601

(13 replies, posted in General discussion)

Smartys wrote:

http://forums.bauchan.org/testforum/mod … /index.php
I think you might be better off modifying pdfgen just to take an ID.

Good point. big_smile I'll get the old thinking gear on that one. It's a bit beta'ish in setup at the moment, big_smile as it calls the viewprintable script, and uses the output from that. I haven't set it up to use the default method of pulling info directly from the page. Wanted it as more of an archive the printable topic view option, rather than a full generate pdf of any page option.

602

(13 replies, posted in General discussion)

Just wondered whether this looked/worked okay.

URI: http://forums.bauchan.org/testforum/viewtopic.php?id=1

Click on the [pdf version] button near the top. It just makes a pdf of the printable page view. (It prompts to download instead of opening within the tab/window).

What's the opinion? Btw, that thread is just full of meaningless nonsense. big_smile


Cheers,

Matt

603

(17 replies, posted in PunBB 1.3 troubleshooting)

I've absolutely no idea then. big_smile

Mannungo wrote:

I made an experimental extension of user's feeds with in-url key for authentification, take a look...
https://adi.ing.uchile.cl/~mortega/punb … _feeds.zip

I'm keeping deathly quiet on this subject now. big_smile Looks sweet though. smile Btw, this part: title="ATOM". Atom should be first letter uppercase only, for correctness, I believe. smile Only RSS is an acronym, hence all uppercase.

Peter wrote:
MattF wrote:

You're using local mail delivery then, rather than smtp.

How/where would I change that?

I can never wrap my head around the email stuff... :-(

(BTW, I've added a link to my site to my profile.)

In the admin options panel, the smtp server settings. If those are left empty, the forum will default to using the local mail pickup. The envelope sender address then becomes whatever the system or httpd username is.

fsck? Checking the filesystem/disk integrity are you? big_smile rm, dd, or newfs are the ones you want. smile (Not sure if newfs is BSD specific).

Smartys wrote:

If the user has not enabled permanent logins, the cookie is removed from the browser when the browser is closed as well. If the user has enabled permanent logins, the cookie stays in the browser for a period of one year. No new logins required.

That's the part I was messing up on. smile I had misunderstood how that part worked slightly.

Edit: Apologies if I've tested anyones patience with my misconception. smile

Cherry wrote:

My robots.txt blocks all php pages, but I would like the viewforum & viewtopic pages to be searchable.

Stop blocking them in the robots.txt file then.

elbekko wrote:

I give up. You just don't want to understand.

Understand what? What does the following actually mean. No offense, but it makes no sense. I've probably just missed your point completely, but missed it I have.

If they can access the restricted feeds, they can equally easy just open up the forums.

You're using local mail delivery then, rather than smtp.

Both scenarios, the cookie is present upon the machine.

To view the forums: Cookie info is used once login is successful.

To view the feeds: Cookie authentication alone would be used.

612

(5 replies, posted in Programming)

StevenBullen wrote:
lie2815 wrote:

I guess the id is missing...

Correct! big_smile

User error on my part... sad

Nice to know I'm not the only one who does that trick on occasion. big_smile

613

(7 replies, posted in PunBB 1.2 discussion)

Soonotes released a blog addon for PunBB. Do a search over on Punres for it. smile

I wouldn't spend too much time trying to make them filter friendly. You'll find the likes of Yahoo/Gmail/AOL/Hotmail are a law unto themselves regarding what they term as spam. You will most likely fail to get most of them through. big_smile

615

(7 replies, posted in PunBB 1.2 troubleshooting)

include/cache.php generates the cache files. If you're on a *nix system, just do a quick grep of the forum dir for <iframe, to check it's nowhere else.

616

(17 replies, posted in PunBB 1.3 troubleshooting)

Sounds like you're having a good evening? Have fun. big_smile

Bugger. It's amazing how one can get side-tracked through the course of a single thread. big_smile Just remembered that this wasn't specifically the original point I was making. big_smile Although it's now obvious that stringent checking will be done upon the cookie credentials, it still leaves the situation that it is in fact only down to the cookie, and that login isn't required, i.e: a stored cookie on the machine means that anyone who uses that machine has the potential to access restricted feeds quite easily.

618

(17 replies, posted in PunBB 1.3 troubleshooting)

kierownik wrote:

I can remember clicking it once but not after that, how can I get rid of it smile

Did you tell it to add it to your list of feeds when you clicked upon it? Do you actually have a feed reader/client installed?

What extensions have you installed?

Btw, unrelated note. big_smile With your gallery software, why not just replace the space with an underscore? Would get rid of the encoded, (%20), space. smile

That's different then. smile I had thought you meant to just extract the information and use straight off. (I ought apologise for making that assumption. One should have known you, (the devs), would sure there were proper checks first). smile I'll go quietly into the corner now. big_smile

Smartys wrote:

Upon login a cookie is set with the proper details. That cookie is then used to authenticate the user on each page.

Right. That's the part I'm referring to then. big_smile The login is literally used to check and update the cookie. The cookie is then the roving authorisation, so to speak. However, if the cookie was to be trusted as is and used at all times, what's the point of the login timeout and re-login mechanism? The cookie could easily be updated without it. So why, if that's the case, should the cookie be trusted/used as an auth mechanism, (when the user hasn't logged in for a period of time), to authenticate their entitlement and access to the feed categories/forums? Normally, if the user has timed out, they need to login again to update the cookie as required, and the details are again checked against the db? However, if it was used as the auth key against the feeds, one part of the system is being removed, i.e: the login process. By virtue, that also removes one layer of security.

Btw, this all does make perfect sense in my head, but I've a feeling it's different when it's posted. big_smile If I'm still confusing everyone now, I'll concede the point. big_smile

pedrotuga wrote:

MattF, I think you are mixed up with the ways cookie work.
If you navigate from page to page on a website (a punbb forum for example) while being logged in, you have to have a cookie stored in your computer. That's how php sessions work. If you don't have cookies suport PHP will add a parameter to all the links in your website so the session id is passed via querystring.

PunBB doesn't use sessions, does it?

Smartys wrote:

...I'm not understanding you hmm

I have that effect on occasion. big_smile The presumption I'm working upon is that the cookie stores, under normal conditions, the user id, password hash, etc. Upon login, the information is checked, verified against the login details, and any necessary cookie alterations/updates are then made. Is that correct?

623

(4 replies, posted in PunBB 1.2 troubleshooting)

.pun h1 span {
        display: none;
}
elbekko wrote:

To set the cookie? hmm

My simple point is that if the cookie alone is not enough for general usage, why should it be an exception for an alternative connection method?

elbekko wrote:

Urgh. Read very carefully.

PunBB uses cookie authentication. Since extern.php includes common.php, which populates $pun_user, and reads from the PunBB cookie, it'd be just like any other page on the forums.

Simple question then. If PunBB uses cookie authentication, why the need to log in?