Jump to content

Pete

Administrators
  • Posts

    4,054
  • Joined

  • Last visited

  • Days Won

    67

Everything posted by Pete

  1. Yes, but only from good cafés that I trust to make decent coffee (I'm liking this analogy ).
  2. You shouldn't wrap a <button> tag in an <a> tag anyway. An <a> is for linking some text, a button is to do something on a form. You shouldn't mix the two together and your workaround isn't required either. Can you show us the rest of the form? There will almost certainly be a better way. You should have some sort of form action with the URL you're using above for a start that's part of (presumably) a $form that you've got elsewhere in your code, and the button should submit against that rather than what you're doing.
  3. In fact, I'm not done yet. If you've got Chrome, download this free tool to check for outdated versions of Wordpress, Joomla and many more as you browse the web: http://www.whitefirdesign.com/meta-generator-version-check?pk_campaign=MGVC-Chrome A cursory look at web dev companies in my local area shows an alarming trend not updating Wordpress. One company has their own site running version 3.3.1 which is from January 2012. 30% of their portfolio shows out of date installations (could have been higher but two links were incorrectly linking to other sites in their portfolio and not all are necessarily built in Wordpress). Another agency had more than 50% of their sites running older versions of Wordpress that are vulnerable to attack. *sigh* But it perfectly highlights how complacent people get with updating Wordpress. If you're not going to bother checking for updates for software on client sites, build them solely in HTML and at least they're not at risk.
  4. This is awesome Teppo! Of course near the end it looks like many versions are created as adding images saves the page behind the scenes via Ajax so that's one way you'll end up with a lot of revisions (did I remember that correctly or make it up?). I'm wondering if it's worth making it so it only stores revisions when updating image and file fields AFTER the Save button is pressed? Or did you already take that into account? Loving this module and it will be fascinating to see how you handled the image and file fields when I dig into the code
  5. I just don't understand how the guys making Wordpress could still have enough XSS and other serious bugs I'm their code that every few updates fixes another one. So if you have a client that's set on Wordpress and doesn't heed warnings about security updates and the fact they'd have to pay you to update is several times a year just to keep it secure then don't take them on. It will only lead to headaches for you in the long run.
  6. I'll keep it short: no. The longer version is that every time I've dealt with Wordpress it was to upgrade it due to security issues and every time I did that it broke a plugins and updatingthe plugins broke some template or other. Now I don't accept work with Wordpress unless it's to move a site away from Wordpress. The problem is that so many people out who use it are oblivious to the security issues that keep cropping up in their software but if you look at the update history every 2-3 updates fixes some XSS or other big security flaw. I actually used a hint from a website that allows you to check the version of any Wordpress website to highlight the issue to a customer whose WP was about 5 versions behind so you can - if you had the time - let folks know just how out of date and unsecure their sites are. This is almost certainly how hackers target sites too. You can do the same for Joomla easily too (same customer had a Joomla site on the early 1.x branch - some 15 versions behind the latest in the 1.x series and well behind the 3.X branch of course!).
  7. I've tried using field!='' for a Page field that displays two radio buttons and it doesn't seem to work. I also tried !=0 and >0 but no joy. Basically I don't want to show a field unless one of the radio options is clicked, and by default neither is, but this scenario just doesn't seem to work with dependencies at present. Any suggestions?
  8. I think the thumbnail image you see in the admin when editing the page is the 100x100 automatically generated image you're seeing. That only shows if your images field has the thumbnails checkbook ticked.
  9. Yet another way to check for guests only is with $user->isLoggedIn()
  10. This one is really tricky. If you do something like letting them create their own fields in the normal PW way then you will quickly have thousands of PW tables (one for each field) but even if you tried to do something like a normal DB table with all fields in one table and they add fields in a normal DB method (you'd need to build a nice interface for this) you would still have a table for every group. You almost need a custom fields table for every groups field info to go into (label, fieldtype and which group the field belongs to) and another table to store the values. You're limited on what fields you could offer there (the value field would be text or varchar) so you would have integer, text and so on but not image or file. That's just me thinking out loud, but something like this has the potential to get out of control very quickly.
  11. I've only played the board game for Settlers of Catan once but we had great fun and I can recommend it to others. I need to find some time to play online now
  12. The clue is here: if($page->sidebar) echo $page->sidebar; else echo $homepage->sidebar; It literally means "if this page has a value in the sidebar field, echo that, else echo the sidebar text from the homepage".
  13. To be honest this is the same thing I've tripped up on recently so it happens to us all
  14. Pete

