dnfbb-developers Mailing List for dnfBB (Page 47)
Brought to you by:
sbosanquet,
tectsoft
Menu
▾
▴
dnfbb-developers — dnfBB Developers discussion List
You can subscribe to this list here.
| 2005 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(33) |
Dec
(13) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2006 |
Jan
(66) |
Feb
(90) |
Mar
(155) |
Apr
(22) |
May
|
Jun
(1) |
Jul
|
Aug
(54) |
Sep
(139) |
Oct
(203) |
Nov
(225) |
Dec
(71) |
| 2007 |
Jan
(60) |
Feb
(19) |
Mar
(36) |
Apr
(25) |
May
(1) |
Jun
(4) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2009 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(1) |
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: <dnf...@li...> - 2006-01-23 15:10:41
|
I will hopefully finish the create user interface tonight, to help reduce false signups the process is currently: 1. User signs up 2. DB Generates a random string used to verify signup. This has necessitated a new column in DNFBB_USERS. 3. DB Generates a welcome email including randomly generated password and a link to a page to validate signup. 4. DB Generates an email to admin, if required, to notify of new signup. This is done by User Group, all users in the group will receive a message, if the option is set. 5. User verifies the signup and logs in. One of my thoughts here was that if some malicious user automates signups then the admin can get a list of those users whose accounts have not been verified and easily delete them from the admin interface. N.b. I had to do this manually once it was a nightmare. There is a feature request to help combat false signups (http://sourceforge.net/tracker/index.php?func=detail&aid=1369203&group_id=1 52364&atid=784892), I can't see it being in place for version 1, as I would like to release a functional version as soon as its ready :-) Another thought was that the validation link could also be used in the following circumstances: # User changes email address # User changes password Hopefully these steps will make it harder for hackers and easier for admins. I have also just added a new feature request (http://sourceforge.net/tracker/index.php?func=detail&aid=1412892&group_id=1 52364&atid=784892) to help prevent automated signups. Finally, my question. Does the above make sense, am I missing something obvious? Rgds Si |
|
From: <dnf...@li...> - 2006-01-23 15:04:19
|
Feature Requests item #1412892, was opened at 2006-01-23 15:04 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1412892&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Data Access Layer (General) Group: None Status: Open Resolution: None Priority: 2 Submitted By: Si Carter (tectsoft) Assigned to: Si Carter (tectsoft) Summary: Optionally disable multiple signups from the same IP Initial Comment: Give admins the option to only accept a user specified number of signups from the same IP address within a given time frame. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1412892&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-23 14:54:18
|
For a few days I have had problems uploading a great deal of the work ive been doing, I will try tonight to commit all files (dozens) in batches of 2 - 3 to see if it helps. Rgds Si |
|
From: <dnf...@li...> - 2006-01-19 23:20:50
|
> -----Original Message----- > Here is a link to a website which shows the available > encryption algorithms etc that can be supported out of the > box on mysql. At the moment I was thinking of using MD5, which is available via UDF for Firebird. This shouldn't stop us planning future works and implementing stubs, of which you could quite easily implement now within the MySQL board. > I would try and build in the potential for supporting other > methods of encryption when creating the function so hopefully > you don't need to go back and rework the function interface > only the content of the function (Even create dummy stubs > ready for quick implementation.). One thing I think we > should add is a "Salt" column to the user table. If you do a > search on the page attached you will find an example of what > needs to be done. > Agreed, ive added a SALT column to users table, along with a domain and a couple of triggers to auto populate it with the current time stamps seconds. > I am not sure what other algorithms are available on > Firebird. It looks like SH1 is coming to firebird 2 so it > depends on which release you are running on. Whilst we are > adding them why not add them straight off? I would be > tempted to put in the ones which are available on both > systems for now. Unfortunately SH1 is for the master username database (security.fdb) only, I have found a UDF for MD5 (rFunc) which I will implement