October (CMS)

October is a self-hosted content management system (CMS) based on the PHP programming language and Laravel web application framework. It supports MySQL, SQLite and PostgreSQL for the database back end and uses a flat file database for the front end structure.[3] The October CMS covers a range of capabilities such as users, permissions, themes, and plugins, and is seen as a simpler alternative to WordPress.[4][5][6]

October
Developer(s)Alexey Bobkov, Samuel Georges
Initial releaseMay 15, 2014 (2014-05-15)[1]
Stable release
v3.3.7[2] / 2023-04-12[±]
Written inPHP
Operating systemCross-platform
TypeContent management system
LicenseProprietary software
Websiteoctobercms.com

The platform is intended to have a small learning curve and a template system easily manageable with version control systems.[7] As of July 2021, October is the second-most starred PHP CMS repository hosted on GitHub[8] and is 17th most popular on the Entire Internet in Open Source category.[9] The platform won the CMS Critic People's Choice Award for Best Flat File CMS for 2018.[10] The Dallas Museum of Art uses October CMS in their information kiosks[11]

On April 12, 2021, October CMS transitioned from using an MIT License to a proprietary software model[12] citing concerns over a lack of sustainability with the open-source model. In reaction to this change, the former maintainers of the project forked it and started Winter (CMS) project under MIT license, promising it to remain Free and Open Source.[13]

Features

October offers the following features, among others:

  • Components, a key feature that are configurable building elements that can be attached to any page.[14]
  • Building an interface requires minimal programming.[15]
  • Flat files are used to serve the website structure.[16]
  • Includes an Ajax framework built in for back-end and front-end.[15]
  • Uses Twig as template engine. This makes it possible to completely separate data from the templates.
  • File manager with CDN support and image cropping.
  • CSS and JavaScript assets can be combined and minified with just a single tag in the CMS templates.
  • The whole setup is event-driven, which enables the user to hook into core or plugin processes and extend them.
  • Updates and plugins are delivered with a package manager.
  • Community-contributed extensions in the October CMS marketplace.
  • The back-end is translated into 36 languages.

Ukraine cyberattacks

From the 13th to 14th of January 2022, a known vulnerability in October CMS was used to deface the Ministry of Education and Science, the Ministry of Foreign Affairs, the Cabinet of Ministers and other Ukrainian government websites as part of the 2022 Ukraine cyberattacks.[17][18] The Ukrainian Ministry of Digital Transformation announced that there was no data leak.[19] The vulnerabilities were fixed nearly a year before the attack,[20] although not all sites were running the latest version.[21][22] Ukrainian cybersecurity agencies said the attack involved exploitation of CVE-2021-32648,[23] a vulnerability in the October CMS, as well as the exploitation of the notorious Log4Shell flaw, and DDoS attacks.[24]

See also

References
  1. "Announcement: OctoberCMS Beta", by daftspunk, May 15, 2014. Retrieved on 18 May 2015.
  2. "Changelog - OctoberCMS". octobercms.com. Retrieved 2023-04-12.
  3. "Laravel 4 File-Based CMS", by Christopher Pitt, February 2, 2014
  4. [https://www.smashingmagazine.com/2019/03/wordpress-october-cms/ "A Detailed Comparison Between WordPress And October CMS "]
  5. "WordPress CMS vs October CMS: The Ultimate Showdown"
  6. "Alternative Content Management — Part 2", by Christos Chiotis, May 20, 2014.
  7. "Alternative Content Management — Part 2", by Christos Chiotis, May 20, 2014.
  8. "GitHub search", sort:stars language:PHP stars:>1 CMS. Retrieved on 20 May 2015.
  9. "October CMS Usage Statistics"
  10. "CMS Critic Awards". CMS Critic. 12 November 2012. Retrieved 2020-01-11.
  11. "Dallas Museum of Art uses October"
  12. "October CMS Moves to Become a Paid Platform"
  13. Towers, Luke (March 6, 2021). "We have forked October CMS". Winter CMS. Archived from the original on May 29, 2023. Retrieved September 16, 2023.
  14. "CMS Components", Retrieved on 16 May 2015.
  15. "Introducing October – a Laravel-based CMS", by Nick Salloum, November 17, 2014
  16. "Introducing October CMS", by Chad Cantrell, December 30, 2014
  17. "Sources tell me ~15 sites in Ukraine - all using October content management system - have been defaced", by Kim Zetter
  18. "Massive Cyber Attack Knocks Down Ukrainian Government Websites"
  19. "Official statement of the Ministry of Digital Investigation of a link with a hacker attack on a number of sites"
  20. "Build software better, together". GitHub.
  21. "Ukrainian government websites attacked: How could it happen?"
  22. "Multiple Ukrainian government websites hacked and defaced"
  23. "CVE-2021-32648 Detail"
  24. "Ukraine Attacks Involved Exploitation of Log4j, October CMS Vulnerabilities"
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.