Advertisement

Miro took the PHPNuke code and turned it into Mambo

Reaction to the statement posted on www.opensourcematters.org
Locked
insider
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Tue Aug 23, 2005 1:51 pm

Miro took the PHPNuke code and turned it into Mambo

Post by insider » Tue Aug 23, 2005 2:11 pm

Mambo's code started life as PHPNuke, has anybody realised this? 

Go and read all the PHPNuke security advisories of over the years.  Then compare them to the Mambo security advisories. 

Look back a few years and you will see the EXACT same security holes in PHPNuke always showed up exposed in Mambo a few weeks later, and often the code hole was identical.

Of course many years and much development has taken place since 2000, but really, in truth, Mambo is a fork of PHPNuke. 

Miro shouldnt have total copyright of Mambo code because it all started from the PHPNuke code.

What about this interview on this page
http://ricshreves.net/content/view/105/47/
where it says:

Q: How well documented are the origins of the Mambo core?

A: Very well documented.


If the whole story was told, Peter would have said, Mambo is very well documented as beginning life as PHPNuke and we made a lot of changes. 

I know Mambo started life as PHPNuke. 

I thought the developers here would like to know.

Go back and match up all the security advisories and a pattern will emerge.  Most likely a VERY strong pattern.

I hope someone takes the time to investigate this, because Mambo truly is the PHPNuke code made into a nicer CMS. 

Advertisement
User avatar
Sebastiaan
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 100
Joined: Fri Aug 19, 2005 12:45 am
Location: The Netherlands
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by Sebastiaan » Tue Aug 23, 2005 2:22 pm

Could be that people got new ideas when they knew what security problems to look for in other software. Try and compare those security problems with other CMS'es as well, you'd probably find a similar pattern.

It's pretty irrelevant anyway.

unity
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Thu Aug 18, 2005 12:41 pm

Re: Miro took the PHPNuke code and turned it into Mambo

Post by unity » Tue Aug 23, 2005 2:28 pm

Just to point out that a lot of those security advisors will have been the result of both platforms using PHP - you can't infer a common ancestral code base from such advisories.

In any case, even if it were true, the extent to which its been re-written and re-engineered over 5 years would mean that none of the original codebase would remain intact.

This is of no real relevance.

User avatar
shadoe
Joomla! Intern
Joomla! Intern
Posts: 65
Joined: Fri Aug 19, 2005 9:01 am
Location: Stockholm, Sweden
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by shadoe » Tue Aug 23, 2005 2:30 pm

PostNuke and Mambo couldn't be from the same core, it's just not possible. If it ever was - they have left that codebase behind long ago...
Member of the Swedish Translation Team

insider
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Tue Aug 23, 2005 1:51 pm

Re: Miro took the PHPNuke code and turned it into Mambo

Post by insider » Tue Aug 23, 2005 2:33 pm

I know for a fact that Mambo started life as PHPNuke.

I wish I could say more but I don't want to be identified.

I suggested investigation and comparison of the security advisories because it is the most concrete way to prove Mambo started life as PHPNuke.

However, if there is no value in proving this then fair enough.

On the other hand, if it helps the situation in some way... then it would be worthwhile to document the vast number of similarities between the security advisories of PHPNuke and Mambo.

The point would be to prove that Miro do not own the full copyright because they started with PHPNuke and forked it.  And what license is PHPNuke?  Obviously PHPNuke is forkable because of PostNuke, but does the PHPNuke licence impinge on Miro's claim of complete copyright of the initial source?

User avatar
Sebastiaan
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 100
Joined: Fri Aug 19, 2005 12:45 am
Location: The Netherlands
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by Sebastiaan » Tue Aug 23, 2005 2:39 pm

If by helping "the situation" you're suggesting that people could accuse Miro of some "crime", I don't think that's what anybody needs right now. I think the dev team are ready to leave Miro behind and start afresh.

And, again, it's not relevant indeed because whether or not it was a fork, the dev team had a vision of a better CMS and made one. Under the GPL license this would be no problem and therefore this is a non-issue.

insider
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Tue Aug 23, 2005 1:51 pm

Re: Miro took the PHPNuke code and turned it into Mambo

Post by insider » Tue Aug 23, 2005 2:45 pm

OK no problem.  Just wanted to let it be known, just in case it might have helped in some way.  If not that's fine, I just wanted to get it off my chest.  Good luck with all future development.  :)

User avatar
shadoe
Joomla! Intern
Joomla! Intern
Posts: 65
Joined: Fri Aug 19, 2005 9:01 am
Location: Stockholm, Sweden
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by shadoe » Tue Aug 23, 2005 2:45 pm

and as previously stated - I doubt any of the original PHPNuke code is still in use...
Member of the Swedish Translation Team

User avatar
mediamagnate
Joomla! Explorer
Joomla! Explorer
Posts: 315
Joined: Fri Aug 12, 2005 2:09 pm
Location: Shepparton
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by mediamagnate » Tue Aug 23, 2005 3:29 pm

Hi chaps,

What a faceless bunch we have in here. Interesting thread. News to me. Anyway, I'm not in here to comment, as I don't know but I'd like to encourage all posters to use a photo as their avatar.

