Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - Arantor
2041
Features / Re: New revs - Public comments
« on January 7th, 2013, 08:37 PM »
Scary for you - as long as I can add events inline and add deferred JS with add_js(), I'm happy.
2042
Features / Re: New revs - Public comments
« on January 7th, 2013, 08:32 PM »
I can't imagine many cases, no. I think it's rare enough that it's probably OK not to worry too much about it.
2043
Features / Re: New revs - Public comments
« on January 7th, 2013, 08:11 PM »
I'm not really fussed where it is, provided that it works and doesn't break anything.
2044
Features / Re: New revs
« on January 7th, 2013, 07:29 PM »
(4 files, 3KB)

Revision: 1829
Author: arantor
Date: 07 January 2013 18:28:37
Message:
! SMF bug: error log could in some cases be the victim of a directory traversal bug, and/or showing the contents of files inappropriately. SMF devs have been notified. (ManageErrors.php)

! SMF bug: Some SSI functions still could be called from GET request, but not have the parameters to make this happen. I've added them to our list of functions that can't be called from GET, but I'm not sure this is something we need to keep as a feature, except for poll voting purposes anyway, and we might be better served by dropping all the other options for GETs. (SSI.php)

! Just 'correctness' in the drafts show code, everywhere else in that function uses the profile standard $memID rather than we::$id even though they should be the same. (Profile-View.php)

! Yes, Nao, I'll admit there was a bug in moderation filters! Stupid bug, don't know why I didn't catch this months ago when I first wrote it, calling the wrong function to update the UI. (ManageModeration.template.php)
----
Modified : /trunk/SSI.php
Modified : /trunk/Sources/ManageErrors.php
Modified : /trunk/Sources/Profile-View.php
Modified : /trunk/Themes/default/ManageModeration.template.php
2045
Archived fixes / Re: Remove drafts
« on January 7th, 2013, 07:00 PM »
I don't know. All I know is that it's a regular link with an event attached to return ask('string') in it, the ask() fires, the return seems to be true but the link never fires after.

Should be reproducible on mobile too.
2046
Archived fixes / Re: Admin Centre item goes to wrong place?
« on January 7th, 2013, 06:57 PM »
How big's your phone? Seriously, I browse here quite regularly on an iPod 4G (same size as iPhone 4/4S) and even with the Wireless skin it's not particularly favourable.

Go browse Dragooon's site and tell me that that isn't an improvement on your phone.
2047
Archived fixes / Re: Remove drafts
« on January 7th, 2013, 06:39 PM »
OK this one is officially weird. The delete link has an event attached to it which calls up ask() (our replacement of confirm()) but when it returns true, it's not calling the default behaviour on the link so nothing happens.
2048
Archived fixes / Re: Remove drafts
« on January 7th, 2013, 05:48 PM »
Damn, I thought I'd fixed that, thanks for the report.
2049
Archived fixes / Re: Admin Centre item goes to wrong place?
« on January 7th, 2013, 03:31 PM »
Yeah, that's been a problem for a long time. The main reason I haven't fixed it is because I'm not sure what the future of the theme area is.

The main issue is that the Current Theme is only really needed when you have multiple physical themes. Now, it's been the focus to have only a single physical theme and everything else to be done with CSS.

This raises the question: is it something we're going to push forward with in the future or not? For the core, I think this is going to come down to the eventual fate of the wireless setup. Right now, we have the wireless skin, which essentially drops certain layout items from across the site. It's an improvement on the default for wireless, but not by a lot. I'm increasingly feeling like I'd rather have a full mobile theme that has its own templates (a la Dragooon's SMF4Mobile), which means bandwidth can really be trimmed for mobile users[1] and that would be set up as a physical theme.

If it is a physical theme, we ensure that everything works - because right now, I really don't know how well any of it works, mostly because the skins system essentially has removed most of the need to care about it. On the other side, if we were to have a physical theme for mobile use, it could easily inherit skins for changing the colours and smaller layout items even on mobile, which seems pretty ideal to me.
 1. Since you only display what you need, rather than outputting everything and just hiding what you don't want. Helps the server as well as the client.
2050
Features / Re: New revs
« on January 7th, 2013, 05:03 AM »
(5 files, 4KB)

Revision: 1828
Author: arantor
Date: 07 January 2013 04:02:43
Message:
! Disallow zip and lock files from being served from the cache folder. (.htaccess)

! Clear up a factual inaccuracy. (Help.english.php)

! Add hooks as suggested by minimoo about handling registration errors a bit better, though taking into account the differences between as suggested and the way hooks are supposed to work. (ManagePlugins.php, Subs-Members.php)

! A minor optimisation based on learning a bit more about how the $reg_errors stuff actually worked; it supports pushing parameters as well. (Subs-Members.php)

! I forgot this: PHP in its wisdom will remove uploaded files at the end of execution if not moved or renamed. So I move it into the cache folder for now because it's somewhere that is writable in local space. However there is still plenty more to do, and I will need to add checks in to ensure that the files are purged periodically too. (Subs-Plugins.php)
----
Modified : /trunk/Sources/ManagePlugins.php
Modified : /trunk/Sources/Subs-Members.php
Modified : /trunk/Sources/Subs-Plugins.php
Modified : /trunk/Themes/default/languages/Help.english.php
Modified : /trunk/cache/.htaccess
2051
Plugins / Re: Hooks
« on January 7th, 2013, 04:36 AM »
OK, so I've looked properly at the patch now, and I'm not entirely convinced it actually would work properly in SMF, let alone Wedge.

