Component development idea/proposal

Discuss the development and implementation of Joomla! components here.

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Locked
Zenoni
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Tue Jan 09, 2007 4:46 pm

Component development idea/proposal

Post by Zenoni » Sun Aug 19, 2007 6:02 am

Hello,

There is a abandoned component (Mylinks component/module at: http://extensions.joomla.org/component/ ... Itemid,35/ ) wich allow registered users to remember site's "Internal" Favourites/bookmarks. It is working like personal links backet and its functionality is very similar compared to shopping charts. The original "Mylinks" component is outdated and it is working only with "Register Globals Emulation ON" which is security risk and not reccomended by Joomla.

When I searched the component through forum I found that there are many people who are also seeking such the component.

(e.g.)

http://forum.joomla.org/index.php/topic,200834.0.html
http://forum.joomla.org/index.php/topic,200834.0.html
http://forum.joomla.org/index.php/topic,39362.0.html
http://forum.joomla.org/index.php/topic,89445.0.html
http://forum.joomla.org/index.php/topic,202705.0.html (my original post)
http://forum.joomla.org/index.php/topic,86525.0.html

I propose that somebody who is interested would continue the open source development of such a useful component. There are no alternatives of similar components available.

User avatar
infograf768
Joomla! Master
Joomla! Master
Posts: 18829
Joined: Fri Aug 12, 2005 3:47 pm
Location: **Translation Matters**

Re: Component development idea/proposal

Post by infograf768 » Sun Aug 19, 2007 6:11 am

Jean-Marie Simonet / infograf · http://www.info-graf.fr
---------------------------------
ex-Joomla Translation Coordination Team • ex-Joomla! Production Working Group

Zenoni
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Tue Jan 09, 2007 4:46 pm

Re: Component development idea/proposal

Post by Zenoni » Sun Aug 19, 2007 6:57 am

Thanks,

I posted it and hope that someone will continue the development :)
infograf768 wrote: You may want to post also here
http://forum.joomla.org/index.php/topic,199162.0.html

Zenoni
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Tue Jan 09, 2007 4:46 pm

Re: Component development idea/proposal

Post by Zenoni » Sun Aug 26, 2007 8:12 am

Does anybody know if there are any similar commercial component available ?

apropos
Joomla! Apprentice
Joomla! Apprentice
Posts: 48
Joined: Sun Oct 29, 2006 3:14 pm

Re: Component development idea/proposal

Post by apropos » Sun Aug 26, 2007 6:57 pm

I am also extremely interested in this component!

Zenoni
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Tue Jan 09, 2007 4:46 pm

Re: Component development idea/proposal

Post by Zenoni » Sun Oct 14, 2007 6:25 am

I just realized that this abandoned MyLinks component is removed from Joomla's Extensions directory. You can get it form here: http://www.tegdesign.ch/index.php?optio ... &Itemid=63

User avatar
ankoud
Joomla! Apprentice
Joomla! Apprentice
Posts: 41
Joined: Sat Sep 10, 2005 12:15 am

Re: Component development idea/proposal

Post by ankoud » Sat Dec 01, 2007 1:05 pm

Hello,
i needed this one for a project so i searched some solutions to make it working with register_global=0

Here is my solution :
Install it like a normal component, end edit /webroot/components/com_mylinks/mylinks.php
-------------------------
EDIT: WARNING! this is NOT a safe solution, see the message of garyamort in this page.

-------------------------
add just after the _valid_mos or die() line

Code: Select all

while (list($key, $val) = each($_REQUEST)) {$$key=$val;}
source (french) http://www.journaldunet.com/developpeur ... -off.shtml

I have also added

Code: Select all

defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );
in the begining of the english.php language.

It works now with register_global=0 on joomla1.0.13
Last edited by ankoud on Sun Dec 23, 2007 2:29 am, edited 1 time in total.

Zenoni
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Tue Jan 09, 2007 4:46 pm

Re: Component development idea/proposal

Post by Zenoni » Fri Dec 07, 2007 1:31 pm

Hello,

Could you upload and include the download link of the self-modified files, please ?
ankoud wrote: Hello,
i needed this one for a project so i searched some solutions to make it working with register_global=0

Here is my solution :
Install it like a normal component, end edit /webroot/components/com_mylinks/mylinks.php

add just after the _valid_mos or die() line

Code: Select all

while (list($key, $val) = each($_REQUEST)) {$$key=$val;}
source (french) http://www.journaldunet.com/developpeur ... -off.shtml

I have also added

Code: Select all

defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );
in the begining of the english.php language.

It works now with register_global=0 on joomla1.0.13

User avatar
ankoud
Joomla! Apprentice
Joomla! Apprentice
Posts: 41
Joined: Sat Sep 10, 2005 12:15 am

Re: Component development idea/proposal

Post by ankoud » Fri Dec 07, 2007 8:36 pm

Here is a patch i made quickly.
unzip first
upload the folder by ftp in your root folder.

