phpwebsite-developers — For our development team.

Re: [Phpwebsite-developers] File Cabinet changes in subversion

[Verdon V. <ve...@gm...>]

Hmm,

So if I have an install done from svn on Friday, that I intend to  
train a client with late this week, is it safe to just svn update  
now, or will I also need to boost something for database changes?

I have to train two different clients late this week in sites using  
phpws 1.x. I'd sure hate train them in something that will be  
completely different next week ;-)

Any advice?
verdon


On 2-Apr-07, at 3:07 PM, Matthew McNaney wrote:

> Hi all,
>
> I have finally committed the File Cabinet rewrite that has kept me  
> busy
> for a while.
>
> My hope is that some of you devs can help test and supply feedback.  
> You
> will need to perform a checkout or export from subversion.
>
> Please keep the following in mind:
>
> - It is not finished. Do not use on a production site.
> - It is not completely secure - I need to test all the permissions.
> - It may not work in all browsers. I have only tested in
>   Firefox/Linux so far.
> - The update has not been tested. I plan on doing so tomorrow.
>
> If you wish to help, I recommend a fresh install.
>
> If it doesn't work and you can see why, email me and let me know.  
> Check
> back with subversion as I will be testing and fixing stuff tomorrow. I
> can use feedback on usability and functionality. If you want to help
> with the update, try running it and letting me know where it fails.  
> Make
> sure you are backing up file,images, and database before performing  
> the
> update.
>
> Once I get File Cabinet squared away, I will do the language overhaul
> (thanks for the feedback on that by the way).
>
> After that, I will start chopping away on bugs and feature requests.
>
> When the above is complete, we will release 1.2.0.
>
> Thank you,
> Matt
> -- 
> Matthew McNaney
> Electronic Student Services
> Appalachian State University
> http://phpwebsite.appstate.edu
>
>
> ---------------------------------------------------------------------- 
> ---
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to  
> share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php? 
> page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers

[Phpwebsite-developers] File Cabinet changes in subversion

[Matthew M. <ma...@tu...>]

Hi all,

I have finally committed the File Cabinet rewrite that has kept me busy
for a while.

My hope is that some of you devs can help test and supply feedback. You
will need to perform a checkout or export from subversion.

Please keep the following in mind:

- It is not finished. Do not use on a production site.
- It is not completely secure - I need to test all the permissions.
- It may not work in all browsers. I have only tested in
  Firefox/Linux so far.
- The update has not been tested. I plan on doing so tomorrow.

If you wish to help, I recommend a fresh install.

If it doesn't work and you can see why, email me and let me know. Check
back with subversion as I will be testing and fixing stuff tomorrow. I
can use feedback on usability and functionality. If you want to help
with the update, try running it and letting me know where it fails. Make
sure you are backing up file,images, and database before performing the
update.

Once I get File Cabinet squared away, I will do the language overhaul
(thanks for the feedback on that by the way).

After that, I will start chopping away on bugs and feature requests.

When the above is complete, we will release 1.2.0.

Thank you,
Matt
-- 
Matthew McNaney
Electronic Student Services
Appalachian State University
http://phpwebsite.appstate.edu

[Phpwebsite-developers] phpWebSite 0.10.3 is dead

[Shaun M. <sh...@ae...>]

This has been discussed off list informally but I thought it better  
be formalised.

The phpWebSite previously known as 0.10.3 will be released as v0.11.  
Yes, our knobs go up that far.

Since there's so many changes from 0.10.2 to the new code and we'd  
like to indicate it's more than a 0.0.1 increase.

If you want to check what's changed, have a read of the changelog at  
https://blackfoot.appstate.edu/phpwebsite/0.10.x/trunk/docs/ 
CHANGELOG.txt



Shaun
aegis design - http://www.aegisdesign.co.uk
aegis hosting - http://www.aegishosting.co.uk

Re: [Phpwebsite-developers] Language

[Eloi G. <el...@re...>]

I like the suggested method.  It's not pretty, but it wasn't pretty 
before so we're not really losing anything.

Matthew McNaney wrote:
> We can keep talking about it. I'll point out two things:
> 1) I asked for translation help long ago and didn't receive any takers.
>   
It's not really important, but I did want to point out that I did start 
outlining how to make the Key class multilingual-capable in IRC a while 
ago.  You asked me to delay all language-related discussions until 1.0 
became more stable.

