11.2 release notes
11.2 is a major release and introduces improvements to the CMS in several areas but mainly covering:
- Privacy and security
- Posts
- Search
Privacy and Security
Version 11.2 includes numerous improvements, both in the background and as part of the interface. Note that not all of them are included for reasons of security.
Configurable admin end points
Site owners can customise the admin login end point in Site Settings. It can be relative (e.g. /myadmin), or in the case of sites with multiple domain names, absolute (e.g. www.mydomain.com/myadmin).
Custom admin login page for dedicated hosting
Deployed instances of Sitekit CMS can customise the login page by updating /AdminV9/Login/LoginPage.htm.
Failed login tracking
Failed login attempts are tracked in the audit trail and state whether or not it was a known device (which has logged in previously).
User blocking
If five consecutive failed log in attempts are made by a user on a known device, the account will be blocked until they click a link sent to them in an automated email (2-Factor Authentication).
If five consecutive failed log in attempts are made by a user on an unknown device, the account is blocked for ten minutes for all unknown devices (known devices will still be able to log in).
Devices are "known" by detecting a cookie (skdXXXX, where XXXX is a number) that is set upon a previous successful login.
Automatic HTTPS forwarding on login page
If a user visits an admin or extranet login page via http, they will be automatically forwarded to https (in case of extranets SSL certificate required).
Session cookie split in two
Previously SKSession tracked both logged in and logged out visitor sessions. It now only tracks logged in visitor sessions, with a separate cookie, SKTID, for tracking logged out visitor sessions.
X-Frame-Options
Ability to prevent third party sites from loading your site within a frame. Click here for documentation, or here for more info on Mozilla.org.
Posts
Since Sitekit CMS Posts was first released in version 10 we have continued to make improvements to what has become a highly versatile mainstay in almost every site running on the platform. This release is no exception and together with numerous minor updates we’re pleased to include significant performance improvements, new custom fields and increased API flexibility.
New fields
Posts now supports image fields (with an image picker, like standard editorial pages).
A divider field has been added. It only displays in admin when editing posts entries, allowing site owners to break up large numbers of fields for their editors' convenience.
Performance
The searchposts.aspx web service (used for retrieving most Posts content) has been optimised to improve performance.
Search
Search In version 11.1 our search facility was given a partial overhaul. In 11.2 we have continued our improvements to enable partial or whole word search to be configured. Values can be set to none - all terms must match exact words, prefix - terms can match the beginnings of words, all - terms can appear anywhere in words.
Partial word support
Search results can now be configured to recognise partial word matches. See documentation.
Performance
Changes to increase speed of search results, and to make indexing more efficient.
Misc
Other items of interest In addition to security improvements, updates to Posts and Search enhancements we’ve made a large number of smaller changes across the system, these include:
- Support for scalable vector images (SVG) in the image library and content image selection
- Google Maps API Key management through global site settings
- Front-end access to most popular pages and files via webservice
- Security and versatility improvements in the Script Manager
- Upgraded JQuery version in CMS Admin
- Ability to disable auto-complete in forms
- Getimage.aspx support for shortcutids
- Date picker usability improvements
- Admin performance improvements
Documentation changes - Updated pages
- https://helpcms.sitekit.net/documentation/syntax/reserved-or-magic-words.htm
- https://helpcms.sitekit.net/documentation/help/cookie-policy-security.htm
- https://helpcms.sitekit.net/documentation/help/configuring-posts.htm
- http://helpcms.sitekit.net/documentation/help/deploying-an-indexed-search.htm
- https://helpcms.sitekit.net/documentation/KB/Sitekit-Internet-Access-Help/sitekit-cookies.htm
- https://helpcms.sitekit.net/documentation/help/create-or-configure-a-form.htm