I have tested Herve's XOOPS 2.0.17 version a couple of days ago on my test server.
The installation did not seem to give a problem, but I couldn't reach the site (blank page).
As far as I remember something went wrong with setting up the database tables.

Quote:

Adding a salt prior to hashing user passwords would be a simple way to render the hashes useless to an attacker and block dictionary attacks (so long as the salt can be protected).

Quote:
"If people want to make something useful" LOL
As everybody can see, the bugfixes submitted by everybody was not used in any version

Quote:
I would strongly encourage anyone not to hear him
Really, are you so bored on xoops.org ?


Quote:
Listen to the security expert

Your forums are full of this :
Quote:
How do you believe this was made ?

Really, are you so bored on xoops.org ?
Anything better to do than to denigrate the work made by the others ?

PS : In how many times this answer will be "moderated" ?

herve, what has that thread on XC got to do with what i have said here? absolutely nothing.

and what i have said here makes perfect sense. "If the system was secure and unauthorised users were prevented from gaining access to the database or were unable to get the opportunity of retrieving the password hash's in the first place, it would make no difference if the passwords were plain text or encrypted because they would be unable to exploit the system in order to get them"if they can't retrieve the hash, then they can't crack the hash!!

If a burglar is breaking into your house, don't buy a dog or change your furniture in order to stop it happening again. Fix the problems that the burglar used to gain entry in the first place!!

now don't take this the wrong way and think that i think plain text passwords are secure.. lol because I don't.. i used as an example.

This is plus an example that we must respect and be thankful with much affection because we need to evolve.

When still she was a child was taught me that the good ideas were equal to a small plant that it needed to be watered with affection to generate fruits.

If all time that good ideas to appear here not to water our plant, it finally will die.


Initiatives as this of the Herve must be applauded and to leave the community to choose what of good it exists to be used to advantage or everything.

To finish, yes, some bug-fix are excellent and already they would have to be in Core the much time and us we will go to incorporate these changes with certainty with the had credits in our parallel version in Brazil.


Debtor for sharing these ideas and solutions in the practical one with work.

Sorry my poor english, using translator.

[pt_br]
Este é mais um exemplo que devemos respeitar e agradecer com muito carinho porque precisamos evoluir.

Quando ainda era uma crian?a me foi ensinado que as boas idéias eram iguais a uma pequena planta que precisava ser regada com carinho para gerar frutos.

Se toda vez que boas idéias surgirem aqui n?o regarmos a nossa planta, ela finalmente morrerá.

Iniciativas como esta do Herve devem ser aplaudidas e deixar a comunidade escolher o que de bom existe para ser aproveitado ou tudo.

Para finalizar, sim, alguns bug-fix s?o relevantes e já deveriam estar no core a muito tempo e nós iremos incorporar estas mudan?as com certeza com os devidos créditos em nossa vers?o paralela em brasil.

Obrigado por compartilhar estas idéias e solu??es na prática com trabalho.
[/pt_br]

Momento Zen (hope)

With the sweat of its face it will gain its bread.

Com o suor do seu rosto ganhará o seu p?o.


[edited by Giba]

If you it liked these new features created for herve Rate Thread with 5 points, if no, Rate Thread with 1, but Rate.

Quote:

Yet.

Quote:

Bored? Actually, I've been quite busy lately working with other community members on the new sites. I hope you enjoy the results of our collaborative work. So, no, I'm not bored, but thank you for asking.

The ultimate issue here is that Herve's Personal Release is not compatible with the current [stable] version of XOOPS and will not be compatible with future versions of XOOPS. Therefore, it is strongly advised that users who wish to maintain compatibility with the "Official" XOOPS version, that you do not use this unofficial release.

Of course, everyone can choose for themselves, but just know that this unofficial release will not be supported. Even Herve himself stated that in his release announcement.

Post removed by moderator

Please Note: The original text of this post was posted by someone else then the apparent author.

Post removed by moderator

Please Note: The original text of this post was posted by someone else then the apparent author.

Post removed by moderator ? What's wrong... 2.0.17 or initial post ?

ok stop with the unnecessary bumping.!!!! or the thread will be closed!

biteronboard's post was not edited by a moderator, he posted that message himself.. lol