SCMS 是一个安全内容管理系统的基础引擎,基于角色的面向对象设计,兼容 XHTML 1.0、Strict I/0 验证;定制 session 实现,支持基于 SSL 的 cookie 等,具备很强的安全特性,采用 PHP + MySQL 5 开发。
Features
* Licenced Under GPLv3
* Full XHTML 1.0 Transitional Conformity
* Full CSS2 Conformity
* Role Based OO (Object Orientated) Design
* Designed for PHP5 (5.2.x Branch)
* Works with MySQL and PgSQL(currently untested)
* Implements MVC Design Pattern
* Per Controller SSL/NonSSL Enforcement
* Implements Singleton Design Pattern
* Strict IO (Input/Output) Validation
* Custom Session Handling With Idle Session Expiration & Session Identifier Regeneration
* User Account Locking With Both Automatic & Manual Unlocking Methods
* Event Logging
* Password Aging/Expiration
* Support for "secure" (When run over SSL) AND "httponly" Cookies
* Improved CSRF Protection By Using Random Form CSRF Tokens
* Support for all PHP5 Hashing Algorithms as well as MySQL's AES and DES Encryption
* Optional Captcha Images
* Optional Session Data Encryption
* Optional Per Request Session IP Checking
最新版本:1.2
该版本从技术上进行了全面重构,遵循 MVC 设计模式。
官方主页:http://scms.za.net/