Wolf CMS

This project started as a fork of the Frog CMS but has evolved into a complex CMS, a totally separate and professional product on its own.

Right now, Wolf CMS is a way better finished product than the original, a modern, secure, and easy to use CMS that fits right in with the present times in Web development.

Webmasters can easily install the CMS, add new pages, write content via a friendly WYSIWYG editor, upload files, install plugins, themes and tweak layouts on a per-page basis.

All in all, the complete set of basic features for performing simple or complex modifications to a page, without having to delve in the source code to do so.

Wolf CMS is currently tailored to serve small to medium projects, and is an ideal solution for situations where bulky CMSs do nothing more than slow down page loads rather than providing a simple content management tool.

For more large projects, please refer to our CMS section for more advanced systems.

What is new in this release:

• This release is a security fix release.

What is new in version 0.8.2:

• This release has a single security fix for the archive plugin.

What is new in version 0.8.0:

• Added Record::find()
• Added Record::findById()
• Added Record::findOne()
• Added AutoLoader::register() to register the autoloader on the SPL stack
• Fixed bugs related to Node::registerMethod()
• Fixed input validation on Gravatar helper
• Fixed duplicate username issue
• Fixed Snippet add, delete, edit permissions issue
• Fixed Snippet redirect url issue
• Fixed issue allowing non-admins to set ‘is_protected' setting on Page
• Fixed issue with editing .html files using FileManager plugin
• Fixed issue clearing cookies after logout
• Fixed issue with unused Tags lingering in DB
• Fixed use of deprecated pref_replace in Kses helper
• Changed children() and childrenOf() page ordering to ‘page.position ASC, page.id DESC'
• Updated jQuery to 1.8.3
• Updated MarkItUp to 1.1.14
• Updated translations to latest versions
• Removed legacy (Prototype) JS functions
• Minor fixes & cleanups

What is new in version 0.7.8:

• Added jsEscape() function to Framework to escape special characters in JS strings.
• Added support for lastInsertId with PostgreSQL
• Added unique constraint to DB for email field in user table
• Added come PHPDoc improvements
• Added Bulgarian translation
• Added "view_backend_layout_head" Observer system event to backend
• Added number of config options to generated config and removed from SecureToken and AuthUser
• Added cookie eating for JS based cookies upon logout
• Added empty robots.txt file
• Added checks for snippet_add, snippet_edit and snippet_delete permissions
• Added missing Persion/Iran entry to IETF array
• Changed url() default suffix argument value from false to true
• Changed uri() into path()
• Changed system constants like PLUGINS_URI into PLUGINS_PATH, temporarily maintaining PLUGINS_URI for backwards compatibility
• Fixed redirect issue with snippet URL
• Fixed issue with FileManager being unable to edit .html files
• Fixed issue to prevent non-admins from setting "is protected" on page
• Fixed issue with Remember me text in login box for translations
• Fixed auto-loading of namespaced classes in PSR-0 folder structure
• Fixed the curious case of the missing sort order for FileManager

What is new in version 0.7.7:

• Fixed bug in findBySlug that got into 0.7.6 release
• Updated default layouts and snippets to make use of $this->uri()
• Replacing old icons with fresh new Wolf CMS default icons in backend
• Added Burmese Myanmar as usable language for Wolf CMS translations
• Made minor PHPDoc updates in Framework
• Fixed slug validation bug
• Fixed frontend javascript bug for install routine
• Fixed csrf bug when editing page
• Fixed issue with children() and childrenCount() for SQLite
• Now depends on PHP 5.2+, preparing for PHP 5.3+ dependency
• Replaced legacy code using $__CONN__ with prepared statements or Record:: methods
• Switched SQL to use named parameters
• Allowed for _ translations
• Added missing translatable strings
• Commented out magic_quotes_gpc flag in htaccess in preparation for complete removal
• Changed deprecated eregi to preg_match
• Added layout as parameter to page_before_execute_layout event
• Flash infoboxes were made smarter in terms of duration of staying on screen
• Updated translation files with those from Transifex.com
• Added $user->id as second parameter to user_after_??? event
• Fixed issue with non-enabled plugins being selectable as default tab
• Fixed bug that allowed page with existing slug to be created
• Fixed mime-type for javascript files
• Fixed a problem with parent() function
• Fixed slug validation to allow dot (.) as valid character
• Fixed backup restore plugin losing NULL values

