[TYPO3-english] Cooluri and shortcuts

[Dmitry Dulepov]

Hi!

Sandro Hagen wrote:
> Nice to know thank u for this info. Never used realURL again for about a
> year now. Dmitry, Are you prefering realURL or coolURI?

I maintain RealURL and prefer it. But I prefer it not because I maintain it. If I believed that the other extension is better, I would set RealURL to obsolete and recommend using the other extension to everyone. But this is not the case.

We had to use CoolURI once because the customer insisted. Almost immediately we discovered two security issues in CoolURI, which were reported to the security team. I went looking to the code in order to patch these issues quickly for the customer and found that the code is a complete mess. I wrote to Jan but he was not interested to make the code more readable or to follow TYPO3 coding conventions. So I think that CoolURI may have more security issues in it. I have no proof but the quality of the code there is bad. When code is bad, the chance of issues is high. The idea of CoolURI is good but the coding is bad. Therefore I will never use CoolURI and cannot recommend it.

This is based on my evaluation of the CoolURI as a user and a developer. I do not think that anything has changed since that time in the code.

I welcome different alternatives. People must always have a choice. But they must have enough information when they make the choice. Would you buy a nicer looking toy to your children if you know that toy's paints are dangerous? Probably not. Same here. People must know what they do when they use some extension.

I can't really talk aloud about these issues. I maintain an extension that Jan sees as "competing". He has all rights to say that my words cannot be trusted. Therefore I prefer not to talk or participate in RealURL vs CoolURI discussions. Actually this is the first time when I wrote about my concerns :) I do not want to start "holy wars" of any kind.

To summarize: I have no problem if there is RealURL, CoolURI, NiceURI, FancyURL, OptimizedURI or whatever other SuperGreatURI extension :) The main thing is that they should function well and be trustful. People who use CoolURI now are not well informed about the existing and potential problems they have with CoolURI.

I can't say that RealURL is perfect or error free. It is an old extension and it has problems too. However this extension is very open, commented, etc. It is easy to audit, extend or patch. This is not the case for CoolURI, which is not even fully GPL.

So you make the choice.

> However coolURI hasn't needed any configuration either, but gives
> multidomain support automatically (based on domainrecords) and a very nice
> overview about all links generated in the LINK manager

Same as RealURL (autoconfiguration and "speaking url management" in Web>Info).

> So it's possible to configure the wrong shortcut-links like
> mydomain.com//the-company/ and rewriting it with the missing uripart
> manually via the Link-Manager. This works wonderful, but i'd like to have
> this problem solved automatically and at this point i tried to fix it with
> coolUriConf things... But had no luck in trying xml keys ^^

In RealURL you just delete the wrong entry and RealURL will create a new once when the page is accessed next time.

-- 
Dmitry Dulepov
TYPO3 core team
"Sometimes they go bad. No one knows why" (Cameron, TSCC, "Dungeons&Dragons")