- Development - lists.drupal.org

RE: [development] Turbogears: Python framework
by Boerland, Bert 15 Mar '06

15 Mar '06

>>> How to write a Wiki in 20 minutes: >>> http://www.turbogears.org/docs/wiki20/20MinuteWiki.mov >> >> To counter these kind of videos (but mostly for fun), we should do >> a "make a wiki in 10 minutes (not 20 minutes) with Drupal", or a >> "make a blog in 7 minutes (not 20 minutes)". ;) >Totally, I'm all over that. Stay tuned. anyone seen "There is something about Mary" Hitchhiker: You heard of this thing, the 8-Minute Abs? Ted: Yeah, sure, 8-Minute Abs. Yeah, the excercise video. Hitchhiker: Yeah, this is going to blow that right out of the water. Listen to this: 7... Minute... Abs. Ted: Right. Yes. OK, all right. I see where you're going. Hitchhiker: Think about it. You walk into a video store, you see 8-Minute Abs sittin' there, there's 7-Minute Abs right beside it. Which one are you gonna pick, man? Ted: I would go for the 7. Hitchhiker: Bingo, man, bingo. 7-Minute Abs. And we guarantee just as good a workout as the 8-minute folk. Ted: You guarantee it? That's - how do you do that? Hitchhiker: If you're not happy with the first 7 minutes, we're gonna send you the extra minute free. You see? That's it. That's our motto. That's where we're comin' from. That's from "A" to "B". Ted: That's right. That's - that's good. That's good. Unless, of course, somebody comes up with 6-Minute Abs. Then you're in trouble, huh? [Hitchhiker convulses] Hitchhiker: No! No, no, not 6! I said 7. Nobody's comin' up with 6. Who works out in 6 minutes? You won't even get your heart goin, not even a mouse on a wheel. Needless to say the hitchhiker was carying a chainsaw.

4 3

Turbogears: Python framework
by Arnab Nandi 15 Mar '06

15 Mar '06

How to write a Wiki in 20 minutes: http://www.turbogears.org/docs/wiki20/20MinuteWiki.mov

15 21

Drupal 4.6.6/4.5.8 security releases
by Gerhard Killesreiter 15 Mar '06

15 Mar '06

are now available. See drupal.org/node/53524 Cheers, Gerhard

11 19

absence
by Dries Buytaert 14 Mar '06

14 Mar '06

Hello, this is to inform you that as of tonight 23:59, I'll be gone for about one month. I promised Karlijn and (especially) myself not to work on Drupal just before or just after our marriage. Now is the time to disconnect and unwind for a bit. :) I will temporary unsubscribe from the Drupal mailing lists so my mailbox doesn't explode. I will, occasionally, check my private e- mail to help with or respond to urgent matters but I will not review or commit patches nor will I help with the maintenance of the Drupal infrastructure. During my absence, Steven Wittens will take over my duties and responsibilities. He has the final say whenever a decision needs to be made. I wished I could have released Drupal 4.7.0 but we didn't make it in time. Steven, Gerhard and Neil can coordinate the Drupal 4.7.0 release. Once the DRUPAL-4-7 branch is created, Gerhard will continue to maintain that branch. At that point, only Steven and Neil will be allowed to make changes to CVS HEAD. I suggest creating that branch after the release candidate is made available. I also wished I could have upgraded drupal.org, but critical bugs in CVS HEAD (and last night's security releases) prevented me from doing so. There is only one critical bug that needs fixing (file revisions) before we can upgrade drupal.org. Everything else has been taken care of, and has been prepared carefully. Steven, Gerhard or Neil can finish that task. It should be straightforward. -- Dries Buytaert :: http://buytaert.net/

6 5

Re: [task] Allow German date/time format
by sime 14 Mar '06

14 Mar '06

I'm looking forward to an option without Time. I like the idea that I did one thing on "15 Mar" and it took all day. ;-)

