Secure Calendar module?

Worker Joined: Dec 22, 2004 Posts: 135

I've looked at these 2 and it seems they ar ekind of old and probably not very secure.

http://www.bootsware.com/modules.php?name=NuCalendar
http://sweetphp.com/nuke/

Anyone know of a secure Calendar that's easy to use?

registered · Useless Joined: Aug 23, 2002 Posts: 213 Location: Chicago

http://www.albini.net/ has one calendar module which I believe is pretty much fixed with all the bugs. Give it a shot.

Posted: Tue Dec 28, 2004 9:42 am

I would review the module carefully in light of the vulnerbilities referenced in this news article:

Only registered users can see links on this board! Get registered or login!

I say this because it appears that the referenced module is based on the same original calendar module, looks very much the same, and has not been updated in their downloads section since 2003.

Just a friendly warning...

montego

Client Joined: Dec 24, 2004 Posts: 194 Location: Michigan

how about KalenderMx-1.4 ?

Calendar Module for vkpMx 2.x & phpNuke 5.5-7.2
Copyright (c) 2004 by A.Ellsel (kalender@pragmamx.org)
http://www.pragmamx.org & http://ww.shiba-design.de

Posted: Tue Dec 28, 2004 1:02 pm

Actually I have 7.6patched... any good calendar for that?

Posted: Tue Dec 28, 2004 1:10 pm

Wish I could read German! Crying or Very sad

Again, it looks similar, but you will need to test the vulnerabilities for yourself per my referenced news article above.

I wish I had time and ability to port Webcalendar to phpNuke as it looks as though it is a very popular tool and actively being worked on. Just look at sourceforge.net at the "Most Active" pages on the left-hand side. At some point these guys were going to include support for CMS systems, but that was mentioned a couple of years ago and it never seems to bubble up on the list to do.

To be honest, it might be best to pick a calendar tool that has the functionality you want and patch it yourself. At least that is what I have contemplated doing recently... but, never can seem to find the time. Some of the mentioned vulnerabilities look like they would be caught by Sentinel, while others might be just shoring up to SCRIPT_NAME and doing some additional variable "hardening". I was very dissappointed with Holbrookau for just closing the doors on Event Calendar rather than trying to elicit help from Chatserv and other fine experts in the community to help him shore up the code. It is such a fine, easy tool to use.

Good luck in your hunt!

montego

Posted: Tue Dec 28, 2004 1:27 pm

yes i would agree to that its to bad he did close the doors ... Sad

anybody want to check the KalenderMx-1.4 for me ? i have no idea how to do this and dont really have the time either Sad

i have the .rar file still and believe its in somewhat english least i have it up and running in english allthough some of it is not that good of english... Confused