« Older Entries Newer Entries »

Catcloud Wordress Plugin Security and Performance Update

Update: This plugin is no longer maintained. I'd recommend using Wordpress' built-in tag cloud functionality or the Simple Tags plugin instead.
After putting off some very, very simple work for far too long, I've finally fixed the security hole in catcloud that is mentioned here. I've also fixed the very lazily written code that grabbed the [...]

Hacking Business Models

This weekend, Monty and I got together for a different kind of hacking session.
Instead of developing software, we were working on developing a set of rough principles and rules for running a Free Software/Open Source business. We both have a good amount of experience working with various FLOSS projects (like Mozilla, MySQL, PHP, etc.) and [...]

(29 Comments »)

Possible CSRF in Catcloud

Update: This plugin is no longer maintained. I'd recommend using Wordpress' built-in tag cloud functionality or the Simple Tags plugin instead.
Alex over at http://www.buayacorp.com posits (in Spanish) that catcloud is vulnerable to cross-site request forgeries (CSRF) - he may well be right. I've asked him for more information.
Amusingly enough, despite having catcloud on his list [...]

(2 Comments »)

catcloud Wordpress Plugin

Update: This plugin is no longer maintained. I'd recommend using Wordpress' built-in tag cloud functionality or the Simple Tags plugin instead.
catcloud is a plugin for Wordpress that generates a tag cloud from the categories used for a blog. Tags cloud are visual representations of how frequently a tag is used within a given set of [...]

(15 Comments »)

WordPress Cat Cloud Plugin v0.2.2 released

Update: This plugin is no longer maintained. I'd recommend using Wordpress' built-in tag cloud functionality or the Simple Tags plugin instead.
Version 0.2.2 of the Category Cloud WordPress plugin has been released. The code is even uglier than the previous version. :)
New features include:

style sheet now moved into head of generated output
additional options for controlling the [...]

(17 Comments »)

eZ components 1.0.1 released

Derick Rethans writes:

[W]e are now releasing the first bug fix release of the whole eZ components package. Besides the fixes from last weeks it includes fixes in the ImageConversion, ImageAnalysis and Cache components. You can find downloads of the whole bundle on the downloads page (of ez.no). Users that use the PEAR installer can simply [...]

$5,701,201 worth of eZ publish code?

I just ran David Wheeler's SLOCCount tool on a copy of eZ publish 3.7.3.
SLOCCount is:
a set of tools for counting physical Source Lines of Code (SLOC) in a large number of languages of a potentially large set of programs.
–from http://www.dwheeler.com/sloccount/

The tool generated a bunch of interesting stats, including an estimated cost to [...]

This is a stick up! Hand over your copyright!

Copyright assignment (the practice of asking contributors to a project to assign their copyright to the project owner) always makes me a bit uncomfortable.
From a business perspective, holding all of the copyright for your products provides important advantages (usually ones that relates to making money or managing risk).
From a normal human perspective, it sucks to [...]

(1 Comment »)

Machine-readable licensing blocks

One of our recent activities at eZ has been to rework our licensing. While most of the changes have been related to improving the agreements involved (simplifying, internationalizing, improving the legal robustness, etc.) we plan to make some changes to how we attach licensing information to our source code.
The basic plan is to drop in [...]

PHP in a Nutshell

Early in 2005, one of the O'Reilly staff dropped me a line to see if I could skim through a draft chapter of a PHP book. I did and in the process gave the author a good text-lashing (mostly) over some relatively minor things. I usually behave more graciously, honest.
So, it is now near the [...]