Gilles Vincent | 1 Jul 09:22
Picon
Gravatar

! license GNU/GPL version 3



** The next stable version of SPIP will be distributed under the GNU/GPL 3 license **

The license :
* http://www.gnu.org/licenses/gpl-3.0.html


Explaination : "Why upgrade to GPLv3"
* http://www.gnu.org/licenses/rms-why-gplv3.html


Arnaud Martin, Antoine Pitrou, Philippe Rivière, Emmanuel Saint-James.




Martín Gaitán | 4 Jul 03:04
Picon
Gravatar

ajax inclure

I've just understand quite means people sleeping. so I copy and paste
my question here.

	<tin_nqn>	hello
	<tin_nqn>	I'm trying to implement the ajax method for inclures described here:
	<tin_nqn>	http://my.opera.com/tech-nova/blog/2008/03/12/11289-ajax-without-coding-in-spip
	<tin_nqn>	but I couldn't
	<tin_nqn>	it's this feature already available?
	<tin_nqn>	I'm using svn 11832

cheers.
martin.

--

-- 
nqnwebs.com
textosypretextos.com.ar
Gilles Vincent | 4 Jul 03:29
Picon
Gravatar

Re: ajax inclure

Hi,

can you give us an exemple of code ?
What do you want to do ?
It's hard to answer without any more details.

But this feature is available, so we'll find a solution, I guess,


.Gilles
---


2008/7/4 Martín Gaitán <gaitan-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>:
I've just understand quite means people sleeping. so I copy and paste
my question here.

       <tin_nqn>       hello
       <tin_nqn>       I'm trying to implement the ajax method for inclures described here:
       <tin_nqn>       http://my.opera.com/tech-nova/blog/2008/03/12/11289-ajax-without-coding-in-spip
       <tin_nqn>       but I couldn't
       <tin_nqn>       it's this feature already available?
       <tin_nqn>       I'm using svn 11832

cheers.
martin.

--
nqnwebs.com
textosypretextos.com.ar
_______________________________________________
spip-en-JM9gtpQu/Ho@public.gmane.org - http://listes.rezo.net/mailman/listinfo/spip-en

Thomas Sutton | 4 Jul 04:45

The login form

Hi folks,

I think I mentioned on the list that I've been working on a site with a "members only" section protected by #LOGIN_PUBLIC and <?php if ($auteur_session) { ... } ?>. It's recently gone live, but we've got a few lingering problems with the login form.

I've tried to tear all of the JavaScript and dynamism out of formulaires/login.html but this has introduced a bug where the sites's members must enter their username and password and click login twice before SPIP will log them in. Can anyone provide pointers (to documentation, if any exists, and) about making SPIP's authentication system act like a normal form?

Cheers,

Regards,

 

Thomas Sutton
Web Developer
bouncingorange
graphic + web design
Martín Gaitán | 4 Jul 06:43
Picon
Gravatar

Re: ajax inclure

Gilles, this is my attempt

http://www.textosypretextos.com.ar/spip.php?page=sommaire2

the template is here:
http://www.textosypretextos.com.ar/squelettes/sommaire2.html

and the ajaxified portion is this
http://www.textosypretextos.com.ar/squelettes/inc_posts.html

I want to get an ajax pagination of the my blog column.

Spip returns and error because it can't find "fond/ajax" . where should be it?

On Thu, Jul 3, 2008 at 10:29 PM, Gilles Vincent
<gilles.vincent@...> wrote:
> Hi,
>
> can you give us an exemple of code ?
> What do you want to do ?
> It's hard to answer without any more details.
>
> But this feature is available, so we'll find a solution, I guess,
>
>
> .Gilles
> ---
>
>
> 2008/7/4 Martín Gaitán <gaitan@...>:
>>
>> I've just understand quite means people sleeping. so I copy and paste
>> my question here.
>>
>>        <tin_nqn>       hello
>>        <tin_nqn>       I'm trying to implement the ajax method for
>> inclures described here:
>>        <tin_nqn>
>> http://my.opera.com/tech-nova/blog/2008/03/12/11289-ajax-without-coding-in-spip
>>        <tin_nqn>       but I couldn't
>>        <tin_nqn>       it's this feature already available?
>>        <tin_nqn>       I'm using svn 11832
>>
>> cheers.
>> martin.
>>
>> --
>> nqnwebs.com
>> textosypretextos.com.ar
>> _______________________________________________
>> spip-en@... - http://listes.rezo.net/mailman/listinfo/spip-en
>
>

--

-- 
nqnwebs.com
textosypretextos.com.ar
Fil | 4 Jul 09:26
Favicon
Gravatar

Re: The login form

> SPIP will log them in. Can anyone provide pointers (to documentation, if any
> exists, and) about making SPIP's authentication system act like a normal
> form?

In the current dev version (soon to be released) the login form is
much more a "normal" form.
I don't recommend hacking the older (stable) login form, it would be a
waste of time

-- Fil
Thomas Sutton | 4 Jul 09:50

Re: The login form


On 04/07/2008, at 3:26 PM, Fil wrote:

SPIP will log them in. Can anyone provide pointers (to documentation, if any
exists, and) about making SPIP's authentication system act like a normal
form?

