1,226

(3 replies, posted in PunBB 1.3 bug reports)

should be changed in core - send anatoly or garcia pm when they don't pick up on it here....

N3twork2 wrote:

Hello

Main.tpl

<div id="brd-head" class="gen-content">

    <div id="pub">
Google adsense code
    </div>

Css page

#pub {
    position: absolute;
    top: 40px;
    right: 50px;
    width: 468px;
    height: 70px;
}

pub being ads in french smile
thanks N3twork2

probably will be easier to find for people in this post....

TrueCrypt Forum wrote:

SSL does not only solve the insecure WLAN question, it is an absolute must when wanting to access something over untrusted networks (internet is insecure). When correctly used it will bolt out any man in the middle.

Depending on your requirements you must choose if you want to use a SSL certificate signed by an authority or if you prefer a self-singed SSL certificate where your users need to validate this itself. (by a given hash over a pre-secure channel)

Keeping the forum private and password protected is also a good idea. Robots not listening to robots.txt will only see the public part which isn't a big deal if there are only two boxes for username and password even without description.

Someone (the hoster, the user or whoever) want to stay anonymous you must use some anonymizer (like tor).

this helped me quite a bit.

Adding A Download Link To Navlinks
======================================================================


            <hook id="fn_generate_navlinks_end"><![CDATA[
            global $base_url;   
           
                $links['navdl'] = '<li id="navdl"'.((FORUM_PAGE == 'dl') ? ' class="isactive"' : '').'><a href="http://www.keydogbb.info/dhtml/keydog-1/location/keydog/extstylelangmod.php"><img src="'.$ext_info['path'].'/img/dl.png" alt="Download" /></a></li>';
               
                $links['index'] = '<li id="navindex"'.((FORUM_PAGE == 'index') ? ' class="isactive"' : '').'><a href="'.forum_link($forum_url['index']).'"><img src="'.$ext_info['path'].'/img/navindex.png" alt="Index" /></a></li>';

=======================================================================


Instructions:
=======================================================================

1. Just add the green code above to the manifest.xml in navlinks extension
2. change your the download link to wherever yours is located
3. add a dl.png  image/icon to the img folder

and you're done

=======================================================================


Doc
=======================================================================
by KeyDog

Release Date
=======================================================================

31-01-2009


=======================================================================

feel free to add your input

@garciat: installed it - but can't see any settings that I can look at or change other than ones in by default...
no documentation....

ok thanks. smile

Related to my other thread regarding secure discussions and the like I have following questions

1. would it be possible to add a feature to profile and admin - to see what IP logged into which account on which date

I think this would be good as a kind of overview page for a. Admin  b. User - that way both can detect unwanted activity easier.

2. Can I as admin with access to logs etc easily find now which IP is loggin into which account?
I know if I got to user post or user profile I as admin can see his IP - but an overview page would cut down on time clicking around and maybe make life easier.

The new thing here being USER also seing his history. (Could be useful?)

big_smile nice move ... business man in you smile

1,234

(2 replies, posted in PunBB 1.3 additions)

PhotoPost Support wrote:

Hello

We would need to see when we have time to look into it before we could qoute integration costs. Costs can be anywhere between usually $140-420 depending on the time. We charge $70/hr for custom services.

**** *******
PhotoPost Support

....

couple of questions:

a. robots.txt   
if I don't want anything crawling it at all I should do this right?

User-agent: *
Disallow: /forum

b. if I'm worried about someone monitoring one of the posting users traffic (by breaking into his wireless connection - which seems to be childsplay even with WEP?) - does SSL solve that issue?

c. if I don't want anyone to even be able to access forum page without FIRST entering a password and username - what should my port of call be on that subject?

d. if I send the user a physical copy password or by mobile text- an additional one to the username password already in forum by default - is that do-able? or really overkill....

e. should I be trying to get an own server so that I can also white list IPs should I or they still be worried? at the moment I'm familiar with my shared hosting - but is that a big security risk?

f. what weak points does that leave?

thanks


EDIT: gues I shouldn't be doing a. and instead this
http://www.thesitewizard.com/apache/pas … tory.shtml

deadram wrote:

a) Sure? Just disable guest and member viewing permissions. Maybe give members access to one forum, soes they can remind you their one of the dozen or so, and should be moved to the 'privmembers' group, with full view/post permissions.