The return value of a called hook, particularly one where multiple functions might be hooked, is not what you think is. I might expect to see an array returned, sure...

Code: [Select]
array(
  'my_func_name' => array('error_key' => error details)
)

In every case of calling a hook, it's done through building up an array where the return value delineates what hooked function returned what by referencing the name of the function that was called.[1] Aside from keeping things separated from accidental collision, it does mean you can't rely on $hook_errors being empty, because it should return an array of functions that have been called, even if those individual items are empty.
 1. Yup, it's not really any different in Wedge, the exact syntax is a shade different in our call_hook vs SMF's call_integration_function, but the principle is the same, having a variable accepting the result of call_user_func_array() and putting it into an array.
2052
Features: Theming / Re: Permanent sidebar
« on January 7th, 2013, 02:45 AM »
Not without another amendment to the constitution.
2053
Features: Theming / Re: Permanent sidebar
« on January 7th, 2013, 12:42 AM »
Quote
I don't trust they have their shit together -- especially after you told me they are still on PHP 4.
That isn't what I said. I said that had compatibility code in there from back in the PHP 4 days. The fact it supports older versions of PHP isn't inherently a bad thing, just as it's not a bad idea that software works on Windows XP when 7 and 8 are the current versions.
Quote
I hope that's the case.
It's the case. Trust me, if there were issues with SMF security, it would have been fixed in Wedge by now and very likely someone would have told them about it.
Quote
Managing developer egos is difficult.  I've been to hell and back with that, so I understand.
Except that was the complete opposite of what I meant, and in fact of what I said. The problem isn't developer ego. It's everyone else who believes that their say is as important as the developers' say except they're not the ones doing the work.


As far as mobile posting on SMF, you could do a lot worse than smf-media.com's offering.

As far as blogs go, notice that it's not exactly prominent here and amounts to nothing more than a custom theme, and can't be made anything like what you're after without a serious rewrite, so much so that I've thought about dropping core blog support because it's too limited for most uses.
Quote
That's great.  And I can't understand side consequences for that.  I don't have sidebars on our forum, and I read them just fine on my 17" and 24".  Maybe I'm missing something.
And are they full width or fixed width?

Let me put it this way, I have a 17" laptop, with 1920x1200 resolution, and most forums being that wide (at, say, 95% width) just become hard to read. So many forums I know actually have a fixed width to prevent that being an issue anyway. But even though I have a large resolution, I invariably run my browser window at around 1000px wide because that's how the web seems to work best, not to mention the fact that it keeps the reading width about right.
Quote
Again, I'm missing something.  Why have I not heard a single complaint on our forum?
Because you're dealing with a very specific subset of the forum population. I however have had the interesting experience of providing support on sm.org, which doesn't have the sidebar out of the box and between there and here, I know which is more popular. You might not have had a complaint but I guarantee that if we make it an option, it's going to provide a plentiful source of support issues for us to deal with.
Quote
I guess I'm thinking of it from a Drupal mindest -- and I'm not familiar with the architecture you're working with, so I concede that.
And therein lies the other difference: Drupal is incredibly modularised. Ordinarily I wouldn't complain about that, but what that means is each module does its own work in terms of databases, as opposed to a flatter structure that gets all the data it needs for the current page or thereabouts. The result is something much more efficient for its own use (I've seen Drupal installations demanding quite literally hundreds of queries from the database to render a single page) but less directly configurable. But in any case, Drupal should not be a benchmark to measure against, except to measure how much faster you are. The ideals of pluggability are wonderful but the practicalities just don't stack up.
Quote
Let me say this... I just scrunched my browser in, and the sidebar dropped to the bottom -- that looks perfect.  Is there a way to make it do that on default (as opposed to hiding it)?
I thought we'd already explained it did this before? Anyway, not without a code change and not a nice one. See if Uncle Nao is prepared to expend more bytes per page, every page.
2054
Plugins / Re: RSS Feed-to-post
« on January 7th, 2013, 12:27 AM »
It would, but it's also pretty much something that I can't imagine many people wanting. Nice idea though.
2055
Features: Theming / Re: Permanent sidebar
« on January 6th, 2013, 11:02 PM »
Quote
I'm pleading and arguing against it.  It's your project -- I haven't "demanded" anything.
The words do not come across as a request. Flat out insults do not usually come as part of nice requests.
Quote
Not at all.  For example, my favorite laptop that I use most of the time (my 17"), I bought in 2004.  I'm a buy and hold type of guy.  I, actually, _want_ a system that I can let run forever and just update as updates come along.  I love software and systems that stand the test of time.
Then why move off SMF?
Quote
No.  I'm going to have to find another forum platform, like vBulliten or something, which I'm certain I will hate.  We just got the latest SMF update a few weeks ago or so, and the one before that was a year ago.  That is insane, and isn't me "wanting to stay with the latest and greatest".
SMF 2.0 went to a stable release a while ago, the updates since then have been security updates only. That's a sign of quality, not poor development, that it has only needed 3 patches of any kind since 'stable' release.

