Built on GoLang, reduces memory usage by about 80% compared to PHP class CMS, supports multi-site, multi-language, AI intelligent dialogue and tool calls, and is the preferred solution for small and medium-sized enterprises to build high-performance websites.
Announcement: AnQiCMS has integrated AI, built-in AI assistant, supports AI visual editing templates, and connects with local AI tool management backend through MCP.
A high-performance architecture based on GoLang, providing safe, efficient, and user-friendly solutions for corporate websites
GoLang native compilation, capable of handling about 5 million PV on a single machine, memory usage is reduced by about 80% compared to PHP CMS.
Built-in AI Chat intelligent dialogue, supporting calls to 80+ AI tools (document management, SEO, data statistics, etc.), integrated with MCP protocol and AI skill system.
Supports managing multiple independent sites, built-in multi-language switching and full-page HTML translation to meet internationalization needs.
Built-in JWT authentication, content sensitive word filtering, anti-capture interference code, effectively defend against SQL injection and XSS attacks.
Static URL, Sitemap auto generation, 301 redirect, Baidu/Bing active push, covering the whole SEO chain.
Provide over 40 beautiful templates, covering a variety of scenarios such as corporate websites, foreign trade websites, blogs, and more, and supporting customized template development.
Supports Docker one-click deployment, also compatible with Baota panel, and can run smoothly on a server with a minimum of 1 core and 1G RAM.
Built-in user management, VIP grouping, order management, financial records, distribution management, supporting business scenarios.
<p style=\color:#444;">This version spans three weeks from 3.6.7 to 3.8.1, with 922 commits, 116 mainline changes, and 51 items in the update log.Not many features, but to put it simply, half the effort is spent on the same thing: <strong style="color:#141414;">>Find those "interface back to success, actually nothing was done" places.<
2026-11-11The mall function has been officially integrated into the system, default closed, the general content station is not affected, it can be opened with one click in the system settings when needed, and directly use the complete mall capabilities such as goods, orders, coupons, logistics, etc.
2026-11-11When the form module hands over the submitted content to the template for rendering, if the replaceable markers are not limited to safe sources, the field values may be treated as instructions and form an entry point for code execution. The defense is divided into two stages: on the input side, use captcha to block automated submissions and suspicious content, and on the rendering side, only whitelist markers are allowed. External modules need to be on the version list, and once the announcement is made, it can be located to one's own site.
2026-11-01When the content interface directly concatenates the relationship filtering conditions into the query without purification, the caller can read associated fields that should not be publicly accessible using filtering syntax, such as author, order, and internal identifiers of cross-table data. Self-check should cover parameter whitelist, association depth, and readable field list, and clearly specify what each endpoint returns in the interface documentation. Authorization and minimum privilege determine the exposure surface, and run regression test cases before upgrading.
2026-11-01To speed up the front-end page by making it an HTML static cache, but if the content with parameters is reflected in the cache file exactly as it is and the cache product is then handed over to the script parsing engine, malicious code can be executed in the cache. There are two boundaries: strip executable tags when writing, and do not treat the cache directory as the script directory when parsing. After the repair, the historical cache should be cleared, and then check the pseudo-static rules and page structure.
2026-11-01Changing the name, organization, or email of the domain holder will trigger a transfer lock, during which the domain cannot be transferred to another registrar, regardless of whether the domain is due to expire. When scheduling website construction or replacing the host, this period needs to be reversed: first confirm that the holder's information is stable, then apply for the transfer code, and finally move the resolution. When managing multiple site domains, it is necessary to check if there are any domains that have just changed records.
2026-11-01About Anqi CMS, you may want to know these.
AnQi CMS developed based on GoLang, compared to WordPress developed with PHP, has the following advantages:
Open source and free, supports Docker one-click deployment, quickly build your corporate website