Check out the virtual bbq http://forum.opensourcematters.org/inde ... 152.0.html where socialising is part of our community as much as good hearted debate.

Thanks for joining up.
Joomla is a project, not a product! www.nooku.org

svladcjelli
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Tue Aug 23, 2005 3:08 pm

Re: Miro took the PHPNuke code and turned it into Mambo

Post by svladcjelli » Tue Aug 23, 2005 3:33 pm

sorry, my 2 cents... PHP Nuke is a GPLed platform, so if ANY code remains, Miro would still be bound by the GPL, no? Whose impetus is it to prove license compliance?

User avatar
Sebastiaan
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 100
Joined: Fri Aug 19, 2005 12:45 am
Location: The Netherlands
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by Sebastiaan » Tue Aug 23, 2005 3:49 pm

mediamagnate wrote: Hi chaps,

What a faceless bunch we have in here. Interesting thread. News to me. Anyway, I'm not in here to comment, as I don't know but I'd like to encourage all posters to use a photo as their avatar.
Yes sir, done!  8)

User avatar
jema
Joomla! Intern
Joomla! Intern
Posts: 88
Joined: Fri Aug 19, 2005 9:45 am
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by jema » Tue Aug 23, 2005 3:56 pm

I find insiders accusations very shallow. Code and databases have masses of clues running through them as to their origins. The security stuff is meaningless compared to what could be found in earlier versions of the code.

If they want to have themselves taken seriously on this, they should put up or shutup.

alwarren
Joomla! Guru
Joomla! Guru
Posts: 527
Joined: Fri Aug 19, 2005 9:27 am

Re: Miro took the PHPNuke code and turned it into Mambo

Post by alwarren » Tue Aug 23, 2005 6:18 pm

I smell a troll.
Al Warren
This ain't my first rodeo. Red Foreman says it best.
CQDX de WR5AW

User avatar
masterchief
Joomla! Hero
Joomla! Hero
Posts: 2247
Joined: Fri Aug 12, 2005 2:45 am
Location: Brisbane, Australia
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by masterchief » Tue Aug 23, 2005 10:23 pm

News to me.  It's certainly not surprising or necessarily sinister because Open Source projects borrow ideas from each other all the time.  Nuke was the 'in' thing at the time that Miro would have been developing the first generation of Mambo. 

That said even if it was true it's water under the bridge.  Basically after I joined the team took Mambo from an unscalablable application to a not-to-shabby application framework.  By the time we got to 4.5.1 I think we had purged the last of the orginal Miro groundwork except for some nomenclature (components, modules, etc).

But at the end of the day we don't gain much by looking under every stone for a scandal.  Let's just move on.  There's enough solid work to do to restore normality without getting into this stuff.
Andrew Eddie - Tweet @AndrewEddie
<><
http://eddify.me
http://www.kiva.org/team/joomla - Got Joomla for free? Pay it forward and help fight poverty.

User avatar
Tyndal
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 100
Joined: Fri Aug 19, 2005 8:28 am
Location: Saxony - Germany
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by Tyndal » Wed Aug 24, 2005 5:08 pm

insider wrote: The point would be to prove that Miro do not own the full copyright because they started with PHPNuke and forked it.  And what license is PHPNuke?  Obviously PHPNuke is forkable because of PostNuke, but does the PHPNuke licence impinge on Miro's claim of complete copyright of the initial source?
Did i miss something? I thought m1ro is having the copyright on the word "Mambo" - nothing more, nothing less. What would change if Mambo was made out of Nuke or not?
I believe m1ro could now take the Nuke-Code and release it as a fork under the name "Mambo" - that wouldn't change anything.

But listening to an insider is quite interesting, isn't it? I wonder who'll catch you first by tracing your IP... FBI? CIA? NSA? MI5? Or even more evil organisations like NASA, M$ or even m1ro??? Watch ya back! They're coming!  :D
-=This is my signature - nothing more - nothing less=-

User avatar
Radu
Joomla! Apprentice
Joomla! Apprentice
Posts: 29
Joined: Mon Aug 22, 2005 9:04 am
Location: Bucharest-Romania
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by Radu » Thu Aug 25, 2005 7:22 am

alwarren wrote: I smell a troll.
Me too!

