I just had a problem with my website that has all the trappings of a successful hack [it has happened before sad   ]  My traffic usage skyrocketed in a short period of time. 

See http://picasaweb.google.com/JamesMelhui … 5557846850

The last time this happened, it was a vulnerability in Coppermine Photo Gallery.  I removed this application for now, and had transitioned the whole website to a new virtual private server (VPS).  (Run by the company Fluidhosting).   Now it has happened again, but I am not an experienced enough in internet security, Linux, Apache, etc.  My web host says they are looking into it, but haven't yet heard what they have found.

The only "application" on the website was PunBB (1.2.17).  I have just upgraded to 1.2.20.  Everything else was static html files. 

My log files show a sustained attack somewhere before 17 August and successful on the 18th.  I wish I knew of some way to better monitor the VPS.  I probably need to learn more about internet security.  Anyway, they got root access...

Was the security breach likely to be through 1.2.17, and if so, is there anything saved in the mysql database about it?  Or should I not worry and trust in 1.2.20 until the next release?

Thanks for any ideas.

James

2

(2 replies, posted in PunBB 1.2 troubleshooting)

I had similar problems for a while.  I had hoped that PunBB might incorporate a CAPTCHA in the normal release, or something like it.  My somewhat drastic step has been to turn off automatic registrations and have everyone email me personally, then I set up the user's account myself.  I use the plugin "User management - v1.3".

James

3

(2 replies, posted in PunBB 1.2 troubleshooting)

I am about to move my forum to a new server.  I will try yemgi's instructions above. 

A suggestion:
Could the developers please post explicit instructions on "How to move to a new server" in the documentation, probably under "Installation"?

Thanks.
James

OK, thanks all.  I had all files in the cache at the wrong permissions.  I have changed all the cache files (except .htaccess, should I change that?) to 1777, and the /cache directory also to 1777. That gives permissions for both /cache and all files of:

drwxrwxrwt

Is this correct?  The forum is saving the options now, and the Admin index shows the updated value of 1.2.14

Thanks!

So how do I empty the cache?  I did remove all files (after backing them up) but then PunBB could not "write to the configuration file. Make sure PHP has access to the directory" or something like that.

I then tried removing all PHP files and leaving the index.html file in /cache, but that didn't work: same message.

Ideas?  Thanks.

James

PunBB Upgrade 1.2.6 to 1.2.14

I followed the instructions (correctly?) and got a message from the update script that the update was successful.  However when going back to the forum, under administration, the version still said 1.2.6.

So I removed all the updated files from the forum directory, replaced them with the backup 1.2.6 files, then copied over the new 1.2.14 files and the update script and tried running the script in the browser again. Now I got an error message:


File: /forum/12_to_1214_update.php
Line: 69

PunBB reported: Version mismatch. This script updates version 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.2.8, 1.2.9, 1.2.10, 1.2.11, 1.2.12, 1.2.13 to version 1.2.14. The database 'frpbb12' doesn't seem to be running a supported version.

I went into mysql and looked at the values for conf_value inside the table _config and I see the value 1.2.14 right before the forum name. So I go back to the forum and it is up and running but (still) says PunBB 1.2.6.

What's up here? I did backup the mysql punbb database successfully. Should I have put the forum into maintenance mode?  Should I have stopped mysql somehow?  Am I really running 1.2.14? 

Any ideas?  Thanks.

James

Oh wow!  Thanks Elzar. I have been through this Options page so many times, but never exactly understood what "Additional Menu Items" meant, until I read your post and read the description under the entry field. Obvious now...

Thanks also Rikard!

James
------------------------------------

UPDATE:

Ooops, this is not working for me. Every time I enter a link, when I save changes, PunBB updates, but no menu item is created AND my link text is removed from the "Additional menu items" editing box.  I tried a bunch of different options, none worked, including things like:

0 = <a href="http://fullrangedriver.com/">Home</a>
1 = <a href="http://fullrangedriver.com">Home</a>
1=<a href="http://fullrangedriver.com/">Home</a>
7 = <a href="http://fullrangedriver.com/">Home</a>
1 = <a href="http://fullrangedriver.com/">Home</a>;
1 = <a href="http://fullrangedriver.com/index.html">Home</a>

What's up? Thanks.

version 1.2.6 running...

