Recent changes
Thursday November 05 2026
-
Logging into the admin Updated Markdown page
Sign in to the administration: its address, the sign-in form, e-mail or username, two-step sign-in, failed sign-ins and lockout, a forgotten password, choosing the design and the interface language, signing out, and…
-
Logging into the Editor Updated Markdown page
Sign in to the Editor, the simplified interface for people who write and publish content: its address, the sign-in form, two-step sign-in, a forgotten password, signing out and what to do when it does not work.
-
Security hardening Updated Markdown page
An attacker-minded hardening guide for Exponential 6, secure by default in the OpenBSD sense: the attacks real groups run against content management systems, how Exponential already defends against each, and the…
-
Authentication, sessions and two-factor sign-in Updated Markdown page
How users and machines authenticate to Exponential - password storage and policy, the list of well-known passwords, lockout, session handlers and cookies, two-factor sign-in with sevenx_authentication_2fa, OAuth 2.0 and…
-
Lesson 1.2: Signing in and out Updated Markdown page
Learners sign in to the administration or the Editor, recover from the usual sign-in messages, know how a forgotten password works and sign out safely. 45 minutes.
-
Lesson 8.4: Sessions and cookies Updated Markdown page
Learners explain what a session is and how long it lasts, read Setup > Sessions with the default handler, switch a training installation to database sessions, sign a test user's browser out safely and choose secure…
-
Authentication and sessions Updated Markdown page
How Exponential knows who is asking, for developers used to Symfony security firewalls, Laravel guards, Django auth and Devise - users as content objects, the anonymous user, login handlers, sessions and their handlers…
-
13. Security hardening for production Updated Markdown page
A default Exponential 6.0 installation is built to be safe without extra work: the rewrite rules hand out only listed files, security headers go out on every page, the session cookie is HttpOnly and SameSite, debug…
-
MongoDB: limits and operations Updated Markdown page
What the MongoDB adapter of Exponential cannot do yet, how to find untranslated SQL in the logs, how upgrades work without SQL update files, backups with mongodump, the migration scripts in bin/mongodb, and what to…
-
SQLite: transactions queue for the write lock Updated Markdown page
Read this page if your installation runs on SQLite (the default of a quick local install). It explains what changed in how SQLite transactions start, whether an earlier subtree move damaged your data, and the one…
-
site.ini [DatabaseSettings] Updated Markdown page
The settings of [DatabaseSettings] in site.ini: SQLitePragmas, SQLiteTransactionWait, SQLiteCLITransactionWait, SQLiteBusyTimeout, SQLiteCLIBusyTimeout, DatabaseImplementation, Server, Port ...
-
site.ini Updated Markdown page
The blocks and settings of site.ini.
-
The DatabaseSettings reference Updated Markdown page
Every key of site.ini [DatabaseSettings] with its shipped default, the engines that read it and what it does - connection, character set, retries, persistent connections, replicas, transactions, debug output and the…
-
SQLite: the write queue and locking Updated Markdown page
How the SQLite driver of Exponential 6.0.15 queues concurrent writers with a lock file and BEGIN IMMEDIATE, how long a transaction waits (SQLiteTransactionWait) and how that relates to Velocity's and PHP-FPM's request…
-
Specification: the SQLite3 database driver Updated Markdown page
This page is the reference for the legacy kernel's SQLite driver, eZSQLite3DB, and its schema handler, eZSQLiteSchema: how they are registered, how a connection is opened and tuned, how transactions wait for the single…
-
Installing Exponential Documentation Updated Markdown page
Requirements: - Exponential 6.0.15 or later; - the extension exp_static_html_imports; - eztags, for the labels; - xrowmetadata, for the metadata attribute; - ezoe (the online editor).
-
Die Dokumentation über REST und GraphQL lesen Updated Markdown page
Die Dokumentationssite ist eine gewöhnliche Exponential-Installation, ihre Seiten lassen sich also nicht nur von Menschen, sondern auch von Programmen lesen: über die REST-Inhalts-API und die GraphQL-API des Kernels…
-
Reading the documentation through REST and GraphQL Updated Markdown page
The documentation site is an ordinary Exponential installation, so its pages can be read by programs as well as by people: through the kernel's REST content API and its GraphQL API. Both read as the anonymous visitor…
-
The help system: the documentation inside the administration Updated Markdown page
Read this page if you look for help while working in the administration, if you decide who may read the help, or if you write documentation (in doc/ or in an extension) that should show up in it.
-
Translated documentation: doc/eng-us/ and a directory per language (6.0.15) Updated Markdown page
The documentation of Exponential moved from doc/ to a directory per language on 20 October 2026, so that it can be translated. Each language has a directory of its own below doc/ with the same relative paths, named by…