-Eloi-

Re: [Phpwebsite-developers] Language

[Wendall C. <wen...@83...>]

On Mon, 2007-03-26 at 16:15 -0400, Matthew McNaney wrote:
> > Euuw! It was really elegant before. The new way makes coding a pain =20
> > in the eyeballs and I'm not convinced it's a good idea to slavishly =20
> > stick to gettext which is often not available on cheaper hosting =20
> > accounts.

I think the reality is that cheaper hosting is barely adequate for
effectively running phpWebSite to begin with. Hosts who intentionally
cripple php aren't the norm, and there are varying degrees of other
issues that will be encountered as well.

>=20
> I will miss the simplicity of _(). However, using the German language
> files, I see the need. Between PHP voodoo, caching and my funky
> implementation, the results are bouncing between English and German.
>=20
> By defining the language path and then specifically asking for it with
> the dgettext function, we are assured the correct file.
>=20
> Currently, you have to tell phpws which module you are in using the
> translate function. The problem with that is you can bounce out to
> another module, it will define a new directory, and when you return, the
> translation becomes confused. Although I have tried to sync the
> translation directories correctly, apparently it wasn't working.
>=20
> So, yes, we are increasing the function name and adding another
> parameter. However, we have decreased the amount of functions a dev has
> to learn in half :)
>=20

I agree with Matt here. I think this is a great idea. I don't know if
it's the intended purpose of dgettext() but if you read the comments on
this function at php.net, phpws would certainly not be the first using
the proposed method.

> > Then I was going to suggest doing what Code Igniter do as it's bound =20
> > to be light and fast - http://codeigniter.com/user_guide/libraries/=20
> > language.html - but that does it the way PEAR does using IDs but much =20
> > lighter.
>=20
> I don't like this method. Having one big language array is a PITA. It
> makes debugging a pain as well. I like the gettext method because you
> can mark the translation in the code where it happens. Gettext is easier
> to maintain and there are many editors already built. A translator
> doesn't need to know anything about php or coding to submit language
> files.
>=20
gettext() is the standard, and will ultimately be much more easily
supported than anything else. And I'll echo Matt here on the language
array is a royal PITA. I have always loathed the old language method,
since it makes absolutely no sense and is painfully difficult to
implement or use.

> > I think overlooking the elegance of the old method would be a mistake.
>=20
> We can keep talking about it. I'll point out two things:
> 1) I asked for translation help long ago and didn't receive any takers.
> These guys tested it, coded fixes, and even submitted translation files.
> 2) It is working for them.
>=20
> I am not looking at this lightly. I will have to remove all the
> translate functions, search and replace all the old functions, and
> release new versions of all the modules. That said, I am quite willing
> to do so if it works and I never have to mess with it again.
>=20
> Thanks,
> Matt

I like the suggestion. These changes will make an unusable, undependable
translation system actually work. Sure it will require server support,
but then again any function can be disabled in PHP on the server level.
It think it's reasonable to think if someone has a site that's
significant enough to require multilingual support that they will be
willing to choose a host that can figure out how to build PHP with
gettext().

Wendall

Re: [Phpwebsite-developers] Language

[Matthew M. <ma...@tu...>]

> Euuw! It was really elegant before. The new way makes coding a pain  
> in the eyeballs and I'm not convinced it's a good idea to slavishly  
> stick to gettext which is often not available on cheaper hosting  
> accounts.

I will miss the simplicity of _(). However, using the German language
files, I see the need. Between PHP voodoo, caching and my funky
implementation, the results are bouncing between English and German.

By defining the language path and then specifically asking for it with
the dgettext function, we are assured the correct file.

Currently, you have to tell phpws which module you are in using the
translate function. The problem with that is you can bounce out to
another module, it will define a new directory, and when you return, the
translation becomes confused. Although I have tried to sync the
translation directories correctly, apparently it wasn't working.

So, yes, we are increasing the function name and adding another
parameter. However, we have decreased the amount of functions a dev has
to learn in half :)

> Then I was going to suggest doing what Code Igniter do as it's bound  
> to be light and fast - http://codeigniter.com/user_guide/libraries/ 
> language.html - but that does it the way PEAR does using IDs but much  
> lighter.

