Go to main content

Textpattern CMS support forum

You are not logged in. Register | Login | Help

#25 2016-08-25 16:39:50

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,137
GitHub

Re: RFC: Improving the Textpattern demo site

hcgtv wrote #300815:

Maybe make txp_file and txp_image read only?

Possibly. Locking the tables would prevent other valid stuff happening (change thumbnail dimensions, names, descriptions etc), and this is (in my mind) an edge case. A bad actor could find a way in (I can think of some already that I can’t protect against) and cause a stink for a few hours before the auto-reset kicks in and splats everything.

Offline

#26 2016-08-25 21:19:49

Bloke
Developer
From: Leeds, UK
Registered: 2006-01-29
Posts: 11,271
Website GitHub

Re: RFC: Improving the Textpattern demo site

gaekwad wrote #300814:

The image is 9.jpg. You are attempting to replace it with something that will end up with a .png extension. That won’t overwrite the image, but will attempt a new file write (to 9.png, presumably).

I know this is a locked-down scenario, but I think it’s actually a valid edge case in regular Txp. Replacing any image with the same ID and different extension will trigger some undesirable behaviour. Is there anything we can do in core to help mitigate this situation?


The smd plugin menagerie — for when you need one more gribble of power from Textpattern. Bleeding-edge code available on GitHub.

Txp Builders – finely-crafted code, design and Txp

Offline

#27 2016-08-25 21:29:43

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,137
GitHub

Re: RFC: Improving the Textpattern demo site

Bloke wrote #300822:

I know this is a locked-down scenario, but I think it’s actually a valid edge case in regular Txp. Replacing any image with the same ID and different extension will trigger some undesirable behaviour. Is there anything we can do in core to help mitigate this situation?

Make the bad stuff go away, Cap’n Stef.

Offline

#28 2016-08-26 03:22:17

bici
Member
From: vancouver
Registered: 2004-02-24
Posts: 2,075
Website Mastodon

Re: RFC: Improving the Textpattern demo site

re demo:
发表时间 2 小时 之前
评论 1


…. texted postive

Offline

#29 2016-08-26 08:58:06

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,137
GitHub

Re: RFC: Improving the Textpattern demo site

bici wrote #300826:

re demo:
发表时间 2 小时 之前
评论 1

Published 10 hours ago
Comments 1

I assume someone changed the UI language. The reset (every three hours) appears to have taken care of it, and it’s back to English — for now.

Offline

#30 2016-08-27 14:07:28

hcgtv
Plugin Author
From: Key Largo, Florida
Registered: 2005-11-29
Posts: 2,722
Website

Re: RFC: Improving the Textpattern demo site

On the demo site, accessing the admin side takes you the language page if you’re the first one after a reset.

Anyway to avoid that, so that users go straight to the default Write panel?

Offline

#31 2016-08-27 14:49:02

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,137
GitHub

Re: RFC: Improving the Textpattern demo site

hcgtv wrote #300837:

On the demo site, accessing the admin side takes you the language page if you’re the first one after a reset.

Anyway to avoid that, so that users go straight to the default Write panel?

Yeah, I think I’ve figured out why that’s happening. Found and fixed a load more stuff this morning, too. Should have that nailed down, tested and deployed within two hours.

Edit: fixed.

Last edited by gaekwad (2016-08-27 17:24:14)

Offline

Board footer

Powered by FluxBB