From: <gem...@li...> - 2013-04-11 14:28:26
|
Revision: 1224 http://sourceforge.net/p/gemstracker/code/1224 Author: matijsdejong Date: 2013-04-11 14:27:58 +0000 (Thu, 11 Apr 2013) Log Message: ----------- Changed the default test and development password rules Modified Paths: -------------- trunk/library/classes/Gems/Project/ProjectSettings.php Added Paths: ----------- trunk/library/configs/application.example.ini trunk/library/configs/project.example.ini Modified: trunk/library/classes/Gems/Project/ProjectSettings.php =================================================================== --- trunk/library/classes/Gems/Project/ProjectSettings.php 2013-04-11 09:59:26 UTC (rev 1223) +++ trunk/library/classes/Gems/Project/ProjectSettings.php 2013-04-11 14:27:58 UTC (rev 1224) @@ -567,7 +567,7 @@ } /** - * Returns the super admin password, if it exists + * Returns the super admin ip range, if it exists * * @return string */ Added: trunk/library/configs/application.example.ini =================================================================== --- trunk/library/configs/application.example.ini (rev 0) +++ trunk/library/configs/application.example.ini 2013-04-11 14:27:58 UTC (rev 1224) @@ -0,0 +1,43 @@ + +[production] +phpSettings.display_startup_errors = 0 +phpSettings.display_errors = 0 + +bootstrap.path = GEMS_PROJECT_NAME_UC "/Escort.php" +bootstrap.class = GEMS_PROJECT_NAME_UC "_Escort" +; Uncomment this line if the project uses it's own code classes +; loaderDirs.GEMS_PROJECT_NAME_UC = APPLICATION_PATH "/classes/" GEMS_PROJECT_NAME_UC +loaderDirs.Gems = GEMS_LIBRARY_DIR "/classes/Gems" +; resources.db.adapter = PDO_MYSQL +resources.db.adapter = Mysqli +resources.db.params.charset = utf8 +; Either replace HOST, DATABASE, USER, PASSWD with the correct strings, +; or define() these strings as constants. +resources.db.params.host = HOST +resources.db.params.dbname = DATABASE +resources.db.params.username = USER +resources.db.params.password = PASSWD +resources.db.isDefaultTableAdapter = true +resources.frontController.controllerDirectory = APPLICATION_PATH "/controllers" +resources.layout.layout = "gems-fluid" +resources.layout.layoutPath = GEMS_LIBRARY_DIR "/layouts/scripts" + +firebug.log = 0 + +; Set to 0 to disable using OpenRosa survey source +useOpenRosa = 1 + +[staging : production] + +[testing : production] +phpSettings.display_startup_errors = 1 +phpSettings.display_errors = 1 + +[demo : production] + +[development : production] +phpSettings.display_startup_errors = 1 +phpSettings.display_errors = 1 +firebug.log = 1 +; Set to 1 if you want to enable zfdebug output +zfdebug.activate = 0 Added: trunk/library/configs/project.example.ini =================================================================== --- trunk/library/configs/project.example.ini (rev 0) +++ trunk/library/configs/project.example.ini 2013-04-11 14:27:58 UTC (rev 1224) @@ -0,0 +1,350 @@ +[production] +name = GEMS_PROJECT_NAME_UC +description = GEMS_PROJECT_NAME_UC +;longDescr = "" +;longDescrNl = "" + +;--------------------------------------------------- +; Hash encryption salt. REQUIRED! +; +; Use e.g. http://www.random.org/strings/ to create. +; +; Put %s somewhere within the salt to mix the value +; in the salt. +;--------------------------------------------------- +salt = + +;---------------------------------------------------------- +; The non database super user +; +; On production pwd should be empty or longer than 10 chars +; and quoted if it contains special characters. +;---------------------------------------------------------- +admin.user = superadmin +admin.pwd = PASSWD +;admin.ipRanges = 10.0.0.0-10.255.255.255;192.168.0.0-192.168.255.255 + +css.gems = gems/css/gems-fluid.css +css.print.url = gems/css/gems_print.css +css.print.media = print +imagedir = gems/images +imagedir = gems/images +css.local = basic/basic.css +favicon = basic/basic.ico +jquerycss = basic/jquery-basic.css + +contact.bugsUrl = http://gemstracker.org/mantis +contact.docsUrl = http://gemstracker.org/wiki/doku.php +;contact.forumUrl = http://gemstracker.org/wiki/doku.php +contact.gemsUrl = http://gemstracker.org/ +contact.manualUrl = "http://gemstracker.org/wiki/doku.php?id=userzone:userdoc:start" +;contact.supportUrl = http://gemstracker.org/wiki/doku.php + +databaseFileEncoding = ISO-8859-1 + +;------------------------------------------------------- +; SESSION SECTION +; +; idleTimeout +; +; Lifetime of the session (determines the expiration of +; the session namespace(s)). +; If not set, defaults to 1800 