My next suggestions are:
To use random path as admin login instead of admin/login, just like Word Press.
I think you should make a complete folder structure on the guide page, because sometimes it's tricky to understand about the ROChargen + www folder path.
The error message on the 'Create Account' should be clearer, like: use upper/lower/numeric and the length allowed, I believe the default one is 6-23 characters, but currently it's using regex, so it'll be hard to tell the exact parameters if the admin changed the regex though..
Currently there's no option to check if (username==password), because I know there are some people who are lazy to use different username and password I just don't want the CMS to be blamed if there's account theft in the future.
You might want to add an option to change the 'TCP_Controller.php' #115 to item_db_re, since RE user will need to read from there instead of item_db table.
Same with above for 'mshop.php' #16, 'mdatabase.php' #25, 'controllers/shop.php' #27,31,43,45,49, 'controllers/dashboard.php' #368,372,384,386,390
Adding 'Account/Server Status Inline' widgets throws an error "Message: require_once(application/views/widgets/wid_acc_inline.php): failed to open stream: No such file or directory", "Message: require_once(application/views/widgets/wid_ss_inline.php): failed to open stream: No such file or directory"
Adding multiple same widgets should be prevented.
Add support for favicon.ico
When I tried to make new pages/post, I was told to login again, although on the upper right side is already said "Welcome, <username>", have tried to enter the username + password but can't login again.
Sorry if I make lots of suggestions