Menu
▾
▴
phortify-devel — Information relating to the development of phortify.
You can subscribe to this list here.
| 2000 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(2) |
Dec
(4) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 |
Jan
|
Feb
|
Mar
(2) |
Apr
|
May
(1) |
Jun
|
Jul
(1) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2002 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(1) |
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Philip O. <ph...@co...> - 2002-05-24 18:31:17
|
Hello everyone- Did you forget about this mailing list? :) Anyway, I'm getting an itch to work a little on Phortify and am curious if anyone in here is alive. And if so, if anyone is interested in working on this beast. Initially phortify shouldn't rely on register_globals and work well with error_reporting(E_ALL). But that's easy, should we use sessions? Or http auth? I'm leaning towards native php sessions. Thoughts? Regards, Philip Olson |
|
From: Baruch E. <sb...@te...> - 2001-07-17 09:57:24
|
I'm not sure if this group is active or not but I've said quite some time ago that I'll write an article on the topic and I finally finished it. It can be found at http://baruch.ev-en.org/writings/ (Yes, it's a blatant self promotion, but I'm not standing to get any revenue from this, only looking to teach and learn). --- Baruch Even sb...@t2... http://baruch.ev-en.org/ " Learn to laugh ... it's the path to true love! " - The Angel in the movie Michael |
|
From: Luc Saint-E. <lu...@sa...> - 2001-05-01 08:55:13
|
Hello, Is this list alive ? Luc |
|
From: Rikul <ri...@sh...> - 2001-03-08 08:39:35
|
Ok lets talk about problems phortify should address. What do programmers need most for authentication that we can make? I would write some code (already have) but without clear definition of what phoritfy is and does for its user, its useless to do anything.. On Thu, 08 Mar 2001 01:26:35 Philip Olson wrote: > > testing archiver. > > blah. > > want to be famous? talk about phortify. > > philip > > > _______________________________________________ > Phortify-devel mailing list > Pho...@li... > http://lists.sourceforge.net/lists/listinfo/phortify-devel > > |
|
From: Philip O. <ph...@co...> - 2001-03-08 07:24:55
|
testing archiver. blah. want to be famous? talk about phortify. philip |
|
From: Philip O. <ph...@th...> - 2000-12-23 07:26:15
|
Hello Rick et al,
Rick, this is in reply to your email, sounds good! Thus far we've all
come up somethin' like this
Discuss. What sounds good/horrible or missing or huh? :
------------------------------------------------------
Features to Consider :
------------------------------------------------------
- user / group management - intelligent,secure
- function/class library - useful,fast,secure
- documentation!!! - PHPdoc? docs are good!
- example set (demo) - think of interesting demo ideas :-)
- useful secure sessions. - jeremy brand / j-sessions
- database design - rick patel
- website design - simple,nice (philip olson?)
- web hosting - sourceforge,"mirrors"
- healthy support system - docs,list,forum,mentors,premium?
- marketing! - use phortify!!!
- other stuff
- discuss
Everyone Speak up! We're all thinking about holidays right now, which is
good. Eating very good. Sleeping and eating combined very very good.
Hasta luego,
Philip
--.sig_of_moment
[ Useful Learning is through a humble heart. ]
On Thu, 21 Dec 2000, Rick Patel wrote:
> First there needs to some type of feature list with most needed features
> outlined. Then
> there needs to be a database design. What features should protify provide?
> Here the list I think we could start with:
>
> - Manage users/groups for administrator. (Provide pages for
> administrator to add/edit/delete users/groups
> and associate users with multiple groups)
> - Provide library for programmer to check if user has been authenticated and
> get related information about authenticated user (groups, etc)
> - Provide generic login/logout pages.
>
> I'm offering to do the database design if you want. Maybe something
> simple to start with
> and then we could discuss what needs to be added and changed.
>
>
> - Rick
>
>
> Philip Olson wrote:
>
> > Hey Philipp et al-
> >
> > I agree that phortify could be very useful for everyone and to do so
> > requires some important features with one, as you say, being "multiple
> > auth levels" We all need to sit down and really think about the best way
> > to do this and to not set limitations. Like, I want 30 levels for a
> > project, 2 levels for another.
> >
> > Regarding time-out function, what do you mean?
