Hello anyone out there ;)

just a short notice today: Over the next few weeks we are going to tweak our website, moving several services around our servers, so please expect some outages of SysCP.org, we are trying to keep them to a minimum. When the main stuff is done we'll inform you immediately!

At this place I also want to thank our great sponsors: Orth-IT has kindly donated a server last week and INWX is donating labour by allowing Florian Aders (EleRas) to work at SysCP in his working time. Thank you very much! (Please also have a look at our official sponsors-page at http://syscp.org/wiki/Sponsors !)
Some more cool things are currently in the pipeline, so stay tuned!

Best regards,
Flo and the SysCP-team

P.S: I just looked at the date, it's still March the 31st, so this ain't an April Fool's joke ;)

Hello SysCP-community,

after the "breaking news" regarding the security hole last friday we decided to release SysCP 1.2.16 ahead of schedule. We also discovered another security hole and therefore we recommend to update your installation immediately! More about all security issues which were ever discovered in SysCP can be read at our new security page (http://syscp.org/wiki/Security).

This isn't just a security-fix-release, but it also contains some new features. We heavily improved our sorting algorithm, so it now sorts in a human style, for example it was "web1 -> web12 -> web2", now it's "web1 -> web2 -> web12". Also the sorting on the customers' mail list is now fixed when choosing sort by "E-mail-address" or "Domain name" and certain e-mail-adress combinations. An admin/reseller could now also "su" into an account directly from the domain list and it's now possible to edit the name and email of your own admin account, even of the main admin. We backported several regular expressions from SysCP 1.3 (development branch) and restricted usernames in general to just contain upper/lowercase characters and numbers to ensure they work with all services.

We also added three new language files: Thanks to Bystrik Kacer for the slovak, Sander Klein for dutch and Laszlo (Laci) Puchner for the hungarian language package. We are proud to state that SysCP now provides localizations for 14 languages which cover more than 25 countries worldwide!

With this release the version check now also transmits the currently installed version. In this way we are now able to spread news about possible security holes more efficiently.

SysCP 1.2.16 can be downloaded from files.syscp.org. The direct link is: http://files.syscp.org/releases/tgz/syscp-1.2.16.tar.gz

Detailed information about all bugfixes and features in SysCP 1.2.16 can, as always, be found at our roadmap at http://syscp.org/milestone/1.2.16

We hope you all enjoy using this new release,
Flo and the SysCP-Team

Hello all of you out there,

we are very sorry, but there is a security hole inside the latest SysCP version (1.2.15). Any customer could run malicious code as root. This vulnerability is only exploitable in SysCP 1.2.15, no other version is affected.
Since this is not the best thing, we are releasing a patch together with this announcement ;) It's only a tiny patch, since SysCP itself brings already all the code to prevent such code-injections. The problem: in this special case it accidentally wasn't used.
Many thanks go to Daniel Schulte, who found this vulnerability!

You can fix your installation by replacing "exec" with "safe_exec" in scripts/cron_tasks.php on line 255 or applying the patch provided on our homepage (http://files.syscp.org/misc/syscp-1.2.15s.patch) by executing "patch -p0 < syscp-1.2.15s.patch".

Thank you for your attention,
Flo and the SysCP-team

Dear SysCP-community,

the whole SysCP-team wants to wish you a merry christmas and a happy new year.

As we are looking back 2006, we see a year full of changes: many of us passed important exams, some of us changed from school to "real life" and we accepted new challenges. Some team members had to break new ground and left the SysCP project, but some others found their way into our team (again).

I want to thank everyone who contributed to SysCP, taking part in the progress of making a good product even better. We went on developing SysCP, versions 1.2.13 up to 1.2.15 were released so far, including a new design, new features and many, many bugfixes. We also made huge steps forward to version 1.4. Behind the scenes of SysCP the complete infrastructure was updated and stabilized - now the project server is powered by gentoo and our website is running on trac (with lighttpd serving the pages).

In 2007 we want to go on developing SysCP 1.4, taking the numerous steps to build the next generation Server Control Panel. One of the major things we plan for 1.4 is a complete modular codebase: If you don't want to use several services, just deactivate them or replace them with others. For example it will work fine with either Apache or lighttpd, MySQL or PostgreSQL and will even provide modules for managing the latter. There'll be a module for managing linux-vservers (nearly completed already!), one for managing your zonefiles easily, another to register domains while using robots of different providers and a module where you can translate SysCP directly within your browser. We'll deliver SysCP 1.4 as small as possible and you can extend it like YOU want.

We hope that you, the community around SysCP, keep up your good work helping us to find bugs and problems and giving us new ideas and perspectives. It was a real pleasure to work with all of you.

Again, merry christmas,
Flo and the SysCP-team

Hello SysCP-community,

again it's time to announce another release of SysCP, named SysCP 1.2.15. This is mainly a bugfix release, so this mail won't be as long as the last release announcement ;)

We readded a border around the textboxes and also added newlines to the debug-messages in the cronscript-lockfiles. Paging system can be switched off again, webalizer now uses the standardsubdomain instead of the loginname for the statistics and ignores referrers from other domains which are owned by the same customer. You can now see which domains are aliasdomains for a specific domain in the adminpanel, so deleting domains with aliasdomains is much easier.

SysCP 1.2.15 now contains configuration files for SuSE 10.0. Thanks to Ron Brand and Florian Aders all howtos are now converted in a new beautiful design which integrates gracefully with the whole SysCP homepage

Florian Aders has rebuilt our main server to solve the heavy stability issues with trac and apache and Ron Brand integrated all SysCP pages into one identity, which looks pretty nice.

Thanks goes to Nickola Kolev for the bulgarian translation for SysCP. With this translation SysCP now includes 11 languages which cover more than 25 countries.

With this release the debian 4.0 (etch) package will contain several changes regarding the dependencies: php5 and apache2 are default now, but the package also allows other combinations, please have a look at our etch-howto. Due to pending tests and discussions about maildrop the etch package will be updated lateron. Furthermore, all debian packages are now architecture independent.

Detailed information about all bugfixes and features in SysCP 1.2.15 can, as always, be found at our roadmap at http://syscp.org/milestone/1.2.15 .

We hope you all enjoy using this new release,
Flo and the SysCP-Team

Hello SysCP-community,

first of all I want to thank Martin Burchert alias eremit for his great work he did for the SysCP project and community. For almost two years Martin has helped to develop SysCP, administrate the project servers and webpages and helped some of you in the forums and irc channel. But as always, time's the only ressource we have too little. Due to his time-consuming job Martin decided to put his responsibilities into other hands of the SysCP team and work as an affiliate in future. Many thanks for everything, Martin!

Furthermore I want to announce that we decided to introduce an official SysCP-blog, where the team members will inform about the progress of development and other interesting news about the community, webpage etc.
You'll find it at http://blog.syscp.org.

So long and thanks for all the fish,
Flo and the SysCP-team