What is new in version 0.7.6:

• Replaced legacy code using $__CONN__ with prepared statements or Record:: methods
• Switched SQL to use named parameters
• Allowed for _ translations
• Added missing translatable strings
• Commented out magic_quotes_gpc flag in htaccess in preparation for complete removal
• Changed deprecated eregi to preg_match
• Added layout as parameter to page_before_execute_layout event
• Flash infoboxes were made smarter in terms of duration of staying on screen
• Updated translation files with those from Transifex.com
• Added $user->id as second parameter to user_after_??? event
• Fixed issue with non-enabled plugins being selectable as default tab
• Fixed bug that allowed page with existing slug to be created
• Fixed mime-type for javascript files
• Fixed a problem with parent() function
• Fixed slug validation to allow dot (.) as valid character
• Fixed backup restore plugin losing NULL values
• Fixed issue in Archive plugin with preview status
• Minor fixes

What is new in version 0.7.5 SP1:

• A number of CSRF vulnerabilities were reported and fixed which could allow a remote attacker to abuse certain Wolf CMS functions by manipulating the URL.

What is new in version 0.7.5:

• Added Portugese language file for comments plugin.
• Added Arabic language file for core.
• Added RTL version of default look-and-feel.
• Added Polish language files. Thanks tikky.
• Added Japanese language files. Translations need to be checked by native speaker.
• Added Indonesian language files for core plugins.
• Added Latvian language file for core.
• Added extra non-ascii characters to toSlug JS function.
• Added code to remember destination URL when logging into the admin section.
• Added option to choose file extension to Backup Restore plugin.
• Added PostgreSQL support for comment plugin.
• Added option to NOT generate dates in Archive plugin URLs.
• Added tab to create 4 spaces and preview refresh features to markdown and textile plugins.
• Fixed installer using "127.0.0.1 instead of localhost" work around for PHP 5.3.5 and up.
• Fixed installer not accepting socket DB connections for PHP version < 5.3.
• Fixed requirements check resulting in a "content not found" message when PDO was not available.
• Fixing issue with part id not being updated when adding part.
• Fixed inconsistency in offset handling inside Page::childrenCount.
• Fixed incorrect type hint in Permission::findByName() argument list.
• Fixed index already exists bug on upgrade for SQLite DBs.
• Fixed Email helper to prevent safe mode warning - thanks realslacker.
• Fixed small typo in User model preventing updated by info being updated.
• Fixed missing "c" for toSlug() function in JS.
• Modified default slugs to use hyphen on install instead of underscore.
• Plugin's require_wolf_version entry now compared to Wolf's version using PHP's version_compare function.
• Changed CSRF token timeout from 5 to 15 minutes.
• Made sure add part form has emtpy title field when adding multiple parts.
• Re-added autogenerated breadcrumb upon page add.
• Updated Indonesian language file for core.
• Updated Chinese translation file for core.
• Updated Norwegian i18n for core.

What is new in version 0.7.2:

• Improved installer.
• Added an upgrade script.
• PostgreSQL support.
• Added CSRF token support.
• Full jQuery 1.4.2 support.
• Added Hash helper.
• Added Validation helper.
• Added a security advisories page (security.php).
• Added valid until feature for pages.
• Added support for low-level permissions.
• Filter system was changed to use MarkItUp.

What is new in version 0.7.0 RC1:

• Improved installation routine
• Automatic upgrade script
• Ability to set "valid until" for a page
• New permissions system
• New filter system using MarkItUp
• Migrated from Prototype to JQuery (1.4.2)
• PostgreSQL support
• Several new helpers
• Addition of CSRF tokens using sha256
• Salted passwords
• New core plugin: multi lang
• New security advisory page (security.php)
• And LOTS of security related fixes and features.

What is new in version 0.6.0a:

• Added Page::linkById() function to allow for self-updating linksissue 131
• Added preview function to pages list.
• Added dispatch_route_found event with uri as parameter issue 111
• Added getContentFromUrl() function to Frameworkissue 54
• Added basic PHP 5.3.0 support issue 95
• Added view_page_after_edit_tabs event to fire just after rendering of tab-control div in edit page viewissue 12
• Added improved install sequence.
• Added patch where page tags are now also clonedissue 46 thanks gilles
• Added support for HTTPS in the backendSet USE_HTTPS to true in config.phpissue 4
• Added Flash::setNow() function to allow flash messages in current requestissue 67
• Added support for frontend PluginController availabilityFixes issue 64.
• Added basic cron support.
• Added poormans cron support.
• Added user-specific language setting for back-endissue 13
• Added uninstall feature support for comment plugin.
• Added uninstall feature for plugins issue 40
• Added new core plugin, BackupRestore issue 27
• Added improved <title> for backendissue 7
• Added sitewide sender email addressissue 11
• Added use of site title for reminder mail issue 10
• Added number of translatable strings issue 15
• Added STATUS_PREVIEW to Page which allows administrator, developer, editor to preview pageissue 65
• Added getUri() function to Page.
• Added install/requirements.php to allow checking of prerequisitesissue 71
• Added Portugese translation for Wolf coreThanks Walker de Alencar.
• Added Polish translation for core plugins (comment, skeleton)Thanks piotr.fuz.
• Added support for setting users preferred language to system default upon creation.
• Fixed issue with Wolf using too generice GET variable when in mod_rewrite modeissue 117
• Fixed issue with PDO bug starting from PHP 5.3 where localhost equated to using unix socket that may be misconfiguredissue 110
• Fixed issue where user gets default permission of 'editor'.
• Fixed issue with not being able to edit layouts with SQLiteissue 3
• Fixed bug where get_request_method() returned GET instead of POST issue 17
• Fixed bug in deleting a page with children where page_part and page_tag entries were not removedissue 73
• Fixed bug in Framework where afterSave() was never calledissue 16
• Fixed spelling problem by replacing updator() and updatorId() by updater() and updaterId() issue 1
• Fixed problem where child pages were not deleted when deleting parentissue 45 thanks gilles
• Fixed duplicate IDs in Administration / Settings tab issue 37 thanks slowgary
• Fixed atom:link reference in rss.xml
• Fixed admin theme name issue 98
• Added settings tab to edit page screeen
• Partial migration from Prototype to JQuery
• Improved View Site link.
• Removed BASE HREF tag from backend layoutMay need updates to plugins! issue 19
• Removed PDO lite support(supported use of PDO in case you had no PDO)
• Removed STATUS_REVIEWED from Page issue 65
• Removed outer DIV produced by breadcrumbs() function issue 18
• Removed last remnants of split (classes/Page) issue 33
• Change max DB name from 40 to 120 issue 58
• Prevent usage of set_magic_quotes_runtime() from PHP 5.3 and up issue 56
• File Manager show folders before files issue 38 thanks slowgary
• Minor enhancements of Comments core plugin
• Minor text, css edits
• Updated Polish translation for coreThanks piotr.fuz.

Requirements:

• PHP 5.3 or higher
• MySQL 4.1+, SQLite 3+ or PostgreSQL 8.4.5+
• InnoDB support
• PDO support
• magic_quotes_gpc should be turned OFF in PHP
• HTTP server (Nginx, Apache, Lighttpd)