So I will say it again. Why are you upgrading? Are you doing it to get features you don't currently have, or because you perceive there to be a problem with the platform (that doesn't really exist)?
Quote
As for the latest and greatest, don't get too ahead of yourself.  It took you 2.5 years to get to alpha.
I'm reasonably comfortable with the speed of our development. Getting snippy about that isn't winning you any fans.
Quote
Why you don't have more help is beyond me, but whatever.
Because we learned the hard way what happens when you have too many people chiming in with their say. It's largely what's killing SMF, though not nearly the only thing.
Quote
It tells me this project is more of a hobby, which is fine, but you should tell people that up front.
Where have we ever said it is anything else? We're not charging you for anything. We're not demanding anything from you. We're doing what we've always done, what we've always said we're doing, which is building it for us, and being nice enough to check with people that they're happy to use what we're doing in the process.
Quote
Then I come on here, fall in love with what you guys are doing, simpy ask "gosh, can we just have a hide option for the sidebar if we want", and I get told to go jump in a lake, like they did to you, for my "demands"
There's a lot more to it than that. Firstly, as explained, there are logistical and practical reasons for having the sidebar - preventing the content taking full width modest-and-up screens is one of them.

Secondly, more importantly, let me take that concept for a moment: hiding the sidebar. Yes, you can hide the sidebar. Off the top of my head, I can think of two ways of doing it. Neither of them offer a nice cosy admin panel option for it, but it's doable - and it will have a lot of side consequences to doing it.

You're a programmer, you should understand better than most that these things rarely live in a vacuum, and that one thing often has a great many consequences.

But here's the other thing: many more people ask about putting a sidebar onto a forum, than ask about taking one off. You're the first person in 2.5 years to complain about the fact we have a sidebar. I'd argue we're doing a better job of catering to what people want than complying with every little whim that people ask us about.

But yes, just for you, I'm sure I could hack up a plugin that hides the sidebar, because I love hearing support requests.

There is also a big difference between ignoring people and taking on board what they're saying but disagreeing. I hear your objections to the sidebar. I disagree, I have also explained why I disagree. It doesn't mean that I don't acknowledge the fact you don't like the sidebar, but the thing is, we're not trying to build your perfect software. We're trying to build OUR perfect software, and that doesn't mean catering to your exact requests.

In SMF's case, they weren't particularly interested in what we had to say, despite being more than just community members. Nao worked on the single most popular SMF mod, plus contributed hundreds of bug reports. I wrote their bug tracker, spent months reviewing community mod submissions and did literally thousands of support topics, and both of us were almost on the SMF development team in one way or another. I'd say that would tend to qualify us for having some say in how things are run, yes?

(Also note that 2.1 is only just into alpha, with far less changes than we've made, and a new development team since 2.0 final was released. And even then, the 2.0 / 2.1 dev team has forked off into their own software. Because the team fundamentally is toxic, it continually pushes out the people who have the drive to actually do anything.)
Quote
I'm asking for a little checkbox that tells the rendering to just not display the sidebar.
Except you should understand (being a programmer), as I've alluded to, that it just isn't that simple.

So you hide the sidebar. You now have to process that decision on every page, in a way that you don't currently. We also need to rewrite everywhere that pushes content into the sidebar, to now not push it into the sidebar, which means we have to find somewhere else to put it. Which in half the cases is also going to mean writing new templates for them to now be horizontally arranged rather than vertically stacked, or just simply not performing the queries for it in the first place.

This also means that the plugins that already exist which use the sidebar (several come to mind) will all need to be heavily modified to do all the same logic, turning one into two or even three states (on/sidebar, on/elsewhere, off). All because you want an option to turn something off.

That's what I mean about consequences - to you, it's one line of HTML, to us it's at least a day's work, and frankly, I've got far more important things to be doing for Wedge's benefit like finishing the things that I've started.
Quote
By the way, can we have more than one sidebar?
Not in the core. It's not impossible to do, though. But we find it makes the central content far too narrow, which is why we don't do it.