Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
Re: Mod File Upload
i don’t completely trust the authentication scheme of tXp, plus and added check gives me some more confidence of someone not uplaoding a php file, or something else of the sort. Ofcourse once they get in they could damage anyway .. hmm .. but i can always go from a backup of mysql.
Ofcourse I could save myself the hassle and follow your lead and leave directory out of webtree, but that is something that sys admin has not granted me just yet.
I am hardcoding to leave out of preferences, but looks easy enough to add something there.
nuff-respec ::: dannyb
Offline
Re: Mod File Upload
You could put a (read-only) .htaccess file in the upload folder and specify “options NoExec NoDirList NoIncludes” to lock down the folder. This assumes that you are allowed to use .htaccess files. (You can on TextDrive).
Last edited by Manfre (2004-12-13 20:27:38)
Offline
Re: Mod File Upload
On dreamhost i can do all this stuff, but this has me locked up tighter than ______ . Plus the powers to be will ask the upload question for sure unfortuantely.
Last edited by dbulli (2004-12-13 20:32:03)
nuff-respec ::: dannyb
Offline
Re: Mod File Upload
One more question, once something is uploaded, isn’t there an interface that allows uploader ability to replace the uploaded file.?
nuff-respec ::: dannyb
Offline
Re: Mod File Upload
Hi there,
Trying to install the mod on RC1 (cant find RC2 anywhere???) and i worked out all the problems (i hope)
When i go to the content/files tab I get this error:
Fatal error:
Call to undefined function: glob() in /customers/XXXXXXX.dk/XXXXXXXXX.dk/httpd.www/test/textpattern/include/txp_file.php on line 504
This is because I only have php 4.2.2 on my server – is there any rewrite or what have we of the affected lines in txp_file.php available for such unfortunate persons as my self (I cant change the php installation on the server – its a cheap shared server)
http://vinterstille.dk
Offline
Re: Mod File Upload
Manfre. Would it be possible to add an extra numeric field to the “txp_file” table. Then get the “upload” file to pop a zero into it when a new file is uploaded, and finally to get the “download” file to record each “hit” in it. That way couldn’t we get a download count for each file? I would find it handy to be able to call this count using a tag on my pages to indicate the popularity of each of my style files but I then thought that it could be included as an extra column on the admin page as well so you can instantly see whether a download is worth it’s space or not.
Last edited by thebombsite (2005-02-02 03:15:43)
Stuart
In a Time of Universal Deceit
Telling the Truth is Revolutionary.
Offline
Re: Mod File Upload
I had been using bbclone and the id as a marker, but having it all housed nicely within the admin section sounds reasonable.
Offline
Re: Mod File Upload
I’m getting counts from ShortStat myself but unfortunately it’s not a figure that’s kept in the database otherwise I could use it. It would appear that ShortStat does a lot of calculating when you open it. Do you have time to look at this?
Stuart
In a Time of Universal Deceit
Telling the Truth is Revolutionary.
Offline
Offline
Re: Mod File Upload
Oooo. Nice one!! Thankyou. 11 hours though. Did you pop out or something. :grin:
Stuart
In a Time of Universal Deceit
Telling the Truth is Revolutionary.
Offline
Re: Mod File Upload
> thebombsite wrote:
> Oooo. Nice one!! Thankyou. 11 hours though. Did you pop
> out or something. :grin:
Sorry, I was stuck at work!
Offline
Re: Mod File Upload
Ha-ha. Fair enough but I shall have to ask one last question which was my original aim. I’ve stared at your latest code for long enough and I’m going cross-eyed and just can’t fathom the damn thing out. How can I call the download count for a specific file id into a non-textiled post (several times) or can you add to the plugin side to create a tag to do it?
Stuart
In a Time of Universal Deceit
Telling the Truth is Revolutionary.
Offline