![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / www / geeklog
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
Remove @dirrm related logic.
Pullup ticket #2782 - requested by taca geeklog: security update Revisions pulled up: - www/geeklog/DEINSTALL 1.5 - www/geeklog/INSTALL 1.4 - www/geeklog/Makefile 1.22 - www/geeklog/Makefile.common 1.7 - www/geeklog/PLIST 1.8 - www/geeklog/distinfo 1.9 - www/geeklog/files/README 1.4 - www/geeklog/files/createdb.php delete - www/geeklog/files/geeklog.conf 1.2 - www/geeklog/patches/patch-aa 1.3 - www/geeklog/patches/patch-ab delete - www/geeklog/patches/patch-ac delete - www/geeklog/patches/patch-ag delete - www/geeklog/patches/patch-ah delete - www/geeklog/patches/patch-ai delete - www/geeklog/patches/patch-aj 1.1 --- Module Name: pkgsrc Committed By: taca Date: Tue May 26 14:19:29 UTC 2009 Modified Files: pkgsrc/www/geeklog: DEINSTALL INSTALL Makefile Makefile.common PLIST distinfo pkgsrc/www/geeklog/files: README geeklog.conf pkgsrc/www/geeklog/patches: patch-aa Added Files: pkgsrc/www/geeklog/patches: patch-aj Removed Files: pkgsrc/www/geeklog/files: createdb.php pkgsrc/www/geeklog/patches: patch-ab patch-ac patch-ag patch-ah patch-ai Log Message: Update geeklog package from 1.4.1nb4 to 1.5.2.4 (1.5.2sr4). pkgsrc changes: overhaul this package. * Add LICENSE. * Clean up bmake's macros, such as addition of PRINT_PLIST_AWK. Geeklog changes: too many chagnes to write here. * New user-friendly installation. * New Configuration GUI. * New Webservice GUI. * And more. Please refer http://www.geeklog.net/docs/english/changes.html for more information. Fixed some security problems about SQL injection vulnerability.
Update geeklog package from 1.4.1nb4 to 1.5.2.4 (1.5.2sr4). pkgsrc changes: overhaul this package. * Add LICENSE. * Clean up bmake's macros, such as addition of PRINT_PLIST_AWK. Geeklog changes: too many chagnes to write here. * New user-friendly installation. * New Configuration GUI. * New Webservice GUI. * And more. Please refer http://www.geeklog.net/docs/english/changes.html for more information. Fixed some security problems about SQL injection vulnerability.
Pullup ticket #2432 - requested by taca
Security patch for geeklog
Revisions pulled:
- www/geeklog/Makefile 1.17-1.18
- www/geeklog/Makefile.common 1.6
- www/geeklog/distinfo 1.7
- www/geeklog/patches/patch-ah 1.1
---
Module Name: pkgsrc
Committed By: joerg
Date: Mon May 26 00:40:24 UTC 2008
Modified Files:
pkgsrc/www/geeklog: Makefile
Log Message:
Needs full pax dependency. Bump revision.
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Jun 19 14:08:42 UTC 2008
Modified Files:
pkgsrc/www/geeklog: Makefile Makefile.common distinfo
Added Files:
pkgsrc/www/geeklog/patches: patch-ah
Log Message:
Add a security fix for kses, HTML filter which isn't used with default
configuration: http://www.geeklog.net/article.php/kses.
Also fix one pkglint warning.
Bump PKGREVISION.
Add a security fix for kses, HTML filter which isn't used with default configuration: http://www.geeklog.net/article.php/kses. Also fix one pkglint warning. Bump PKGREVISION.
make GEEKLOG_BASE and GEEKLOG_PUB settable.
Update geeklog to 1.4.1.
pkgsrc's change: improving our README file.
Geeklog 1.4.1
New Features
* Support for Microsoft SQL Server. Starting with this release, Geeklog can
now also be installed on Microsoft SQL Server, so it's no longer restricted
to just MySQL. The MS SQL support was developed by Randy Kolenko. Thanks,
Randy!
Please note that any third-party plugins will have to offer support for MS
SQL before they can be installed on Microsoft SQL Server. The bundled
plugins (Calendar, Links, Polls, Spam-X, Static Pages) have already been
updated accordingly.
* Calendar plugin. The formerly built-in calendar and events have now been
moved into a separate plugin. This complements the move of the polls and
links sections into plugins in Geeklog 1.4.0 and makes Geeklog more modular
as you can now easily disable or replace functionality that you don't need
for your site.
* Multi-language support. It is now possible to build truly multi-linugal
sites with Geeklog where not only the navigation but also the content of
the site changes with the language.
* Ships with FCKeditor 2.3.1, which once again includes a file manager for
uploading images.
* A function for mass-deletion of old or inactive users. The list
automatically searches for users that have never logged in, only used the
site for a very short time or have not been online since a very long time.
The time span can be varied, and found users can be selectively deleted.
Security
In the light of the security issues discovered in Geeklog 1.4.0 and earlier
versions, the Geeklog source code has undergone a code review. We have
identified and addressed several minor issues and introduced new measures to
enhance security in this release. As a welcome side effect, the code reviews
have also uncovered a few bugs and inconsistencies that we also fixed in this
release.
Spam Protection
With this release we are finally removing support for the discontinued
MT-Blacklist. In its place, we are now using a system called Spam Link
Verification (SLV) run by Russ Jones at www.linksleeve.org. SLV could be
described as a community-driven, automatically updated blacklist. See the
documentation of the Spam-X plugin for details.
Whitespace cleanup, courtesy of pkglint. Patch provided by Sergey Svishchev in private mail.
- Split MESSAGE's content to separate document file. - Handle system/lib-custom.php as one of modifiable files. Bump PKGREVISION.
Importing www/geeklog-1.4.0.3 (geeklog-1.4.0sr3). Geeklog is a PHP/MySQL based application for managing dynamic web content. "Out of the box", it is a blog engine, or a CMS with support for comments, trackbacks, multiple syndication formats, spam protection, and all the other vital features of such a system.
Initial revision