Code Authors

Those of you following the RavenNuke (tm) CMS project will be aware that the 'to be released' V2.3 has significant enhancements to the standard *nuke Your Account module. In fact, the whole module has been replaced - you can see some of the work being done in a related article at  www.nukeseo.com
As soon as RavenNuke V2.3 is officially released, we will be releasing a hack to enable users to check the IP of new users attempting to register on your site against the Project Honeypot blacklist. Options will include banning the user and/or blocking thier IP in Nuke Sentinel (tm), and/or logging undesired IP to a log file.
The hack only requires two very minor file edits but we will also provide pre-edited files for the core RavenNuke package to save you time.

Code Authors are pleased to announce they are Sponsoring a local music band called Silverchild for the indefinite future.
John Haywood webmaster at Code Authors said "Silverchild is a four piece Indie/Rock band based in the North West of the United Kingdom. We liked their music so much we acquired a domain and put a website together for them and their gowing fan base to use. The music industry is so hard to make headway in, we hope this small gesture will help unite their fan base into one focal point where they can help spread the word."
Please visit their site, listen to their music and leave your mark at Silverchild

Ts Contact 1.0 Multilanguage is a new module for Php Nuke

Emails sent with CAPTHA protection. Help tips are available for all form fields. Email can be sent HTML format (with the sites logo).
  Sender reports include Avatar and Nickname.

SECUNIA ADVISORY ID:SA30779
VERIFY ADVISORY:http://secunia.com/advisories/30779/
Moderately critical
IMPACT:Cross Site Scripting
WHERE:From remote
SOFTWARE:HTML Purifier 2.x http://secunia.com/product/19145/
HTML Purifier 3.xhttp://secunia.com/product/19146/
DESCRIPTION:
Two vulnerabilities have been reported in HTML Purifier, which can be exploited by malicious people to conduct cross-site scripting or script insertion attacks. Input passed to the library containing CSS data is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is viewed. Successful exploitation of one of the vulnerabilities requires that the output encoding is set to Shift_JIS. The vulnerabilities are reported in all versions prior to 2.1.5 and 3.1.1.
SOLUTION: Update to version 2.1.5 or 3.1.1.
PROVIDED AND/OR DISCOVERED BY: Reported by the vendor
Users of Nuke Evo should be aware that it use HTML Purifier 2.1.4 and should verify with the distribution vendors that this vulnerability does not affect them

Montego has just released his latest version of Approve Membership Lite V1.1.0.
Approve Membership Lite is just one of the great free software products available under the TegoNuke (tm) brand name available at MontegoScripts. This version is ONLY for use with RavenNuke 2.20.0 and will NOT work on any other version of RavenNuke or phpNuke or any other fork or derivative of nuke.
This is a special release only for user of RavenNuke 2.2.0 which was released a few days ago.

Here are just some of it's more important features;

• Allows an administrator to approve membership applications.
• The applicant's details are sent to a pendingusers table and a notification email is sent to the administrator.
• A list of pending applicants is displayed to the administrator, who can then delete or approve as he/she thinks fit.
• On approval, the normal email is sent to the applicant with or without the activation link.  - this means you can automatically activate the user without them having to click an activation link
• The option is available to add a customizable message to this email.
• The option is available to include the activation link or not.
• The option is available to send a follow up email to an applicant. This email text is also customizable.
• The option is available to send an email to a rejected applicant. This email text is also customizable.
• Administrators can pre-approve email addresses and email domains and configure the actions to be taken by the module for semi-automation.
• Superusers can assign admin rights to the Approve_Membership module and the Pre-Approved email addresses page.

We here at Code Authors have been using this for a while now and highly recommend it but please help sustain the development by donating on their site by donating if you use it.

ThemeFreaks Has just released two new themes based on the game World of Warcraft-BC.
Both themes are pretty much the same,
1 for the Horde demo.themefreaks.com/index.php
1 for the Alliance demo.themefreaks.com/index.php
For these and more themes please drop by www.themefreaks.com