51

(2 replies, posted in Programming)

Hi all ...

Does anyone have any suggestions for a web, browser based "notepad"?

A javascript, or php flavored notepad would be nice, leaning more to a php type.

I would like to implement something very secure, and have the ability to store notes [via browser cookie?], so that users can store snippets of code on the fly while visiting our forum.

While just a straight windoid/panel would be ok, multiple clip storage would be excellent.

ooooo ... the thought occurred to me .... Would this warrant as a PunBB plugin?  that was we could use the members id to manage the snippets? [??]

Thanks for any input, or suggestions.

Dr. Jeckyl,

Try out "phpForm 2.0".  It is a php based solution, and can be found on SourceForge, or Hotlinks.

http://sourceforge.net/projects/phpformgen/

It should do well for most of your requirements.  Essentially, it allows you to set up any number of fields you wish to implement, pick the kind of form objects which will be used [drop down menus, text fields, sql, date fields, email, textarea, etc], and once you get things set up, and do a build, it creates all the php files for you.  It also creates a admin side to your forms, as well as provides validation too.

HTH

Seems to me this potentially could be a great addition and implemented into PunBB itself?

Rickard?  smile

A Cash Mod does sound nifty, and could easily get user participation.

Has there been any progress on this at all?

Connerhd, will you share? smile

hi all ...

I have a requirement to use only one forums RSS feed [rather than all of them collectively], so I can post this to our news.

I have seen many ways in which to do this, from a newsletter Mod [which I think Rickard wrote], to others, and even a nifty Mod that Alex King wrote which essentially replaces the stock RSS feed(s) which ship with PunBB out of the box.

Essentially, I have a php script which pulls RSS feeds, and splits, creates the stories for me, and post those as close entries in my weblog.

The issue I have now is that I only require one forum, and not all of them.  So, my question is, can anyone tell me how to hack the existing RSS so that I can create a new feed, separate from our regular feeds, and use it instead?  This php file would be hidden, and used exclusively for our own use.

I hope this makes sense.  smile

All help appreciated.

56

(132 replies, posted in General discussion)

snapsolutions wrote:

How to say 'I love you' in 24 languages.....

English
I Love You

Spanish
Te Amo

French
Je T'aime

German
lch Liebe Dich

Japanese
Ai Shite Imasu

Italian
Ti Amo

Chinese
Wo Ai Ni

Swedish
Jag Alskar Dig

Alabama
Arkansas
Kansas
Oklahoma
Texas
North Carolina
South Carolina
Georgia
Tennessee
Missouri
Mississippi
Montana
Louisiana
West Virginia
Kentucky
parts of Florida
Nice Ass,  Get in the truck

Definition of "Sensual"

baby! cinse u iz up, getma uh beer!

ultime wrote:

We'll you get the user's id simply by hovering your mouse over their username, and look at the link it's giving.
For example, while hovering on your username I got "http://punbb.org/forums/profile.php?id=1184". 1184 would be your id.

doh! smile

ultime wrote:

http://pierrisme.com/AMP_AuthorChange.zip

5 Queries total, works fine smile
Tested a little on my server, everything went fine.
I didn't test with username with ' and " characters, tell me if anything bad happens, I'll update it for you.

Have fun with this plugin.
Simply unzip and upload in your plugin folder.

Quick Quiz ...

What is the best way to get a user ID?

Smartys used a drop down.  While that works very well, you have to be very quick on the draw [and hold your mouth right] and type really really fast to grab the user that you want. smile

In ultime's, he used user ID's. That is good, but where do you asertain the users ID from?

Wouldn't it be just as well to allow me to enter in a users name [ie: handle]?

I'm not fussing at all!  I now  have the best of both worlds. smile

ultime wrote:

Did you even try it yet sad

hi ultime - I'm sorry, I didn't even know you had finished. smile

I'll take a peek and let you know how things go.

Many Thanks!

Yes!  Please!

Smartys had built one and sent to me in an email, but unfortunately it got all mangled, so I can't tell heads or tails. sad

It would be cool if you would - perhaps being able to see how both were done will help me besides just having the plug too.  smile

Smartys,

Can you zip up the plug and post here? I can't make heads or tails out of the email. sad

Hey Smartys, thanks for writing ...

kewl.  smile

That would be awesome!

One question ... when you say "Replace prefix with the db prefix ..", are you referring to the way the table is named [prefixed] in sql, or in the query itself?

Just curious ...

Groovy - I'll be looking forward to this ... Please let me know, or write me directly when you have something to test. smile

Cheers!

I'm jealous .... they can't do that!! [stamps foot, whines] smile

hmm ... wuz it sumthin I said? sad

Ok, before everyone starts to shout at me please read on and you'll understand. roll

More importantly, I apologize if this has already been asked before.  I did a smallish search and didn't come up with anything.

