SCMS is an MVC based secure content management system. It is designed from the ground up to withstand common Web application vulnerabilities such as SQL injection, XSS, CSRF, session fixation/hijacking, and many others. It is designed for PHP 5.0-5.2.x and MySQL 4.1+, and it can optionally support PostgreSQL as a database backend.
| Tags | MVC Framework secure code PHP5 MySQL object oriented RBAC Web Application development Secure Site Management CMS mvc |
|---|---|
| Licenses | GPLv3 |
| Operating Systems | OS Independent LAMP WAMP |
| Implementation | Apache 2.0 PHP 5+ MySQL postgresql |
| Translations | English |
Last announcement
Hi All SCMS Subscribers,
Thank you for your interested in my code.
My apologies for not releasing any new versions of my software in a while.
...
Recent releases


Release Notes: This release fixes cookie lifetimes (Use Session Cookies), session expiration, and X_Forwarded_For IP logging, uses simpler Controller and Models class names, improves configuration, error handling, and .htaccess configuration directives, and adds DB CRUD Permission ACLs (select|update|delete|insert).


Release Notes: Custom routes were added to the XML configuration. Various configuration fixups were made.


Release Notes: Various PHP.INI configuration directives fixes, a reversion to XHTML 1.0 Transitional, and the removal of the buggy installer.


Release Notes: Validation was added for SCMS configuration. A Web installer was added.


Release Notes: Directories were restructured. The database layer was rewritten to use the PDO driver. Object models were added. XHTML mark-up was changed from Transitional to Strict. Session database storage bugs, including CAPTCHA and CSRF session data loss, were fixed. A plug-in and model class auto-loader was added. SCMS dynamic configuration was implemented. Many bugs were fixed, including problems with account locking and error handling, and there were many code cleanups and optimizations.
A tool that makes graphical and top reports from the Squid proxy access log.