In the current dev version (soon to be released) the login form is much more a "normal" form.
Thank god! All the MD5 and nonces and such struck me as a complete waste of time and complexity, especially given the messages about "security" that were displayed if you disable them. If anyone can capture the unhashed password, then they can also capture the session cookie and set the password to whatever they like...

I don't recommend hacking the older (stable) login form, it would be a waste of time
Too late :-) Oh well, if I can't figure it out before dev stabilises and is released, I'll just upgrade the site.

Cheers for the reply,

Thomas Sutton
Web Developer
bouncingorange
graphic + web design
Fil | 4 Jul 10:33
Favicon
Gravatar

Re: The login form

> Thank god! All the MD5 and nonces and such struck me as a complete waste of
> time and complexity, especially given the messages about "security" that
> were displayed if you disable them. If anyone can capture the unhashed
> password, then they can also capture the session cookie and set the password
> to whatever they like...

Yes of course, you need https to do better ;  but in that scenario we
made sure the attack will kill their victim's connections, so that
it's not invisible

-- Fil
Gilles Vincent | 4 Jul 16:12
Picon
Gravatar

Re: ajax inclure

Hi,

in fact the grammar has changed since this commit (I should update this article ;)
With the last SVN version, you must write : 

<INCLURE{fond=inc-posts}{env}{ajax}>

The filter {ajax} "ajaxifies" the links in the included template : the html code resulting from this template is refreshed inside the same box, without reloading the page. 
Quite magical, no ?

You have an example with dist/inc-petition.html : it is included with this method into dist/article.html


.Gilles
---

2008/7/4 Martín Gaitán <gaitan-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>:
Gilles, this is my attempt

http://www.textosypretextos.com.ar/spip.php?page=sommaire2

the template is here:
http://www.textosypretextos.com.ar/squelettes/sommaire2.html

and the ajaxified portion is this
http://www.textosypretextos.com.ar/squelettes/inc_posts.html

I want to get an ajax pagination of the my blog column.

Spip returns and error because it can't find "fond/ajax" . where should be it?



On Thu, Jul 3, 2008 at 10:29 PM, Gilles Vincent
<gilles.vincent-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
> Hi,
>
> can you give us an exemple of code ?
> What do you want to do ?
> It's hard to answer without any more details.
>
> But this feature is available, so we'll find a solution, I guess,
>
>
> .Gilles
> ---
>
>
> 2008/7/4 Martín Gaitán <gaitan-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>:
>>
>> I've just understand quite means people sleeping. so I copy and paste
>> my question here.
>>
>>        <tin_nqn>       hello
>>        <tin_nqn>       I'm trying to implement the ajax method for
>> inclures described here:
>>        <tin_nqn>
>> http://my.opera.com/tech-nova/blog/2008/03/12/11289-ajax-without-coding-in-spip
>>        <tin_nqn>       but I couldn't
>>        <tin_nqn>       it's this feature already available?
>>        <tin_nqn>       I'm using svn 11832
>>
>> cheers.
>> martin.
>>
>> --
>> nqnwebs.com
>> textosypretextos.com.ar
>> _______________________________________________
>> spip-en-JM9gtpQu/Ho@public.gmane.org - http://listes.rezo.net/mailman/listinfo/spip-en
>
>



--

Gilles Vincent | 4 Jul 17:25
Picon
Gravatar

Re: The login form

Hi,

I don't understand why you want to change the actual login form : 
it's a "normal" form with 2 fields : the login and the password (in the latest version in fact).
Where is the problem here ?

I've just made a screencast that explains how the login form works :
- The action is the same url (and the form can display errors).
- When loaded, the form contains several hidden values that will make the submit action secure.
- When the password field keeps the focus, the form verifies that the encryption parameters are OK, and indicates it with a brown padlock.
- Before been submitted, the password is encrypted with two md5+salt, and the non-encrypted password field is erased : Therefore the password is never sent to the server and can't be catched by a bad guy. That makes the login form really secure !
- After that, the server calculates the md5+salt values of the password in database. It compares these value to the encrypted values sent by the form. If both values match, the password that has been submitted is correct. Elsewhere it's bad and SPIP returns to the login form with an error.

The screencast is here : http://screencast.com/t/eiiGjNt7

.Gilles
---

2008/7/4 Thomas Sutton <thomas-wT9aXh5S2t8LQszSOs697tBPR1lH4CV8@public.gmane.org>:
Hi folks,

I think I mentioned on the list that I've been working on a site with a "members only" section protected by #LOGIN_PUBLIC and <?php if ($auteur_session) { ... } ?>. It's recently gone live, but we've got a few lingering problems with the login form.

I've tried to tear all of the JavaScript and dynamism out of formulaires/login.html but this has introduced a bug where the sites's members must enter their username and password and click login twice before SPIP will log them in. Can anyone provide pointers (to documentation, if any exists, and) about making SPIP's authentication system act like a normal form?

Cheers,

Regards,

 

Thomas Sutton
Web Developer
bouncingorange
graphic + web design

_______________________________________________
spip-en-JM9gtpQu/Ho@public.gmane.org - http://listes.rezo.net/mailman/listinfo/spip-en



Gmane