Habari

Habari is currently maybe the best alternative to running a blog and not having to use WordPress to do it.

It's easy to install and use, just as WordPress, and the transition to it should be pretty quick and seamless.

Habari features an administration panel to help webmasters configure and tweak it out, while also letting them make big changes via themes and plugins.

The entire system is very well coded, features a professional OOP codebase, is openly developed within the community, and comes with multi-site and multi-database support.

Multiple user accounts with different permissions can be setup, and a WYSIWYG editor will let users type in and quickly style their articles.

Static pages can also be added, and to help out with searching, content tagging is supported as well.

All in all Habari provides a modern and beautiful solution for your personal and business blogs, a tool you can also use on mobile devices if ever needed.

Features:

• Easy installer
• Administration dashboard
• Manage pages and blog posts separately
• Import content from other blogs
• Modular architecture
• Object-oriented core
• Multi-database support
• Content syndication
• Themes
• Plugins
• Easy user management
• Multi-site
• Content tagging

What is new in this release:

• PHP version 5.3 is no longer supported by the PHP group, and it is also not supported by Habari. PHP 5.4 is now required.
• There are several bug fixes and two important security fixes in this release.

What is new in version 0.9.1:

• Fixed an issue on Windows that might have broken installation.

What is new in version 0.9:

• Removed support for PHP 5.2. Habari's minimum supported version is now 5.3.3.
• Included a responsive theme built with child themes in mind.
• Many internationalization improvements, including translatable javascript strings.
• Better automated installation, making deployment to the magic internet cloud easier.

What is new in version 0.8:

• Support for child themes.
• Improved security.

What is new in version 0.7.1:

• A bugfix for login issues related to certain browsers and PHP sessions.
• Improved support for viewing images in multiple silos.
• AutoP no longer formats HTML script tags.
• Improvements to the tag display template (in Mzingi and Charcoal).

What is new in version 0.7-rc3:

• Security:
• A bug in the URL filtering could have allowed an XSS exploit.
• Enhancements:
• Improve the ability of plugins and themes to respond to upgrading.
• Rework the user interface for manipulating blocks and areas.

What is new in version 0.7-rc2:

• Security:
• A bug in the filtering of href attributes of <a> tags in comments could have allowed an XSS exploit.
• The commenter's name field was not properly stripped of all HTML. When combined with the above issue this could have resulted in an XSS exploit.
• <img> tags in comments were poorly sanitized, allowing a potential XSS exploit.
• Bugs:
• An issue that could have resulted in data loss if you attempted to reinstall Habari with an existing SQLite database present was reported in #1412. A tentative fix was made in r4919.
• Enhancements:
• The requirement introduced in RC1 that themes add a <class> declaration to their XML info files was removed, the class name should now be auto-detected in the same manner as that of plugins. Note that you still need to remove the THEME_CLASS declaration in your theme.php file.

What is new in version 0.6.6 / 0.7-rc1:

• Security:
• A bug in the filtering of href attributes of <a> tags in comments could have allowed an XSS exploit. Fixed in r4912
• The commenter's name field was not properly stripped of all HTML. When combined with the above issue this could have resulted in an XSS exploit. Fixed in r4193
• <img> tags in comments were poorly sanitized, allowing a potential XSS exploit. Fixed in r4914 and r4915
• Bugs:
• Also, almost every aspect of Habari has had improvements and bug fixes; DB support, AtomPub, ACL, FormUI, the installer, the admin (which is now served as HTML5), internationalization. See the list of issues closed since 0.6.
• Improved the installer.
• Fixed an ACL bug so that users can be restricted to editing just their own profiles.
• Improve database schema updating on SQLite.
• Stop authors overwriting changes made by other authors in multi-user sites.
• Bug fixes and improvements to the Habari media silo.
• Allow retrieval of posts ordered by post info values.
• Using AtomPub, support creating draft posts and editing tags.

What is new in version 0.7-dp3:

• Security;
• One fix for a minor security vulnerability that was included in Habari 0.6.5.
• Fixes for three potential security vulnerabilities that were included in Habari 0.6.6.
• Bugs:
• Errors generated by invalid information in a plugin XML file are now properly caught: r4575 and #1240
• Update the Flickr Silo so it's possible to translate strings: r4620 and #1337, r4626 and #1339
• Fix the "cache" of post statuses so it reflects a deleted post status properly: r4634
• Ignore menu entries, auto-saved drafts, and revisions when importing from a modern WordPress database: r4677 and r4678
• Enhancements:
• MultiByte-aware ucfirst and lcfirst functions: r4587
• Update checks are now performed via CronJob, rather than on each request to the Dashboard and Themes pages: r4587 and r4609
• MultiByte-aware str_replace and str_ireplace functions: r4600
• MultiByte-aware ucwords function: r4601
• Add the ability to completely load the Habari stack, but do not execute the request using the SUPPRESS_REQUEST constant: r4607
• Forcibly deactivate a plugin if it does not exist when plugins are loaded: r4611
• Add methods to output ordered lists of a vocabulary structure: r4615 and r4616
• Support HTTP proxies for all RemoteRequest connections: r4625, r4626, and r4629
• Display the reason a database connection failed if the DEBUG constant is set: r4645
• Add a not:slug option when fetching posts using Posts::get(): r4672
• Update the BluePrint CSS Framework to version 1.0: r4673
• Remove some restrictions on additional parameters being supplied when fetching a monthly count of posts with Posts::get() - LIMIT and ORDERBY: r4675 and r4676

What is new in version 0.6.6:

• Security:
• Under certain conditions the absolute file path could be exposed. Fixed in revisions r4654 to r4662.
• Bugs:
• Users were unable to create directories more than one level deeper than /user/files/ in the Habari File Silo. Fixed first in trunk r3623 and merged in r4664.
• Some users were unable to upload the first file to an empty directory in the Habari File Silo. Fixed first in trunk r3553 and now r4665.

What is new in version 0.6.5:

• A very minor security-related issue was discovered this week that allowed an attacker to reset the password of any user_id he was able to guess, triggering a reset email to the affected user.

What is new in version 0.6.4:

• Several security issues have been fixed, the most serious of which involves the inline editing of comments in the administration interface. A link not properly closed in the comment would take administrators clicking on the checkbox for the next comment to the URL in the link. This bug is fixed, and the inline editing has been moved from core code into a plugin.
• Another class of security issues fixed involve elevation of privileges for logged in users. Due to errors in the inheritance of post permissions, users in some cases could gain access to posts to which they should not have access. All known cases of this have been fixed.
• PHP made changes in versions 5.2.12 and 5.3.1 that affect how database access is handled. This broke Habari for all users whose hosts have upgraded to one of these versions. Habari 0.6.4 incorporates fixes to work around these changes while remaining compatible with earlier versions of PHP.

What is new in version 0.6.3:

• Allow entries without tags.
• Password reset is an action, and should be phrased as such. Also means the text isn't cut off in the button any more.
• Work around a bug in PHP 5.2.10 and PHP 5.3. Allows Habari to be installed on those PHP versions.
• Allow users to edit their own profile page.
• Open the temp file with write AND read permissions to allow subsequent reads after opening.
• Add permission check to core dash modules so that users without access to moderate comments can't view the comment module on the dashboard. And more.
• Change hotkey for My Profile to a 'Y' to obviate conflict with the Manage menu hotkey.
• Insert a missing image into the manual.
• Ensure the user has permission to delete a post before deleting it.
• Make the undelete plugin ACL aware.

What is new in version 0.6.2:

• Use POST instead of GET for password reset link
• Protect installer from SQL injection

What is new in version 0.6.1:

• 1100 bug fixes and improvements.
• Improved PostgreSQL support.

What is new in version 0.6:

• ACL ( Access Control Lists ) support is introduced. With ACL, not only does Habari have support for users, group support has been added. Groups can be assigned specific rights that limit what parts of your site the groups members can access, ranging from only being able to read and comment on published posts ( anonymous users ) to being able to do anything on the site ( administrators ), and everything in between. This support is fully transparent to single-user sites, but can make life much easier for sites with multiple authors and user classes.
• There have been improvements to the admin interface.
• Sites that use SQLite as the storage database should see an increase in performance.
• UTF8 support has been improved. For previous users of Habari, part of the upgrade process is to ensure the database is utilizing UTF8 properly.
• Support for HiEngine, Habari's theme templating system, has been improved. Theme creators now have the option of creating good looking themes using either raw PHP calls, or HiEngine templating.
• Help support for plugins in the admin interface.
• Tag support is still built in, but the tag drawer has been moved to a plugin to improve the publish page performance for sites with hundreds of tags.
• The format of Habari's configuration file has changed. For those who have left it writable, the upgrade will be transparent. For those who have made it read only, it is recommended that it be made writable before upgrading, then set back to read only. If you don't wish to do this, see the upgrading instructions for details.
• The Serendipity importer is now hosted on the Habari Extras repository, and no longer ships with Habari. An importer for WordPress databases up through version 2.7.1 is included. The importer has had many improvements in this version.
• Habari now ships with a plugin that allows you to create private posts. With this plugin enabled, you can make a post available for reading to only a selected group of readers.

What is new in version 0.5.2:

• Security fixes

What is new in version 0.5.1:

• There is a new administrative interface, lovingly named Monolith
• Several translations are being shipped with Habari. These include the default English, as well as Danish, German, Japanese, and Traditional Chinese
• We now include three themes in the download
• In addition to using MySQL and SQLite, you now have the choice of using PostgreSQL as your backend database
• Session handling has been improved
• Limited UTF8 support has been added
• There are importers for both WordPress and Serendipity
• Improved SQLite security out of the box
• Habari's form creation interface has been revamped, allowing for more customization of forms by plugins and creating an infrastructure for creating new content types.
• Close to 300 bug fixes and improvements have been made since the last release

Requirements:

• PHP 5.4 or higher