Re: Welcome Sudhaker !
- 2007/12/10 14:24:54
- sudhaker
Thanks everyone for this warm welcome! It is really my honor to become part of this great team 
Our different mailing lists
- 2007/12/10 13:44:11
- marcan
Hi everyone,
Just to inform you that we have 4 mailing lists for you to subscribe if you want to stay informed of :
- SVN Commits
- Bug tracker items
- Feature tracker items
- Task items
Simply go here to subscribe or see the archived : Mailing Lists Summary
Cheers!
Adding a Remember Me on this very site
- 2007/12/10 13:41:34
- marcan
QUick thing,
When this site becomes community.impresscms.org, would it be possible to add Gijoe's remember me feature ? I think I have loged here about 30 times today !
Thoughts
Re: Welcome Sudhaker !
- 2007/12/10 13:18:30
- herko
Sudhaker, isn't your specialty federated sign in? I would love to see your views on what the best pluggable and expandable login system would be for a new CMS like this one...
Herko
p.s. this is a 'welcome to the team' post of course
Re: Auditing Code (security wise)
- 2007/12/10 13:16:50
- marcan
Quote:
I don't think queryf bypasses the text sanitizer; it just allows non-SELECT queries, such as UPDATE and INSERT, to be done when processing a GET request. But I agree that queryf should only be used in special situations when it's really needed.
Correct. XOOPS database factory automatically prevent UPDATE and DELETE query to be used in a GET request. So if you absolutely need to use on of these queries in a GET request, then you would need to use queryF().
For example, updating the counter of an article when a user gets to the page would need a queryF as the user is not accessing the article via a POST request...
But indeed, queryF needs to be used with extra care. The concept behind is that all queries that changes the database need to be within a POST request.
Re: usage of rel="external nofollow"
- 2007/12/10 13:16:22
- herko
I'll look into this, as this is a webstandards issue. Thanks for proviing the quick and easy solution at the start It makes it easier 
Herko
Re: Welcome Kurak !
- 2007/12/10 13:10:56
- Vaughan
welcome kurak :) hope you're ready to be impressed ;)
(excuse the pun) lol
The beauty of a living thing is not the atoms that go into it, but the way those atoms are put together!
Re: Welcome Sudhaker !
- 2007/12/10 13:07:32
- Vaughan
super, welcome sudhaker :)
The beauty of a living thing is not the atoms that go into it, but the way those atoms are put together!
usage of rel="external nofollow"
- 2007/12/10 13:03:23
- Vaughan
I added the js for allowing rel="external", rel="nofollow" & rel="external nofollow" in a href tags to the core earlier in reboot.
I think it would be ideal to replace all occurences of target="_blank" in the core.
but (yeah there's always a but) lol
does anyone have any suggestions or advice on exactly which rel value to use in certain places?
for example:
rel="external" will act exactly like target="_blank" and open the link in a new window, web crawlers and search engine bots will also then follow that link and score it.
rel="nofollow" will open the link in the same window, but tells the crawlers and bots to not follow the link and/or score the link either.
rel="external nofollow" will do a combination of the above, the link will open in a new window but crawlers & bots are told not to follow/score the link/destination etc.
so where should each be used properly? when should a bot be told not to score the link/destination & when is it acceptable for the bot to score it?
Re: Auditing Code (security wise)
- 2007/12/10 12:52:53
- Vaughan
ahh yes you are right Dave :) i knew it was to do with the GET requests but wasn't 100% sure if it bypassed the sanitizer or not.. thinking about it now tho, i can't understand why i thought it would do as that would be nightmare for abuse.
The beauty of a living thing is not the atoms that go into it, but the way those atoms are put together!
Re: Auditing Code (security wise)
- 2007/12/10 12:27:19
- Dave_L
I don't think queryf bypasses the text sanitizer; it just allows non-SELECT queries, such as UPDATE and INSERT, to be done when processing a GET request. But I agree that queryf should only be used in special situations when it's really needed.
Re: Welcome Kurak !
- 2007/12/10 12:12:19
- kurak_bu
These are not empty words: it is an honour to join such good team.
1.Forgive me my english...
2.Ready to report bugs :P
Re: Auditing Code (security wise)
- 2007/12/10 12:09:41
- Vaughan
Quote:
Should we also review where queryf is used in key modules, as this is often misused by developers who want a quick way to access core tables.
Herko
yes, i think that should also be done aswell being as queryF bypasses the text sanitizer etc. good point :)
Re: A proposition for a true opened developement !
- 2007/12/10 11:56:00
- Dave_L
Marcan:
I guess it's worth a try as an experiment.
Re: Welcome Kurak !
- 2007/12/10 11:50:11
- JMorris
Welcome!
ImpressCMS Professional Services: INBOX International inc.
James Morris Online | Frolicking on the playground that is the Internet...
Re: Welcome Sudhaker !
- 2007/12/10 11:49:03
- JMorris
Welcome!
ImpressCMS Professional Services: INBOX International inc.
James Morris Online | Frolicking on the playground that is the Internet...
Re: Hello ...
- 2007/12/10 11:47:22
- JMorris
Welcome! Another *NIX person definitely needed! 
ImpressCMS Professional Services: INBOX International inc.
James Morris Online | Frolicking on the playground that is the Internet...
Friendly URLS
- 2007/12/10 11:44:46
- marcan
Whatever direction ImpressCMS will go, I'm pretty sure that friendly URL will be something we need.
Is there anyone here who would like to take on this task ?
ImpressCMS is a multi-language content management system for the web. It is community-built, an open source project and based on the common web technologies of PHP and MySQL.
More information
