From: <vb...@us...> - 2002-09-09 04:20:00
|
Update of /cvsroot/webnotes/web In directory usw-pr-cvs1:/tmp/cvs-serv22386 Modified Files: download.php security.php side_menu.php Log Message: Added security note, updated download page, removed unavailable links in side_menu.php Index: download.php =================================================================== RCS file: /cvsroot/webnotes/web/download.php,v retrieving revision 1.3 retrieving revision 1.4 diff -u -d -r1.3 -r1.4 --- download.php 8 Sep 2002 06:12:53 -0000 1.3 +++ download.php 9 Sep 2002 04:19:57 -0000 1.4 @@ -3,13 +3,15 @@ <span class="page_title">Download</span> <hr size="1" noshade="noshade" width="100%"> -<p>Use the link to get to the download site for phpWebNotes. The package is kept in .tar.gz which any reasonable (unix systems, WInzip, Stuffit) decompression program can handle.</p> +<p>Use the link below to visit the download site for phpWebNotes. The package is kept in .tar.gz which any reasonable (unix systems, UltimateZip, Winzip, StuffIt) decompression program can handle.</p> + <p align="center"><a href="http://sourceforge.net/project/showfiles.php?group_id=15381"><strong>Download phpWebNotes</strong></a></p> <p>Please check out the <a href="release.php">Release Notes</a> for important notices and information.</p> <span class="page_title">Mirroring</span> <hr size="1" noshade="noshade" width="100%"> -<p>I would prefer that you sign up on the announcements <a href="mailinglists.php">mailing list</a> if you wish to mirror the software. You should also have a link back to this page if you offer phpWebNotes for download.</p> -<?php include('footer.php') ?> +<p>It is recommended to sign up on the <a href="mailinglists.php">announcements</a> mailing list, if you wish to mirror the software. You should also have a link back to this page.</p> + +<?php include('footer.php') ?> \ No newline at end of file Index: security.php =================================================================== RCS file: /cvsroot/webnotes/web/security.php,v retrieving revision 1.3 retrieving revision 1.4 diff -u -d -r1.3 -r1.4 --- security.php 8 Sep 2002 06:12:53 -0000 1.3 +++ security.php 9 Sep 2002 04:19:57 -0000 1.4 @@ -3,7 +3,10 @@ <span class="page_title">Security</span> <hr size="1" noshade="noshade" width="100%"> +<p><strong>Default Account</strong> - Information</p> +<p>It is very important to remove the default account or change its password before rolling phpWebNotes onto your webserver for general use. This is due to the fact that the default account name/password are known to anybody who is familiar with phpWebNotes, and are easy to guess by others!</p> + <p><strong>Passwords</strong> - Information</p> -<p>Currently the passwords are run through the crypt() function before being stored. crypt() is a one way function; this means that you cannot obtain the original password from the crypt()ed password. This ensures that the user passwords are not readable should the database be cracked into (Note: this doesn't mean they are uncrackable, enough time and processing power and brute force will reveal most passwords). However, your username and password are most likely being transmitted in clear text. You will have to use a ssl (https) connection to protect transmission.</p> +<p>Currently the passwords are run through the crypt() function before being stored. crypt() is a one way function; this means that you cannot obtain the original password from the crypt()ed password. This ensures that the user passwords are not readable should the database be cracked into (<em>Note: this doesn't mean they are uncrackable, enough time and processing power and brute force will reveal most passwords</em>). However, your username and password are most likely being transmitted in clear text. You will have to use a SSL (https) connection to protect transmission.</p> <?php include('footer.php') ?> Index: side_menu.php =================================================================== RCS file: /cvsroot/webnotes/web/side_menu.php,v retrieving revision 1.9 retrieving revision 1.10 diff -u -d -r1.9 -r1.10 --- side_menu.php 9 Sep 2002 00:35:44 -0000 1.9 +++ side_menu.php 9 Sep 2002 04:19:57 -0000 1.10 @@ -8,16 +8,16 @@ <td class="menu_items"> <a class="big" href="index.php">Home</a><br /> <a class="big" href="demo.php">Demo</a><br /> - <a class="big" href="tour.php">Admin Tour</a><br /> - About<br /> + <!-- <a class="big" href="tour.php">Admin Tour</a><br /> --> + <!-- About<br /> --> <a class="big" href="download.php">Download</a><br /> - Screenshots<br /> - Author<br /> + <!-- Screenshots<br /> --> + <!-- Author<br /> --> <a class="big" href="credits.php">Credits</a><br /> - Requirements<br /> + <!-- Requirements<br /> --> <a class="big" href="release.php">Release Notes</a><br /> <a class="big" href="install.php">Installation</a><br /> - Upgrading<br /> + <!-- Upgrading<br /> --> <a class="big" href="changelog.php">ChangeLog</a><br /> <a class="big" href="links.php">Links</a><br /> </td> @@ -29,7 +29,7 @@ </tr> <tr> <td class="menu_items"> - IRC<br /> + <!-- IRC<br /> --> <a href="bugtracker.php">Bugtracker</a><br /> <a href="forums.php">Forums</a><br /> <a href="mailinglists.php">Mailing Lists</a><br /> |