum is very active with not only the support-team answering questions, but regular users are helping each other too. The number of plugins and skins has grown steadily in 2007 as well.
Our thanks to everyone who has contributed to Nucleus CMS in any way and to everyone using our software.
The Nucleus CMS team
-
Nucleus v3.31 Released
We have released Nucleus CMS v3.31. This release has some new features and a lot minor improvements. You can find more details in the version history.
We recommend Nucleus CMS v3.31 for new installations, the language versions for German and Polish will follow in the next time.
If you are running a Nucleus CMS v3.24 installation there is no urgency to upgrade. But we recommend to upgrade to version 3.31 so that you can benefit from the serveral improvements (like new plugin events).
Important hint for users of Nucleus 3.3: the version 3.3 was only available over the sourceforge.net project page. We hadn't make an official announcement because there was a possible security risk in the NP_Ping plugin. If you have installed Nucleus 3.3 you can easily upgrade to 3.31 using the upgrade_330_to_331.zip package.