From: Matthew M. <ma...@tu...> - 2001-11-28 20:50:30
|
> Mamma mia...Alessandro you kick ass. :^) Agreed! Good work from everyone. This is the most outside development we have received in a while. > I was going to work on the upgrade script, but > was wondering what others thought about the implementation of phpws_ > as a standard default for installations? This would organize > everything, but I'm sure we would get lots of complaints if other > plugins were not set to work with the table prefix. Any thoughts? The default should probably be "". That way none of the current plug-ins would break. If someone wanted to use the prefix then they would do so knowing the consequence (aka they have to fix the unsupported mods). 'phpws_' could be the example prefix but it should be commented out. As we get more people on the prefix bandwagon, we can make it a permanent addition. I think one or two upgrades would be enough. > Postnuke and phpnuke have recently been reported to have > insecure > cookies with passwords added to their cookie. Dangerous. :^) Yup. That is why we went with sessions. However, lets not get cocky ;) Make redundant checks and always keep hackers in mind when coding. > So...I'm curious, with the guidelines requesting permission to > work on modules written by another developer...should we let the bug be > handled by the person who wrote the module or take them on if we feel > we can deal with it? Write the developer and cc to me or Brian. If you don't get a response back, go for it. Best regards, Matt Matthew McNaney Internet Systems Architect Electronic Student Services Email: ma...@tu... URL: http://phpwebsite.appstate.edu Phone: 828-262-6493 Matthew McNaney Internet Systems Architect Electronic Student Services Email: ma...@tu... URL: http://phpwebsite.appstate.edu Phone: 828-262-6493 |