I don't like this method. Having one big language array is a PITA. It
makes debugging a pain as well. I like the gettext method because you
can mark the translation in the code where it happens. Gettext is easier
to maintain and there are many editors already built. A translator
doesn't need to know anything about php or coding to submit language
files.

> I think overlooking the elegance of the old method would be a mistake.

We can keep talking about it. I'll point out two things:
1) I asked for translation help long ago and didn't receive any takers.
These guys tested it, coded fixes, and even submitted translation files.
2) It is working for them.

I am not looking at this lightly. I will have to remove all the
translate functions, search and replace all the old functions, and
release new versions of all the modules. That said, I am quite willing
to do so if it works and I never have to mess with it again.

Thanks,
Matt

-- 
Matthew McNaney
Electronic Student Services
Appalachian State University
http://phpwebsite.appstate.edu

Re: [Phpwebsite-developers] Language

[Peter H. <he...@gm...>]

Hi Matt,
Post your release candidate and hopefully I will test as soon as possible
since the current 1.1 isn't really fully usable in german.

Peter

-----Original Message-----
From: php...@li...
[mailto:php...@li...] On Behalf Of
Matthew McNaney
Sent: Monday, March 26, 2007 4:17 PM
To: phpWebSite Developers
Subject: [Phpwebsite-developers] Language

Hi all,

I am about to make a large change to the 1.x code base. I finally
received some help with testing the translation mechanism. You can read
about it here:

http://sourceforge.net/forum/message.php?msg_id=4141584

The solution was provided here by Ortwin Pinke:
http://sourceforge.net/forum/message.php?msg_id=4209670

Basically, the translation function will change from
_('Translate')

to 

dgettext('mod_name', 'Translate')

I'm not crazy about the longer function name, however this allows us to
remove the translate function from Init.php.

According to Ortwin, this also overcomes some caching problems with php.
The multiple bindtextdomain commands required by the translate function
caused inconsistent results.

I will be starting this change over soon. Please speak up if you have
any concerns.

Thanks,
Matt

-- 
Matthew McNaney
Electronic Student Services
Appalachian State University
http://phpwebsite.appstate.edu


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Phpwebsite-developers mailing list
Php...@li...
https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers

Re: [Phpwebsite-developers] Language

[Shaun M. <sh...@ae...>]

On 26 Mar 2007, at 15:17, Matthew McNaney wrote:

>
> Basically, the translation function will change from
> _('Translate')
>
> to
>
> dgettext('mod_name', 'Translate')
>
> I'm not crazy about the longer function name, however this allows  
> us to
> remove the translate function from Init.php.
>

Euuw! It was really elegant before. The new way makes coding a pain  
in the eyeballs and I'm not convinced it's a good idea to slavishly  
stick to gettext which is often not available on cheaper hosting  
accounts.

I was going to suggest http://pear.php.net/package/Translation2 but  
it fails the no.1 test - THERE'S NO FUNCTION TO TRANSLATE TEXT!  
Instead you pass in string_IDs Doh!

Then I was going to suggest doing what Code Igniter do as it's bound  
to be light and fast - http://codeigniter.com/user_guide/libraries/ 
language.html - but that does it the way PEAR does using IDs but much  
lighter.

I think overlooking the elegance of the old method would be a mistake.



Shaun
aegis design - http://www.aegisdesign.co.uk
aegis hosting - http://www.aegishosting.co.uk

[Phpwebsite-developers] Language

[Matthew M. <ma...@tu...>]

Hi all,

I am about to make a large change to the 1.x code base. I finally
received some help with testing the translation mechanism. You can read
about it here:

http://sourceforge.net/forum/message.php?msg_id=4141584

The solution was provided here by Ortwin Pinke:
http://sourceforge.net/forum/message.php?msg_id=4209670

Basically, the translation function will change from
_('Translate')

to 

dgettext('mod_name', 'Translate')

I'm not crazy about the longer function name, however this allows us to
remove the translate function from Init.php.

According to Ortwin, this also overcomes some caching problems with php.
The multiple bindtextdomain commands required by the translate function
caused inconsistent results.

I will be starting this change over soon. Please speak up if you have
any concerns.

Thanks,
Matt

-- 
Matthew McNaney
Electronic Student Services
Appalachian State University
http://phpwebsite.appstate.edu

Re: [Phpwebsite-developers] UI Design

[Verdon V. <ve...@ve...>]

LOL... that's why I still play hockey at my advanced age!
verdon

On 14-Mar-07, at 5:33 PM, ma...@tu... wrote:

>> Rough day Matt?
>>
>> :)
>
> Heh :D
>
> Uh sorry for venting.
>
> Matt
>
> ---------------------------------------------------------------------- 
> ---
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to  
> share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php? 
> page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers

Re: [Phpwebsite-developers] UI Design

[<ma...@tu...>]

> Rough day Matt?
>
> :)

Heh :D

Uh sorry for venting.

Matt

Re: [Phpwebsite-developers] UI Design

[Verdon V. <ve...@ve...>]

Rough day Matt?

:)


On 14-Mar-07, at 2:12 PM, Matthew McNaney wrote:

> It was a good article but I felt it was repeating the obvious: try not
> to make your interface complicated. He might as well write "Preventing
> Syntax Errors: Your Guide to Program Popularity!" I don't think anyone
> sets out to make a complicated interface (except for the people who
> write Banner). I set out with a goal and the interface "happens."
> Sometimes, I misjudge the simplicity for others.
> For example, some people think text messaging is great. I think it is
> ridiculous. To me its a step backwards.
>
> And just because something is easier and similar, doesn't mean it
> fulfills the same purpose as the original. The writer failed to  
> mention
> how much more complicated instant messaging is if the recipient isn't
> online and if you need to read the message again later. Email is  
> better
> in this capacity.
>
> Not to demean the article but as features accumulate and man-hours
> dwindle, form falls to functionality.
>
> And while I'm griping here, users, who learned to work around your
> earlier clunky interface, tend to balk at efforts to streamline future
> versions.
>
> Anyway, sorry to bitch Shaun and thanks for sharing the article.
>
> Matt
>
> On Wed, 2007-03-14 at 13:31 -0400, Verdon Vaillancourt wrote:
>> Thanks for this Shaun,
>>
>> Fascinating read. Did you know that Tantek (unless there's another
>> Tantek around) was also on the IE 5.x for Mac dev team?
>>
>> verdon
>>
>> On 13-Mar-07, at 9:39 AM, Shaun Murray wrote:
>>
>>> Since we've been doing a fair amount of UI redesign and rethinking
>>> lately, this blog post by Tantek (of Microformat fame) seemed timely
>>>
>>> For your coffee break reading...
>>>
>>> http://tantek.com/log/2007/02.html#d19t1813
>>>
>>>
>>>
>>> Shaun
>>> aegis design - http://www.aegisdesign.co.uk
>>> aegis hosting - http://www.aegishosting.co.uk
>>>
>>>
>>> -------------------------------------------------------------------- 
>>> --
>>> ---
>>> Take Surveys. Earn Cash. Influence the Future of IT
>>> Join SourceForge.net's Techsay panel and you'll get the chance to
>>> share your
>>> opinions on IT & business topics through brief surveys-and earn cash
>>> http://www.techsay.com/default.php?
>>> page=join.php&p=sourceforge&CID=DEVDEV
>>> _______________________________________________
>>> Phpwebsite-developers mailing list
>>> Php...@li...
>>> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
>>
>>
>> --------------------------------------------------------------------- 
>> ----
>> Take Surveys. Earn Cash. Influence the Future of IT
>> Join SourceForge.net's Techsay panel and you'll get the chance to  
>> share your
>> opinions on IT & business topics through brief surveys-and earn cash
>> http://www.techsay.com/default.php? 
>> page=join.php&p=sourceforge&CID=DEVDEV
>> _______________________________________________
>> Phpwebsite-developers mailing list
>> Php...@li...
>> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
> -- 
> Matthew McNaney
> Electronic Student Services
> Appalachian State University
> http://phpwebsite.appstate.edu
>
>
> ---------------------------------------------------------------------- 
> ---
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to  
> share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php? 
> page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers

Re: [Phpwebsite-developers] UI Design

[Matthew M. <ma...@tu...>]

It was a good article but I felt it was repeating the obvious: try not
to make your interface complicated. He might as well write "Preventing
Syntax Errors: Your Guide to Program Popularity!" I don't think anyone
sets out to make a complicated interface (except for the people who
write Banner). I set out with a goal and the interface "happens."
Sometimes, I misjudge the simplicity for others.
For example, some people think text messaging is great. I think it is
ridiculous. To me its a step backwards.

