iForum

Re: Welcome Sudhaker !

• 2007/12/10 14:24:54
• sudhaker

Thanks everyone for this warm welcome! It is really my honor to become part of this great team

Re: Adding a Remember Me on this very site

• 2007/12/10 14:16:56
• sudhaker

+1

Our different mailing lists

• 2007/12/10 13:44:11
• marcan

Hi everyone,

Just to inform you that we have 4 mailing lists for you to subscribe if you want to stay informed of :

- SVN Commits
- Bug tracker items
- Feature tracker items
- Task items

Simply go here to subscribe or see the archived : Mailing Lists Summary

Cheers!

Adding a Remember Me on this very site

• 2007/12/10 13:41:34
• marcan

QUick thing,

When this site becomes community.impresscms.org, would it be possible to add Gijoe's remember me feature ? I think I have loged here about 30 times today !

Thoughts

Re: Welcome Sudhaker !

• 2007/12/10 13:18:30
• herko

Sudhaker, isn't your specialty federated sign in? I would love to see your views on what the best pluggable and expandable login system would be for a new CMS like this one...

Herko

p.s. this is a 'welcome to the team' post of course

Re: Auditing Code (security wise)

• 2007/12/10 13:16:50
• marcan

Quote:

Correct. XOOPS database factory automatically prevent UPDATE and DELETE query to be used in a GET request. So if you absolutely need to use on of these queries in a GET request, then you would need to use queryF().

For example, updating the counter of an article when a user gets to the page would need a queryF as the user is not accessing the article via a POST request...

But indeed, queryF needs to be used with extra care. The concept behind is that all queries that changes the database need to be within a POST request.

Re: usage of rel="external nofollow"

• 2007/12/10 13:16:22
• herko

I'll look into this, as this is a webstandards issue. Thanks for proviing the quick and easy solution at the start It makes it easier

Herko

Re: Welcome Kurak !

• 2007/12/10 13:10:56
• Vaughan

welcome kurak :) hope you're ready to be impressed ;)

(excuse the pun) lol

Re: Welcome Sudhaker !

• 2007/12/10 13:07:32
• Vaughan

super, welcome sudhaker :)

usage of rel="external nofollow"

• 2007/12/10 13:03:23
• Vaughan

I added the js for allowing rel="external", rel="nofollow" & rel="external nofollow" in a href tags to the core earlier in reboot.

I think it would be ideal to replace all occurences of target="_blank" in the core.

but (yeah there's always a but) lol

does anyone have any suggestions or advice on exactly which rel value to use in certain places?

for example:

rel="external" will act exactly like target="_blank" and open the link in a new window, web crawlers and search engine bots will also then follow that link and score it.

rel="nofollow" will open the link in the same window, but tells the crawlers and bots to not follow the link and/or score the link either.

rel="external nofollow" will do a combination of the above, the link will open in a new window but crawlers & bots are told not to follow/score the link/destination etc.

so where should each be used properly? when should a bot be told not to score the link/destination & when is it acceptable for the bot to score it?

Re: Auditing Code (security wise)

• 2007/12/10 12:52:53
• Vaughan

ahh yes you are right Dave :) i knew it was to do with the GET requests but wasn't 100% sure if it bypassed the sanitizer or not.. thinking about it now tho, i can't understand why i thought it would do as that would be nightmare for abuse.

Re: Auditing Code (security wise)

• 2007/12/10 12:27:19
• Dave_L

I don't think queryf bypasses the text sanitizer; it just allows non-SELECT queries, such as UPDATE and INSERT, to be done when processing a GET request. But I agree that queryf should only be used in special situations when it's really needed.

Re: Welcome Kurak !

• 2007/12/10 12:12:19
• kurak_bu

These are not empty words: it is an honour to join such good team.
1.Forgive me my english...
2.Ready to report bugs :P

Re: Auditing Code (security wise)

• 2007/12/10 12:09:41
• Vaughan

Quote:

yes, i think that should also be done aswell being as queryF bypasses the text sanitizer etc. good point :)

Re: A proposition for a true opened developement !

• 2007/12/10 11:56:00
• Dave_L

Marcan:

I guess it's worth a try as an experiment.

Modules

• 2007/12/10 11:54:35
• picia05

Hi,
I think that some modules should be in standard like : news, forums,links,polls etc. and delevoped by core team.

Re: Welcome Kurak !

• 2007/12/10 11:50:11
• JMorris

Welcome!

Re: Welcome Sudhaker !

• 2007/12/10 11:49:03
• JMorris

Welcome!

Re: Hello ...

• 2007/12/10 11:47:22
• JMorris

Welcome! Another *NIX person definitely needed!

Friendly URLS

• 2007/12/10 11:44:46
• marcan

Whatever direction ImpressCMS will go, I'm pretty sure that friendly URL will be something we need.

Is there anyone here who would like to take on this task ?