Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Steamers-Misago is modern, fully featured forum application written in Python and ES6, powered by Django and React.js. It works out of the box and plays nicely with other projects like Django-CMS.
.. image:: https://travis-ci.org/rafalp/Misago.svg?branch=master :target: https://travis-ci.org/rafalp/Misago :alt: Tests Result
.. image:: https://coveralls.io/repos/github/rafalp/Misago/badge.svg?branch=master :target: https://coveralls.io/github/rafalp/Misago?branch=master :alt: Test Coverage
.. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://travis-ci.org/rafalp/Misago :alt: Works on Python 3.6
.. image:: https://img.shields.io/badge/chat-on_discord-7289da.svg :target: https://discord.gg/fwvrZgB :alt: Community Chat
Development Status: 🍌 Bananas <https://en.wikipedia.org/wiki/Perpetual_beta>
_ 🍌
Misago aims to be complete, featured and modern forum solution that has no fear to say 'NO' to common and outdated opinions about how forum software should be made and what it should do.
.. image:: https://misago-project.org/media/mporg-home-small.png?01062018 :target: https://misago-project.org :alt: Forum index
.. image:: https://misago-project.org/media/mporg-thread-small.png?01062018 :target: https://misago-project.org :alt: Thread view
As of now Misago implements all features considered "must have" on live internet forum:
Even more features will follow in future releases:
sock puppets <https://en.wikipedia.org/wiki/Sockpuppet_(Internet)>
_ or bot nets....and more!
If you are looking into using Misago to run live forum, you are absolutely invited to, but please keep in mind that Misago is relatively immature software that may contain serious bugs or issues as well as quirks and lackings thay may take time to resolve, despite best efforts.
Preferred way to run Misago development instances on your machine is with Docker <https://www.docker.com/community-edition#/download>
_, which makes it easy to spin up arbitrary number of instances running different code with separate databases and dependencies besides each other.
To start, clone the repository and run ./dev init
command in your terminal. This will build necessary docker containers, install python dependencies and initialize the database. After command does its magic, you will be able to start development server using the docker-compose up
command.
After development server starts, visit the http://127.0.0.1:8000/
in your browser to see your Misago installation.
Admin Control Panel is available under the http://127.0.0.1:8000/admincp/
address. To log in to it use Admin
username and password
password.
The ./dev
utility implements other features besides the init
. Run it without any arguments to get the list of available actions.
dev
You may skip ./dev init
and setup dev instance manually, running those commands:
docker-compose build
- builds docker containersdocker-compose run --rm misago python manage.py migrate
- runs migrationsdocker-compose run --rm misago python manage.py createsuperuser
- creates test userdocker-compose up
- starts dev serverWith exception of Admin Panel, Misago frontend relies heavily on React.js components backed by Django API. This application relies on custom Gulp.js-based toolkit for development. As of current, Misago's gulpfile.js
defines following tasks:
To start work on custom frontend for Misago, fork and install it locally to have development forum setup. You can now develop custom theme by modifing assets in frontend
directory, however special care should be taken when changing source javascripts.
Misago defines template that allows you to include custom html and js code before Misago's JavaScript app is ran, named scripts.html.
If you have found bug, please report it on issue tracker <https://github.com/rafalp/Misago/issues>
_.
For feature or support requests as well as general feedback please use official forum <http://misago-project.org>
_ instead. Your feedback means much to the project so please do share your thoughts!
There's also Gitter for those looking for intant-messaging approach for discussing Misago development.
If you have corrected spelling, wrote new tests or fixed a bug, feel free to open pull request.
Many issues are open for takers. If you've found one you feel you could take care of, please announce your intent in issue discussion before you start working. That way situations when more than one person works on solving same issue can be avoided.
Rafał Pitoń
English sentences used within misago.faker.phrases
were extracted from National Aeronautics and Space Administration Solar System Exploration Portal <http://solarsystem.nasa.gov/planets/>
_ and are not copyrighted as per Media and content usage guidelines <https://www.nasa.gov/multimedia/guidelines/index.html>
_.
Misago - Copyright © 2018 Rafał Pitoń <http://github.com/ralfp>
_
This program comes with ABSOLUTELY NO WARRANTY.
This is free software and you are welcome to modify and redistribute it under the conditions described in the license. For the complete license, refer to LICENSE.rst
FAQs
Steamers-Misago is modern, fully featured forum application written in Python and ES6, powered by Django and React.js. It works out of the box and plays nicely with other projects like Django-CMS.
We found that steamers-misago demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.