May 2006 - Development - lists.drupal.org

nodeapi settings confusion with arrays
by Nick Wilson 28 May '06

28 May '06

Hi everyone, im having a spot of bother working out how to retrieve (or quite possibly set) an array in the 'settings' part of hook_nodeapi() --- code --- case "settings": $form .= form_checkboxes('Paranoia', 'paranoia_settings', array(variable_get('paranoia_settings', array('robots'))), array('robots' => 'Visible to robots?')); return = array('Paranoia' => $form); break; --- code --- It's enirely possible that my problem has more todo with doing the settings code wrongly, but im i want to do is this: * add an extra set of checkboxes (one for now) to set some vars that can be retrieved later. and the specific problem i'm having is this: * i can't seem to use variable_get() to get the value of the varialbe i've set to use for the default_value part of form_checkboxes - ie. if there is a value set for the array the checkbox should be ticked, if not, then not. Can someone please help me get back on track? many thanks.. -- Nick Wilson http://performancing.com/user/1

1 0

Release critical bugs for May 28, 2006
by drupal-devel＠drupal.org 28 May '06

28 May '06

/ bug reports 4.7 Beta/ CVS Errors age: 9 weeks 2 days url: http://drupal.org/node/55533 / bug reports The User Does Not Exist age: 1 week 3 days url: http://drupal.org/node/64053 More add buddy/delete buddy problems age: 9 weeks 4 days url: http://drupal.org/node/55230 / tasks Group access file queries need updating age: 10 weeks 1 day url: http://drupal.org/node/54570 / bug reports Localization problem age: 6 days 4 hours url: http://drupal.org/node/64847 No check for loading chatbox with other name age: 26 weeks 5 days url: http://drupal.org/node/38397 / support requests Devel intercepting OG emails? age: 6 days 14 hours url: http://drupal.org/node/64794 / bug reports event_start not being set age: 2 days 10 hours url: http://drupal.org/node/65609 Current day is off by one - events are fine age: 4 days 10 hours url: http://drupal.org/node/65210 Next link will not show for Junes events age: 2 weeks 6 hours url: http://drupal.org/node/63454 Fatal Error After activating "Browse Scheduled Events" in modules age: 3 weeks 2 days url: http://drupal.org/node/61920 Event module preventing me from uploading age: 5 weeks 1 day url: http://drupal.org/node/59775 INSTALL.txt incorrect age: 5 weeks 6 days url: http://drupal.org/node/59019 event calendars off by day/not respecting timezones - fix? ???? age: 8 weeks 5 days url: http://drupal.org/node/56189 Flexinode generates an error age: 9 weeks 4 days url: http://drupal.org/node/55135 Body text missing age: 10 weeks 2 days url: http://drupal.org/node/54383 Calendar subscribing not working age: 10 weeks 4 days url: http://drupal.org/node/54036 Drupal Event age: 22 weeks 4 days url: http://drupal.org/node/41833 Event start and end times not getting saved in database age: 23 weeks 2 days url: http://drupal.org/node/41300 Issues with list view for events age: 24 weeks 6 days url: http://drupal.org/node/39943 Database error keeps popping up age: 25 weeks 4 days url: http://drupal.org/node/39396 Date problem on calendar, off by a day age: 25 weeks 5 days url: http://drupal.org/node/39193 Events module bugs adding and changeing events age: 26 weeks 1 hour url: http://drupal.org/node/39016 gmdate() warnings on windows install age: 47 weeks 2 days url: http://drupal.org/node/26140 / support requests Hacking Event Code to do two things - some minor code help age: 2 weeks 1 day url: http://drupal.org/node/63200 Blank Page After Submit age: 6 weeks 15 hours url: http://drupal.org/node/58918 Can't Administer Event Module age: 20 weeks 2 days url: http://drupal.org/node/43509 displaying event start info in flexinode tabular view? age: 33 weeks 4 days url: http://drupal.org/node/33019 Event block missing content of many fields age: 36 weeks 44 min url: http://drupal.org/node/31532 / bug reports ArrayMerge Errors with PHP5 age: 13 weeks 1 day url: http://drupal.org/node/51174 / bug reports Embedded G2: blank pages with Gallery Block enabled age: 2 weeks 1 day url: http://drupal.org/node/63326 url rewrite error (ERROR_STORAGE_FAILURE) age: 2 weeks 5 days url: http://drupal.org/node/62512 errors on cron run and in watchdog age: 2 weeks 6 days url: http://drupal.org/node/62335 Email address not updated