seconds = 30 minutes. +; +;------------------------------------------------------- + +session.idleTimeout = 1800 + +;------------------------------------------------------- +; ASK THROTTLE SECTION +; +; Sets values that control the throttling (slowdowns to +; combat brute-force attacks) of the ask / token +; controller. +; +; askThrottle.period +; +; Look for failed token attempts in from now to +; X seconds ago. +; +; askThrottle.threshold +; +; If the number of failed token attempts exceeds this +; number, starting throttling. +; +; askThrottle.delay +; +; Throttle by delaying each request by X seconds. +; +;------------------------------------------------------- + +askThrottle.period = 900 +askThrottle.threshold = 300 +askThrottle.delay = 10 + +;------------------------------------------------------- +; ASK DELAY SECTION +; +; askDelay +; +; When no askDelay is specified or is -1 the user will see +; greeting screen were he or she will a have to click +; on a button to fill in a survey. +; +; With the askDelay is > 0 then greeting screen will +; be shown (with the button) but after the specified +; number of seconds the survey will load automatically. +; +; With an askDelay of 0 seconds the survey will load +; automatically. +; +; askNextDelay +; +; askNextDelay works the same but applies to the wait +; after the user completed a survey while another survey +; is available. +;------------------------------------------------------- + +; askDelay = 10 +; askNextDelay = 0 + +;------------------------------------------------------- +; E-MAIL SECTION +; +; USE +; +; Here you can set three global e-mail settings: +; +; bcc = BCC every sent mail to this address. +; block = Block any sending of mail. +; bounce = When set to 1 all mails are not sent to the +; suplied TO address, but redirects them to +; the FROM not respondent address. This allows +; testing without altering respondent e-mail +; addresses. +; site = Supply a general site FROM address. +;------------------------------------------------------- + +; email.bcc = +email.block = 0 +email.bounce = 0 +; email.site = + +;------------------------------------------------------- +; LAYOUT SECTION +; +; USE +; +; For each layout item with a value other than 0 there +; must exist a _layout{Item}() method in GemsEscort or +; the {Project}Escort.php class specified in +; {Project}Application.ini file. +; +; Items are loaded in the order specified below. Order +; may be important, e.g. navigation should be called +; before crumbs. +; +; INPUT +; +; This method is called with layoutPrepareArgs.{Item} +; in an array. +; +; Both layoutPrepare and layoutPrepareArgs can be +; changed at runtime before GemsEscort.postDispatch() +; is called. +; +; OUTPUT: +; +; The result (if any) is stored as a $view property. +; When the item value is a number, the name will be +; the item name. +; When the item value is a string, then it is stored +; in a MUtil_Html_Sequence view property with that +; string as name. The sequence is created on demand. +;------------------------------------------------------- + +layoutPrepare.title = 1 +layoutPrepare.projectName = header +layoutPrepare.login = header_bar +layoutPrepare.contact = 0 +layoutPrepare.localeSet = header_bar +layoutPrepare.organizationSwitcher = header_bar +layoutPrepare.version = footer +layoutPrepare.user = footer +layoutPrepare.time = 0 +layoutPrepare.menuHtml = 1 +layoutPrepare.navigation = 0 +layoutPrepare.crumbs = main +layoutPrepare.messages = main +layoutPrepare.css = 1 +layoutPrepare.favicon = 1 +layoutPrepare.dojo = 0 +layoutPrepare.jQuery = 1 + +layoutPrepareArgs.login.class = rightFloat +;layoutPrepareArgs.contact.class = rightFloat +layoutPrepareArgs.time.class = rightFloat +layoutPrepareArgs.user.class = rightFloat +layoutPrepareArgs.version.class = leftFloat +layoutPrepareArgs.localeSet.class = leftFloat + +;------------------------------------------------------- +; LOCALE SECTION +; +; Specify a default locale and locales for each of the +; supported languages. +;------------------------------------------------------- + +locale.default = "en" +locales.en = "en" +locales.nl = "nl" + +;------------------------------------------------------- +; ORGANIZATION SECTION +; +; Specify a default organization for a project. Allows +; all user to login when this organization is choosen. +;------------------------------------------------------- + +; organization.default = 70 + +;---------------------------------------------------------------------- +; PASSWORD SECTION +; +; Allows default setting of initial password for new users: +; password.firstPassword = sesame +;---------------------------------------------------------------------- + +;password.initialPassword = sesame + +;---------------------------------------------------------------------- +; PASSWORDS SECTION +; +; The last key must be a function name in your PasswordChecker class. +; That function must accept as parameters the array value and the +; password. +; +; In between keys can contain case insensitive organization codes, user +; roles and user definition names in any order and can overrule previous +; defined values. +; BEWARE keep keys in fixed array order: +; passwords.staff.mgz.capsCount = 1 +; passwords.mgz.staff.lowerCount = 1 +; passwords.staff.mgz.lowerCount = 2 +; will be processed as: +; passwords.staff.mgz.capsCount = 1 +; passwords.staff.mgz.lowerCount = 2 +; passwords.mgz.staff.lowerCount = 1 +;---------------------------------------------------------------------- + +passwords.notTheName = 1 +passwords.guest.minLength = 6 +passwords.staff.capsCount = 1 +passwords.staff.lowerCount = 1 +passwords.staff.minLength = 8 +passwords.staff.numCount = 0 +passwords.staff.notAlphaCount = 1 +passwords.staff.notAlphaNumCount = 0 + +;------------------------------------------------------- +; TOKEN SECTION +; +; chars: characters allowed in a token. +; format: format string to show to user for input of +; token. The \ backslash is used as escape +; character for characters that are fixed. +; from: commonly mistaken input characters to correct. +; to: characters to translate from characters to. +; case: optional: 1|0. If the token should be +; treated case sensitive. If missing the token +; is case sensitive when chars contains +; uppercase characters. +; reuse: days tokens can be used: +; -1 = not at all +; 0 = only today (default and required for looping) +; 1 = only up to yesterdays tokens +;------------------------------------------------------- + +tokens.chars = 23456789abcdefghijklmnopqrstuvwxyz +tokens.format = XXXX\-XXXX; +tokens.from = 01; +tokens.to = ol; + +;--------------------------------------------------------- +; CONSENT SECTION +;--------------------------------------------------------- +consentRejected = 'do not use' +consentTypes = 'do not use|consent given' +consentDefault = 'Unknown' ;Default setup makes this 'do not use' + +;--------------------------------------------------------- +; LOGLEVEL SECTION +;--------------------------------------------------------- +; Use the loglevels as defined in Zend_Log to define the highest level of errors to log +; +; 0 Emergency: system is unusable +; 1 Alert: action must be taken immediately +; 2 Critical: critical conditions +; 3 Error: error conditions +; 4 Warning: warning conditions +; 5 Notice: normal but significant condition +; 6 Informational: informational messages +; 7 Debug: debug messages +; +; Defaults for production are 3 (error) and 7 (debug) for testing and development, uncomment the +; line below to use a custom setting +;logLevel = 6; + +;--------------------------------------------------------- +; EXPORT SECTION +;--------------------------------------------------------- +; Command line to the pdf export binary (such as +; wkhtmltopdf, Phantom.js or similar) +; +; Use as follows: +; export.pdfExportCommand = '/bin/wkhtmltopdf %s %s' +; +; where %s %s is respecitively the input (url) and +; the output (file) +export.pdfExportCommand = + +;--------------------------------------------------------- +; PERFORMANCE +; Define what kind of cache to use. Choose from: +; apc (shared) memory cache, can sometimes be slow due to limited available +; memory in shared environments +; file When filesystem is fast enough or apc is not available +; none No cache - good for development +;--------------------------------------------------------- +cache = "apc" + +[testing : production] +cache = "file" +admin.user = superadmin +admin.pwd = superadmin + +email.bounce = 1 + +passwords.notTheName = 0 +passwords.staff.minLength = 6 + +[demo : production] +admin.user = superadmin +admin.pwd = superadmin + +email.bounce = 1 + +[development : production] +cache = "none" +admin.user = superadmin +admin.pwd = superadmin + +email.bounce = 1 + +passwords.notTheName = 0 +passwords.staff.capsCount = 0 +passwords.staff.lowerCount = 0 +passwords.staff.minLength = 6 +passwords.staff.numCount = 0 +passwords.staff.notAlphaCount = 0 +passwords.staff.notAlphaNumCount = 0 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |