Antville Project

new URL schema in effect

I just switched to a new Hop snapshot and activated the new URL scheme, under which every weblog is situated under weblogalias.antville.org. I also set the cookie-domain to .antville.org, so you only have to login once for all the sites within the antville domain.

Hm, I don't check that into the CVS for now, because it won't work without some Rewrite activity in the Apache configuration. I guess it should be documented in a separate Mini-Howto (How to set up a multi-site Helma-Application or some such). Should. I love that word ;-)

comment    

 
kris, July 26, 2001 at 5:57:32 PM CEST

imagepool?

if you click on the imagepool link you get a redirect to www.antville.org with a 403.

link  

 
hns, July 26, 2001 at 6:04:03 PM CEST

Hmmmmmm

this was a name conflict between the antville image manager and the static image directory. I fixed that now, the image directory is now at /img instead of /images, but some people hardcoded their image tags to /images/... and these don't work anymore. Not sure what to do here.

link  

 
kris, July 26, 2001 at 6:35:19 PM CEST

how does it work anyway?

i uploaded a jpg, but i cannot find it anywhere. i expected it to be in the pool.

link  

 
hns, July 26, 2001 at 6:44:15 PM CEST

I just tried

And I think it worked. (after getting the macro right)

link  

 
kris, July 26, 2001 at 6:50:08 PM CEST

nice

thx, hns!

link  

 
tobi, July 26, 2001 at 7:03:41 PM CEST

imagepool edit / delete

btw, did the edit and delete links work ever before? i am not sure about that, but anyway they don't work now.

link  

 
hns, July 26, 2001 at 7:07:38 PM CEST

Why?

I just deleted an image. Worked ok.

link  

 
tobi, July 26, 2001 at 7:17:04 PM CEST

rights

uhm, well, actually i wanted to delete an image that i did not upload... it's the question why i can see the links, then. user rights again?

link  

 
robert, July 26, 2001 at 10:10:55 PM CEST

nope

has nothing to do with userrights (this time ;-), just with the fact that the imagepool-manager isn't finished ...

link  


... comment
 
robert, July 26, 2001 at 10:11:38 PM CEST

wow!

thanks for that, henso! it's a dream! :-)

link  


... comment
 
grob, July 27, 2001 at 10:57:32 AM CEST

cookie-domain

seems not to work ... i always get a session-cookie for i.e. "project.antville.org", and when i'm logged in in project.antville.org, i still do have to login to grottenolm again ...

link  

 
hns, July 27, 2001 at 11:11:18 AM CEST

it's a setting in internet explorer

Tobi had the same problem, changing some cookie-related option solved the problem.

link  

 
kris, July 27, 2001 at 11:33:35 AM CEST

but i have netscape

i have to login after every restart of the program. but contrary to grob, i need to sign in only once to participate in several sites.

link  

 
hns, July 27, 2001 at 1:07:54 PM CEST

That's the expected bahaviour

The cookie which stores your login is not persistent, it's a session cookie, so it's expected that you have to re-login after restarting the browser.

It would be nice to have persistent log-ins as an option, as well as a password reminder. I'll see if I can do something in this space.

link  

 
robert, July 27, 2001 at 2:25:23 PM CEST

i don't get it, hns

when i start up IE and access "project.antville.org", i'm getting a HopSession-cookie for the domain "project.antville.org" instead of "antville.org". which means, if i log in in project.antville.org and move on to grottenolm.antville.org, i'm getting a new HopSession-cookie there for the domain "grottenolm.antville.org".

logging in for all antville-sites works only if i log in at "antville.org".

or am i getting something completely wrong?

link  

 
tobi, July 27, 2001 at 2:28:45 PM CEST

in iexplorer

the appropriate setting to enable cookies across domains eventually is a little bit hard to find: open "internet options" from the "extras" menu and go to the "security" tab. click on the "custom level" button and scroll down the list to "miscellaneous" then activate the "prompt" radio button for the option "access data sources across domains".

concerning internet explorer, you should be aware, though, that this makes an unsecure software even more vulnerable (read more).

link  

 
kris, July 27, 2001 at 2:31:28 PM CEST

this is easy

persistant cookie is easy. there is something with the expiry time. if i remember correctly, if you set it to zero it is a session cookie. a "remember me" checkbox on the login would be great.

on the other hand, this may raise security issues. how about legal tags in messages? can members write javascripts in their messages? imagine, someone reads out the cookie via .js and sends it somewhere. i am sure this is a way to hack manila-sites, if people allow script tags in members messages.

link  

 
robert, July 27, 2001 at 2:57:58 PM CEST

ok, i'll try to make it clearer ;-)

  1. close your browser completely (no matter which)
  2. start it up again and go directly to "project.antville.org"
  3. log in there
  4. go directly to i.e. "grottenolm.antville.org" - you will not be logged in there ...

that's what i meant ... btw.: doesn't matter which browser you're using (i tested it with netscape and ie)

link  

 
tobi, July 27, 2001 at 3:16:06 PM CEST

verified

robert's description causes the same (mis)behaviour in my browser. seems to be something different from the cookie domain thing...

or is it intended / only possible to work this way?

link  

 
kris, July 27, 2001 at 3:35:12 PM CEST

try the other way around

strange thing is, when i login on elephantville i am automatically logged in here or on grottenolm or on tobi. actually, i am only a member on my site not on the others.

link  

 
hns, July 27, 2001 at 5:04:59 PM CEST

You're right.

The cookie is only set to the whole .antville.org domain if it comes from www.antville.org. I checked with the Helma source, this must definitely be a bug in Apache JServ, since the domain is set correctly on all cookies.

link  


... comment


The Antville Server Fund has been a great success. Thanks to everybody who contributed!
online for 8551 Days
last updated: 1/4/11, 10:22 AM
status
Youre not logged in ... Login
menu
November 2024
SunMonTueWedThuFriSat
12
3456789
10111213141516
17181920212223
24252627282930
July
recent
zfuture's house here is zfuture's
house
by zfuture (7/31/03, 2:59 AM)
i understand your concerns however,
i hardly can think of a solution. certainly, if the...
by tobi (7/29/03, 9:47 AM)
Found several more similar sites
listed This is getting to be quite a concern to...
by cobalt123 (7/27/03, 7:56 PM)
Second Post Alert on Referrer
bug livecatz I put this into "help" and now here:...
by cobalt123 (7/26/03, 7:14 PM)
well it's not easy to
find from here, anyway. think we should include a link,...
by tobi (7/24/03, 11:25 AM)
So finally I found
the helma Bugzilla - stupid me.
by mdornseif (7/24/03, 10:28 AM)
clock not that it's particularly
earthshattering but the antclock is running slow by about 15...
by kohlehydrat (7/23/03, 8:25 PM)
but blogosphere.us isn't can't really
be rated as spam can it?
by kohlehydrat (7/23/03, 8:08 PM)
More referrer spam www.webfrost.com
by Irene (7/23/03, 7:55 PM)
How to log skin names
I accessed to console?? Hi, I would like to know...
by winson (7/23/03, 4:12 PM)

Click here to get an XML version of this weblog.

Made with Antville
powered by
Helma Object Publisher