in gallery database age: 3 weeks 15 hours url: http://drupal.org/node/62214 IE error using embed not error with none-embed... age: 3 weeks 1 day url: http://drupal.org/node/62119 Gallery module render wrong size with 4.7b5 age: 11 weeks 5 days url: http://drupal.org/node/52706 block manage - Block specific settings can save item selected - with drupal 4.7B4 age: 12 weeks 6 days url: http://drupal.org/node/51436 Gallery Module Settings Fatal Error age: 14 weeks 6 days url: http://drupal.org/node/49046 Latest patch hosed my G2 integration and G2 Standalone age: 25 weeks 5 days url: http://drupal.org/node/39168 problem viewing newly added photos in embedded gallery. age: 26 weeks 6 days url: http://drupal.org/node/38352 problem viewing newly added photos in embedded gallery. assigned: trobison age: 26 weeks 6 days url: http://drupal.org/node/38351 Search results give incorrect links age: 32 weeks 6 days url: http://drupal.org/node/33539 Full screen slideshow in Gallery module is not working (erroring out on the wrong URL) age: 46 weeks 3 days url: http://drupal.org/node/26479 / feature requests Unable to initialize embedded Gallery age: 14 weeks 4 days url: http://drupal.org/node/49417 / support requests Gallery Module stopped working age: 24 weeks 5 days url: http://drupal.org/node/40117 import existing gallery2 user account age: 29 weeks 5 days url: http://drupal.org/node/35920 / feature requests po files and other language support age: 17 weeks 4 days url: http://drupal.org/node/46313 / feature requests Goofy Forum UI age: 34 weeks 5 days url: http://drupal.org/node/32294 / bug reports Layout is quirky age: 11 weeks 5 days url: http://drupal.org/node/52741 view source broken in firefox 1.5 age: 17 weeks 4 days url: http://drupal.org/node/46246 Toolbar won't display correct in IE 6 with Pushbutton Theme age: 37 weeks 2 days url: http://drupal.org/node/30696 / support requests Problem with size of button assigned: khayman age: 4 weeks 5 days url: http://drupal.org/node/60255 / bug reports Category module and image_gallery age: 5 days 2 hours url: http://drupal.org/node/65066 Problem in Image Gallery display especially in Internet Explorer age: 13 weeks 2 days url: http://drupal.org/node/50943 By CHanging the following the error changes assigned: walkah age: 23 weeks 2 days url: http://drupal.org/node/41353 imagemagick.inc file does not contain the function... age: 28 weeks 13 hours url: http://drupal.org/node/37372 Error when Submitting New Image Node age: 28 weeks 14 hours url: http://drupal.org/node/37366 only variables can be passed by reference on line 713 age: 29 weeks 3 days url: http://drupal.org/node/36092 image.module 4.6.0 strange actions age: 33 weeks 2 days url: http://drupal.org/node/33292 File copy failed: source file does not exist error after running update-image.php age: 35 weeks 4 days url: http://drupal.org/node/31816 Path for image folder not inserted correctly when nodetype = image age: 38 weeks 4 days url: http://drupal.org/node/30031 image module patch & image_import module age: 39 weeks 6 days url: http://drupal.org/node/29377 image module fails on dual site configuration age: 45 weeks 3 days url: http://drupal.org/node/26657 Cannot upload .jpgs age: 1 year 12 weeks url: http://drupal.org/node/18076 / feature requests Copying original age: 29 weeks 2 days url: http://drupal.org/node/36321 / support requests upload image wont' display, it show a file not found page age: 8 weeks 3 days url: http://drupal.org/node/56491 I need to change the style of displaying each node. Please help. age: 20 weeks 6 days url: http://drupal.org/node/43017 What does update-image.php do exactly? age: 22 weeks 1 day url: http://drupal.org/node/42222 images not showing2 age: 25 weeks 1 day url: http://drupal.org/node/39773 Image Folder Permissions age: 31 weeks 1 day url: http://drupal.org/node/34839 Image Module Permissions age: 46 weeks 6 days url: http://drupal.org/node/26280 / bug reports user lookup on name only assigned: zeroj age: 8 weeks 2 hours url: http://drupal.org/node/56936 Link to mailhandler does not use l() function age: 19 weeks 1 day url: http://drupal.org/node/44599 Listhandler caused error in "comment.module on line 996" ? age: 29 weeks 2 days url: http://drupal.org/node/36244 Listhandler 4.6.0 fails to send emails at all age: 44 weeks 4 days url: http://drupal.org/node/27095 / tasks Correct/Complete Documentation age: 31 weeks 15 hours url: http://drupal.org/node/34909 / bug reports Error on retreiving mail age: 25 weeks 5 days url: http://drupal.org/node/39178 / support requests Mail Body not downloaded age: 20 weeks 3 days url: http://drupal.org/node/43374 / bug reports Update: beta5 and possible problem with php 4 age: 12 weeks 3 days url: http://drupal.org/node/52004 Patch for member.module to bring it up to 4.7 age: 16 weeks 1 day url: http://drupal.org/node/47829 foreach() assigned: neablo age: 21 weeks 5 days url: http://drupal.org/node/42350 / feature requests Enable nodewords for node type? age: 15 weeks 1 day url: http://drupal.org/node/48869 Robots META tag per Node/Taxonomy assigned: Robrecht Jacques age: 17 weeks 2 days url: http://drupal.org/node/46603 description assigned: Robrecht Jacques age: 37 weeks 4 days url: http://drupal.org/node/30561 / bug reports nodes are being created with no body age: 24 weeks 3 days url: http://drupal.org/node/40373 missing promote column assigned: Bèr Kessels age: 26 weeks 1 day url: http://drupal.org/node/38836 Naming issues with files and DB tables age: 31 weeks 6 days url: http://drupal.org/node/34298 RSS "no element found at line 1" age: 47 weeks 1 day url: http://drupal.org/node/26185 Outdated help texts age: 1 year 42 weeks url: http://drupal.org/node/9692 Import doesn't like XML/RSS feeds with no Title element age: 1 year 51 weeks url: http://drupal.org/node/8128 / tasks move XML-parser into an inclde file. age: 48 weeks 4 days url: http://drupal.org/node/25439 / bug reports notify.inc sends out notifications for PHP code age: 1 week 3 days url: http://drupal.org/node/64106 Notify not playing well with Organic Groups age: 23 weeks 5 days url: http://drupal.org/node/40967 / bug reports Login as an alias gets cached age: 35 weeks 5 days url: http://drupal.org/node/31699 / bug reports Malformed PDFs age: 21 weeks 6 days url: http://drupal.org/node/42312 Drupal 4.7 age: 22 weeks 4 days url: http://drupal.org/node/41887 support dynamic content? age: 27 weeks 1 day url: http://drupal.org/node/38181 please explain html2fpdf age: 27 weeks 4 days url: http://drupal.org/node/37748 Management of french charaters age: 28 weeks 6 days url: http://drupal.org/node/36605 / feature requests Internationalization support for PDF assigned: TheLibrarian age: 2 years 8 weeks url: http://drupal.org/node/6795 / support requests Problem with PDFView age: 18 weeks 5 days url: http://drupal.org/node/45092 / bug reports Replying to a message from a person who doesn't accept private messages leads to blank screen age: 8 weeks 5 days url: http://drupal.org/node/56136 Error when the recipient is set to not accept PMs age: 14 weeks 4 days url: http://drupal.org/node/49442 privatemsg module: - database error - incompatibility with relationship module age: 15 weeks 1 day url: http://drupal.org/node/48866 Write to author links not appearing in nodes or comments age: 17 weeks 3 days url: http://drupal.org/node/46362 anonymous users can create folders and view all anonymous sent-mail age: 23 weeks 2 days url: http://drupal.org/node/41361 error when trying to send private message age: 24 weeks 1 day url: http://drupal.org/node/40626 privatemsg not working with current head age: 36 weeks 20 hours url: http://drupal.org/node/31469 Reminder email links don't work age: 48 weeks 2 days url: http://drupal.org/node/25677 / feature requests Simplified Chinese translations age: 27 weeks 6 days url: http://drupal.org/node/37505 / bug reports uploading of files fails when adding new releases age: 2 days 23 hours url: http://drupal.org/node/65492 Tagging of Sub-projects. age: 4 days 20 hours url: http://drupal.org/node/65110 Project tarballs not updating. age: 3 weeks 7 hours url: http://drupal.org/node/62244 attachements missing after pressing preview age: 5 weeks 6 days url: http://drupal.org/node/59039 upper right search form on issue pages is broken age: 7 weeks 6 days url: http://drupal.org/node/57023 Can't attach patch to initial issue post age: 8 weeks 6 days url: http://drupal.org/node/55984 drupal.org tarballs out of date age: 11 weeks 6 days url: http://drupal.org/node/52560 Problems with project_projects_select_options() - taxonomy hierarchies age: 12 weeks 1 day url: http://drupal.org/node/52262 SQL errors on issues and my projects pages age: 