    Graphics Tablets

    I know next to nothing about graphics tablets but I want to buy one. I've always been interested in manipulating photos and graphics, tracing around objects with a mouse and cutting them out in Photoshop but it's not an exact science with a mouse, plus I would like something with the precision to draw some icons for a few projects. In all likelihood I wouldn't use it every day or even every week, but I might find myself enjoying it and using it more over time. Any recommendations from you arty types out there?
  15. Pete

    2048 anyone?

    I've managed 1024 once I think, certainly 512. I had managed to forget about it until you reminded me just now
  16. Nico - that'll be the age old problem with not being able to moderate these without knowing the language. Perhaps there should be a simple way to suggest language changes if you're using anything but the default? Not sure how you'd do it though (if everyone on the planet had a Github account you could click a button somewhere in the admin and open an issue on Github for that language pack right there) but I guess there should be some text along the lines of "this language pack was created by a third party author. If you have any change requests you can contact them <here>". Assuming it doesn't already say something like that of course - I've not needed to install one myself
  17. In your other related topic I've suggested making them log in first (extra security, and if they've just registered you can log them in automatically and just restrict what they can do until they activate the account). However, all you need to do if the activation code is truly unique and the user isn't logged in is something like $u = $users->get($input->get->activation_code); If that $u has an ID then the system found a user with that code and you can activate the account. The problem is if the user isn't logged in you don't want to activate and automatically log them in using this alone - what if I hacked someone's email account and found this email? I would then be able to click the link myself and activate the account and be automatically logged in myself. Better to force them to be logged in before the link will work for added security.
  18. A normal registration process is similar to how you signed up on these forums, so let's start there You registered, and after registering you were immediately logged in, yet couldn't post anything until you clicked the activation link in your registration email. Because you were already logged in, when you clicked that link it was easier to check the code and activate the account (in your case set the field to 0). So the answer is to have them logged in after registering and restrict their options until they activate their account, displaying a clear message that until the account is activated they can't do anything. That way if they accidentally log out (close the browser for example) and come back to your site then they'll know where they were up to. Hope that helps!
  19. Ditto to what diogo said - spot on with the rest.
  20. You tend to run into these requirements with government sector/healthcare etc because they are often tied into legacy applications that they have spent tend/hundreds of thousands on and can't justify upgrading. Seriously, that's the reason most of the time, sad as it sounds. The problem is that whilst they would often be better off using newer technologies in a lot of cases and getting rid of some of the legacy systems, but whilst the money is from taxpayers they're stuck really. If you saw in the news that a database cost tens/hundreds of thousands that's all you generally focus on - it's hard to sell the benefits of a newer system for performance gains because newspapers tend to focus on the negatives. That's just been my experience anyway having worked "on the inside" in the past
  21. Feel free to clarify I'd prefer to pay ryan for some of these modules rather than give him a $50 token "Happy Christmas" present (Yes, now I'm making fun, sorry). I don't think it will turn into a modules supermarket. Certainly there's not a facility to upload paid moduled by other developers to the PW store yet, so if there were a lot of paid modules they would have to be on the developers' own sites, but I'm sure as more commercial modules are released it will be done so in a cautious and sensible manner.
  22. Yes, a site profile will require a clean installation since you effectively add these folders before installing it.
  23. Plus the prices that ryan is charging are so low for what they are I really don't have a problem paying them personally. I wouldn't mind it if he increased the prices actually - the benefits are that great.
  24. Processwire will always be free, but commercial modules have a place where a lot of work has gone into something. For example, ryan currently has two commercial modules that add great benefit to a Processwire installation. He has put in many thousands of hours into this free platform. Are you going to begrudge him making money out of some very useful modules that you have no obligation to use? I also want to make some commercial modules eventually too and see no problem with it as long as developers don't start charging for teeny tiny things.
  25. He's spying on us!
×
×
  • Create New...