> >
> > No really useful version exists outside of tims code. Long ago I took
> > the code and made it more generic but nothing special, I've "grown up"
> > since then and realize I hadn't done any real coding :-)
> >
> > Regarding sessions, one idea is to include a version of Jeremy's
> > gpl session code into phortify :
> >
> > http://www.nirvani.net/software/j-sessions-1.0.0-pre1/
> >
> > Jeremy has expressed interest in doing this and once we, the phortify
> > crew, get our arses going j-sessions will grow right along. Including
> > sessions is obviously a good thing. We could use php4 native session
> > support too but I think j-sessions is php3 friendly, is that important
> > these days? Also, php4 session support has had some issues in the past, i
> > think all are ironed out now though. Discuss.
> >
> > Other potential features exist, we need a few people to actively work on
> > Phortify and I personally don't have the motivation or experience to do it
> > alone as this is such an important and critical part of a website and must
> > be very secure and optimized, no bullshit.
> >
> > So, that's that. It's very suprising to me that nobody has really
> > stepped up and created a trully useful generic auth system ... SO, let's
> > do it. The dream of Phortify is to be just that. The demand is there.
> >
> > Philipp, where do you see your role in such a venture? Background and
> > expertise are in what? Reply on or off the list. I'll send an email to
> > all developers "on staff" and trim down to those interested in
> > contributing. That will be done right now.
> >
> > TTYL,
> >
> > Philip
> >
> >
> >
> > On Thu, 21 Dec 2000, Philipp Wanning wrote:
> >
> >
> >> Hi,
> >>
> >> i have found your project at phpbuilder.com. And i have read philips mail
> >> "Phortify has been awakened!".
> >> It seems that this is the project everyone, who dont want to use phplib, is
> >> looking for.
> >> My questions:
> >> 1. Does a new version different to Tims exist?
> >> 2. Can i contribute?
> >>
> >> Features i would love:
> >> - different levels/groups
> >> - time-out function
> >>
> >> The problem with the "plain text - way of login" should not have main focus.
> >> you can use something like phplibs solution or even better use SSL.
> >>
> >> Philipp Wanning
> >>
> >>
> >>
> >> _______________________________________________
> >> Phortify-devel mailing list
> >> Pho...@li...
> >> http://lists.sourceforge.net/mailman/listinfo/phortify-devel
> >>
> >
> >
> > _______________________________________________
> > Phortify-devel mailing list
> > Pho...@li...
> > http://lists.sourceforge.net/mailman/listinfo/phortify-devel
> >
> >
>
>
>
|
|
From: Rick P. <ri...@sh...> - 2000-12-21 21:03:23
|
First there needs to some type of feature list with most needed features outlined. Then there needs to be a database design. What features should protify provide? Here the list I think we could start with: - Manage users/groups for administrator. (Provide pages for administrator to add/edit/delete users/groups and associate users with multiple groups) - Provide library for programmer to check if user has been authenticated and get related information about authenticated user (groups, etc) - Provide generic login/logout pages. I'm offering to do the database design if you want. Maybe something simple to start with and then we could discuss what needs to be added and changed. - Rick Philip Olson wrote: > Hey Philipp et al- > > I agree that phortify could be very useful for everyone and to do so > requires some important features with one, as you say, being "multiple > auth levels" We all need to sit down and really think about the best way > to do this and to not set limitations. Like, I want 30 levels for a > project, 2 levels for another. > > Regarding time-out function, what do you mean? > > No really useful version exists outside of tims code. Long ago I took > the code and made it more generic but nothing special, I've "grown up" > since then and realize I hadn't done any real coding :-) > > Regarding sessions, one idea is to include a version of Jeremy's > gpl session code into phortify : > > http://www.nirvani.net/software/j-sessions-1.0.0-pre1/ > > Jeremy has expressed interest in doing this and once we, the phortify > crew, get our arses going j-sessions will grow right along. Including > sessions is obviously a good thing. We could use php4 native session > support too but I think j-sessions is php3 friendly, is that important > these days? Also, php4 session support has had some issues in the past, i > think all are ironed out now though. Discuss. > > Other potential features exist, we need a few people to actively work on > Phortify and I personally don't have the motivation or experience to do it > alone as this is such an important and critical part of a website and must > be very secure and optimized, no bullshit. > > So, that's that. It's very suprising to me that nobody has really > stepped up and created a trully useful generic auth system ... SO, let's > do it. The dream of Phortify is to be just that. The demand is there. > > Philipp, where do you see your role in such a venture? Background and > expertise are in what? Reply on or off the list. I'll send an email to > all developers "on staff" and trim down to those interested in > contributing. That will be done right now. > > TTYL, > > Philip > > > > On Thu, 21 Dec 2000, Philipp Wanning wrote: > > >> Hi, >> >> i have found your project at phpbuilder.com. And i have read philips mail >> "Phortify has been awakened!". >> It seems that this is the project everyone, who dont want to use phplib, is >> looking for. >> My questions: >> 1. Does a new version different to Tims exist? >> 2. Can i contribute? >> >> Features i would love: >> - different levels/groups >> - time-out function >> >> The problem with the "plain text - way of login" should not have main focus. >> you can use something like phplibs solution or even better use SSL. >> >> Philipp Wanning >> >> >> >> _______________________________________________ >> Phortify-devel mailing list >> Pho...@li... >> http://lists.sourceforge.net/mailman/listinfo/phortify-devel >> > > > _______________________________________________ > Phortify-devel mailing list > Pho...@li... > http://lists.sourceforge.net/mailman/listinfo/phortify-devel > > |
|
From: Philip O. <ph...@th...> - 2000-12-21 20:16:00
|
Hey Philipp et al- I agree that phortify could be very useful for everyone and to do so requires some important features with one, as you say, being "multiple auth levels" We all need to sit down and really think about the best way to do this and to not set limitations. Like, I want 30 levels for a project, 2 levels for another. Regarding time-out function, what do you mean? No really useful version exists outside of tims code. Long ago I took the code and made it more generic but nothing special, I've "grown up" since then and realize I hadn't done any real coding :-) Regarding sessions, one idea is to include a version of Jeremy's gpl session code into phortify : http://www.nirvani.net/software/j-sessions-1.0.0-pre1/ Jeremy has expressed interest in doing this and once we, the phortify crew, get our arses going j-sessions will grow right along. Including sessions is obviously a good thing. We could use php4 native session support too but I think j-sessions is php3 friendly, is that important these days? Also, php4 session support has had some issues in the past, i think all are ironed out now though. Discuss. Other potential features exist, we need a few people to actively work on Phortify and I personally don't have the motivation or experience to do it alone as this is such an important and critical part of a website and must be very secure and optimized, no bullshit. So, that's that. It's very suprising to me that nobody has really stepped up and created a trully useful generic auth system ... SO, let's do it. The dream of Phortify is to be just that. The demand is there. Philipp, where do you see your role in such a venture? Background and expertise are in what? Reply on or off the list. I'll send an email to all developers "on staff" and trim down to those interested in contributing. That will be done right now. TTYL, Philip On Thu, 21 Dec 2000, Philipp Wanning wrote: > Hi, > > i have found your project at phpbuilder.com. And i have read philips mail > "Phortify has been awakened!". > It seems that this is the project everyone, who dont want to use phplib, is > looking for. > My questions: > 1. Does a new version different to Tims exist? > 2. Can i contribute? > > Features i would love: > - different levels/groups > - time-out function > > The problem with the "plain text - way of login" should not have main focus. > you can use something like phplibs solution or even better use SSL. > > Philipp Wanning > > > > _______________________________________________ > Phortify-devel mailing list > Pho...@li... > http://lists.sourceforge.net/mailman/listinfo/phortify-devel > |
|
From: Philipp W. <phi...@gm...> - 2000-12-21 14:24:31
|
Hi, i have found your project at phpbuilder.com. And i have read philips mail "Phortify has been awakened!". It seems that this is the project everyone, who dont want to use phplib, is looking for. My questions: 1. Does a new version different to Tims exist? 2. Can i contribute? Features i would love: - different levels/groups - time-out function The problem with the "plain text - way of login" should not have main focus. you can use something like phplibs solution or even better use SSL. Philipp Wanning |
|
From: Rikul <ri...@sh...> - 2000-11-23 05:53:57
|
Uhh.. this is a test. Like the subject says. |
|
From: Philip O. <ph...@th...> - 2000-11-21 07:57:47
|
Hi everyone! Okay, Steve it's just you and I as members of this list but we can pretend :-) Phortify is thinking about coming alive again and is gathering steam and ideas , all thoughts welcome. We need to work out a list of features, post any and all here. Phortify has been awakened! Philip -- be outside the box. |