asap. > > Again I would build into the interface the ability for a > complexity check and then create a blank function to handle > this outside of the main password function. You can even put > the function calls in but just return true for the time being > in the complexity check function. We can then look at adding > the functionality for a complexity check at a later date. Agreed, whats the best way to go around doing this? I am in favour of adding the encryption type in DNFBB_SETTINGS, along with the key, if the encryption needs a key, perhaps a lookup where 1 = MD5, 2 = SH1 etc etc, or even store the name of the stored proc that is used to encrypt within the settings table, for firebird this could be DNFI_ENCRYPT_MD5 or DNFI_ENCRYPT_SH1. Any help/ideas/thoughts on implementation would appreciated. Rgds Si |
|
From: <dnf...@li...> - 2006-01-19 19:45:14
|
Feature Requests item #1409510, was opened at 2006-01-18 23:30 Message generated for change (Settings changed) made by tectsoft You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1409510&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Data Access Layer (Firebird) Group: None >Status: Closed >Resolution: Accepted Priority: 9 Submitted By: Si Carter (tectsoft) Assigned to: Si Carter (tectsoft) Summary: Integrate FBMail into database Initial Comment: Integrate FBMail into Firebird Database. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1409510&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-19 08:38:14
|
Hello, =20 Here is a link to a website which shows the available encryption = algorithms etc that can be supported out of the box on mysql. =20 http://dev.mysql.com/doc/refman/5.0/en/encryption-functions.html =20 I would try and build in the potential for supporting other methods of = encryption when creating the function so hopefully you don't need to go = back and rework the function interface only the content of the function = (Even create dummy stubs ready for quick implementation.). One thing I = think we should add is a "Salt" column to the user table. If you do a = search on the page attached you will find an example of what needs to be = done. =20 =20 I am not sure what other algorithms are available on Firebird. It looks = like SH1 is coming to firebird 2 so it depends on which release you are = running on. Whilst we are adding them why not add them straight off? I = would be tempted to put in the ones which are available on both systems = for now. =20 Again I would build into the interface the ability for a complexity = check and then create a blank function to handle this outside of the = main password function. You can even put the function calls in but just = return true for the time being in the complexity check function. We can = then look at adding the functionality for a complexity check at a later = date. =20 Just some thoughts on the email below: =20 Simon ________________________________ From: dnf...@li... = [mailto:dnf...@li...] Sent: Wed 18/01/2006 11:39 PM To: dnf...@li... Subject: [Dnfbb-developers] Password Encryption/Complexity I have created an internal stored proc for password = encryption/complexity (below), Initially I was thinking of using MD5 hash with the posibility = of adding other hash methods defined by board admin later. I was also wondering if we should enforce minimum length and complexity for = password. Does anybody have any thoughts on this? Should I just add MD5 hashing = now and leave complexity and other hashing methods till after version 1.0? Rgds Si CREATE OR ALTER PROCEDURE DNFI_ENCRYPT_PASSWORD(ipPASSWORD VARCHAR(100)) RETURNS (opPASSWORD VARCHAR(100)) AS BEGIN /* TODO Validate password for length and complexity? maybe */ IF ((ipPASSWORD IS NULL) OR (ipPASSWORD =3D '')) THEN EXCEPTION EXC_DNF_INVALID_PASSWORD; /* TODO Encrypt and return the password */ =20 /* Return the encrypted password */ opPASSWORD =3D ipPASSWORD; SUSPEND; END ## ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log = files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D= 121642 _______________________________________________ Dnfbb-developers mailing list Dnf...@li... https://lists.sourceforge.net/lists/listinfo/dnfbb-developers |
|
From: <dnf...@li...> - 2006-01-18 23:39:10
|
I have created an internal stored proc for password encryption/complexity
(below), Initially I was thinking of using MD5 hash with the posibility of
adding other hash methods defined by board admin later. I was also
wondering if we should enforce minimum length and complexity for password.
Does anybody have any thoughts on this? Should I just add MD5 hashing now
and leave complexity and other hashing methods till after version 1.0?
Rgds
Si
CREATE OR ALTER PROCEDURE DNFI_ENCRYPT_PASSWORD(ipPASSWORD VARCHAR(100))
RETURNS (opPASSWORD VARCHAR(100))
AS
BEGIN
/* TODO Validate password for length and complexity? maybe */
IF ((ipPASSWORD IS NULL) OR (ipPASSWORD = '')) THEN
EXCEPTION EXC_DNF_INVALID_PASSWORD;
/* TODO Encrypt and return the password */
/* Return the encrypted password */
opPASSWORD = ipPASSWORD;
SUSPEND;
END ##
|
|
From: <dnf...@li...> - 2006-01-18 23:30:29
|
Feature Requests item #1409510, was opened at 2006-01-18 23:30 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1409510&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Data Access Layer (Firebird) Group: None Status: Open Resolution: None Priority: 9 Submitted By: Si Carter (tectsoft) Assigned to: Si Carter (tectsoft) Summary: Integrate FBMail into database Initial Comment: Integrate FBMail into Firebird Database. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1409510&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-16 19:59:06
|
Feature Requests item #1407630, was opened at 2006-01-16 19:59 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1407630&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Data Access Layer (General) Group: None Status: Open Resolution: None Priority: 6 Submitted By: Si Carter (tectsoft) Assigned to: Si Carter (tectsoft) Summary: EMail notification when post moved/deleted Initial Comment: Send an email notification to the user who created a post when it is moved or deleted. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1407630&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-16 15:13:06
|
Just for info I will be refactoring all db exception message names from the current form EXC_<Number> To EXC_DNF_<name> So they are easier to read. Rgds Si |
|
From: <dnf...@li...> - 2006-01-16 15:10:54
|
Simon, These are neat :-) Thanks Si |
|
From: <dnf...@li...> - 2006-01-10 17:05:52
|
Feature Requests item #1401775, was opened at 2006-01-10 17:05 Message generated for change (Settings changed) made by tectsoft You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401775&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Data Access Layer (General) Group: None Status: Open Resolution: None Priority: 1 Submitted By: Si Carter (tectsoft) >Assigned to: Nobody/Anonymous (nobody) Summary: Calculate space used for each forum Initial Comment: Need to add the ability to calculate the space used by each forum. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401775&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-10 17:05:27
|
Feature Requests item #1401775, was opened at 2006-01-10 17:05 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401775&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Data Access Layer (General) Group: None Status: Open Resolution: None Priority: 1 Submitted By: Si Carter (tectsoft) Assigned to: Si Carter (tectsoft) Summary: Calculate space used for each forum Initial Comment: Need to add the ability to calculate the space used by each forum. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401775&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-10 12:46:40
|
Feature Requests item #1401520, was opened at 2006-01-10 12:46 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401520&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: All Layers Group: None Status: Open Resolution: None Priority: 3 Submitted By: Si Carter (tectsoft) Assigned to: Nobody/Anonymous (nobody) Summary: Support for sub forums Initial Comment: Add support for sub forums. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401520&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-10 11:50:41
|
Feature Requests item #1401465, was opened at 2006-01-10 11:46 Message generated for change (Settings changed) made by tectsoft You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401465&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: All Layers Group: None Status: Open Resolution: None Priority: 6 Submitted By: Si Carter (tectsoft) >Assigned to: Nobody/Anonymous (nobody) Summary: Import external RSS feeds Initial Comment: Provide the ability for external RSS feeds to be imported into a forum ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401465&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-10 11:46:54
|
Feature Requests item #1401465, was opened at 2006-01-10 11:46 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401465&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: All Layers Group: None Status: Open Resolution: None Priority: 6 Submitted By: Si Carter (tectsoft) Assigned to: Si Carter (tectsoft) Summary: Import external RSS feeds Initial Comment: Provide the ability for external RSS feeds to be imported into a forum ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401465&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-10 11:45:44
|
Feature Requests item #1401457, was opened at 2006-01-10 11:39 Message generated for change (Settings changed) made by tectsoft You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401457&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: All Layers Group: None Status: Open Resolution: None Priority: 1 Submitted By: Si Carter (tectsoft) >Assigned to: Nobody/Anonymous (nobody) Summary: Backup Initial Comment: Allow admins to backup their own forum data. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401457&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-10 11:39:49
|
Feature Requests item #1401457, was opened at 2006-01-10 11:39 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401457&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: All Layers Group: None Status: Open Resolution: None Priority: 1 Submitted By: Si Carter (tectsoft) Assigned to: Si Carter (tectsoft) Summary: Backup Initial Comment: Allow admins to backup their own forum data. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1401457&group_id=152364 |
|
From: <dnf...@li...> - 2006-01-08 10:50:16
|
> -----Original Message----- > Still doing bits on it. I have the basic MySQL database up > and running. > Got a couple of problems at the moment. This sounds good (apart from problems), I will be working on the user profile and signup over the next two weeks, so there should be some new procs to work on. > Also, my main PC has died. Windows Installation has gotten > corrupted so > haven't had chance to fix it yet. My Laptop is working but > the bits I need > are on my main PC. I will hopefully look at it this weekend. :-) it took me 6 weeks to get the momentum to change pc's always a horrible task Rgds Si |
|
From: <dnf...@li...> - 2006-01-06 16:09:32
|
Hi, Still doing bits on it. I have the basic MySQL database up and running. Got a couple of problems at the moment. Also, my main PC has died. Windows Installation has gotten corrupted so haven't had chance to fix it yet. My Laptop is working but the bits I need are on my main PC. I will hopefully look at it this weekend. Simon -----Original Message----- From: dnf...@li... [mailto:dnf...@li...] Sent: 06 January 2006 15:55 To: dnf...@li... Subject: [Dnfbb-developers] Getting back on track After a serious computer problem (laptop broke) I am now getting back on track and have started work on dnfbb. Also I was just wondering if everyone who is on the team is still happy to continue? Rgds Si ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ Dnfbb-developers mailing list Dnf...@li... https://lists.sourceforge.net/lists/listinfo/dnfbb-developers |
|
From: <dnf...@li...> - 2006-01-06 15:55:15
|
After a serious computer problem (laptop broke) I am now getting back on track and have started work on dnfbb. Also I was just wondering if everyone who is on the team is still happy to continue? Rgds Si |
|
From: <dnf...@li...> - 2005-12-23 12:26:47
|
Feature Requests item #1388841, was opened at 2005-12-23 12:26 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1388841&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Presentation Layer Group: None Status: Open Resolution: None Priority: 1 Submitted By: Si Carter (tectsoft) Assigned to: Nobody/Anonymous (nobody) Summary: Topic Rating Initial Comment: Would be nice to allow topics to have an optional rating. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1388841&group_id=152364 |
|
From: <dnf...@li...> - 2005-12-22 13:41:17
|
Feature Requests item #1388022, was opened at 2005-12-22 13:41 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1388022&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: All Layers Group: None Status: Open Resolution: None Priority: 5 Submitted By: Si Carter (tectsoft) Assigned to: Si Carter (tectsoft) Summary: Allow users to change their username Initial Comment: It would be nice if users had the ability to change their username. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1388022&group_id=152364 |
|
From: <dnf...@li...> - 2005-12-22 13:36:46
|
Feature Requests item #1388018, was opened at 2005-12-22 13:36 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1388018&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Presentation Layer Group: None Status: Open Resolution: None Priority: 3 Submitted By: Si Carter (tectsoft) Assigned to: Nobody/Anonymous (nobody) Summary: Bookmark topics Initial Comment: Iw would be nice if users had the ability to bookmark topics of interest. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1388018&group_id=152364 |
|
From: <dnf...@li...> - 2005-12-16 14:40:44
|
Feature Requests item #1382475, was opened at 2005-12-16 06:40 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1382475&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Presentation Layer Group: None Status: Open Resolution: None Priority: 5 Submitted By: Nobody/Anonymous (nobody) Assigned to: Nobody/Anonymous (nobody) Summary: Code/SQL Highlighter Initial Comment: It would be nice to have a code/sql highlighter, i.e. [code=c#] code highlight all here [/code] [code=sql] code highlight here [/code] etc ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784892&aid=1382475&group_id=152364 |
1 message has been excluded from this view by a project administrator.