22 weeks 1 day url: http://drupal.org/node/42160 Issues from multiple projects listed on a single issue's page age: 26 weeks 3 days url: http://drupal.org/node/38704 Get disconnected from server on attempting to add an issue age: 29 weeks 3 days url: http://drupal.org/node/36124 issue query table: can't select all projects assigned: dww age: 33 weeks 2 days url: http://drupal.org/node/33262 Projects not listed and page not complete age: 51 weeks 5 days url: http://drupal.org/node/23956 / feature requests Need Documentation age: 24 weeks 2 days url: http://drupal.org/node/40392 Search by Version age: 27 weeks 1 day url: http://drupal.org/node/38122 Allow subscription to individual project issues age: 31 weeks 4 days url: http://drupal.org/node/34496 / support requests Fatal error: Only variables can be passed by reference age: 10 weeks 4 days url: http://drupal.org/node/53984 Add the project release manually without the scan feature age: 31 weeks 4 days url: http://drupal.org/node/34500 / bug reports PHP Fatal error: Call to undefined function: form_textarea() in [drupal root]\modules\recipe\recipe.module on age: 4 days 14 hours url: http://drupal.org/node/65168 Node not added after filling in ad recipe template age: 5 weeks 3 days url: http://drupal.org/node/59548 Error with URL to recipe age: 38 weeks 6 days url: http://drupal.org/node/29885 / tasks recipe module not security checked age: 10 weeks 2 days url: http://drupal.org/node/54431 / bug reports [] operator not supported for strings on line 184 age: 9 hours 10 min url: http://drupal.org/node/65923 / support requests Need help with Sched and Agregator age: 6 weeks 3 days url: http://drupal.org/node/58540 / bug reports Porting to Drupal 4.7 age: 9 weeks 5 days url: http://drupal.org/node/55034 / bug reports Error when searching an existing user.... age: 17 weeks 4 days url: http://drupal.org/node/46288 / bug reports Taxonomy DHTML's cache ignores user privileges age: 1 week 1 day url: http://drupal.org/node/64532 IE hangs on loading js or when clicking before before page finishes loading age: 9 weeks 19 sec url: http://drupal.org/node/55924 taxonomy_dhtml breaks security? age: 21 weeks 3 days url: http://drupal.org/node/42531 Does not work correctly in Internet Explorer age: 33 weeks 1 day url: http://drupal.org/node/33354 Blocks switch and reset when vocabs are modified age: 1 year 2 weeks url: http://drupal.org/node/22631 javascrip downloads square.gif for every category age: 1 year 14 weeks url: http://drupal.org/node/17366 / feature requests A unique page for each category group? age: 31 weeks 3 days url: http://drupal.org/node/34610 / bug reports Taxonomy links only work for the first line of links assigned: PierreFWalter age: 13 weeks 1 day url: http://drupal.org/node/51149 / support requests Taxonomy has dissapeared age: 33 weeks 4 days url: http://drupal.org/node/33061 / bug reports 4.7: admin/trackback/approval --> apache segfault age: 1 week 5 days url: http://drupal.org/node/63715 beta4 form_select() Error age: 16 weeks 11 hours url: http://drupal.org/node/47946 Sends trackbacks for unpublished nodes assigned: ankur age: 1 year 17 weeks url: http://drupal.org/node/16239 / tasks approval queue error in beta 4 age: 18 weeks 3 days url: http://drupal.org/node/45429 / bug reports Sometimes when I open the drupal site in My Local machine I am getting the error. age: 11 weeks 5 days url: http://drupal.org/node/52652 Event start/end date section should *not* show first on Submit event page age: 22 weeks 4 days url: http://drupal.org/node/41869 meet age: 23 weeks 4 days url: http://drupal.org/node/40996 / feature requests A better Drupal.org Index (homepage) interface/layout mockup age: 17 weeks 6 days url: http://drupal.org/node/45967 A small but effective improvement to Improvement of admin/user accessability suggestion age: 32 weeks 1 day url: http://drupal.org/node/34073 / support requests block module / side-content module age: 2 weeks 5 days url: http://drupal.org/node/62506 Acess denied to login Newly installed and upgraded site that I need up and running A.S.A.P assigned: Johnny age: 27 weeks 14 hours url: http://drupal.org/node/38227 / bug reports Logging out error age: 8 weeks 2 days url: http://drupal.org/node/56663 / bug reports the wiki module can't work with HTML age: 16 weeks 5 days url: http://drupal.org/node/47124

1 0

RE: [infrastructure] Re: [development] Drupal 4.5 unsupported
by Steven Peck 28 May '06

28 May '06

Thinking as a non-developer..... I will start with one comment. I am not a developer. After over two years of Drupal use, I still do not know php. Despite this, I still have figured out how to run TortoiseCVS and have local CVS copies of 4.6, 4.7 and the CVS branches of Drupal from the instructions in the handbook. The policy for current and one previous version was established last year and I, a non-developer was asked for my input on it. It is documented in the handbook on (http://drupal.org/node/27362) "Drupal version numbers or which version you should use" and the last line "Supported versions for security patches and availability for download are the current stable release and one version previous." 4.5 is insecure. It is not responsible to provide easy download of 4.5 Drupal core that exposes from the start people to known exploited security vulnerabilities. Microsoft has taken a lot of heat and a serious publicity beating on security issue's and I do not wish us to ever do so. Drupal is known as a fairly secure application but we've had some recent issue's which have generated a good response to build and develop better conscious security practices. Instituted a security mail list and notifications. Added signup recommendations to the Best Pracitces section. As a 'not developer' I rely on others to maintain secure code. I am not a vender I admit, but I directly maintain 14 sites and support 5 friends who maintain 10-15 additional sites. These sites are a mix of 4.6 and 4.7 latest releases. I send them notes and help them with upgrades because they are my friends but they are also my customers. I learn from them neat things I would not otherwise do with Drupal and theming and they get a really neat CMS that their peers are using and help me in areas where their skills are better then mine.. In my view, given the pain and suffering people who did not and do not upgrade due to security issue's, it is ir-responsible to make such vulnerable releases easily available. It does an incredible disservice to both the people still running insecure sites and the Drupal community at large. If I recall, part of the reason for this decision originally was such a public exploit. Spreadfirefox was running an old unpatched codebase. We had to deal with the fallout from that for several months and we had provided many notices to many people. This is the worst posible publicity. I understand people want to run discontinued products, but I also understand people's desire to bad decisions and do not want to help enable them.... In this case it is a very bad idea. On a personal level, some parts of a company I worked for refused to update their systems to account for vulnerabilities. One day, a virus came in. It cost the company a million dollars in people's time, support, and lost business. I went into work at 7am and ended up going home at 2:30am while my co-workers stayed until 8am when I and a few others came back to continue cleaning things up. 1,000 people could not work productively for an entire day due to this and had to work the following two saturdays to catch up and some systems took 2-3 more days to fully secure and restore. An expensive lesson. One which resulted in management taking the support teams recommendation that has a hard timeline for testing and applying patches and a documented process for exceptions and timelines that those exceptions must be resolved in. It should not be convenient for people to get insecure product... Ever! There should be an effort involved. As an IT Support professional who has had to help deal with and clean up the cost of breaches in security. Salvaging data/systems and the lose of work hours and data that it entails, I am 100% against exposing people to this risk easily. I do not wish to see more forum posts form people who have been hacked and lost their data. I wrote the start of the best practices to help people deal with and avoid this and the number of people who have had problems has been reduced in the forums significantly because we promote this information. How bout this. A front page announcement reminding people of this policy? I will try and get time to write a more step by step TortiseCVS page on downloading branches of the CVS but my wife is pregnant and not well so no guarantees on how soon with some other commitments. -sepeck > -----Original Message----- > From: development-bounces(a)drupal.org > [mailto:development-bounces@drupal.org] On Behalf Of > blogdiva(a)culturekitchen.com > Sent: Saturday, May 27, 2006 10:24 AM > To: development(a)drupal.org > Cc: blogdiva(a)culturekitchen.com > Subject: Re: [infrastructure] Re: [development] Drupal 4.5 unsupported > > Ber , Morbus and all, > > Would you consider stepping back a moment and thinking as a non- > developer? This is the kind of decision that ought to fall on the > shoulders of a user-relations team and not developers. > > I worked at Colgate-Palmolive as the tech and communications writer > for their Consumer Affairs department. Colgate-Palmolive is the > largest manufacturer of toothpaste in the world, among many other > products. They produce everything from dentistry pharmaceuticals to > dog food. > > For four years I wrote the manual on how to handle all sorts of > inquiries, complaints and suggestions