teenage mutant ninja hero coders

Posted in antville, c0re | No Comments »

Posted in antville, c0re | No Comments »

Posted in antville, c0re | No Comments »

I hate this antville codebase. Or even worse the helma object publisher.

This site now again runs the antville-1.1 codebase some assorted patches and a little security work arround for the deep link problem.

Which means we are still runing a brokenserver like we did for the few months. Fuq.

I seriously consider rewriting the beast.

Posted in antville, c0re | 2 Comments »

Der Ärger mit dem Update ist wohl noch nicht ausgestanden.

* Drei Leute beschweren sich das Kommentare nicht so wollen, wie sie sollen. siehe z.B. hier.

Ich kann das nicht nachvollziehen. Helfen würde genaue Uhrzeit, wann das Problem aufgetreten ist, ung genaue Fehlermeldung und die umgebenen Umstände.

Bei einigen Blogs ist irgendwas mit dem “offline” modus von stories durcheinander. Wenn man auf http://blogs.23.nu/BLOGNAME/stories geht und da steht überall offline hat man das problem. Besser nicht versuchen, irgendwas online zu setzen, sondern hier Bescheid sagen.

Sorry!

Posted in antville, c0re | No Comments »

- neue variable in preferences die rahmen-farbe festlegt
- full ATOM support
- trackback/pingback support
- automatic referer spam detection
- http://typekey.torrez.org/show/HomePage

Posted in antville, c0re | No Comments »

This patch adds the feature of “Hidden sites” to antville 1.1. A “hidden site” is not password protected but should not be easy to locate to the general public. Hidden sites are not linked form the sites main index and are protected from spiders via the robots.txt file.

If hidden sites are activated in antville’s main preferences administrators of trusted sites can activate the hiding feature in their site’s preferences. Untrusted sites can’t change their hiding preferences.

Hidden sites are useful if you want data to be easily accessible (e.g. for your grandparents) but don’t want it to end up somewhere in search engines, Web archives or easily locatable for just everybody (e.g. because you site contains stories of you children which might they consider embarrassing when in 10 years their schoolmates start digging them out).

A more hackish variant of this patch was successfully in use for more than a year.

To use it you have to change the database structure of your antville database slightly by executing alter table AV_SITE add column SITE_ISHIDDEN tinyint(1) null; at the SQL prompt.

Get the patch at http://c0re.23.nu/c0de/misc/antville-1.1-hiding.patch

Posted in antville, c0re | No Comments »

We spend the weekend updating blogs.23.nu to a brand new FreeBSD 5.3 and antville 1.1.

Upgrading antville was a nightmare. There seems to be no migration path from 1.0.1 to 1.1. Seems people using antville in production are all doing incremental upgrades via CVS. In the end this meant writing a few hundred lines of code to massage the database into shape for 1.1. Also it is next to impossible to migrate the old skins to antville 1.1 automatically. Gnarf.

Now we have to port our extensions to antville over to 1.1.

Posted in antville, c0re | No Comments »

Bookmarklets are an interesting concept for emebbing your own JavaScript programms into your browser’s GUI.

Here are some Bookmarklets for Apple’s Safari Browser:

Translate English <-> German (by Joachim Becker via Mac OS X Hints)

Post to Antville (Modified from Antvilles original Version)

Post to Antville in Pop-Up-Window (Modified from Antvilles original Version)

javascript:posturl=’http://help.antville.org/stories/create’;str=”;if(top.frames.length==0)str=document.selection?document.selection.createRange().text:document.getSelection();void(location.href=posturl+’?content_text=’+escape(str+’%20%5Bvia%20%3Ca%20href=%5C%22′+window.location.href+’%5C%22%3E’+document.title+’%3C/a%3E%5D’));

javascript:posturl=’http://blogs.23.nu/test/stories/create’;str=getSelection();void(pmentry=window.open(posturl+’?content_text=’+escape(str+’%20%5Bvia%20%3Ca%20href=%5C%22′+window.location.href+’%5C%22%3E’+document.title+’%3C/a%3E%5D’)+”+escape(document.title),’antville’,'width=775,height=600,toolbar=1,status=1,location=0,scrollbars=1,menubar=1,resizable=1′));

http://help.antville.org/stories/467772/

Posted in antville, c0re | No Comments »

Is this exploitable?

Posted in antville, c0re | No Comments »