And just because something is easier and similar, doesn't mean it
fulfills the same purpose as the original. The writer failed to mention
how much more complicated instant messaging is if the recipient isn't
online and if you need to read the message again later. Email is better
in this capacity.

Not to demean the article but as features accumulate and man-hours
dwindle, form falls to functionality.

And while I'm griping here, users, who learned to work around your
earlier clunky interface, tend to balk at efforts to streamline future
versions.

Anyway, sorry to bitch Shaun and thanks for sharing the article.

Matt

On Wed, 2007-03-14 at 13:31 -0400, Verdon Vaillancourt wrote:
> Thanks for this Shaun,
> 
> Fascinating read. Did you know that Tantek (unless there's another  
> Tantek around) was also on the IE 5.x for Mac dev team?
> 
> verdon
> 
> On 13-Mar-07, at 9:39 AM, Shaun Murray wrote:
> 
> > Since we've been doing a fair amount of UI redesign and rethinking
> > lately, this blog post by Tantek (of Microformat fame) seemed timely
> >
> > For your coffee break reading...
> >
> > http://tantek.com/log/2007/02.html#d19t1813
> >
> >
> >
> > Shaun
> > aegis design - http://www.aegisdesign.co.uk
> > aegis hosting - http://www.aegishosting.co.uk
> >
> >
> > ---------------------------------------------------------------------- 
> > ---
> > Take Surveys. Earn Cash. Influence the Future of IT
> > Join SourceForge.net's Techsay panel and you'll get the chance to  
> > share your
> > opinions on IT & business topics through brief surveys-and earn cash
> > http://www.techsay.com/default.php? 
> > page=join.php&p=sourceforge&CID=DEVDEV
> > _______________________________________________
> > Phpwebsite-developers mailing list
> > Php...@li...
> > https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
> 
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
-- 
Matthew McNaney
Electronic Student Services
Appalachian State University
http://phpwebsite.appstate.edu

Re: [Phpwebsite-developers] UI Design

[Shaun M. <sh...@ae...>]

On 14 Mar 2007, at 17:31, Verdon Vaillancourt wrote:

> Thanks for this Shaun,
>
> Fascinating read. Did you know that Tantek (unless there's another
> Tantek around) was also on the IE 5.x for Mac dev team?
>

Yep. Clever guy sadly wasted when he was at Microsoft when  
development on IE stalled.


Shaun
aegis design - http://www.aegisdesign.co.uk
aegis hosting - http://www.aegishosting.co.uk

Re: [Phpwebsite-developers] UI Design

[Verdon V. <ve...@gm...>]

Thanks for this Shaun,

Fascinating read. Did you know that Tantek (unless there's another  
Tantek around) was also on the IE 5.x for Mac dev team?

verdon

On 13-Mar-07, at 9:39 AM, Shaun Murray wrote:

> Since we've been doing a fair amount of UI redesign and rethinking
> lately, this blog post by Tantek (of Microformat fame) seemed timely
>
> For your coffee break reading...
>
> http://tantek.com/log/2007/02.html#d19t1813
>
>
>
> Shaun
> aegis design - http://www.aegisdesign.co.uk
> aegis hosting - http://www.aegishosting.co.uk
>
>
> ---------------------------------------------------------------------- 
> ---
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to  
> share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php? 
> page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers

[Phpwebsite-developers] UI Design

[Shaun M. <sh...@ae...>]

Since we've been doing a fair amount of UI redesign and rethinking  
lately, this blog post by Tantek (of Microformat fame) seemed timely

For your coffee break reading...

http://tantek.com/log/2007/02.html#d19t1813



Shaun
aegis design - http://www.aegisdesign.co.uk
aegis hosting - http://www.aegishosting.co.uk

Re: [Phpwebsite-developers] Curious about menu templates

[Verdon V. <ve...@gm...>]

I've been looking at the menu a bit and I think the challenge is going
to be more than just the tpl files. I suspect it might be possible to
get the floats for the admin ajaxy stuff to work, in a list, by making
the <li>'s display:block... but I think the bigger issue is that a
menu in an expanded shape won't render as a nestled list and that is
important for most styling techniques as well as being semantically
correct.

I.E.

This is good...