James

------------------------------------

UPDATE 2:

Found the solution, bug in 1.2.6 , see http://punbb.org/forums/viewtopic.php?id=8086

James

I have wanted to add navigation links into the forum menu myself. i.e. a "Home" link, similar to the PunBB.org link at the top of this page. It doesn't seem easy. I tried adding (functions.php line 230 on):

function generate_navlinks()
{
    global $pun_config, $lang_common, $pun_user;

    // Index and Userlist should always be displayed
    $links[] = '<li id="navhome"><a href="http://someURL.com/">'.$lang_common['Home'].'</a>';
    $links[] = '<li id="navindex"><a href="index.php">'.$lang_common['Index'].'</a>';
    $links[] = '<li id="navgallery"><a href="http://someURL.com/gallery/">'.$lang_common['Gallery'].'</a>';
    $links[] = '<li id="navuserlist"><a href="userlist.php">'.$lang_common['User list'].'</a>';

But this did not seem to work... What am I doing wrong?

Also, this would seem to be a feature that should be added to the administration panel. (Enter your desired navlink names, URLs, and positions in the nav menu). So if we update PunBB, we wouldn't need to manage versioning of functions.php.

Thanks.

James

9

(3 replies, posted in PunBB 1.2 troubleshooting)

Thanks, this sounds like the right thing to do, I (or a friend) needs to write a little script to loop through and output a table in the correct format.  I assume that I simply supply the default field values for fields that don't have equivalents in Tiki (like Pun's hide_smilies).

Thanks for the quick reply!  If I get a little script programmed, I would be happy to pass code along to Chacmool, what language is the converter written in, PHP?

Thanks.

James

10

(3 replies, posted in PunBB 1.2 troubleshooting)

Hi all,

I asked about 6 months ago about a possible migration tool or script from Tiki (tikiwiki.org) forums, but nothing existed. I am trying to work it out manually and am having some issues. In particular, I am having problems with the differing database schemas and the way tiki handles topics.  Tiki defines a top-level (non-reply) post as a "parent" using the post id [Tiki field threadId]. 

IOW:
The parentId of a top-level post = 0, while its threadId may be (say) 3245. Any child posts of the parent reference the parentId (3245), not a separate topic id as used in Pun.

I don't know how to handle this difference.  Also I am not sure what fields I can leave out in Pun, or set to default.  More information on Tiki as related to my problem:

http://melhuish.org/tikiTransfer.html

The target forum is    http://fullrangedriver.com/forum/
The source forum is   http://fullrangedriver.com/tiki-view_fo … ?forumId=1

Thanks for any help...

James

11

(300 replies, posted in PunBB 1.2 discussion)

Will there be any kind of importer/upgrader to move PunBB 1.1.X databases up to 1.2 ?

My werbsite users hate my old Tiki forum and I am desperate to convert to PunBB.  I have 1.2 dev running, but of course if the database schema changes...

So I am considering installing 1.1.5, if there is much more of a wait until 1.2  ( I know we can't ask Rickard for a release date!  ;-)  )  But I won't install it if there is a hassle converting my data over to 1.2

Thanks.

James

12

(4 replies, posted in Feature requests)

jchristophm wrote:

The forum database is similar, with a folder that has all of the posts in textfiles such as:

1.txt
2.txt
3.txt
4.txt
.....
2000.txt . . .

Is there any way that all of this junk can be piled into MySQL so punBB can make sense of it?

That is what I am going to do.  I might require my users to re-register, as it is the 68,000 posts that I want to focus on getting into PunBB.  A friend will probably write a script in Python and run it on my web server.  It will just strip content defined within various HTML tags or keywords and dump into the MySQL tables.  If we get any code that is reusable, I'll post it somewhere in Mods.

