January 2012 - Development - lists.drupal.org

html attributes not filtered and the effect of not filtering
by Walt Daniels 23 Jan '12

23 Jan '12

We had the following spam posted as a comment (modified to eliminate bad words). <div class="content"> <p>This height should be a beautiful place and the air must be really cool.</p> <ul id="clean-url" class="install"> <li>Video de femmes avec ... <a href="http://www.example.com">bad site</a> en vidéo</li> </ul> </div> This is using some css in the standard Drupal css to suppress the visibility of the bad stuff. Filtered html does not get rid of this. (We allow Filtered HTML in comments.) The result is that our spam checkers don't see the spam. Incidentally Mollom did not flag it either although the words in it, if in English, would probably have flagged it. The result is that the bad site gets credit in search engines for a link from another site and almost no one sees or clicks on the link. I think the cloaking is also forbidden by Google, for instance, and they may penalize our site. ---- Walt Daniels

1 0

Re: [development] Experience with mod_fcgid
by Ashraf Amayreh 11 Jan '12

11 Jan '12

Hey Peter, Your 2 cents were spot on. I've now transitioned all my sites to nginx & php-fpm and I'm stunned at the results. Here are the advantages I'm getting: 1. Nginx and php-fpm are totally independent, they can each run as separate users and communicate via sockets or TCP. 2. php-fpm can be configured to run as a separate user for every virtual host. (bottom line? A user who gains php access to a site can't do any damage to other sites on the same server) 3. php-fpm can override php.ini configurations per virtual host! php-fpm itself can be configured per virtual host, so you can control how many php-fpm processes that would go to each virtualhost based on site statistics (have a heavy site? increase its php-fpm config without increasing it for any other site on the server) 4. Unlike apache with fastcgi, nginx with php-fpm shares processes per virtual host, so APC is usable! 5. Detaching nginx from PHP means that all static content is served without loading the PHP parser as apache with mod-php does with every request. 6. Nginx is event-driven, even with thousands of connections, nginx memory footprint is nigligible (something around 15 MB RAM!) 7. Some more benefits I can't remember :) Configuration wise, I can't say it's been a walk in the park. With so many live sites, I had my hand on my heart most of the time and did have down-times during the process no matter how much I tried not to. Nginx is not your simple apt-get install and go, so it's a big leap forward. But the end result is well worth it. All in all, my sites are blazing fast now. All I can say is WOW! Without going into formal benchmarks, I would say it's 5x speed increase! And my memory footprint has gone down from 2 GB to 1 GB. If I double the php-fpm processes for all my sites, footprint will probably go up, and speed will boost to around 7-8x speed increase! Where on earth was this web server before? Recommendation to all, get on the train :) Best Regards, > ---------- Forwarded message ---------- > From: Peter Droogmans <Peter(a)attiks.com> > To: "development(a)drupal.org" <development(a)drupal.org> > Cc: "Ms. Nancy Wichmann" <nan_wich(a)bellsouth.net> > Date: Wed, 14 Dec 2011 16:51:55 +0100 > Subject: Re: [development] Experience with mod_fcgid > > Hi,**** > > ** ** > > My 2 cents, give nginx a try, I started using it with > http://drupal.org/project/barracuda and I’m now using it in combination > with aegir for my remote servers and to be honest it was one of the best > decision ever ;p**** > > ** ** > > Cheers,**** > > Peter**** > > > -- Ashraf Amayreh CEO | O-Minds Cell. 962 78 8099997 Tel. 962 6 5655150 Fax. 962 6 5675150 Skype: aamayreh www.o-minds.com web development | web design user experience | branding design Connect with us on Twitter http://twitter.com/ominds Connect with us on LinkedIn http://www.linkedin.com/in/aamayreh

1 0

Field for a View
by Fred Jones 10 Jan '12

10 Jan '12

I have a new D7 site where each page has a unique header image. I figured I would use CCK Blocks and then add an image field to Page nodes so then the owners can easily upload a file on each page and it will appear as their header image. But what about Views? Is there an easy way to do this? I see this http://drupal.org/node/1266036 is about adding a field to a View, which is an Entity, but I'm not sure the outcome of that issue. There is this guy http://treehouseagency.com/blog/neil-hastings/2011/09/21/building-custom-bl… makes Blocks into Entities, which would allow me, I think, to add an image field to a block, then the owners could upload an image there -- one block for each View. Seems making blocks into entities is still in discussion for D8 here http://drupal.org/node/430886 Anyhow, is there a good way to allow the users to upload images for the header for their View pages? Thanks.

4 5

Is a block used anywhere?
by Walt Daniels 05 Jan '12

05 Jan '12

We have hundreds of blocks, some of which were generated for some particular event and are no longer needed, but there is no way I can find to tell if a block is in use. Most of our blocks are listed as disabled, i.e. not in a region, but actually on a panel page or truely unused. If would be nice if the blocks admin page distinguished these two cases.

2 1