In fact allmost all the security holes and other problems could be the same on Nuke and M$mbo because again allmost all of them are the holes from PHP&MySQL. ;)
Supported by http://www.BuyHTTP.com ! The pro webhost for Joomla!

insider
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Tue Aug 23, 2005 1:51 pm

Re: Miro took the PHPNuke code and turned it into Mambo

Post by insider » Thu Aug 25, 2005 2:33 pm

masterchief wrote: not surprising or necessarily sinister because Open Source projects borrow ideas from each other all the time.
Well the early versions of Mambo were more than borrowing, it was PHPNuke with the original copyrights and credits removed, and the code rewritten.

By version 3 of Mambo it was a fair bit different from PHPNuke, and of course today it is miles apart.

The older versions of Mambo could be shown to have many exact lines of code from PHPNuke.

And yes I agree some of the security advisories over the years were generic in nature like PHP safe mode or whatever, but look beyond those generic ones and you will find amazingly similar chunks of code.

The point of the original post was not to troll, but to let you know that Miro are not all that squeaky clean behind the scenes when it comes to identifying the origins of the Mambo source.  You are not supposed to completely delete the credits from GPL'd code, the original authors should have their names kept in the code.

Anyway, all in all I now realise from some of the other comments in this thread that at this point in time it really doesn't matter any more.  Sorry for starting a minor fracas.  Mods feel free to delete this thread.

User avatar
Chris
Joomla! Guru
Joomla! Guru
Posts: 812
Joined: Sat Aug 20, 2005 3:58 am
Location: Australia
Contact:

Re: Miro took the PHPNuke code and turned it into Mambo

Post by Chris » Fri Aug 26, 2005 4:04 am

Ah, phpNuke, PostNuke and all the others.

What are they?

Scripts for a CMS, written using PHP, MySql, phpAdmin, HTML and whatnot.

How many ways can one write functions to access a database.

I am sure that it does not matter how one writes a script, there will always be a similarity in another script.
There is no failure until you give up.

Chris

User avatar
Norgaard
Joomla! Apprentice
Joomla! Apprentice
Posts: 42
Joined: Wed Aug 24, 2005 10:01 pm
Location: Oslo, Norway

Re: Miro took the PHPNuke code and turned it into Mambo

Post by Norgaard » Fri Aug 26, 2005 6:52 pm

insider wrote:
masterchief wrote: not surprising or necessarily sinister because Open Source projects borrow ideas from each other all the time.
Well the early versions of Mambo were more than borrowing, it was PHPNuke with the original copyrights and credits removed, and the code rewritten.

By version 3 of Mambo it was a fair bit different from PHPNuke, and of course today it is miles apart.
....
Well there might be some similarities because when you do programming in PHP there are some styles and good structural traditional rules to follow so that other people can read and understand your code, even more important when the progress is done in a team. Included is the fact that PHP itself also is quite strict compared to HTML where most wrong coding styles is just ignored.
Seen from an intellectual point of view there is not much comparison with Nuke except for the modularity and also there is a magnificant difference. Mambo has a lot more flexibility to offer. Security issues is more like typical PHP and MySQL issues and leads back to the Apache Server. The thing is that Nuke also uses PHP and Apache and Mysql. That is most sure why the same holes has existed.

All the best
Norgaard

User avatar
zoomer
I've been banned!
Posts: 24
Joined: Thu Sep 22, 2005 1:17 am

Re: Miro took the PHPNuke code and turned it into Mambo

Post by zoomer » Thu Sep 22, 2005 3:30 am

this is actually the first i've heard of mambo's origins being nuke-ish.... if that's the case, then i must say that i am impressed with the job they did in getting the nuke out of it... 
i am who i am, but most times i don't even know who that is.

alwarren
Joomla! Guru
Joomla! Guru
Posts: 527
Joined: Fri Aug 19, 2005 9:27 am

Re: Miro took the PHPNuke code and turned it into Mambo

Post by alwarren » Thu Sep 22, 2005 4:12 am

I have some ocean front property in Arizona for sale if anybody wants some.
Al Warren
This ain't my first rodeo. Red Foreman says it best.
CQDX de WR5AW

clenard
Joomla! Intern
Joomla! Intern
Posts: 89
Joined: Mon Aug 22, 2005 7:32 pm
Location: California, USA

Re: Miro took the PHPNuke code and turned it into Mambo

Post by clenard » Wed Nov 02, 2005 5:45 am

alwarren wrote: I have some ocean front property in Arizona for sale if anybody wants some.
:laugh:

Advertisement

Locked

Return to “Reaction to the 'Letter to the community'”