coming from consumers. My job, > was to write human-readable instructions and communications guides > for our Consummer Affairs representatives. I was dead against > scripts > because they show a lack of training and understanding of the > products and consumers; and at that time my bosses agreed. > > Knowledge of all products, past and present, was a part of the > training for our reps. I was instrumental in making that happen in > the least of techie ways given that this was BEFORE the internet was > used by major companies for doing business (1994). I mean, > the system > I was using was written in a pre-WYSIWYG DOS system. So you can > imagine how "cutting edge" and scary for non-techie people that must > have been. My job was twofold : I had to help transition consumer-to- > company communications from an analog system of communications to > this new digital system while also transitioning and > streamlining the > internal communications all departments affected by consumers > (Legal, > Marketing, Sales, R&D). > > One of the biggest percentages of communications was on discontinued > products. People would always call or write about products the > company had stopped manufacturing for years. Loyal consumers sensing > the disappearance of the product would stock up on it. CP > spent a lot > of time and effort on these particular people. Why? Because if > consumers were bound to look for that product high and low it meant > they were loyal consumers. The challenge for the company was to > transition those consumers to newer products and keep them as > word-of- > mouth evangelizers. > > One of the most frustrating aspects of working with Drupal is the > lack of forethought on word-of-mouth evangelizing and user loyalty > that goes in the development, implementation and the > dissemination of > the product --and yes, I am calling Drupal a product because that is > what it is. > > Given that you have an open source product it is a mystery to me why > you have decided to disappear from your site the history of the > product's development. This is a huge loss for future developers who > come to the site looking to learn more about the product. If > it were > up to me, I'd curate a whole section on the development of Drupal. > I'd keep each release for historical documentation and, if possible, > annotate it with some commentary from not just from developer but > particularly from loyal users of Drupal. > > A product's success does not lie just on it's design or development. > A product's success lies on it's word-of-mouth reputation among > users. Word-of-mouth is what makes or breaks products and it's why > most of the shittiest products succeed. Toys like "Pet Rock" to > celebrities like "Paris Hilton" make it all by the grace of their > word-of-mouth god. It's not fair but it's what happens in the real > world. > > Back to Ber and Morbuss and most of the developers of Drupal : I > just think that as developers, you're way of thinking works > best with > code. I honestly do not know what it is about this group of > developers but you definitely think and work differently than > developers in the Movabletype, TextPattern and WordPress development > groups. For me, as someone who has been 'looking from the outside > in', in all these groups, it's really interesting to see how > differently coders work from one product to another ---and it proves > software development is a very personal and subjective process; even > when done by a group of people. > > You have a good product and a growing base of non-developers > eager to > use it. Open archival access to your past success needs to be an > important part of how you engage the people who use Drupal. > It should > be integral to your documentation, which gets better with each > passing day. > > You still need people who are part of core who deal solely with > community/user/consumer issues and think about these things. > You need > more than one person so that developers don't get the opportunity to > gang against him/her (as in the Dilbert effect). Which is why, these > people need to be regarded as part of the core group of developers. > > Yes, I do have to agree with the common belief that it's rare > to find > developers who understand the nuances of community/consumer affairs. > They are out there, and you do have some right here within your > ranks. But as a development groups go, you have to decide that > dealing with the community is just as important as dealing with the > code. And more importantly, you need decide on a process on > how to go > about that, even if it means developers won't be part of that > decision making. > > Which is why I insist : Give away those decisions to people who can > do that person-to-person heavy lifting. It will make Drupal.org an > infinitely better experience. > > Best, > l i z a sabater > www.lizasabater.com > > AIM - cultkitdiva > SKYPE - lizasabater > TEL - 646.552.7365 > > > On 27.May.2006, at 11:36, Khalid B wrote: > > > On 5/27/06, Morbus Iff <morbus(a)disobey.com> wrote: > >> > Why do you need to remove this stuff? There are those > who like I > >> have > >> > >> Leaving it up is, to some, an admission of *support*. > > > > Lisa > > > > Also, remember that 4.5 is not patched for the latest exploits, > > so it is > > very dangerous to continue to run with that, regardless if > it is > > supported > > or not ... > > > >