1) On our forum, we enforce new members to use their first and last names when they register.  I'm not so naive that some folks will enter in a bogus first and last name, but overall, most people have welcomed the extra perceived security, and go along and enter in the right stuff.  In general, this has worked very well for us.

2) However, we migrated from that "other" BBS, those who had registered prior to our updating to PunBB would not have accurate profiles.  If anything, our problem hasn't been getting new members to use their first and last name, it is the current members we have now that seem to be slow on the stick.

3) When I get the chance, and I see someone online whose profile isn't updated, I send them a nice, but terse email telling them to update their profile.

-- In those cases where we have a new member register, and it's obvious they used something silly, I generally delete them on the spot, assuming they have NOT posted to the board yet.

-- In those cases where we have a new member who has registered, used a silly first and last name, or, it is a member who hasn't udpated, we send them a fairly terse [but nice] email telling them to update.

If they haven't updated, my only choices are to:

1) Ban them [which usually gets their attention]
2) Delete their account entirely.


As you can see, banning is something I only like to do in those cases where I have to hit'em over the head to get their attention.

However, here is the problem.  I'm sure there will be some who just won't oblige, and even if I banned them, they'll just never bother to do anything at all.

-- In those cases where I've got a member who posted, I don't want to simply delete them, because then I'll have a bunch of posts who would belong to a "Guest".  I would prefer to have those posts assigned elsewhere it it's doable.

So, which brings me full circle to my question ....

Q: Is it possible to write a Plugin, or MOD, which would allow me to pick a Member, and "Transfer" those Posts/Topics to another Member/Admin [such as myself] ??

I recognize there would be some hurdles here ... mainly the potential for post id's being the same, etc.

If there was a Mod/Plugin such as this, that would be really cool.  I could just run the Plugin, enter in the person I want to transfer "From", and enter in the Person I wish to transfer "To".  It would automajically move all Posts/Topics/Replies over to the Member I chose.

Then I could delete that person entirely, without having to have any stray posts/topics hanging around which were assigned to a "Guest".

I hope this make sense. smile

Does anyone here have any ideas, or other work arounds would could theoretically accomplish the same thing? I'm not sharp enough to build this thing on my own, so I'm asking [begging?] for someone to help me out.

Thanks in Advance!

66

(34 replies, posted in General discussion)

phpbb is like a rubber.  It offers you a false sense of security while you're getting screwed.  smile

The very reason I got _away_ from phpBB is because of hack attempts, of which three in one year were successful.  I'm almost ashamed to admit that, but it's the truth.

I've stated this elsewhere on this forum, but frankly it got the to point where you had to visit phpbb's website for a daily intelligence brief. sad

One of the things we implemented (many thanks to Rickard) was First and Last name support to the registration/validation.

It doesn't prevent anyone from hacking your board. But at least it gave an extra layer of "perceived" security, and allows us to view at a glance who is genuinely interested in becoming a member of our community, or just someone who is registering for alternative reasons.  Of course, that doesn't mean we would delete them, but we definitely tell them to get their profile in shape, or we will.

You could always turn on the email notification when a new user registers, however if you have a very busy board those could get unweildly to handle.

In the end, it's like a burgler who is casing your house.  If they really want to break in, they will find a way to do it. All the locks on your doors do is keep an honest man honest.  smile

HI all,

Hopefully some of you gurus out there can help me. [Please be gentle, Noob alert smile]

I have a file named cron_recurring.php, which needs to be called/triggered daily.

I've been told that I can use CURL to get to the file via a URL.

I've also been told this is a fairly easy thing to do.  smile

... But I'll be darned if I can sort all of this stuff out.  I have absolutely no idea how to do this, and my searches on the net end up up zippo.

Can someone tell me how I can set up a cron to run, and what the proper syntax/wording is in the cron itself?

Also, would this cron go in the /etc/ directory, or would I just add it to the cron that already exists there?

I would prefer a straightup/show-n-tell example of the cron itself, as written, plus where this sucker needs to live on the server so that it runs correctly.

Running Apache/Mac OS X Panther

TIA!!

68

(5 replies, posted in PunBB 1.2 show off)

For those of you on the Mac, you're probably very familiar with Applescript.  We recently launched the new board using PunBB, so many thanks go out to Rickard and Paul and others who helped us achieve our goals.

bbs.applescript.net

Stop by and pay us a visit!

Thanks for the replies guys.

1) I've deleted everything in the cache folder [the php files that is]
2) I checked, and there is a period in front of the cookie domain.

Is there anything else I'm missing?

Hi all,

Until I'm able to get a hold of Rickard, I thought i would post here to see if anyone might know the cause.  We just migrated to our new bbs [punbb of course], and switched domains.

I had done all of this prior to switching domains on the server.

However, you can get to the bbs fine, but no one can log in, and neither can I.

