- Security
- Introduction
- Installation
- Features
- Admin Panel
- User Panel
- Usage
- Changelog
- Contributing
- Credits
- License
IMPORTANT
⚠️ MiniGreX is still in development. Want to help? The smallest high-secure multi-CMS for DevOps 👮 Update 12.06.24 i kill it today. Later! not yet please!
MiniGreX is designed with security in mind, minimizing the risk of SQL injection and other vulnerabilities. Keep MiniGreX up-to-date with the latest patches and use strong passwords for all accounts.
MiniGreX is a lightweight and secure system "not only" for sharing links, images, videos, and comments. It supports MySQL, MariaDB, and PostgreSQL, and uses PHP PDO with prepared statements for security.
Documentation for this project
To install MiniGreX CMS, follow these steps:
- Install a web server (Apache or Nginx).
- Install PHP 7.4 or higher.
- Install MySQL, PostgreSQL, or MariaDB.
- Clone the repository from GitHub.
- Create a database for MiniGreX CMS.
- Import the SQL file
sql.txt
into your database. - Update
init.php
with your database credentials. - Upload the files to your server.
- Change file and folder permissions.
- Navigate to
index.php
to view the CMS.
- User authentication
- Admin panel for managing site information and user accounts
- Share links, images, and videos
- Comment system
- SQL injection prevention with prepared statements
- Supports MySQL, MariaDB, and PostgreSQL
- Force SSL
- Role Manager
- Caching
- Some "Test tools"
- Lazyload + Image Customizer
- Image & Video Database
- SEO Tools
- Deep/Dark Web mode
- Some admin stuff
- Profile Manager
- Some secrets 😃
The admin panel allows admins to manage site information and user accounts, including:
- Changing site title and description
- Changing admin/user passwords
- Viewing and deleting user accounts
- Managing roles and permissions
The user panel allows users to manage their accounts and content, including:
- Changing user passwords
- Creating posts, links, comments, and uploading images and videos
- Update Profile
login.php
andregister.php
with prepared statements and CSRF protection
- Content Security Policy (CSP) and other security headers
- Enhanced SQL injection prevention with PDO and prepared statements
- CSRF protection mechanisms
- Session security with session regeneration to prevent session fixation
plugin_loader.php
for modular plugin integrationtheme_loader.php
for modular theme integration
- Manage roles and permissions
- Admins can create, delete, and assign roles to users
- Lazyload + Image Customizer
- Image & Video Database
- SEO Tools
- Gateway Tools
- Deep/Dark Web mode for enhanced security and privacy (for DevOps)
- Profile Manager
-
Role Manager:
- New plugin for managing roles and permissions.
- Admins can create, delete, and assign roles to users.
-
Security Enhancements:
- Added Content Security Policy (CSP) and other security headers.
- Enhanced SQL injection prevention using PDO and prepared statements.
- Implemented CSRF protection mechanisms.
-
Session Security:
- Added a function to regenerate session IDs to prevent session fixation.
-
Modular Architecture:
- Introduced
plugin_loader.php
for modular integration of plugins.
- Introduced
-
Improvements in
login.php
andregister.php
:- Usage of PDO and prepared statements.
- Integration of CSRF protection.
These changes and enhancements significantly improve the security, modularity, and administrative capabilities of the CMS.
Once installed, MiniGreX CMS allows you to share links, images, and videos. The main page shows all posts and comments. To add a new post, click "Add Post" and fill in the form.
To comment on a post, log in or register a new account. Admins can change site settings and passwords from the admin panel.
We welcome contributions to MiniGreX CMS, including bug fixes, feature requests, and translations. To contribute, please create a new branch and submit a pull request.
Your support is greatly appreciated. If you find MiniGreX CMS useful, consider ⭐ the project on GitHub or becoming a Sponsor.
MiniGreX CMS is developed and maintained by:
MiniGreX CMS is licensed under a "MIT" LICENSE. Feel free to use it for personal purposes and commercial purposes!
MiniGreX-dev_05.09.2024/
└── .htaccess
├── _logs/
│ └── .htaccess
├── assets/
│ ├── css/
│ │ └── README.md
│ ├── js/
│ │ └── README.md
├── cache/
│ └── .htaccess
│ └── cache_db.php
│ └── index.php
├── error/
│ └── 400.html
│ └── 401.html
│ └── 403.html
│ └── 404.html
│ └── 500.html
├── includes/
│ └── .htaccess
│ └── cms.php
│ └── functions.php
│ └── images.php
│ └── init.php
│ └── loader.php
│ └── security.php
│ └── upload.php
└── index.php
└── login.php
├── panel/
│ └── admin.php
│ ├── css/
│ │ └── dashboard.css
│ └── dashboard.php
│ └── footer.php
│ └── header.php
│ └── navi.php
│ └── option_settings.php
│ └── user_settings.php
├── plugins/
│ ├── gateway_manager/
│ │ └── README.md
│ │ └── core.php
│ └── image_db/
│ │ └── README.md
│ │ └── core.php
│ │ └── imgdb_token.php
│ └── plugin_loader.php
│ ├── profile_manager/
│ │ └── profile_manager.php
│ ├── role_manager/
│ │ └── core.php
│ │ └── role_manager.php
└── register.php
└── sql.txt
├── tests/
│ └── test_cache.php
│ └── test_db_connection.php
├── themes/
│ ├── default/
│ │ ├── css/
│ │ │ └── default.css
│ │ ├── js/
│ │ │ └── default.js
│ │ ├── public/
│ │ │ └── footer.php
│ │ │ └── home.php
│ │ │ └── sidebar.php
└── theme_loader.php