reviewum.com wrote:

I respect that opinion, but don't understand it at all.   Maybe I've just got too much time on my hands, but I ALWAYS want to know what people say in reply to my posts... you know, to see if they flame me or praise my greatness! cool

Don't most of you feel the same way when you look at your forum experiences... wouldn't you USUALLY want to see replies to a topic you replied to?

Well, I get way too much email/spam. I personally don't subscrbe to any forum threads. I just check my forums once a day and check the "my posts" link, as it is updated with new posts from other people. Very handy.

But there are some people on my forum, that I want to read the forum, and they don't do it, unless they're mailed.

Smartys wrote:

And subscriptions are already able to be set by the admins

Huh, stupid question: Where?

almost_there wrote:

II hate being automatically subscribed to a topic just because I posted a reply.

That's, why that feature should be user settable.

Although my interest mostly lies in "NEW topic notification"

reviewum.com wrote:

Also, I'm a bit mod adverse.  Not being a programmer I get frustrated when I hack a script and/or use a mod and then a new version of the kernel/base script comes out and my mod is broke and I don't have a way to fix it.

Despite being a programmer (but php isn't my language), I have the same problem:

When there is a new (security) release out there, I want to update as fast as possible. And having to retro-fit mods isn't on thse lines, really. That's basicly, why I run the plain version, no mods, no changes, etc.

I know, Rickard is doing a lot of work to make adding mods, etc. easier and I respect that work.

Rickard wrote:

I wouldn't say 2 is harmless. What if a thousand people subscribe to that category? Then, every time someone posts a new topic in that category, a thousand e-mails have to be sent out.

I mostly have to agree with reviewum.com on this: It highgly depends on your forum's size and your hoster.

And it's always a trade-off thing. On a really large forum, I would even consider disabling subcribing at all.

If all of this is so critical <feature!>it could be made selectable per group, so that only "trusted" people can use it</feature!> (not that I really vote for that feature, but it had to be mentioned.)

1 and 2 depend on your provider and the general amount of traffic on your board.
Mine has like 2 postings in a week on average. (Which was the main reason for me to switch to a forum from a mailinglist)

Especialy 2 is quite harmless, as it only gives a mail for a NEW topic. You can decide on your own, if you want to subscribe to it later on.

Does the mod work for 1.2.5?
Where is it?

And: Are there any plans to integrate this feature in the base? I have a few people, that do not like to "poll" the forum every once, just to find out, that nothing happened.

8

(15 replies, posted in Feature requests)

An alike idea goes for <pun_navlinks>:

I was considering putting my own "link back to main site page" in the navlinks list.
Would have been pretty simple, if the <div><ul>...</ul></div> would have been in the main.tpl file.

Just my stupid ideas.

9

(142 replies, posted in News)

I hope, we don't start a flame war here.

I accept, that spam IS a problem and makes using email harder than easier. (it wasn't mentioned, but it's one of the reasons I switched my mailinglists to subscriber-post-only and set up the forum.)

But for email vs. PM: I like punbb for not having it. My forum is there as a support forum, not as a forum to help people do private chat. They shall bloat their local disks with that.

About email boxes filling up with specific "site"-related stuff: Most modern mailsystems allow sorting one or the other way. And most good email services allow registering a bunch of emailadresses (that can end up in dfifferent folders, if you happen to find the right config entry).

10

(11 replies, posted in PunBB 1.2 discussion)

Right.
And having one millions <div>s doesn't help those browsers at all. Stuff just lies unsorted around. Very stupid.
So having stuff semanticly right is important!

11

(11 replies, posted in PunBB 1.2 discussion)

Well, and there are browsers being used, that do not support CSS.

For example the "Index » PunBB discussions » Table-less layout" at the top looks like this in w3m:

  * Index
  *  » PunBB discussions
  *  » Table-less layout

Oh, fun... mark this stuff in Mozilla, right-click -> Copy, and the right click in an input field like the one you type your message in -> paste: It looks nearly like in w3m wink

12

(254 replies, posted in PunBB 1.2 discussion)

Looking at the update script, it seems, one should also do this?

insert into config (conf_name, conf_value) values('o_regs_report', '0');

Right?

13

(254 replies, posted in PunBB 1.2 discussion)

Rickard, if you finally release (no hurry needed for me!), can you please post somewhere instructions for us 1.2Beta people, how to upgrade to 1.2 final?

14

(300 replies, posted in PunBB 1.2 discussion)

PM as in private messaging?

That's, what mail is for.
And PunBB supports exactly that.

I like it that way!

15

(254 replies, posted in PunBB 1.2 discussion)

Rickard: Oh, didn't notice it.