2 1

RE: [development] Here is how you can get 4.5 security patches
by Steven Peck 28 May '06

28 May '06

Folks, we are not making a point. It is bad. Very very bad to keep insecure stuff out there. It is very bad from the site admins and their data's security and site viability. I do not want people suffering the shock of the loss of their site because they relied on unsecure stuff. Did no one read my not a developer point of hard earned experience? Has no one wanted to take me up on my offer!? I OFFERED a solution. Instead people want to discuss personalities and wortdings of individuals. Please comment directly to MY points in my post! Do not ignore them because they disagree with yours and those experiences are those of a NON developer. For what it's worth. I have walked 9 people in the last year through getting older versions of Drupal from CVS on #drupal-support. 3 from Drupal 4.3, 1 from Drupal 4.2 and the rest Drupal 4.4 code base. It took approx 20 minutes on average per person. -sp > -----Original Message----- > From: development-bounces(a)drupal.org > [mailto:development-bounces@drupal.org] On Behalf Of Larry Garfield > Sent: Saturday, May 27, 2006 8:29 PM > To: development(a)drupal.org > Subject: Re: [development] Here is how you can get 4.5 > security patches > > I am not demanding that you support 4.5 forever. I don't > think I've ever > demanded anything on this list, although I will sometimes suggest > forcefully. :-) 4.5 itself is actually quite useless to me, > as I first > started using Drupal in the early 4.6 days and have never had > a running 4.5 > install. > > I don't expect Drupal to provide support or patches for > too-old releases. > That wouldn't make sense. At the same time, though, the > revisionist history > of expunging them from the web site is just as bad. Lisa > pointed out some > practical cases where someone may still need access to an > older version. If > they're already there on the site, don't remove them. Flag > them as "legacy, > unmaintained, and insecure. Don't use or you're dumb" instead. > > I'm referring mostly to older modules. If someone already > has a 4.5 site > running, and want to add a 4.5 module to it that used to be > available, why > make it harder for him to get it now? Just to make a point? > > The other key point I am making is that "you can get it from > CVS" is, for 98% > of the computer using world, exactly synonymous with "no, we > won't let you > have it, ha ha!" While almost anyone on this list either > knows how to check > out an older branch from CVS or can figure it out from the > web site fairly > easily, the same cannot necessarily be said for the majority > of people > running those 60,000 Drupal sites (or whatever the current > number is). > Saying "you can get it from CVS" to someone means saying > "you're not 1337 > enough". That's something you really don't want to say. > > On Saturday 27 May 2006 14:07, Karoly Negyesi wrote: > > Hi, > > > > I am shocked by the demands to support 4.5. Do not forget > that you are not > > paying Drupal developers to do anything. You are not my > boss. Nor anyone > > else's. On what base do you demand? On the amount of > contribution you made > > to Drupal over time? I have yet to see any such contributor > (note: I said > > contributor, not coder.) who demands this. > > > > Therefore, the solution is very simple: if you are running > 4.5 and do not > > want to update, find others in the same situation and hire > an able coder > > who will provide the security patches for you. We will > consider adding > > said person to the security team and some guidance will be > providded, but > > please do not expect too much from our side. > > > > Case closed. > > > > Kind regards, > > > > Karoly Negyesi > > > > Ps. While I sometimes work for money, do not consider me. > The less 4.5 > > code I need to touch, the better for me. Money won't change this. > > -- > Larry Garfield AIM: LOLG42 > larry(a)garfieldtech.com ICQ: 6817012 > > "If nature has made any one thing less susceptible than all others of > exclusive property, it is the action of the thinking power > called an idea, > which an individual may exclusively possess as long as he keeps it to > himself; but the moment it is divulged, it forces itself into > the possession > of every one, and the receiver cannot dispossess himself of > it." -- Thomas > Jefferson > >