<ul>
 <li>Level One Item</li>
 <li>Level One Item
       <ul>
            <li>Level Two Item</li>
            <li>Level Two Item
                  <ul>
                      <li>Level Three Item</li>
                   </ul>
               </li>
            <li>Level Two Item</li>
            <li>Level Two Item</li>
       </ul>
      </li>
 <li>Level One Item</li>
 <li>Level One Item</li>
</ul>

This is not...

<ul>
 <li class="menu-level1">Level One Item</li>
 <li class="menu-level1">Level One Item</li>
 <li class="menu-level2">Level Two Item</li>
 <li class="menu-level2">Level Two Item</li>
 <li class="menu-level3">Level Three Item</li>
 <li class="menu-level2">Level Two Item</li>
 <li class="menu-level1">Level One Item</li>
 <li class="menu-level1">Level One Item</li>
</ul>

I've looked at /mod/menu/class/Menu_Link.php and it looks like there's
some capacity for child links, but I couldn't quite figure out how or
if that was being used. I think the site_map function is getting
right, but again, I've only had a really quick look.

Anywise, just some food for thought.
verdon


On 3/1/07, Shaun Murray <sh...@ae...> wrote:
>
> On 1 Mar 2007, at 13:15, Matthew McNaney wrote:
>
> > Originally it was but I couldn't get the floats the way I wanted.
> > Since
> > you were able to refine the control panel perhaps you'd like a
> > crack at
> > the menu as well? :)
>
> Ooh, Gauntlet slapped down. Gauntlet picked up.
>
> I'll have a look sometime next week after I've finished up with
> 0.10.3 and phpwsBB.
>
>
> Shaun

Re: [Phpwebsite-developers] phpinfo exploit

[Verdon V. <ve...@ve...>]

That's an interesting idea and the sort of approach zen-cart takes  
for it's admin directory.
verdon

On 5-Mar-07, at 2:31 PM, Eloi George wrote:

> Same here.
> How about if config.php holds /setup's new name?  Then Branch will  
> still
> work.
> -Eloi George-
>
>
> Verdon Vaillancourt wrote:
>> I usually just chmod mine to 000 or rename it to something obscure.
>>
>> On 5-Mar-07, at 11:26 AM, Shaun Murray wrote:
>>
>>
>>> The only problem with telling people to delete their Setup directory
>>> is then Branch no longer creates branches since it copies from /
>>> setup. This is the same problem Fantastico users hit up against as
>>> their packaged install removes /setup after it's finished, amongst
>>> other problems (like missing a couple of modules and being out of
>>> date for security patches).
>>>
>>> There's maybe something to fix there for Branch and quite possibly
>>> Fantastico need to keep up.
>>>
>>>
>>> Shaun
>>> aegis design - http://www.aegisdesign.co.uk
>>> aegis hosting - http://www.aegishosting.co.uk
>>>
>>>
>>> -------------------------------------------------------------------- 
>>> --
>>> ---
>>> Take Surveys. Earn Cash. Influence the Future of IT
>>> Join SourceForge.net's Techsay panel and you'll get the chance to
>>> share your
>>> opinions on IT & business topics through brief surveys-and earn cash
>>> http://www.techsay.com/default.php?
>>> page=join.php&p=sourceforge&CID=DEVDEV
>>> _______________________________________________
>>> Phpwebsite-developers mailing list
>>> Php...@li...
>>> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
>>>
>>
>>
>> --------------------------------------------------------------------- 
>> ----
>> Take Surveys. Earn Cash. Influence the Future of IT
>> Join SourceForge.net's Techsay panel and you'll get the chance to  
>> share your
>> opinions on IT & business topics through brief surveys-and earn cash
>> http://www.techsay.com/default.php? 
>> page=join.php&p=sourceforge&CID=DEVDEV
>> _______________________________________________
>> Phpwebsite-developers mailing list
>> Php...@li...
>> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
>>
>>
>>
>>
>
>
> ---------------------------------------------------------------------- 
> ---
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to  
> share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php? 
> page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers

Re: [Phpwebsite-developers] phpinfo exploit

[Eloi G. <el...@re...>]

Same here. 
How about if config.php holds /setup's new name?  Then Branch will still 
work.
-Eloi George-