Has any one here experienced this, or does anyone know how to fix this?  As I'm not able to login myself, I'm not even able to see what could be broke.

Halp!

signed: desperate. smile

BTW: Does anyone know how I can dump the cache?

I thought that may be it, but it has some files in there I'm sure if I should delete. [???]

71

(51 replies, posted in Feature requests)

I am just as much a conservatist in BBS software as anyone else.  That is exactly why we migrated to PunBB.

On the other hand, there is a huge difference between minimalist and perceived/relative security.  I can safely tell you we won't be allowing anyone to register to our forum without having a valid email address and user name. [and most likely enforce entering their first and last name at registration.]  Of course, this is just in our setting, however I am sure anyone who runs a large board will agree.

When you have a board that becomes reasonably popular, it only takes one baffoon to bring it all down through hacking at worst, to lurching profiles in the least.  In the later case, that pisses people off to know they had their email address screached off what is supposed to be a reasonably secure community.

We used phpbb.  At the time we started using it was years ago; it was the second version released and those days was the cat's meow.  Everyone loved our new digs.

Today?  Phpbb is the most hackable software on the planet, with script kiddies figuring out new ways to break in and do bad things every day.  In just one short year, we were hacked three times.  Not due to stupidity on our part, but due to security issues with that software.

In short, it's gotten to the point where browsing Phpbb's forums is a necessary, presidential, daily security brief.  That's a fucking shame.

You have no idea how much we'll love getting away from that board.

What adds insult to injury, is posting your problem on Phpbb's forums.  I clocked my post; within one minute, my post had slid down the page to the bottom of a huge list of complaints.  The number of people posting was almost to the point of the ridiculous.  As for my own post?  There is no way I was going to get help and I knew it.

In summary, sure you can have anyonmous posters.  You can even allow people to post without registering at all.  I agree with Paul, as everyone who would show up as a guest when everyone is a guest, well ...who would you be talking to? smile

I recognize there is a difference in Minimalisim and my own post comparing it to Security.  My point has much or more to do with creating communities where the people who use it feel relatively secure, and can indeed leverage their personalities in a positive way.

Something can be said that by creating communities can potentially offer more features to users who took the time to register.

IMHO, allowing people to post/reply/read anything as anynonmous and without registering is certainly not the way to do it.

ahhhhh!!! - I see sed the blind man.

Ok, my apologies! smile

I know that.

What I want to do is have the plugin *check* for bogus addresses, and allow me to *delete* that persons account if it is proven to be bogus [by further testing, manually, or otherwise].

Also, read my description.  smile

I know a user validates their account by having an email sent to them.  That is what I'm referring to - they use a valid account to 'get in' and validate the registration process, but come back and edit their profile with a bogus email address, after-the-fact.

The only way you would know them doing so assumes they would post and someone else replied to that post -which the system admin would get that bounce [at least i do].  That is a pain, and all occurrs long after they would have been on the board, doing no telling what.

The idea of the plugin was to query the board and scan all email addresses, and attempt to validate them by using whatever means is possible [within php], doing only x number of addresses at a time and page through the results refreshing the browser.  Once done, it spits out a list of all potential bad addresses, with links associated to that user - allowing the Admin to either delete that account, email that user [to test manually] and also PM that user.

We all know what it's like when a user registers to your board, only with the intention of trying to leach users/profiles, or just try to do nasty things in general. [aka script kiddies and spammers]

Occasionally, these people will register to the board using a 'good' email address, just to get the validation email notification, and once they log in immediately change their email address to a bogus one in their profile.

I wonder if it's possible to write a plugin that;

a) loops through all users on your board, and verifies their email address [whatever method is accurate and works; eg: mx]

b) loops through only x number of iterations at a time, to prevent server load and potential time outs using php

c) Gives a display of each address, with user name, as it loops - this could be either set by the Admin the number of iterations [such as 20-50 at a time for example], through paging

d) Once the Plugin is finished checking addresses, it displays a list of potential 'Bad' Email addresses, and armed with this info the Admin could choose to delete that persons account directly [via a link], or;

e) Be able to either Email [to check/manually verify address] or PM that user to let them know they need to use a valid email address.


I recognize this would be something you would want to do late at night when there wasn't much traffic, but in my view this would be a great Admin tool for those who fight this kind of behaviour.

Thoughts?

Thanks for your consideration!

hcgtv wrote:

Isn't pMachine a dead project?

Don't you mean ExpressionEngine?

No, pMachine is very much alive and well.

In fact, it is now released as a freebie - superceding their 'lite' version.  The Lite version has since been dropped.  All that exists now is the full [but free] pMachine Pro 2.4, and Expression Engine.

Expression Engine is great, but expensive and tough to get your head wrapped around.  Taking the fact pMachine 2.4 is out and is now free, for our own use we will probably stick with it.