sPage is a revolutionary new website management tool which allows you to create, edit, update and maintain a full website, without any prior knowledge. You simply log in, click an Edit link, and type in your new content. It's so flexible, you can even port your existing PHP website over and manage thousands of pages at once!
This page contains extremely important information that should be read before installing and / or using sPage. Please read it before editing your sPage website

What NOT to delete


When you install sPage, you can add and remove pages as you see fit, however there are a few "critical" pages and a few "important" pages that you should not delete, nor edit extensively without prior knowledge of PHP. These are listed below, along with the reason why you shouldn't delete them.

Internal Name Description Use Required? Why shouldn't you delete it? Extra steps if you delete it
admin Administrator Panel Quick access to all admin functions N Deleting it makes it harder to add pages etc. You should create a new page with links to these functions
editor sPage Editor Page Allows users to edit pages Y Will stop users from editing sPage pages You should make a database backup so you can restore this page if needed
error Error Page (404 / 403) Provides an error message when a page can't be accessed Y Will cause sPage pages to break (beta2) Modify pages.php to point to another error page
header Header Page Holds the navigation for the site N Provides quick navigation through your site Create a new way to navigate through your website
failedlogin Failed login page Shows an error when your user / pass is wrong N Gives visual feedback that a login failed Create a new failed login page and edit pages.php
loggedin Successful Login Page Confirms a successful login N Gives visual feedback that a login succeeded Create a new successful login page and edit the page "login"
login Login Page Lets a user log in to sPage Y Will stop anyone from logging in You should make a database backup so you can restore this page if needed, then provide a new login scheme
main Main Page The "Index" of the site N sPage won't have an index page Modify index.php to point to another page and create a new main page
footer Footer Page The footer of the site N Provides access to the login and admin pages Create links elsewhere that point to login and admin
stylesheet Default Stylesheet Manages the look and feel of sPage N Makes sPage look pretty Add your own <style> tags to index.php
newpage_default Default Content for all new pages When you create a new page, this is the default content N Sets up a basic "page" so you aren't left with blank pages Change pages.php to insert something other than newpage_default
pagelist Page list Lets you manage sPage pages Y Because you won't be able to add new pages to your website Manually add pages AND permissions to the database / phpGACL
userlist User List Lets you manage sPage users Y You won't be able to add or remove users from your website Manually add users AND their permissions to the database / phpGACL
nav Navigation in Header Provides text-based navigation for your site N You won't be able to access many pages on your site Create a new page with links so users can access your site better

Pages listed as N for Required, mean that you CAN delete them safely, but extra steps need to be taken and should only be deleted by those who know what they are doing

Security


Security in sPage is VERY important. Pages that use widgets and templates have EXECUTE permissions, meaning people can enter in PHP code and run it. This could open up some VERY big exploits in your web-server or reveal sensitive information. That's why we recommend taking the following steps:
  • Do NOT give untrusted people edit permissions. Asides from the vandalism side of things, even if Execute is disabled for a page, there could be undiscovered flaws in sPage that could cause code to run. If you are going to allow untrusted people (eg. Guests for a wiki) to make edits, PLEASE turn off Execute permissions until the sPage security model is improved
  • NEVER download and install untrusted widgets, templates or includes unless they are from spage.solidinc.org. These have execute permissions and could lock up servers, steal sensitive data or worse things. Check the code BEFORE you install it or contact the sPage team if you feel someone is trying to give you an unsafe widget or the widget links to an unsafe location

This article is a stub and needs expansion. You can help!









Log in / out | Credits