ezPortal Updates focusing on SMF 2.1 and SMF 2.0. Mainly getting the project up to date with better set of code.

7.0
!Security: Converted ~125 SQL queries to use SMF parameterized syntax ({int:}, {string:}, {raw:}) across EzPortal2.php, Subs-EzPortalMain2.php, and EzPortalInstall2.php to prevent SQL injection.
!Security: Fixed open redirect vulnerability in shoutbox redirect handlers (EzPortalAddShout, EzPortalRemoveShout).
!Security: Added CSRF session token verification to noscript shout deletion (EzPortalRemoveShout).
!Security: Fixed path traversal vulnerability in block file upload (EzPortalImportBlock) by sanitizing filename with basename().
!Fixed shoutbox AJAX endpoints on SMF 2.1 showing raw JSON as the whole page instead of processing via JavaScript. AJAX handlers now dispatch before template loading and use clean output exit.
!Fixed mobile device detection using outdated user-agent list (removed dead platforms: Symbian, Palm, BlackBerry Storm, PocketIE, Opera Mobile). Now uses modern keywords covering all current mobile browsers.
!Fixed strpos() bug in mobile detection where a match at position 0 would be missed.
!Fixed PHP notice from defined(WIRELESS) missing quotes, now defined('WIRELESS').
+Removed redundant meta-refresh from shoutbox iframe since AJAX shoutbox handles auto-refresh via JavaScript.


Download the latest version in the downloads area

If anyone has any ideas/feedback suggestions for the portal let us know.
Thanks,
ezPortal

New version released 6.0!
!SEO improvement fixed canonical used for the homepage, custom pages and ?action=forum thanks to shawnb61
SMF 2.0.x users have to uninstall ezPortal and install new version since requires edit to the Sources/BoardIndex.php


Edit for SMF 2.0.x if you can't uninstall and need to install on top of latest
Open Sources/BoardIndex.php and Find
        // EzPortal
        if (isset($_REQUEST['action']))
        {
                if ($_REQUEST['action'] == 'forum')
                {
                    $context['robot_no_index'] = false;   
                }                   
        }

   

        // End Ezportal
Change to
        // EzPortal
        if (isset($_REQUEST['action']))
        {
                if ($_REQUEST['action'] == 'forum')
                {
                    $context['robot_no_index'] = false;   
                }                   
        }

        if (isset($_REQUEST['action']) && $_REQUEST['action'] == 'forum')
          $context['canonical_url'] = $scripturl . '?action=forum';

        // End Ezportal


Good news. It reappeared by itself. Computer magic. Maybe it is something that happened on the server side.

Disable TinyMCE when adding/editing html ezBlock " checked? --- Not checked

Did you click the hide TinyMCE button on the page? --- No. I did try to checked it just in case, but it did not change anything

I take that you are using HTML page option and not the BBC page? --- Yes and besides showing html code instead of the "normal" editing mode with TinyMCE, the pages are presented normaly to users: see https://citizensandsocieties.org/Community/index.php?action=ezportal;sa=page;p=18

As for the consol, this is what I see:

Mixed content: load all resources via HTTPS to improve the security of your site
Reading cookie in cross-site context may be impacted on Chrome

Is this relevant? Do you want the details?

Should I try to uninstall and reinstall?

What is weird is that it from time to time, the TinyMCE Editor is loaded, but if reload the page it disappears. This being said, when I just want to look at the page, it is as it supposed to be. It is only when I try to edit it that the TinyMCE Editor, des not load.