1. what system should control the registration/login procedure?
2. what system should be used to manage users? (prune, addition, single deletion …)

Think that we should use the more sophisticated phpBB system for users registration, while manual addition or prune of users can be maybe performed on both administrations.
Of course after the login, if it is done inserting credentials in wordpress side, but using the phpBB login system, the user will be redirected to the proper coming page.
Three widgets for the wordpress side are necessaries at minimum: online forum users, login/out, last posts/topics.

1. a better items menu list thanks to a recursive function.
2. redundant code fixed where disclosed.
3. more fix.

instead of:

// START hack to avoid administrators rel="nofollow"
global $current_user;
if($current_user->user_level > 9){
return $text;
}

to avoid rel nofollow on wordpress for all users, the code that need to be added as indicated for two times in place of the above, are these following two lines of code (one is a comment in true)) substituting the above that avoid no nofollow only for administrators:
function wp_rel_nofollow_callback( $matches ) {
immediately after this line ADD the following code:
// eliminate for all users the rel nofollow addition on wordpress:
return $text;

How to hack formatting.php on WordPress to avoid nofollow additions on <a> tags

in this example we go to avoid the rel=”nofollow” additions on <a> tags only for administrators when they add contents to blog.

OPEN the file wp-includes/formatting.php file with a text editor and search for these following two lines of code as indicated and add the code (the mentioned lines of code are related the two functions involved on wordpress rel=”nofollow addition and are sequentially).

Search the following line of code:
function wp_rel_nofollow( $text ) {
immediately after this line ADD the following code:
// START hack to avoid admin rel="nofollow"

// END hack to avoid admin rel="nofollow"

Search the following line of code:

function wp_rel_nofollow_callback( $matches ) {
immediately after this line ADD the following code:
// START hack to avoid administrators rel="nofollow"

// END hack to avoid admin rel="nofollow"

Save the file and upload overwriting the default formatting.php. Now when an user with administrative power go to post contents, WordPress will not add the rel=”nofollow” attribute.

Consideration: maybe it is not necessary to call this function because declaring as global $current_user is sufficient at this wp loop point?

1. Changed the Thickbox name replaced from Shadowbox in relate admin menu options.

to be done:

1. Check and rewrite the images-options.php file.
2. list sub directories names and not only total images numbers
3. associate filename to images in administration for an easy image identification useful to insertion of images o n posts and pages.
4. better images display in administration
5. a better gallery output?
6. ….

… request here in reply something more for w3images …

I think, it is needed and is best to have an option that leave to an administrator or editors and so on while are writing, the possibility to choose if it need to be enabled or not on contest.
Hope next releases of wordpress will contemplate this possibility.
… … …
i will continue here with wordpress and rel=”nofollow” considerations,
just returned to home and i gave water to my plants.
this is a test of an <a> tag with rel attribute value = shadowbox[w3images] that should display full image onclick event:

shadowbox[w3images] test:

as reported above, wordpress add rel=”nofollow” to links while save/update and this is the returned code in this case:

<a href=”http://www.axew3.com/b10g/wp-content/plugins/w3images/images/2.jpg” rel=”shadowbox[w3images]” rel=”nofollow”>

so nice! Two different attribute rel, the last one with value nofollow.
Possibles solutions at this time:

1. you can install plugins that allow to remove the nofollow attribute on wordpress posts and pages links
2. you can with easy modify the two functions contained on file wp-includes/formatting.php in a way that avoid the rel addition (substantially easy, it is sufficient to comment off all instructions contained in these two functions: this trick let return posts or page’s content untouched, without the addition of the rel attribute to <a> tags
3. … maybe there is another tricky, easy and speedy solution that i still do not know and i hope to find out without many investigations

the attribute rel=”nofollow” is added by wordpress after all other attributes if there are in the <a> element, so the Shadowbox ajax effect will work because the parser will take as valid the last one rel attribute founded on the way: as browsers (for what i remember and hope it is correct info) parse documents from down to up (on the contrary), the rel=”shadowbox[w3images]“ will be the last one parsed.

1. functions that do not are checked for malicious variables are that contained and executed in the administration contest: if somebody can access wordpress administration folder, there is nothing w3images can change in this scenario.
2. the “public code” use specifics variables checked by a stronger pattern that do not leave much fantasy to any eventually tips.
   This is the pattern:
   "/[^a-zA-Z0-9_-]/"; // strong pattern
   only letters, numbers, hyphens and underscores. Should be used in the “public code” a variable that isn’t checked by this pattern to bypass this simple but effective security measure.

Any suggestion, help, discussion, answer, question or whatever you like about here is very appreciate.