James

Hi it's me (James) again, sorry for the bandwidth but I have questions that are important to me...

I would like to know if it is possible for you developers to create a standards-based user authentication module that could be shared by different PHP applications.  I would like my registered website users to be able to login once in a session and have all of my applications recognize them : PunBB, Gallery, and maybe other applications like phpBB, Coppermine, Tiki (which I am dropping), etc.

This is really important to me, and probably to other folk too.  This partially addresses the "integration" issue with other apps.

A second nice feature would be some kind of common CSS, at least for major elements like Font style, size, Headings, etc. that each application could call in addition to its own CSS.  I don't know how this would work.

Would it be possible for the community of PHP application developers to work together to create a shareable authentication module?  Thanks!

James

14

(5 replies, posted in Feature requests)

Just like you have, with LINKS only.  When clicking on a link, the content is displayed "as normal" in another page with the Topic at the top and Replies underneath.  The user then either clicks the back button, or the forum name at the top of the page to go back to the "list".  The link needs to change colour (e.g. visited) after a user has clicked it once, which then gives a direct visual reference to what posts have already been viewed.  It would also be nice if the links to the posts took you to the actual post instead of just to the topic.

It is only the "main page" of a particular forum that has this view option.  But of course this main forum page needs the option of the current style too.  The user would choose their viewing option under their Profile.

Am I making sense?

James

15

(5 replies, posted in Feature requests)

Connorhd wrote:

well, thats not really possible on punbb....
that forum is threaded and every post (new topics and replys) have a subject which means it can be displayed, how could posts be displayed in that format on punbb

I said above that I didn't want the threaded feature.  All I want is what Paul wrote, a simple display on one page of clickable links for all topics and their replies. (Up to some maximum number, perhaps 200, after which it writes to another page).

Connorhd wrote:

also how is that site a miniCMS? it just looks like a forum to me :S

Yup, it really is only a forum at the moment, though I am using it to hold articles, classified ads, etc. in forum format.  The category name separates the Forum from the Articles, etc.  I had been asking Rickard about a couple of features that would allow it to operate more like a CMS; I think the user permissions might happen, not sure about the "single topic, no reply" feature though. 

See http://punbb.org/forums/viewtopic.php?id=4712

James

16

(5 replies, posted in Feature requests)

One thing my forum users really really want is the ability to view all topics and all replies on the same page.  A single line for topic and a single line for each reply under that topic, then the next topic (chronologically), etc. 

Why?

They want to see immediately the un-viewed replies, and the topic associated with those replies.  This happens by the positioning of the replies and the link color (visited/unvisited).  They don't want to have to open each topic, and they don't want to get a list of unviewed posts (such as from "Show new posts since last visit").  You can tell activity by looking at the colors (links) and patterns (placement) of posts.

See for example the forums at audioasylum: http://www.audioasylum.com/audio/digital/bbs.html

This "feature" was common in the CGI bulletin boards, but seems to be lost from most of the PHP forums. Note that I do not want (or need) threading of replies, i.e. replies to replies, I am happy with only replies to the original topic.

I would want this to be a user-selectable viewing feature, so the "normal" forum behavior is retained by default, but those who wish to see a long list of posts can view it that way.

So...  what are your thoughts on this feature?  Definitely a "forum" feature and not a CMS issue ;-)
Thanks all!

James

p.s. you can see my current test site of PunBB 1.2 dev. (using the forum as a "mini-CMS") at http://melhuish.org/pbb12B2/index.php

Paul wrote:

So what you are looking for is the functionality of an article/tutorial/story publishing system where the articles/tutorials/stories can be composed and edited by multiple contributors. Is that right?

Yes pretty much.  The wiki portion would be composed/edited by multiple contributors, whereas simple articles, new stories, classifieds, etc. would be composed/edited only by the original contributor.  This would work in PunBB if "Replies" to Topics was turned off.

Yes, Scoop appears to be something like what I am looking for.  Simple functionality where users can discuss in a forum, add (personal) technical articles, share contributions to the same article etc.