Verdon Vaillancourt wrote:
> I usually just chmod mine to 000 or rename it to something obscure.
>
> On 5-Mar-07, at 11:26 AM, Shaun Murray wrote:
>
>   
>> The only problem with telling people to delete their Setup directory
>> is then Branch no longer creates branches since it copies from /
>> setup. This is the same problem Fantastico users hit up against as
>> their packaged install removes /setup after it's finished, amongst
>> other problems (like missing a couple of modules and being out of
>> date for security patches).
>>
>> There's maybe something to fix there for Branch and quite possibly
>> Fantastico need to keep up.
>>
>>
>> Shaun
>> aegis design - http://www.aegisdesign.co.uk
>> aegis hosting - http://www.aegishosting.co.uk
>>
>>
>> ---------------------------------------------------------------------- 
>> ---
>> Take Surveys. Earn Cash. Influence the Future of IT
>> Join SourceForge.net's Techsay panel and you'll get the chance to  
>> share your
>> opinions on IT & business topics through brief surveys-and earn cash
>> http://www.techsay.com/default.php? 
>> page=join.php&p=sourceforge&CID=DEVDEV
>> _______________________________________________
>> Phpwebsite-developers mailing list
>> Php...@li...
>> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
>>     
>
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
>
>
>
>   

Re: [Phpwebsite-developers] phpinfo exploit

[Matthew M. <ma...@tu...>]

Good point. I made a note on the site.

Matt

On Mon, 2007-03-05 at 16:26 +0000, Shaun Murray wrote:
> The only problem with telling people to delete their Setup directory  
> is then Branch no longer creates branches since it copies from / 
> setup. This is the same problem Fantastico users hit up against as  
> their packaged install removes /setup after it's finished, amongst  
> other problems (like missing a couple of modules and being out of  
> date for security patches).
> 
> There's maybe something to fix there for Branch and quite possibly  
> Fantastico need to keep up.
> 
> 
> Shaun
> aegis design - http://www.aegisdesign.co.uk
> aegis hosting - http://www.aegishosting.co.uk
> 
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
-- 
Matthew McNaney
Electronic Student Services
Appalachian State University
http://phpwebsite.appstate.edu

Re: [Phpwebsite-developers] phpinfo exploit

[Verdon V. <ve...@ve...>]

I usually just chmod mine to 000 or rename it to something obscure.

On 5-Mar-07, at 11:26 AM, Shaun Murray wrote:

> The only problem with telling people to delete their Setup directory
> is then Branch no longer creates branches since it copies from /
> setup. This is the same problem Fantastico users hit up against as
> their packaged install removes /setup after it's finished, amongst
> other problems (like missing a couple of modules and being out of
> date for security patches).
>
> There's maybe something to fix there for Branch and quite possibly
> Fantastico need to keep up.
>
>
> Shaun
> aegis design - http://www.aegisdesign.co.uk
> aegis hosting - http://www.aegishosting.co.uk
>
>
> ---------------------------------------------------------------------- 
> ---
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to  
> share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php? 
> page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers

Re: [Phpwebsite-developers] phpinfo exploit

[Verdon V. <ve...@ve...>]

scary thing is just do a 'locate info.php' on an average hosting  
server with a variety of clients and php apps on it and see what kind  
of results you get

verdon

On 5-Mar-07, at 5:11 AM, Shaun Murray wrote:

> http://www.php-security.org/MOPB/MOPB-08-2007.html
>
> Just in case anyone's leaving setup/phpinfo.php around. Better not,
> if you're on php 4.4.3 to the latest 4.4.6.
>
> php5 is fixed
>
> It might be worth watching the 'Month of PHP Bugs'. They're all in
> PHP, not in applications running on it.
>
> http://www.php-security.org/index.html
>
>
> Shaun
> aegis design - http://www.aegisdesign.co.uk
> aegis hosting - http://www.aegishosting.co.uk
>
>
> ---------------------------------------------------------------------- 
> ---
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to  
> share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php? 
> page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers

Re: [Phpwebsite-developers] phpinfo exploit

[Shaun M. <sh...@ae...>]

The only problem with telling people to delete their Setup directory  
is then Branch no longer creates branches since it copies from / 
setup. This is the same problem Fantastico users hit up against as  
their packaged install removes /setup after it's finished, amongst  
other problems (like missing a couple of modules and being out of  
date for security patches).

There's maybe something to fix there for Branch and quite possibly  
Fantastico need to keep up.


Shaun
aegis design - http://www.aegisdesign.co.uk
aegis hosting - http://www.aegishosting.co.uk

Re: [Phpwebsite-developers] phpinfo exploit

[Matthew M. <ma...@tu...>]

I added an announcement to the home page.

