Enano CMS

Enano's needed an issue tracker for some time now, so we decided to bring one up - or rather, begin using one we've had for some time, but never made official. That tracker is on our Google Code project. As of now, this will become the official bug ... [More] and issue tracker for Enano. We've also set up Google so that it stays synced with Enano's main Mercurial repository automatically. Commits pushed to nighthawk will automatically be sent out to ktulu and Google's server every two hours. Commit messages are also enabled to control issues, so including a comment like "fixes issue 3" in the commit message will auto-close the issue. Currently, I don't know how Google is attributing revisions to certain accounts. I plan to set up a generic @enanocms.org Google account that will be used exclusively for pushing changes (I'm using my personal [email protected] account now). [Less]

Yeah, I'm a smart one. (TL;DR version of the full article.) Basically, I moved Nighthawk over to Arch Linux, but the virtual host that served out nighthawk.enanocms.org wasn't on the same directory structure as the other 20 sites on there (due to ... [More] having been on nighthawk much longer than any of those other vhosts), and it got lost in the reformat. We didn't lose too much, because that webroot's been out of commission for some time now, but there might be a few obscure, unreleased plugins that aren't ever going to make it public now. This shouldn't really set back Enano development because all the work on the unstable branch (and let's face it, unstable sees 99% of overall development activity these days) is actively mirrored to my laptop and desktop PCs. Just thought I'd let the general public know about this. [Less]

The Enano team is pleased to announce the immediate release of Enano 1.0.6 patch level 1. This release addresses a critical bug in the wikitext HTML parser as well as a SQL injection vulnerability we found in Enano's comment submission code. We ... [More] recommend that all administrators upgrade immediately. This vulnerability also affects Enano 1.1.6, for which there is a patch available. Release notes are here, and downloads are in the usual place. [Less]

The Enano Project is pleased to announce the immediate release of the Enano BitNami module installers for Windows and Linux. The Enano Project is unconditionally committed to open source, and we hope that this release will pave the way for other ... [More] small projects to make themselves available to the BitNami community without locking themselves into the proprietary BitRock installer system. The focus of this installer suite is to implement the full capability set in the BitRock installer using open source tools such as NSIS and the ExperienceUI on Windows and simple Bash scripting on Linux. We think that the best way to distribute open source software is to use open source software for the entire distribution process - eat our own dog food, so to speak. You can download our BitNami module installers here. [Less]

Good news: I'm moving to RIT! I'm starting college there as an Information Security and Forensics major. Of course, with that comes the need to move all my server stuff. The entire technical side has now been taken care of, so all that remains is my ... [More] actual move-in. My current plan is to take everything down on Friday, August 28, and have everything back up by the evening of Sunday the 30th. During this time the demo will be unavailable and I'll probably also be out of IRC. There will be a lot of craziness going on, but my roommate and I have already been talking and we have a network design put together which I have mostly implemented. Hopefully, DNS will be pointed at my new location by Sunday afternoon and services will be up shortly thereafter. [Less]

The Enano project is pleased to announce the availability of the Enano API Documentation. This is a major milestone in our efforts to make it easier to develop plugins for Enano. I focused mainly on documenting common activities done from plugins ... [More] in an effort to accelerate plugin development as much as possible. There's also an article that gives a large-scale overview of how Enano is built from the technical side, so that as a developer you can understand what you're interfacing with. Because it's on our documentation wiki, anyone can feel free to edit these pages. In addition, almost all of the code in there is ready to be run, with no modifications - so you can work right off of the examples. Have fun developing, folks! [Less]

We're proud to announce Floodlight, an auto-completion plugin that greatly accelerates searches in Enano by suggesting search results. The results come from the real Enano search engine, not a knockoff hack written just for this plugin. Floodlight ... [More] works with Enano 1.1.6 and later. For developers, Floodlight is intended to demonstrate adding new auto-completion schemes, Javascript preloading (Enano 1.1.7 and up), and use of the DOM to add functionality to Enano UI chrome on the client side. Downloads are available on the plugin's page as linked above. [Less]

Yeah, we hated the closure of rafb.net/paste too. So we decided to do something about it. Gorilla is Enano's new pastebin plugin. Inspired by Pastie and loaded with AJAX fun, Gorilla is a very complete way of running a branded pastebin as opposed to ... [More] depending on one that already exists. For more info, check out Gorilla's page. It's installed on this site too, so you can also create a paste. [Less]