My current audio website running on tiki is http://fullrangedriver.com/

A test site with PunBB is running at http://melhuish.org/punbb/

James

Rickard wrote:

A product that does more than one thing can be the holy grail for people who actually need it to do those things, but for everyone else, it just degrades performance and bloats up the codebase.

Thanks for taking the time to think about and answer my questions.  I think for my personal needs (and maybe other people too), a very minor code/feature addition would suffice.  All I need to make the Forums more useful are two additions that I hope would not bloat the code:

1)  Ability to set a forum so that only Topics are posted (no replies possible)
2)  Ability to pre-assign Topic ownership rights inside that forum

An example of feature 2), one Forum would allow edit ownership only to the original poster (this is the current behavior, plus moderator/admin edit?), while another forum would allow (be pre-assigned) edit ownership to all registered users, regardless of who created the post.

I can live without PunBB containing file uploads, but the two features above would really help.  Thanks again for both the forum and for reading this.

James

Paul wrote:

What I mean is have an entirely seperate file upload script which looks and feels like PunBB and even shares the styles and login.

I would be completely happy with that, as long as it used the same user database tables and permissions from PunBB.  I don't even think a completely "PunBB-copied" interface is necessary, just another PHP page with file upload options.

Rickard wrote:

It's a bulletin board, not a CMS. I intend to keep it that way. I hate products that do a little bit of everything, but do it rather poorly.

I personally think that the PunBB-mini-CMS that I described would do CMS rather well.  Fast, efficient, user-friendly.  The parsing efficiency of PunBB would still remain high if the CMS features were not turned on.  And even turned on, the reuse of the forum code would be (?) far more efficient than standalone code for each CMS feature.  From a Human-Factors point of view (the company I work for does Human Factors Engineering), the ease of learning and simplicity of use of a CMS that mirrors the common forum behavior is highly attractive. 

James

Rickard wrote:

I have yet to find a solution that is short and neat, and until that happens, I'm not ready to implement it. PunBB's strength lies in it's simplicity, not it's feature set.

Agreed.  Keep it simple, light, and fast.  But if you do find a short and neat solution, even one that is relatively simplistic on file management (but still safe!), please implement it.  Thanks!

James

Paul wrote:

We could create too a blog !

Yes we could!  Simple, and little code bloat.

Paul wrote:

I don't get the highlighting bbcode. If you mean highlighting it as your writing how are you going to get a textarea to cooperate with that?

Good question, not being any sort of expert programmer, I hadn't thought of that.  I consider colored/highlighted BBCode to be a minor feature, but it would make it easier to write long articles with lots of formatting.  (Or to edit articles with much formatting).    I don't know what the alternatives to a Text Area are; again I would not want code bloat or performance loss. 

I guess my ideal desired behavior would be to write text in the editing field (TextArea), then select text that you want formatted (e.g. Bold) and click a link or button to Bold the text.  At this point, PunBB could rewrite to the editing field encapsulating the formatting information.  I understand that a link or button could already add the formatting text to the TextArea (Please add this as an option to 1.2), but it would still be nice to have that formatting text in a different color. Even better would be an editing field that allowed the BBCode to be hidden, and the results of that code displayed.  Are there any simple text editing fields that allow that kind of hidden formatting?

Another idea would be to keep a Preview Pane active as you entered text in the TextArea.  When a user highlights some text (in TextArea) and clicks a formatting link (Bold), the BBCode gets added to the TextArea and the results are updated immediately in the Preview Pane.

Frank H wrote:

and at least earlier Rickard said he didn't want attachments in the forum base

This I don?t understand.  Rickard must have a reason for this, but I couldn?t find it.  Personally, I think it is incredibly useful for web forum software to have the ability to attach (upload) files based on user permissions (e.g. registered users only).  Since PunBB is managing user permission already, the file uploading should be somehow integrated.

I don?t necessarily think a file needs to be attached to a post to be useful, because attaching it through some mechanism to a particular directory (or database table) would allow it to be referenced in a post (e.g. attach an image through a simple upload, then reference it using the image tags).

