Re: filestat

On Thu, 19 Aug 2004, David Ascher wrote:
>
> One idea: add a default flavour called plugins, which returns some
> marked up list of the plugins (possibly w/ metadata like version #'s).
> The big problem is one of security -- if exploits are found in specific
> plugins, it becomes easy for an attacker to find out which blogs are
> vulnerable.  Alternatively, ship pyblosxom with a script which uploads
> the a tuple
>
>     ($base_url, py['load_plugins'])
>
> to a central server.  Make it part of the installation guide to
> encourage people to run that script on a periodic basis, but putting the
> security decision more clearly in the user's hands.

I wrote the plugininfo plugin which allows you to "hide" plugins from view
(for exactly the reasons you've cited).  It doesn't send the plugin
information to a centralized server, though.

That's an interesting idea, but I'm not sure I'm so interested that I want
to do the work to get that working.


> So far I've had good luck configuring things from the pyblosxom side.
> My only TODO item there is to figure out how to test trackbacks and
> pingbacks.

I've never used either in pyblosxom--you should ask Ted to see if he can
help out and either build a tool for it (maybe it should be part of the
verify_installation?) or fix the documentation to walk people through that
bit as well.


> From a community growth POV, I think what's most crucially needed is a
> flavour registry, where people can easily bundle up their html, css
> and images to share, with as teh end goal that pyblosxom ships with a
> _bunch_ of default flavours to pick from.  Unfortunately, that
> requires graphic talent, which isn't the same as coding talent.  Also
> unfortunately, I feel that the current separation between flavour
> files and css/images makes it harder to share/install flavours than
> I'd like.

At one point we were tossing around building another renderer that would
take all the template information from one big file rather than a bunch of
little files.  But I think that just splinters things further.

I keep dragging my feet on a flavour registry.  I'll try to get that in
soon.  I'll probably just hinge it off of the existing plugin registry.

/will


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285