Feature preview
Content security has two aspects: internally preventing the release of违规 information, and externally preventing the bulk collection of original content. AnQiCMS provides sensitive word filtering and keyword replacement, content review process, and built-in anti-collection interference codes in the background;配合 JWT authentication and defense against SQL injection and XSS, forming a complete chain from pre-publication to being crawled. This article provides the configuration sequence and common mistakes.
AnQiCMS protects content in two layers: before publication, use sensitive word filtering and content review to block illegal information, and after publication, use anti-crawling interference codes to increase the cost of bulk transfer. The former ensures that 'your site will not publish inappropriate content,' and the latter ensures that 'others cannot take away the complete usable original text.'
AnQiCMS's content security settings include sensitive word filtering and keyword replacement. It is recommended to divide the processing actions into three levels during configuration:
The dictionary should be maintained according to the business scenario. The direct application of a general large dictionary results in the injury of a large number of normal contents. After going online, the expressions that were mistakenly blocked are recovered from the audit log, and the dictionary is reduced regularly.
When processing historical content in batches, first use site-wide replacement or batch review to confirm the scope of impact, then proceed by category to avoid a single change covering all articles.
AnQiCMS provides a content review mechanism. When multiple editors collaborate, it is recommended to fix the process into three stages: contributor submission, proofreading to confirm compliance and facts, and administrator release. The document status is divided into draft, pending release, and formal document along this chain, and deleted documents enter the recycling bin instead of disappearing physically, and can be restored if deleted by mistake.
The review process should leave traces: who made what changes, and why was it approved. When there are complaints or when self-inspection is needed, this record is more reliable than after-the-fact recollection.
When content is publicly accessible, it is impossible to prevent others from reading the page. The role of interference code is to turn 'take and use' into 'take and clean'. AnQiCMS built-in anti-crawling interference code is used to protect the content from being bulk collected: in the normal rendering page given to readers, interference content presented to crawlers as part of the text is inserted according to the strategy, and the text collected by the collection end will mix with irrelevant segments, which will obviously affect the quality if used directly.
Three experiences to use:
Content security is not equal to site security. AnQiCMS is developed based on GoLang, the background interface uses JWT authentication, the system is built-in to prevent SQL injection and XSS attacks, and the sensitive word and content review are based on the premise that 'the background has not been accessed.' Any breach in the three may lead to违规 content bypassing the review and appearing directly on the page.
It is recommended to enable reCAPTCHA verification code on form pages (留言, contact, registration) to prevent robots from submitting spam content in bulk.
If you have connected a third-party AI or collection source, do you still need sensitive word filtering?Yes. The content from external sources should also go through filtering and review when entering the publishing pipeline, otherwise it is equivalent to transferring the compliance responsibility to others.
Does the content collection function conflict with anti-collection?There is no conflict. The former is that you obtain authorized content according to the rules, and the latter is to prevent others from copying your original text in bulk without authorization.
Will the interference code affect SEO?The design does not change the semantic meaning for readers, and if any abnormal content is found, the site can be temporarily closed and the strategy scope checked.
Can the review process be simplified?The small team can merge two positions, but at least one person who is not the writer must review before publication.
Preview
Group operations often require the simultaneous maintenance of the main brand, sub-brands, and event sites. AnQiCMS supports the management of multiple independent sites within a single system, where each site can be independently configured for domain names, templates, and content structures; with multi-language site switching and full-page HTML translation, it can cover overseas brands and divide management permissions of different sites according to user groups, reducing the maintenance costs of multi-brand operations.
Preview
The backup range should be determined according to 'any missing data during recovery counts as a failure': only backing up the database will result in the loss of uploaded images and attachments, and only backing up files will result in the loss of article structure, categories, and user data. AnQiCMS supports backing up data including static files together, combining the two types of content into a single operation. The availability of the backup should be determined by recovery drills, not by file size; the backup is a site-wide operation, and permissions should be controlled according to controlled actions.
Preview
Content teams often hit a bottleneck in tasks outside of writing: coming up with titles, tags, finding images, and writing summaries. AnQiCMS has been providing AI writing capabilities since April 2023, automatically generating tags, images, and title keyword descriptions (TDK) when creating articles, and has AI Chat and AI skills to handle bulk operations and checks. This article outlines the methods for integrating AI into the content process and the key points for manual review.