b) Look up robots.txt for the search crawlers. AFAIK google, yahoo, msn, all the big ones follow these rules, and doing it with robots.txt will limit bandwidth usage! smile

c) I always run my forums over https. www.cacert.org is a good place to get a free signed cert, but your users will have to add that CA if they dn't want the un-signed cert warning (There's directions on cacert.org). There's a way to redirect all http://URL/PATH to the https equivalent in apache too (Though I use lighttpd, so I can't help there tongue). Also, fluxbb's install.php (at least 1.2; havn't used 1.3) doesn't install erm... pleasantly when only https is allowed. Remember to set your Base URL to https when you do the install! Otherwise your admin panel will not work.

d) You could set-up password protected paths on your web-server; but this would be overkill IMHO. https connections only to fluxbb, and all passwords are sent and received encrypted, so there's really no need. Get your cert signed to prevent hi-jacking though tongue I would also suggest you do not send random passwords to users via e-mail, and instead only send activation links (for registration); this is the default IIRC. You could run a simple password cracker on your user database (either from the server, or on your own box after a download of the user tables); if a password is cracked, then force that account to change their password. Easier still, maybe swap the meaning of the 'censoring' option, and use it to censor passwords like 'qwerty' or '123456'. I'd guess there is already mods/extentions like this on punres. Still... if your users are using weak passwords, they'll probably continue to find ways to do this even with your help.


got this feedback till now.
will take it from there big_smile need to do a lot of reading.

I'm thinking of creating a board where only a dozen or two users which I have personally selected can exchange ideas and discuss confidential topics.

My questions:

a. Is this something I should/could do with Pun?

b. It's important to me that I not have google or any other bots accessing the site, best way to implement that?

c. Loggin in authentification; should I be using SSL and longer/different password protection?

d. Maybe add a third authentification step like you know from your ebanking?


Thanks for input on this.

yeah that's cool. covers hosting and goes towards hardware smile

can see in which cases that is useful

It really depends what kind of ads your running.
which do you intend
for every country it's different. unless you wanted google ads (which i personally dislike)

Most of those sites with google ads probably piss more people off though having them than making any money from them (my view)

If you're serious about pro ads you should have someone customize the template for you? or speak to your advertiser that he gives you formats then you put them in divs in template?

Maybe I'm wrong on googleads - but does anyone here make money with them on their forum????

It really does need some kind of ranking or votes system to know which are really needed.

On those 5 extensions - if someone helps Cereal to OO-fy Pun 1. 3 - those will be easier I think to do. ( All ajax based ones.)

@supermag

1st one : that's one that existed as mod for 1.2 - in this and this it's being discussed. Or will be discussed.

Ajax Framework is being discussed and for me personally is extremely high priority. I hope devs help in any way they can.

Most users are aching for more ajax stuff. In that way they can be added as extensions and not make pun 1.3 slow. Hopefully.

Also in that discussion is a post with all ajax requests. Add those to that list.

This post is just distraction otherwise smile

1,241

(1 replies, posted in PunBB 1.3 extensions)

http://fluxbb.org/wiki/developing_extensions

someone should probably copy paste it to pun wiki
cos i can't find it here

but that should help you a lot if you have coding knowledge

big_smile no - i have the mod. i need it as extension....
he'll know what I need smile

user avartars on frontpage extension manifest.xml discussion

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE extension SYSTEM "ext-1.0.dtd">

<extension engine="1.0">
    <id>frontpage_avatars</id>
    <title>Avatars On Frontpage</title>
    <version>1.0.0</version>
    <description>Add Online Users Avatars At Bottom Of Page</description>
    <author>PunBB Forum</author>

    <minversion>1.3.2</minversion>
    <maxtestedon>1.3.2</maxtestedon>

    <hooks>
        <hook id="hd_template_loaded"><![CDATA[

ob_start();
require $ext_info['path'].'/user_avatars.php';
$login_form = ob_get_contents();
ob_end_clean();

$tpl_main = str_replace('<!-- forum_info -->', $login_form."\n\t<!-- forum_info -->", $tpl_main);
           
        ]]></hook>
    </hooks>

</extension>

tongue what do the red marked things need to be?

