Fregs Blog

I have updated the location of the SVN and added Spensierato to Ohloh the svn is now at http://svn.fryer.org.uk/cms/

Now with working page security, yay.

Minor updates to the skin, more bug fixes, outline of install script and new fancy favicon!

See the downloads page for more

Been a while since I updated this so here is a short list of recent work

• Implemented Page class
• Put in fixes for above
• Updated to MooTools 1.2
• Updated TinyMCE to 3.1
• Lots of template updates
• Javascript image pre-loading function
• Temp disabled session path setting due to bug
• Spensierato now uses PHPIDS for intrusion detection
• Updated my Bind zone file with a TXT field for the current released revision so update checking is almost working
• Updated to the warning class
• New settings
• Plus minor fixes

I was recently asked how I got ClamAV to tag my emails with its version information, which is also useful to check if your emails were scanned as if ClamAV was re-starting when an email goes through then they will not be scanned.

By editing my exim config with the following ACL

—————————————————-

# Deny if the message contains malware. Before enabling this check, you
# must install a virus scanner and set the av_scanner option in the
# main configuration.
#
# exim4-daemon-heavy must be used for this section to work.
#
deny
malware = *
message = This message was detected as possible malware ($malware_name).

# Add ClamAV scanned header

warn
message = X-Virus-Scanned: (${readsocket{/var/run/clamav/clamd.ctl}{VERSION}{2s}{}{AV Not running}})

—————————————————-

If ClamAV was not running the email is tagged with X-Virus-Scanned: AV Not running

Hope this helps

Due to having my house re-wired updates to the blog and spensierato are a little sporadic.

One of the biggest problems facing the internet I feel is security or the lack of it by many coders out there, there are posts after articles after reviews about how lax security even PayPal has been caught out recently and HSBC well that’s just another story.

I feel that if I am to be confident about releasing Spensierato to the wider public it MUST be secure and so I am inviting people to try and hack my test site, I have a full backup in case it goes pete tong. I would appreciate any breaches people find to be reported back to me and as the code is public patches would be nice too!

hit http://spensierato.fryer.org.uk and hack away just let me know how you get on good and bad.

So I somehow acquired a 3.5 L Rover V8 from a 1980 Range Rover, currently on twin SU carbs. I have asked if the person who made my megajolt kit could convert it to 8 cylinder EDIS. Photos to come.

I need to try and get it running ASAP so I need to build an engine trolley, so I guess I need to source a fuel pump and pipeing, a load of wires and box section steal as well as a radiator and plumbing.

I have made a permanent snapshot of Spensierato.

The current release has working text elements and new page creation, installation still requires manual set up but the mysqli install file is included and only needs to be ran through phpmyadmin and a quick look and the install.inc file should be a copy and paste job to create the setup file.

Check out the Sourceforge page at http://sourceforge.net/projects/spensierato/ for details.

I got new seat belts for my B at Christmas, I fitted them the other weekend but the dirver side one keept getting stuck. After sitting in the car park for 30 minuites in 25 degrees heat with the sun beating down and the traffic building up, I ended swaping it for the passenger one.

One seat belt down one dark hole = me spending another £40 on a new one.

There goes my spending money for the new alternator.

Basic registration works.

Emailing works, although it needs work to make it more complient as it trigers a few spam triggers.

Bit of fleshing out of the instlation script.

The DB schema has changed slightly as because of user registration and to allow draft saving of elements.

Code registered on Freshmeet as well as Sourceforge, a pre-release 2 snapshot was made after these updates but I forgot to update the SQL structure file, silly me.

I will hopefuly get the instal working this weekend and that should then give enough code to release the first Alpha code.