The Enano project, as announced earlier, is the first to produce 3rd party BitNami modules. Now we're becoming increasingly frustrated. Not only do we have to learn a new closed source XML based installer system, we also have to deal with frivolous ... [More] restrictions (such as all-lowercase usernames), trialware constraints and licensing concerns (BitRock...) and of course, about 4MB of mystery fat on the produced binaries. I'm done. The Enano Project is working hard on producing our own BitNami module installers, using a shell script and Enano's CLI installer under UNIX and NSIS and the ExperienceUI on Windows. We have a lot of working code written by now. Both installers are nearly complete; my prior experience with NSIS has led to a beautiful installer both from the visual perspective and from the usability perspective. The UNIX installer is slightly more limited (it doesn't let you choose your own database credentials or support PostgreSQL) but is still powerful and reliable. The advantage here is that we can provide support for these installers since they're all Enano Project code. Moreover, they were built on open source tools and we will be releasing source code for the installers themselves in Mercurial. Our ultimate goal is to continue to make it possible to integrate Enano with BitNami's ease of installation, without relying on proprietary software with unnecessary restrictions to do it. We also want to make sure that the great experience you get with Enano's web installer is matched by our module installers. In the end, this means a higher quality experience for users. [Less]

The Enano CMS team is extremely proud to announce the immediate release of Enano v1.1.6, which is considered the first beta in our ongoing development of Enano 1.2.0. Beta 1 is a major milestone for us, as it marks the feature-completion of the 1.2.x ... [More] series. Of course, the obligatory disclaimer: THIS RELEASE IS HIGHLY UNSTABLE AND IS LIKELY TO CAUSE YOU PROBLEMS. IF YOU INSTALL IT ON A PRODUCTION WEBSITE, DO NOT EXPECT SUPPORT FROM US. No support of any kind is provided for this release. Enano 1.1.x will not run on PHP 4.x. PHP 5 or PHP 6.0.0-dev is required. That taken care of, let's talk for a bit about what's been added. New features in this release are far and wide. Meet Enanium, your new look There is a new default theme, Enanium, which introduces template hooks (plugins can add code to the page at certain points) along with the ability to hide the Tools, User, and Search sidebar blocks and replace them with your own code. Enanium does this through a tabbed interface in the upper right-hand corner of the page for user controls and jBox drop-down menus for site controls. One of the biggest features of Enanium, being introduced as a plugin, is the ability to have custom background images. Enanium handles these seamlessly, providing a translucent body that beautifully but unobtrusively showcases the background image. Live Re-Auth We thought long and hard about how Enano could be made more secure. The answer we came up with was Live Re-Auth. This security feature protects access to page tools such as protection, deletion, access control lists, and clearing logs by asking for your password. But the great thing about Live Re-Auth is that it doesn't re-load the page when you log in! Providing your password is as easy as typing it and pressing Enter. Live Re-Auth sessions act just like the privileged sessions you get when you log into the admin CP: they last 15 minutes, and are renewed every time you do something. This provides increased security while continuing to keep convenience at a level greater than any other CMS solution. HMAC-SHA1 passwords We last changed our password storage philosophy over two years ago with Enano 1.0RC1. This allowed more secure logins, but it came at a cost: if your database and configuration file were both compromised, your users' passwords would be revealed. We've decided to change that in Enano 1.1.6. Passwords and sessions are now based on HMAC-SHA1, which maximizes security, reduces the size of session keys, and allows faster session validation. AES and Diffie-Hellman are still used for logons, because Enano still needs a pure (non-hashed) form of the password in order to validate your credentials. External authentication Enano now features support for the Yubikey, a hardware authentication device based on one-time passwords (OTPs), through the Yubikey plugin. But that's not where we stopped. Any plugin can now extend the Enano authentication system to allow authentication through an external service. Authentication plugins can choose to require an Enano password in addition to their method, just require their own method, or allow bypassing their own method, letting the user log in as they would normally with their Enano password. The options are limitless! Since authentication plugins can change the way Enano handles security, we've made sure that administrators see an extra confirmation during plugin installation. New log interface The new Log page lets you view changes to the site in a style similar to that of a wiki. Intelligent filtering allows you to search for changes. Rewritten dashboard The administration panel homepage had the same text on it for three years, so we thought we'd spice things up a bit. Enano 1.1.6 features a fully redesigned administration home page which includes many statistics on the site including sizes of the cache, uploaded files, and database; redesigned alerts; and links to easily obtain support for Enano. Download it! Downloads are available in the usual place. We just updated the downloader to use CoralCDN. It's still being tested, so post in the forums if you encounter any problems. [Less]