Well, it's a suggestion for the future, as the upgrade code in this area needs to be written only once then and can be used forever. ;)

16

(254 replies, posted in PunBB 1.2 discussion)

Hi Rickard,

The 11_to_12_update.php misses to add o_default_user_group to the config.

I had to add it manually to the DB. Using the admin interface didn't do the job.

You might want to share the default config between install.php and the update scripts. So that the update script can just go in a loop over the config settings and check wether pun_config[new_var] does already exist, if not, add it to the db.

17

(254 replies, posted in PunBB 1.2 discussion)

Rod: Please simply accept, that some people do not want or cannot use javascript. (just a simple example: blind people prefer textmode browsers, and I'm not aware of any one, that has js.)

XSS and js give a nice combination too. IF I use a graphical browser, then js is disabled.

And if you want to have some fun reading about what all can be done with js: http://isc.sans.org//diary.php?date=2004-11-24 (look for "Follow The Bouncing Malware")

Let's please end this discussion soon.

I like PunBB for not needing js. And I hope, Rickard wont change this.

18

(254 replies, posted in PunBB 1.2 discussion)

rob_van_triet wrote:

Is there a reply-only option for forums on this version. Its really a must have.

Yes, on a per group basis you can select "Read forum", "Post replies", and "Post topics".

Just check "read" and "post repies" and you get, what you want.

19

(254 replies, posted in PunBB 1.2 discussion)

Rickard wrote:

Yes, in theory UTF-8 is great. However, since PHP doesn't have full native support for it, it becomes a problem. If only the PHP team added Unicode safe versions of many of the string functions (or enabled mbstring by default), I would switch to using UTF-8 all the time.

I'm not really that deep in php, so stupid question: What string functions do you use in punbb that need specific UTF-8 support?
strlen? Do you really need the number of "visible" characters instead of the number of octets?
regex? Yes, "?" would only match an octet instead of a character. Do you use regex for anything that would need that? the index/search is word based anyway, right?
I think, the other normal string functions can be seen as a subset of the above two problems.

Rickard wrote:

Yes, it does. These forums are proof of that :)

*smile*

Rickard wrote:
Elrond wrote:

Does it make sense to change the english langpack to utf8?

Maybe. Still, PHP doesn't support it, so what good would it do?

See above. Would it really break horribly? I have no idea, and haven't tested.

Rickard wrote:
Elrond wrote:

Oh, changing the default client_encoding for the database makes umlauts work.

Then, I believe, that will have to be the solution for now.

For the docs/reference:

punbb=# ALTER DATABASE punbb SET client_encoding TO 'LATIN1';

Replace latin1 by the most appropiate one from <http://www.postgresql.org/docs/7.4/stat … l#AEN18181>.
Or use createdb's -E (--encoding) option to create the databsse with the right charset. Like:

createdb --encoding SQL_ASCII --owner punbb punbb

20

(254 replies, posted in PunBB 1.2 discussion)

Debian used to have UTF8 as default. (which in theory is a good thing. a database is a backend thing. It should store stuff in a global accessible and unique way.)

So punbb currently has a more or less big problem handling discussions in multiple languages (say swedish and russian), unless users change the forum-language in between.

Does it make sense to change the english langpack to utf8?

Oh, changing the default client_encoding for the database makes umlauts work.

fully automatic: Create a script, that does symlink-attack ;-)  (Yes, I'm used to full root-access to boxes ;-) )

sql injection: This can all be tricked. The httpd mostly knows about the wanted domain name, cause it's transfered in clear in HTTP/1.1. So all I need to do, is to talk HTTP/1.1 on my own. (I'm not 100% sure, one can get spaces in or apache might sanitize this also. But I wouldn't want to count on either of these.)

Well, I would have created a subdir per domain and used massive-symlink-attack. ;-)


Oh, and prefix from domain:

Make sure you apply some safety checks on it before using it as a table prefix. Otherwise one can easily inject sql.

23

(254 replies, posted in PunBB 1.2 discussion)

1.2 Beta and PostgreSQL give charset problems:

Postgres normally wants Unicode (UTF-8) in its SQL commands. And it will reject anything, that is not valid UTF-8.

So I can't even create forums with umlauts in it.

For the english langpack the solution is probably simple: Move it to UTF-8 (it should not have any umlauts, etc in it).

For other langpacks this isn't as easy.

24

(254 replies, posted in PunBB 1.2 discussion)

Rod:

That sounds like javascript... What I like about punBB a lot: It works without javascript and thus from a textmode browser.

25

(254 replies, posted in PunBB 1.2 discussion)

Great... I'll try it on my play box.