Archive for October, 2005

attempted form script exploit

Monday, October 31st, 2005

grr.. some individual or robot has been trying to hijack my contact form script and comments form on the skate site to send spam. all they have suceeded in doing so far is bog me down with the inconvenience of having to add more validation to the scripts. I’m pretty sure they didn’t suceed in getting anything through anyway other than random email to me with an attempt to inject more recipients and content in and loads of random crap in the comments on the skate site (not comment spam, I think they - or their bot- mistook the comment form as a contact form. The contact form script is hardcoded to send mail only to me and the comment form script doesn’t send email at all, so it should be pretty hard to hack them. oh well, both scripts are locked down a bit more now. If I get anymore trouble i’ll probably disable them altogether…

My post-RSS online lifestyle

Friday, October 28th, 2005

small giraffe, far away giraffe

It’s been a month or so since I unsubscribed from the majority of the RSS feeds I had in my bloglines account. I’ve kept the zope/plone related subscriptions (to keep up with the latest developments) and the skateboard related ones (skateboarders seem to be a fickle lot when it comes to blogs and news- information is sporadic and widespread so RSS is ideal to collate it all).

Now one of the things that originally made me such a fan of RSS was the fact that it meant you could read content without having to fight your way through badly designed sites to get to the information. This still applies with most of the skate stuff - the RSS feed works fine (usually because it is provided by default by the blog/cms they are using - some don’t even know it exists), but if you actually visit the site you are forced to view content in a tiny scrolling frame or buried deep in the site where you can’t find it, or go blind trying to read white text over a photographic background or other web design no-no’s that mostly died out in the 1990’s, but your average skateboarder hasn’t noticed. So in summary RSS still good for that.

The flipside of this is that most of the web design related blogs/ news sites are now well designed - who’d have thought it- and I get to look at, and use them too - less frequently because I just drop in from time to time, picking mostly at random from my old fashioned browser bookmarks. I also surf (that’s right surf) out from links on those sites and other crazy old fashioned web "browsing" behaviour.

So overall this is still an experiment in progress. RSS still rocks, but using it for oversubscribing to what is mostly web design hype (web 2.0? give me break!) still isn’t doing it for me.

unix open up permissions for all files in folder

Wednesday, October 26th, 2005

e.g.

chmod -R 755 MyDir/

oh no rick’s using a car analogy to talk about software again

Friday, October 21st, 2005

I showed my head round the door of the quills developer list yesterday, to ask a question and see how things are going, feeling a bit guilty that really i’m looking to jump in and start using it just as everyone else has finished all the hard work. I’ve also been scouting around to see how ploneboard is doing.

The thing with both these products is that they are often requested plone features but are both still under development, so fall some way short of established alternatives. This is one of the things to consider with plone - it’s a very comprehensive bit of software, not really aimed at someone who just wants to keep a blog or run a messageboard. However, fantastic work is being done so owners of plone sites can add these features to a plone site if they want.

Ok, here come’s a car analogy (some plone people i’m sure will disagree with this):-

Using a plone site just to keep a blog is a bit like running a bmw just so you can use the coffee cup holder. Even then may be surprised to find that you have to fit and modify the coffee cup holder yourself to make it work the way you want only to find it isn’t quite as good as the one in your mates car. Furthermore, if all you really wanted was somewhere to put your coffee, you might be better off getting yourself over to Ikea and getting yourself a coffee table. erm.. following this?

The flipside of this . and I’ll stop using the car analogy now.. is if what starts out to be a blog or messageboard then goes on to be much more than that, you are in good hands with plone. If you want to start adding other products to the site, or creating your own content types with seamless integration of search and membership etc, you are never going to outgrow plone, but you might if you started of with a standalone messageboard or blog which isn’t natively part of a larger system.

force eject CD on a mac (osx)

Thursday, October 20th, 2005

in a terminal, type the following:-

$drutil tray eject

(dollar symbol represents the command prompt!)

apache on osx doesn’t like filevault

Wednesday, October 12th, 2005

when trying to access web pages served by apache on mac osx (tiger) from my user directory in the format localhost/~rick, I was getting a 403 error: You don’t have permission to access /~rick/

I tried changing the permissions but no joy. As I had this working previously I realised that it might actually be to do with filevault, which I activated recently. googling around it looks like it is filevault causing this.

I haven’t bothered trying to resolve this, as I was only using the users directory because I couldn’t be bothered to look into setting up virtual hosts to run multiple sites (I will now!)

update: this is a very good how-to for setting up virtual hosts.

I now have a directory outside my users directory containing all the sites I want to use with apache, with corresponding virtual hosts such as sandbox.test.site