Thanks all,
Matt

On Mon, 2007-03-05 at 09:02 -0500, Verdon Vaillancourt wrote:
> Some basic tips about securing your set-up directory might be a good  
> idea, whether or not you mention this particular php exploit.
> verdon
> 
> On 5-Mar-07, at 7:38 AM, Matthew McNaney wrote:
> 
> > That's ugly.
> >
> > Should we post this on the home site?
> >
> > Matt
> >
> > On Mon, 2007-03-05 at 10:11 +0000, Shaun Murray wrote:
> >> http://www.php-security.org/MOPB/MOPB-08-2007.html
> >>
> >> Just in case anyone's leaving setup/phpinfo.php around. Better not,
> >> if you're on php 4.4.3 to the latest 4.4.6.
> >>
> >> php5 is fixed
> >>
> >> It might be worth watching the 'Month of PHP Bugs'. They're all in
> >> PHP, not in applications running on it.
> >>
> >> http://www.php-security.org/index.html
> >>
> >>
> >> Shaun
> >> aegis design - http://www.aegisdesign.co.uk
> >> aegis hosting - http://www.aegishosting.co.uk
> >>
> >>
> >> --------------------------------------------------------------------- 
> >> ----
> >> Take Surveys. Earn Cash. Influence the Future of IT
> >> Join SourceForge.net's Techsay panel and you'll get the chance to  
> >> share your
> >> opinions on IT & business topics through brief surveys-and earn cash
> >> http://www.techsay.com/default.php? 
> >> page=join.php&p=sourceforge&CID=DEVDEV
> >> _______________________________________________
> >> Phpwebsite-developers mailing list
> >> Php...@li...
> >> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
> > -- 
> > Matthew McNaney
> > Electronic Student Services
> > Appalachian State University
> > http://phpwebsite.appstate.edu
> >
> >
> > ---------------------------------------------------------------------- 
> > ---
> > Take Surveys. Earn Cash. Influence the Future of IT
> > Join SourceForge.net's Techsay panel and you'll get the chance to  
> > share your
> > opinions on IT & business topics through brief surveys-and earn cash
> > http://www.techsay.com/default.php? 
> > page=join.php&p=sourceforge&CID=DEVDEV
> > _______________________________________________
> > Phpwebsite-developers mailing list
> > Php...@li...
> > https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
> 
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
-- 
Matthew McNaney
Electronic Student Services
Appalachian State University
http://phpwebsite.appstate.edu

Re: [Phpwebsite-developers] phpinfo exploit

[Verdon V. <ve...@gm...>]

Some basic tips about securing your set-up directory might be a good  
idea, whether or not you mention this particular php exploit.
verdon

On 5-Mar-07, at 7:38 AM, Matthew McNaney wrote:

> That's ugly.
>
> Should we post this on the home site?
>
> Matt
>
> On Mon, 2007-03-05 at 10:11 +0000, Shaun Murray wrote:
>> http://www.php-security.org/MOPB/MOPB-08-2007.html
>>
>> Just in case anyone's leaving setup/phpinfo.php around. Better not,
>> if you're on php 4.4.3 to the latest 4.4.6.
>>
>> php5 is fixed
>>
>> It might be worth watching the 'Month of PHP Bugs'. They're all in
>> PHP, not in applications running on it.
>>
>> http://www.php-security.org/index.html
>>
>>
>> Shaun
>> aegis design - http://www.aegisdesign.co.uk
>> aegis hosting - http://www.aegishosting.co.uk
>>
>>
>> --------------------------------------------------------------------- 
>> ----
>> Take Surveys. Earn Cash. Influence the Future of IT
>> Join SourceForge.net's Techsay panel and you'll get the chance to  
>> share your
>> opinions on IT & business topics through brief surveys-and earn cash
>> http://www.techsay.com/default.php? 
>> page=join.php&p=sourceforge&CID=DEVDEV
>> _______________________________________________
>> Phpwebsite-developers mailing list
>> Php...@li...
>> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers
> -- 
> Matthew McNaney
> Electronic Student Services
> Appalachian State University
> http://phpwebsite.appstate.edu
>
>
> ---------------------------------------------------------------------- 
> ---
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to  
> share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php? 
> page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers