phpwebsite-developers

[Fwd: Re: [Phpwebsite-developers] Wow nice job Alessandro]

[Matthew M. <ma...@tu...>]

>         Mamma mia...Alessandro you kick ass.  :^)

Agreed! Good work from everyone. This is the most outside development we
have received in a while.

> I was going to work on the upgrade script, but
> was wondering what  others thought about the implementation of phpws_
> as a standard default for  installations?    This would organize
> everything, but I'm sure we would get  lots of complaints if other
> plugins were not set to work with the table  prefix.   Any thoughts?

The default should probably be "". That way none of the current plug-ins
would break. If someone wanted to use the prefix then they would do so
knowing the consequence (aka they have to fix the unsupported
mods). 'phpws_' could be the example prefix but it should be commented
out. As we get more people on the prefix bandwagon, we can make it a
permanent addition. I think one or two upgrades would be enough.

>         Postnuke and phpnuke have recently been reported to have
>         insecure
> cookies with passwords added to their cookie.   Dangerous.  :^)

Yup. That is why we went with sessions. However, lets not get cocky ;)
Make redundant checks and always keep hackers in mind when coding.

>         So...I'm curious, with the guidelines requesting permission to
> work on modules written by another developer...should we let the bug be
>  handled by the person who wrote the module or take them on if we feel
> we  can deal with it?

Write the developer and cc to me or Brian. If you don't get a response
back, go for it.

Best regards,
Matt


Matthew McNaney
Internet Systems Architect
Electronic Student Services
Email: ma...@tu...
URL: http://phpwebsite.appstate.edu
Phone: 828-262-6493



Matthew McNaney
Internet Systems Architect
Electronic Student Services
Email: ma...@tu...
URL: http://phpwebsite.appstate.edu
Phone: 828-262-6493

Re: [Fwd: Re: [Phpwebsite-developers] Wow nice job Alessandro]

[Alessandro P. (T. / J578) <al...@ti...>]

On Wed, 2001-11-28 at 21:46, Matthew McNaney wrote:
> >         Mamma mia...Alessandro you kick ass.  :^)
> 
> Agreed! Good work from everyone. This is the most outside development we
> have received in a while.
Thanks you all... and kudos to all the other developers :>
I'm not a superman... we are a superteam ^_-

> > I was going to work on the upgrade script, but
> > was wondering what  others thought about the implementation of phpws_
> > as a standard default for  installations?    This would organize
> > everything, but I'm sure we would get  lots of complaints if other
> > plugins were not set to work with the table  prefix.   Any thoughts?
> 
> The default should probably be "". That way none of the current plug-ins
> would break.
I agree.

> >         Postnuke and phpnuke have recently been reported to have
> >         insecure
> > cookies with passwords added to their cookie.   Dangerous.  :^)
phpnuke is really badly-written, no surprises it is so buggy. Then, due
to the fact that postnuke is a fork of phpnuke, it inherited its flaws.

> Yup. That is why we went with sessions. However, lets not get cocky ;)
> Make redundant checks and always keep hackers in mind when coding.
I agree also on that !

Regards,
Alessandro

--
Alessandro "TXM" Pisani - al...@ti... - ICQ #2209087
INWO Project coordinator http://www.inwoproject.f2s.com

"I will carry you through, hicking and screaming,
 and in the end you will thank me"
 - Tyler Durden [from "Fight Club"]