SCMS is a secure content management system. Some of its features are a role-based object-oriented design, conformance to XHTML 1.0 Transitional, strict I/O (input/output) validation, a custom session implementation, support for SSL and cookies (when run over SSL), session identifier regeneration, idle session expiration, account locking, account unlocking methods, encryption (with MD5, AES, SHA1, SHA256, SHA512, or WHIRLPOOL), and event logging. License: GNU General Public License (GPL) Changes:
The php.ini settings "allow_url_fopen" and "allow_url_include" were changed to "off" in scms_config.php by default. A new named constant, scmsHexLinx, was defined and implemented in scms_config.php to enable hexing of URLs. It is on by default. Authentication error numbers 4 and 7 were removed and instead were made the same as 3, since they made username guessing possible. An error was fixed in UnlockCode Sending via email link.

More...