1,244

(5 replies, posted in Feature requests)

EDIT:

http://www.punres.org/viewtopic.php?pid=11904#p11904

so maybe change parser.php

    if ($forum_user['is_guest'] )
    return ' <span class="members-only">[Members only link, sorry Guests]</span>';
    else
    return '<a href="'.$full_url.'" onclick="window.open(this.href); return false;">'.$link.'</a>';

1,245

(5 replies, posted in Feature requests)

Do you have an example of that?
Which links? Normal url's in a post?

http://punbb.informer.com/forums/topic/ … ded-to-13/

the above mentioned mod needs to be made into an extension

gues one way would be to just modify the php file - to reflect pun 1.3 naming - then call it from manifest.xml

no?

This should be useful when someone needs to change an old pun 1.2 mod to work on 1.3
a. = pun 1.2     b. = pun 1.3
@devs - please check this stuff here smile

1. a. pun_htmlspecialchars($_POST['message_body']
1. b. forum_htmlspecialchars($_POST['message_body']
2. a pun_htmlspecialchars($_POST['message_subject']
2. b. forum_htmlspecialchars($_POST['message_subject']

3. a require_once PUN_ROOT.'include/email.php';
3. b require_once FORUM_ROOT.'include/email.php';

4. a. // Make sure no one attempts to run this script "directly"
if (!defined('PUN'))
    exit;
4. b. // Make sure no one attempts to run this script "directly"
if (!defined('FORUM_ROOT'))
exit;                       or
4. c. // Make sure no one attempts to run this script "directly"
if (!defined('FORUM'))
exit;


5. a.// Tell admin_loader.php that this is indeed a plugin and that it is loaded
define('PUN_PLUGIN_LOADED', 1);
5. b. ?

6. a. pun_mail($mail_to, $mail_subject, $mail_message);
6. b. forum_mail(???);

[// Wrapper for PHP's mail()
//
function forum_mail($to, $subject, $message, $reply_to_email = '', $reply_to_name = '')]

7.
7. b forum_trim

8 a.
8. b    // Default sender address
    $from_name = sprintf($lang_common['Forum mailer'], $forum_config['o_board_title']);

http://www.keydogbb.info/img/new_images/menu_features.gif Extension Name & Version
==================================================================
hello_kitty   V0.1.0


http://www.keydogbb.info/img/new_images/lightbulb.png Extension by
==================================================================
KeyDog  // Website


http://www.keydogbb.info/img/new_images/lightbulb.png Smilies by
==================================================================
SmileyDesign.net // Website


http://www.keydogbb.info/img/new_images/menu_version.gif Release Date
==================================================================
30-01-2009


Download
==================================================================

http://www.keydogbb.info/img/new_images/menu_download.gif Rapidshare Zip  or  http://www.keydogbb.info/img/new_images/menu_download.gif Mediafire Zip


http://www.keydogbb.info/img/new_images/quick_tutorial.gif Installation
==================================================================
Just upload imotion_smileydesign folder to extensions folder

http://www.keydogbb.info/img/new_images/information.png Information
==================================================================
You can see a screenshot of the smilies set in

info_docs
hellokitty.gif   or here:
http://www.keydogbb.info/img/new_images/menu_screenshots.gif

http://keydogbb.info/img/hellokitty.gif

[not yet available:
live demo - see the animated ones here!]


http://www.keydogbb.info/img/new_images/menu_solution.gif Note
==================================================================

You will need latest file  include/parser.php (parser.php is located in info_docs folder in case)

Also gif obviously doesn't show the animated ones. You'll see those when you use it live.
I have put in several "normal" smileys for those how want both. Open to suggestions on
that issue.

http://www.keydogbb.info/img/new_images/bug.png  Bugs
=================================================================

Please give any feedback on the extension in the forum at
http://www.punbb.org in this post
Or regarding the smilies
http://SmileyDesign.net

==================================================================

Enjoy.

==================================================================

no problem - happy it is fixed smile thanks for your efforts!

1,250

(15 replies, posted in PunBB 1.3 extensions)

any idea why I could be getting these kind of error messages


Notice: Undefined index: FAQ in /functions.php(466) : eval()'d code on line 20


Notice: Undefined index: Privacy in /footer.php(38) : eval()'d code on line 11


tried the same 1.1 extension on another board also and it was also undefined index faq and privacy but in misc.php - don't understand it...