[Release] PServerCMS a Website for your PServer

PServerAdmin update
- set min php71
- update fontawesome
- admin layout changed to bs4 (for all current version, you need [Only registered and activated users can see links. Click Here To Register...], go to [Only registered and activated users can see links. Click Here To Register...] and set copy both files to `page-directory/public/assets/admin`)
- set zfc-datagrid 1.5 as min version
- added headLink and headScript
- added createip in user-panel overview
- added login-log (LoginHistory and LoginFailed) (see [Only registered and activated users can see links. Click Here To Register...] to get it in your current version)
- admin statistig navigation moved to the correct module

just for knowing is the site well protected? each time, someone does a tiny atk the site goes down when I use a weak not well-coded site but it's protected they can't take it down so there is something wrong in the protection i guess

it has everything included, like prepare statements, file access and it use latest codestandards with security updates.

but like all web pages, if the server is not secret, the page can not cover this.

Quote:

Originally Posted by KoKsPfLaNzE it has everything included, like prepare statements, file access and it use latest codestandards with security updates. but like all web pages, if the server is not secret, the page can not cover this.

the server is fine they are hitting port 80 which cuz the site to shut down while when I use different website it blocks whatever they are trying to do is there a fix for that?

Quote:

Originally Posted by TrashBag the server is fine they are hitting port 80 which cuz the site to shut down while when I use different website it blocks whatever they are trying to do is there a fix for that?

i would use a proxy to hide the backend server, with a own proxy or with cloudflare

on backend server allow only connections from the proxy.

i also would not use windows, linux is more secure. and the split between your gameserver and webserver will also increase security.

also redirect all requests to your domain with www, or if you prefer non www.

ps to protect vs get attacks you can use fail2ban.a web page should not handle this, it would decrease the performance a lot.

Quote:

Originally Posted by KoKsPfLaNzE i would use a proxy to hide the backend server, with a own proxy or with cloudflare on backend server allow only connections from the proxy. i also would not use windows, linux is more secure. and the split between your gameserver and webserver will also increase security. also redirect all requests to your domain with www, or if you prefer non www. ps to protect vs get attacks you can use fail2ban.a web page should not handle this, it would decrease the performance a lot.

I have most of this covered cloud flare as well but it's an exploit at the website
shouldn't the website have like PHP order to filter this thing I get this done at my other website but since ur website is Zend frame I have no clue what to do anyone of ur free users is at high risk cuz of this please take an action

Quote:

Originally Posted by TrashBag I have most of this covered cloud flare as well but it's an exploit at the website shouldn't the website have like PHP order to filter this thing I get this done at my other website but since ur website is Zend frame I have no clue what to do anyone of ur free users is at high risk cuz of this please take an action

no one of my pages have a filter based on php, also not pay users.

if you use cloudflare you should block all connections expected cloudflare ips, to be save.

there is also no real exploid possible, only you use external stuff, like a mail server or the donation service.
if the mail hoster or the donation provider provide the ip of the backend server, than its not a buggy page.

Quote:

Originally Posted by KoKsPfLaNzE no one of my pages have a filter based on php, also not pay users. if you use cloudflare you should block all connections expected cloudflare ips, to be save. there is also no real exploid possible, only you use external stuff, like a mail server or the donation service. if the mail hoster or the donation provider provide the ip of the backend server, than its not a buggy page.

okay but you can make such thing if a not well-coded site with few stupid codes blocked the flood cant you make a better one at the cms to block such flood on the port if the IP get leaked somehow I'm just saying that cuz I like the cms and I don't want to stop using it cuz of this exploit which you can fix in 5 mint

typical you when there is a problem and you wont fix it you ignore me

Quote:

Originally Posted by TrashBag okay but you can make such thing if a not well-coded site with few stupid codes blocked the flood cant you make a better one at the cms to block such flood on the port if the IP get leaked somehow I'm just saying that cuz I like the cms and I don't want to stop using it cuz of this exploit which you can fix in 5 mint typical you when there is a problem and you wont fix it you ignore me

btw im in vacation, so no 24/7 online.
i will add some security examples next week, to handle this stuff with the firewall, on windows and linux wih firewalld.
php will not handle it, its useless and make the page slow and if there is an attack the page could not handle it, with php logik on a little vps.
with other tools its 100x better and you need less server power.

Quote:

Originally Posted by KoKsPfLaNzE btw im in vacation, so no 24/7 online. i will add some security examples next week, to handle this stuff with the firewall, on windows and linux wih firewalld. php will not handle it, its useless and make the page slow and if there is an attack the page could not handle it, with php logik on a little vps. with other tools its 100x better and you need less server power.

let the users handle the server power / better VPS

and you fix the security staff thanks in advance fixing it you can't imagine working with a website that any noob can shut down in 5 sec ;)

Have a nice vacation :bandit:

Quote:

Originally Posted by TrashBag let the users handle the server power / better VPS and you fix the security staff thanks in advance fixing it you can't imagine working with a website that any noob can shut down in 5 sec ;) Have a nice vacation :bandit:

I think many big servers used Kokspflanzes PServerCMS in the past and i'm not noticed an bug as you say where you can take down the page in 5 sec :D

I think the Problem is on your setup :D ask Kokspflanze to setup the Server for you and you've will not notice any bugs or shutdowns

I've used Koks PServerCMS for more than 1 year without any bugs or shutdowns! And yes it was an Setup from Kokspflanze and it was the free released version NOT the Paid one ;)

Quote:

Originally Posted by Banmaschine I think many big servers used Kokspflanzes PServerCMS in the past and i'm not noticed an bug as you say where you can take down the page in 5 sec :D I think the Problem is on your setup :D ask Kokspflanze to setup the Server for you and you've will not notice any bugs or shutdowns I've used Koks PServerCMS for more than 1 year without any bugs or shutdowns! And yes it was an Setup from Kokspflanze and it was the free released version NOT the Paid one ;)

I did set up the free released version for more than 20 ppl and they all had the same problem with my setup or anyone else setup Oliver get what I mean about the flood problem and yes it can be a fix from the server side but it can also be fixed from the website side which will be better fro a normal user like me

Quote:

Originally Posted by TrashBag I did set up the free released version for more than 20 ppl and they all had the same problem with my setup or anyone else setup Oliver get what I mean about the flood problem and yes it can be a fix from the server side but it can also be fixed from the website side which will be better fro a normal user like me

on which servers you hosted the page? hoster, cpu, ram and this stuff

Quote:

Originally Posted by KoKsPfLaNzE on which servers you hosted the page? hoster, cpu, ram and this stuff

OVH 32 ram core I 7 7th
hetzner 64 ram core i7 7th

the guy just flood the website and it stopped loading there was no lag and the server wasn't affected only the website does the website wasn't loading anymore it's not the first time
it happened for too many other ppl I that I know of but when it happened to me I knew it had to be stopped atm I'm using PHP website coded by a friend to stop the flood till I know a fix or smth

Quote:

Originally Posted by TrashBag OVH 32 ram core I 7 7th hetzner 64 ram core i7 7th the guy just flood the website and it stopped loading there was no lag and the server wasn't affected only the website does the website wasn't loading anymore it's not the first time it happened for too many other ppl I that I know of but when it happened to me I knew it had to be stopped atm I'm using PHP website coded by a friend to stop the flood till I know a fix or smth

you mix, apache flooding with an real attack on default configs.
i hope i can do some config examples and some possible helpers soon, when i have more time.

changelog added new stuff

- added payssion payment provider
- added inventory avatar of a character [Only registered and activated users can see links. Click Here To Register...]
- coins update improvements