1 0

Module grouping or dependencies for 4.7.0?
by Derek Wright 14 Mar '06

14 Mar '06

since my last request for new functionality in 4.7.0 went over so well, i thought i'd try again. ;) (just kidding). seriously, this is a pain in the ass for CCK usability: http://drupal.org/node/49690 all of CCK's field types are implemented as separate modules. they currently have names like "text.module" or "date.module", etc. however, that means they show up all over the place in the admin/modules page, which makes it hard for admins to enable all the required modules for CCK. apparently, there are a couple of possible solutions: http://drupal.org/node/18447 "Simple dependency system" this one has a patch by chx waiting to be committed. http://drupal.org/node/19477 "Module Grouping by Folder in Admin/Modules" this is just in the "it'd-be-nice-if..." phase, so there's basically no hope for this one in 4.7.x. if neither of these issues gets fixed for 4.7, CCK is going to have to rename all its files (and therefore function names), to avoid user confusion, and make CCK easier to administer and use. people have mentioned a few other modules (ecommerce, etc) where this is a problem. i'd love to avoid the pain of renaming things in cvs (no one say "svn" or "bzr", or i'll scream), but we're going to have to do that before 4.7.0 really goes live if neither of these issues (or something very similar) get fixed for 4.7.0. should i give up hope and start working on renaming the CCK field modules to "cck_field_text", "cck_field_date", etc (or something)? i don't want to spend time writing a patch for core to group modules from the same subdirectory together on the admin/modules page, if there's no chance it would get committed in time for 4.7.0. please let me know. thanks, -derek

7 8

Re: [Security announcements] Security bypass in menu.module
by piotr＠mallorn.ii.uj.edu.pl 14 Mar '06

14 Mar '06

Hello, On Mon, Mar 13, 2006 at 11:46:43PM +0000, Drupal Security Team wrote: > <h2>Security bypass in menu.module</h2> Hmm HTML? I remember talks about switching to HTML format (from plain text format), but I don't remember any conclusion about it... I do remember strong opposition to using HTML format (as I was part of that opposition). I write this mail to express my dissatisfaction with the HTML format of security announcments and to ask to switch back to plain text format. I'm sure there are more who share my point of view, and frankly I don't understand how the change happened "just like that"... -- Piotrek irc: #debian.pl Mors Drosophilis melanogastribus!

2 2

Re: [development] Re: [support] Drupal 4.6.6/4.5.8 security releases
by Kobus Myburgh 14 Mar '06

14 Mar '06

> In short, if you can't deal with security issues being disclosed > publicly (and the time gaps inherent to that), Free and Open Source > Software (FOSS) might not be for you. You need a Service Level > Agreement (SLA). Well said, Dries! Without a remarkable leader like you, Drupal would not be as efficient. Once again, thanks to all for the hard work. Regards, Kobus

2 1

Re: [development] Re: [support] Drupal 4.6.6/4.5.8 security releases
by Kobus Myburgh 14 Mar '06

14 Mar '06

> Oh, so if you don't like one or two things in Drupal, you will start your own > CMS? :) I tried to make a valid point in one concrete area, because this is If I don't like one or two things in a system, I try to get it resolved in a manner without making the community feel they owe me something. That is the key - they owe you nothing! In fact, I'd say that since you use this software for free, you'd probably be more accurate if you felt that YOU owed something. I am not sure about your involvement with Drupal, but my hunch is that the only time we'd hear from people like you is when you need something - not when you want to give something back. Now - if you want to continue this argument further, please contact me off the list. Thank you. Kobus

1 0

Re: [development] Re: [support] Drupal 4.6.6/4.5.8 security releases
by Kobus Myburgh 14 Mar '06

14 Mar '06

Valid point or not, Boris, the way it was said was totally uncalled for. Alex, yes, it was perhaps not handled perfectly, but if you don't like Drupal, "in this regard" why don't you just create your own content management system that works better "in this regard"? Or go find one that handles it better "in this regard"? Chances are that you will not be successful. Karoly and the rest of the security team: better luck this time, and thanks for all your hard work over the months. I may just be another voice on this highly active mailing list, but please be sure that there are other people like me who appreciate your efforts a lot. Kobus >>> boris(a)bryght.com 3/14/2006 1:47:59 AM >>> On 13-Mar-06, at 3:33 PM, Karoly Negyesi wrote: > On Tue, 14 Mar 2006 00:24:40 +0100, Alejandro Exojo <suy(a)kurly.org> > wrote: > >> El Martes, 14 de Marzo de 2006 01:03, Gerhard Killesreiter escribió: >>> are now available. See drupal.org/node/53524 >> >> I'm really very disappointed about how the Drupal project is >> handling releases >> and security advisories. IMHO, it's the worst "big" free software >> project in >> this regard. >> > > Thanks for the appreciation of our hard work and your discreet > letter to them security team that the sending security newsletters > were forgotten. They were written just waited for sending. Karoly: this is still a valid point. The security advisories *must* go out first, privately, before the public announcement. Do you need help with this next time? I'll volunteer to help manage this. -- Boris Mann Vancouver 778-896-2747 San Francisco 415-367-3595 SKYPE borismann http://www.bryght.com

2 1