FEATURE REQUEST :
It would be wonderful to have FILE UPLOADS managed similar to Forums, and to my requests for Articles, Wikis, etc.  IOW, one could create a File Upload ?Forum? that could be named, or attached to a category.  A user entering that would see a list of files, similar to the list of topics (and the owner/uploader of the file, date of upload, etc.).  In this way, you could create ?Galleries? of images, or ?Directories? of music files, etc. 

All of these CMS services could be based on the same code base as the forum, but would really enhance PunBB as an interactive community tool.

James

I want to move from my current feature-bloated CMS to PunBB, and use PunBB as more than just a forum.  I think PunBB should (must) be kept as fast & light as possible; this is a major competitive advantage.  However, I think we can make it work as a (mini) CMS with very little code bloat.  Here are some thoughts and requests...

1)  Use the ?Forum format? for different CMS services:  - news stories - articles - classified ads - wiki

2)  Do this by changing forum behavior and posting permissions:

Forum behavior : for each CMS service (generally), you will want to post only a topic, and not allow any replies.

Permissions :
    News - moderator/admin create/edit permission only
    Articles - registered users create permission; original poster edit permission (on own posts)
    Classified Ads - (same as articles)
    Wiki - all registered users create and edit permission on all pages

Users should be able to upload images, also possibly files (adobe acrobat docs, music files, spreadsheets, whatever).  Then these images (or files) can easily be inserted into their articles, classifieds, etc. 

3)  Feature requests:
?    File uploading for registered users (PLEASE)
?    File uploading might need checks and restrictions on file size, file type (extension) etc.
?    Possibly combine file uploading with GD or Imagemagick to force resize on large images
?    Automatically Prune posts from selected forum (Classified Ads : automatically prune posts greater than XX days old)
?    Buttons to insert BBCode formatting automatically ? ,  etc.
?    Formatting code (BBCode) highlighted in different color (e.g. blue); normal text in black (this would make writing and formatting articles or wiki pages much easier)

Thanks so much for PunBB!  I will likely use it as a CMS regardless of whether you add the design and feature requests above.  But anything that you can do that makes sense would be great!

James

23

(4 replies, posted in Feature requests)

Tiki is pretty much similar I think...

The HTML files were created by a cgi bulletin board at the German Parsimony forums (http://parsimony.net)  Each file (message) contains URLs that reference other files (messages - mostly in the same directory).  I may just put them up as HTML files, but I would like them to be searchable through MySQL.  I don't mind losing the URL references to other messages, but keeping any URLs internal to the message would be helpful.

I might have to get someone to write a program to extract just the relevant text, as there is a lot of cr*p before and after the real information.

See for example some similar forum at http://f24.parsimony.net/forum54930/index.htm  Note the "threaded messages" with each message potentially containing it's own child thread(s).

Thnx
James

24

(4 replies, posted in Feature requests)

I have been checking out punBB for the last couple of hours, and have it running on my website.  It seems really nice! 

I am inquiring about importing old forums into the database.  I see that some convertors have been written for phpBB (and others).  I have two possible desired conversions:

1) tiki (tikiwiki) to punBB
2) separate HTML files into MySQL/punBB

tiki (http://tikiwiki.org) already uses MySQL and PHP, but it is rather over-featured for my needs. (I thought I needed the features, but think I am better off using more forums for things like article writing, technical content sharing, etc.).

So, I presume there is no convertor for tiki (or for separate HTML files); is it possible or easy to do some kind of direct database dump from tiki into punBB?  Currently I have only about 350 topics and 1000 total messages.

Also, how about some kind of convertor for HTML files into MySQL?  Here I have about 68,000 separate HTML messages...  :-(

I'm also hoping that the mods for file attachments (especially images/pictures) get ironed out, maybe even included in the PunBB codebase!  [Rickard??]  Allowing registered users to add files or images would massively help my use of PunBB as a CMS.

Any ideas or feedback appreciated!  Thanks.

James

See my current tiki CMS & forum at http://fullrangedriver.com/
Personal site http://melhuish.org/