[geeklog-devtalk] geeklog-devel digest, Vol 1 #408 - 2 msgs

[geeklog-devel-request at lists.geeklog.net]

Send geeklog-devel mailing list submissions to
	geeklog-devel at lists.geeklog.net

To subscribe or unsubscribe via the World Wide Web, visit
	http://lists.geeklog.net/listinfo/geeklog-devel
or, via email, send a message with subject or body 'help' to
	geeklog-devel-request at lists.geeklog.net

You can reach the person managing the list at
	geeklog-devel-admin at lists.geeklog.net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of geeklog-devel digest..."


Today's Topics:

   1. Problem in downloader class (Vincent Furia)
   2. Re: Problem in downloader class (Dirk Haun)

--__--__--

Message: 1
Date: Sat, 9 Oct 2004 23:50:47 -0400
From: Vincent Furia <vfuria at gmail.com>
To: Geeklog Devel <geeklog-devel at lists.geeklog.net>
Subject: [geeklog-devel] Problem in downloader class
Reply-To: geeklog-devel at lists.geeklog.net

Tony,

Found a problem in the downloader class that is/was preventing the PDF
view function from working.

Note this code:

if(!is_file(($this->_sourceDirectory . $fileName)) OR
    (dirname($this->_sourceDirectory) <>
dirname(realpath($this->_sourceDirectory . $fileName)))) {
    $this->_addError('Specified file ' . $this->_sourceDirectory .
$fileName . ' does not exist or is not accessible');
    return false;
}

Specifically this:
(dirname($this->_sourceDirectory) <>
dirname(realpath($this->_sourceDirectory . $fileName)))
doesn't work because of dirname($this->_sourceDirectory).  Note from
the php manual:
----------------PHP MANUAL-----------------
Doc : « Given a string containing a path to a file »
You _must_ specify a filename. Take care if you don't do that...
<?php
   echo dirname('/folder/anotherone/') ;
?>
... will output "/folder" and not "/folder/anotherone"
----------------PHP MANUAL-----------------

I have put a fix in, but I would like some you to review it to make
sure I haven't messed something else up.

Also, I noticed that if a story doesn't have anonymous permissions you
can't generate a pdf of it even if you have permissions to view the
story.  On top of that "pdf_adhoc_enabled" has to be set to true for
non-Root users to be able to generate/view pdfs.  But that means they
can generate pdfs of __any___ site, which just seems ripe for abuse
(how many pdfs can I generate on your server? That is one way to do a
DOS.).  In any case, even with "pdf_adhoc_enabled" set to false, so
that users can't generate pdfs, they can still see the pdf icons on
stories...

I don't think this is how we should implement the pdf feature.  A
better way would be to generate the pdf when the story is saved, and
the give access to the pdf to anyone who has access to the story. 
Since we want to get 1.3.10rc1 out soon, we may want to consider
pushing this off til the next release, rc2, or maybe a patch on 1.3.10
final...

-Vinny

--__--__--

Message: 2
From: "Dirk Haun" <dirk at haun-online.de>
To: <geeklog-devel at lists.geeklog.net>
Subject: Re: [geeklog-devel] Problem in downloader class
Date: Sun, 10 Oct 2004 12:06:40 +0200
Organization: Terra Software Systems
Reply-To: geeklog-devel at lists.geeklog.net

Vinny,


>Since we want to get 1.3.10rc1 out soon, we may want to consider

>pushing this off til the next release, rc2, or maybe a patch on 1.3.10

>final...


It would be a bit pointless calling it a "release candidate" then,
wouldn't it?

Yes, I want this release out ASAP, but on the other hand, I don't want to
rush things either. If this needs more time to do properly, then I'm
willing to give it another week.

bye, Dirk


-- 
http://www.haun-online.de/
http://www.handful-of-sparks.de/



--__--__--

_______________________________________________
geeklog-devel mailing list
geeklog-devel at lists.geeklog.net
http://lists.geeklog.net/listinfo/geeklog-devel


End of geeklog-devel Digest