0962 is up next

Quote from: davidm at Jan 22, 2008, 12:06 PM

Better give it a rev number like 0.9.6.1b anyway, otherwise you might just confuse the patched archive with the non-patched one and upload the bad rev to your server... better be foolproof I think.

I’m a little confused now... will 0.9.6.1b still include the updated Ditto build, or only the two most recent vulnerabilities? Unless 0961b is just an interim distribution till 0962 can be ironed out (per Susan’s recommendation)

About improving security : I know the idea is to keep MODx light, but why not distribute the krss module which is pre-configured with the MODx security feeds ? This will add the feeds to the manager welcome page and make it next to impossible NOT to notice them.

What do you think ?

0961p1 (patch 1) is an interim patch to address the security vulnerabilities only.

I’ve got the kRSS stuff ready to commit as a module, but I don’t think that’s the right approach for security and announcments. I would like to see a module to configure things, but I’d like the results displayed front-and-center on the welcome page when you login honestly. That way we’d have security announcements proactively going out from our feedburner feeds:

http://feeds.feedburner.com/modxsecurity
http://feeds.feedburner.com/modx-announce

Susan’s help manager mod is also ready, but I’m just waiting on feedback about putting the help files in the manager vs. in the assets directory. I’d probably be cool to convert the existing help page to the new dynamically loaded format.

Any helpers for these two items?

Also talked to Mark earlier and he informs me that one last bugfix with server time offsets awaits the "official" Ditto 2.1 release (and inclusion). And finally, I committed Mootools 1.11 to replace the older 1.0 release. So all the TVs and Modules will need to be extra-carefully reviewed.

Would you like some help implementing as front-page tabs, similar to how we do it for 0.9.7?

e.g.

MODx News
Security Notices

I can get these functioning as front page tabs, for each template.

UPDATE: In fact, I now have the tabs working! (0.9.6.1)

Perfect Mike would love to grab that and commit it for 0962.

Quote from: rthrash at Jan 22, 2008, 04:18 PM

Perfect Mike would love to grab that and commit it for 0962.

Revision 3296 is done! Welcome MODx News and Security Notices to the manager home page! (And with the next rev update, Susan’s Help mod, too!)

Quote from: pixelchutes at Jan 22, 2008, 04:54 PM

Revision 3296 is done! Welcome MODx News and Security Notices to the manager home page! (And with the next rev update, Susan’s Help mod, too!)

Good news but, is there a chance to make it a multilingual notice?, BTW the Susan’s addition to the server info page is also very much needed for cross cultural adjustment of MODx colasion and character set settings, ill find the topic and will link it here for the reference. Here is the topic: http://modxcms.com/forums/index.php/topic,21819.0.html

Quote from: pixelchutes at Jan 22, 2008, 04:54 PM

Revision 3296 is done! Welcome MODx News and Security Notices to the manager home page! (And with the next rev update, Susan’s Help mod, too!)

Awesome !

I love it, and it will help show security is paramount to the project

Quote from: pixelchutes at Jan 22, 2008, 03:46 PM

Would you like some help implementing as front-page tabs, similar to how we do it for 0.9.7?

e.g.

MODx News
Security Notices

I can get these functioning as front page tabs, for each template.

UPDATE: In fact, I now have the tabs working! (0.9.6.1)

Hmm. Any possibility these could be optional? Without hacking to remove them? I suspect it would be best that the average client not see these.