On Thu, 27 Mar 2003 08:46:16 +0100
Uwe Pross <[EMAIL PROTECTED]> wrote:

> I agree. I have pulled the fvwm-web tree from cvs and put
> it at
> 
> http://www-user.tu-chemnitz.de/~uwp/fvwm-web/
> 
> The new php-files have been added to this directory. Since
> our web server serves php before html I have moved the file
> index.php to home.php. So the new version is accessable via
> 
> http://www-user.tu-chemnitz.de/~uwp/fvwm-web/home.php

        Actually, your server's order wouldn't be a problem. I'd call the home
page index.php. Then when we go to 

http://www-user.tu-chemnitz.de/~uwp/fvwm-web

we'll see the new stuff, which is what we really want to see. If anyone
wants to look at the old version, he can explicitly ask for index.html.


> Since I don't know what the web server at fvwm.org serves
> first I will keep home.php until the site is published
> officially.

        I would guess it gives precedence to index.html, but I don't know for
sure. Does anyone have an answer? 

        *Never mind*  - I just saw Jason's answer come in as I was typing
below. So, since index.html has precedence on the live FVWM site, I'd go
ahead and call it index.php.


> Before I add the files to the cvs and put them online at
> fvwm.org it would be good if somebody looks in the php
> sources for potentially security lacks. Bob could you
> do that please? - Four eyes see more than two.

        And 6 or 8 would be even better.  :-)

        I just grabbed your latest tarball, and will take a look at it shortly.
The first security issue, as I've mentioned before, is that we need to
modify the code to work with PHP 4 with register_globals set to off
(which I'm sure is what Jason installed). But we want to modify it so
it'll be backward compatible with your PHP 3 system. I'll hack up a test
page and send it to you a little later; try it out and let me know
whether it works OK on your system.

        As for merging the new files with the existing fvwm-web, we want to be
sure there aren't any subdirectory clashes. For example, there is a
"screenshots" directory in both your new set and in the old fvwm-web,
and they're different things. In the tarball I pulled down, there is
only your new stuff. Is it your intent that I should be able to merge
this with my existing (copy of) fvwm-web?

        Ah, that reminds me...what are the implications for running navgen in a
merged directory? (That one also appears to have some PHP 3/4
incompatibilities that I haven't had time to research thoroughly yet.)


> How about the actual colors and window decoration? Bob
> meant the colors should be changed a little bit. Any other
> suggestions?

        Mainly for the pager background. I think something a bit lighter than
that grey would give some needed contrast - possibly a light cream
color. 


Cheers,
Bob

--
Visit the official FVWM web page at <URL:http://www.fvwm.org/>.
To unsubscribe from the list, send "unsubscribe fvwm-workers" in the
body of a message to [EMAIL PROTECTED]
To report problems, send mail to [EMAIL PROTECTED]

Reply via email to