1 0

Canvas
by Khalid B 27 May '06

27 May '06

A layout manager for Wordpress http://www.freshpursuits.com/canvas/preview

1 0

errors in security updates announcement
by Laura Scott 27 May '06

27 May '06

FYI, the link to 4.7 changes links to 4.5 CVS messages. Also, in 4.6.6.patch, there is nothing that addresses http:// cvs.drupal.org/viewcvs/drupal/drupal/includes/file.inc? r1=1.39.2.12&r2=1.39.2.13, which is marked in CVS as a security issue. Laura pingVision, LLC 4450 Arapahoe Ave, Suite 100 Boulder, CO 80303 www.pingv.com 303.415.2559 inquiry(a)pingv.com

5 5

SoC: Multi-site administration through rich XUL client
by Ben Francis 27 May '06

27 May '06

Hi there, First of all, massive congratulations on the 4.7 release!! I'm writing an application for a Drupal Google Summmer of Code project and would like to ask some questions, please tell me if there is a more appropriate place to discuss this. My current favourite proposed SoC project is: Multi-site administration through rich XUL client (http://drupal.org/node/60507) Would an appropriate solution to this be to write a module with functions for administering multiple sites and then write a SOAP/REST/XML-RPC API which is called by the XULRunner client? I'd like to design it so that you can administer multiple sites on multiple servers, all with different databases (sort of scratching my own itch a bit here too). The idea of using an API like this is that anyone could write their own client or custom web app as part of their own systems to manage their Drupal sites. Would anyone mind reading over my application before I submit it? Many Thanks Ben -- Ben "tola" Francis http://hippygeek.co.uk

16 39

RE: [development] Drupal 4.6.7 and 4.7.1 released
by Steven Peck 27 May '06

27 May '06

I didn't know about the database update requirement. A template sounds good, most of the formats use previous announcements as a template. One of the few times I've been to busy to even track things. -sp > -----Original Message----- > From: development-bounces(a)drupal.org > [mailto:development-bounces@drupal.org] On Behalf Of Bèr Kessels > Sent: Friday, May 26, 2006 1:37 AM > To: development(a)drupal.org > Cc: documentation(a)drupal.org > Subject: Re: [development] Drupal 4.6.7 and 4.7.1 released > > Is the docs list following this one? > > Can we make a template for any future security releases to > avoid this? Being > bright and clear is msot important around security issues. > > Op vrijdag 26 mei 2006 09:51, schreef Gabor Hojtsy: > > Also note that the announcement is not too clear about Drupal 4.7.1 > > needing a database update but 4.6.7 not. > > Does it? hmm, I completely missed that one! Yes. > > -- > | Bèr Kessels | webschuur.com | website development | > | Jabber & Google Talk: ber(a)jabber.webschuur.com > | http://bler.webschuur.com | http://www.webschuur.com | > > > Drupal upgrade repareert kritiek beveiligingslek: > > http://help.sympal.nl/drupal_upgrade_repareert_kritiek_beveiligingslek >

1 0

invite module
by Khalid B 26 May '06

26 May '06

Hello all. I am thinking of deprecating my referral module in favor of invite module, now that 4.7 (and not HEAD) has hooks that I can use in adsense and userpoints. This avoids code duplication and user confusion. There is a need to add more hooks at certain points (e.g. when invited user actually registers, before role escalation), Also, there is a need to add some sort of callable query on whether a certain uid was referred by another? Upon contacting Robert Douglass (who did the last round of changes to that module) he agrees with my proposed additions. I tried to contact Tatonca (Christopher Hill), but no reply since. So, I am asking here once more in case Chris lurks around. If do not hear from him in a few days, I will take over temporary ownership of the module, add the hooks in, update HEAD to 4.7. Any objections, comments, flames?

2 2

upgrade in book.module feature set for 4.8.
by Anguo 26 May '06

26 May '06

hello, In the patch queu, I saw nothing that would dramatically improve the feature set offered by book.module... so I created this: http://drupal.org/node/65319 Please, comment here or there. I hope you'll be as excited about this as I am :) Augustin. -- http://www.wechange.org/ Because we and the world need to change. http://www.reuniting.info/ Intimate Relationships, peace and harmony in the couple. http://www.gnosis-usa.com/ Revolutionary Psychology, White Tantrism, Dream Yoga... http://www.masquilier.org/ Condorcet, Approval alternative, better voting methods.

1 1