EDIT : Patch removed.

An image is missing in the component frontend.
you can find it in administrator/images/delete_f2.png
Place it also in your root/images/ folder.
Last edited by ankoud on Sun Dec 23, 2007 2:36 am, edited 1 time in total.

rulaz07
Joomla! Fledgling
Joomla! Fledgling
Posts: 3
Joined: Wed Oct 24, 2007 10:16 pm

Re: Component development idea/proposal

Post by rulaz07 » Mon Dec 17, 2007 9:52 pm

after all.
It's WORK!!!.
thanks ankoud and zenoni for saving my day.

Zenoni
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Tue Jan 09, 2007 4:46 pm

Re: Component development idea/proposal

Post by Zenoni » Tue Dec 18, 2007 9:03 am

This is a very great component, I got it also working.

Very simple and efficient component, sad that the component is not under active development or there are no alternatives available.
rulaz07 wrote: after all.
It's WORK!!!.
thanks ankoud and zenoni for saving my day.

Zenoni
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Tue Jan 09, 2007 4:46 pm

Re: Component development idea/proposal

Post by Zenoni » Sat Dec 22, 2007 8:20 am

I made a deeper test of this hack and found the followuing:

In Mozilla and Opera the component is working. There would be problems with IE.
Zenoni wrote: This is a very great component, I got it also working.

Very simple and efficient component, sad that the component is not under active development or there are no alternatives available.
rulaz07 wrote: after all.
It's WORK!!!.
thanks ankoud and zenoni for saving my day.

garyamort
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 209
Joined: Fri Apr 27, 2007 11:22 am
Location: New York, USA

Re: Component development idea/proposal

Post by garyamort » Sat Dec 22, 2007 6:07 pm

ankoud wrote: Hello,
i needed this one for a project so i searched some solutions to make it working with register_global=0

Here is my solution :
Install it like a normal component, end edit /webroot/components/com_mylinks/mylinks.php

add just after the _valid_mos or die() line

Code: Select all

while (list($key, $val) = each($_REQUEST)) {$$key=$val;}

Umm, there is no point to doing this.  This code is the equivalent to turning register_globals on or Joomla's register globals emulation on.

In fact, this is /worse/ than using register_globals.

With Register_Globals on if someone sends the a request with:
myname = 'Zorro'

Than at the start of the program, myname becomes Zorro, than later on if the program sets myname to something, it is over-written with the value the program set.

With this hack, what is going to happen is:
Joomla makes all it's initialization, setting various global variables
Than this hack runs, resetting those variables sent to the server to new values
Than other Joomla code is run.

Zenoni
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Tue Jan 09, 2007 4:46 pm

Re: Component development idea/proposal

Post by Zenoni » Sat Dec 22, 2007 10:27 pm

Do I understand correctly that this is a serious security threat and I should disable the component ASAP ?
garyamort wrote:
ankoud wrote: Hello,
i needed this one for a project so i searched some solutions to make it working with register_global=0

Here is my solution :
Install it like a normal component, end edit /webroot/components/com_mylinks/mylinks.php

add just after the _valid_mos or die() line

Code: Select all

while (list($key, $val) = each($_REQUEST)) {$$key=$val;}

Umm, there is no point to doing this.  This code is the equivalent to turning register_globals on or Joomla's register globals emulation on.

In fact, this is /worse/ than using register_globals.

With Register_Globals on if someone sends the a request with:
myname = 'Zorro'

Than at the start of the program, myname becomes Zorro, than later on if the program sets myname to something, it is over-written with the value the program set.

With this hack, what is going to happen is:
Joomla makes all it's initialization, setting various global variables
Than this hack runs, resetting those variables sent to the server to new values
Than other Joomla code is run.


garyamort
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 209
Joined: Fri Apr 27, 2007 11:22 am
Location: New York, USA

Re: Component development idea/proposal

Post by garyamort » Sat Dec 22, 2007 11:03 pm

Zenoni wrote: Do I understand correctly that this is a serious security threat and I should disable the component ASAP ?
It is no more nor less of a security threat than register globals being on....

It's up to you how bad of a threat that is.

I downloaded the component and module, it won't take more than an hour to fix it to work with register globals off properly.

It will be no better than it is now, ie no new features, but I can at least update it and move it out of the dead application pile, as well as taking another hour or so and see if I can make it work with 1.5 natively.

User avatar
ankoud
Joomla! Apprentice
Joomla! Apprentice
Posts: 41
Joined: Sat Sep 10, 2005 12:15 am

Re: Component development idea/proposal

Post by ankoud » Sun Dec 23, 2007 2:35 am

Hello,
i'm not a programer so i can imagine that the solution i found is not the best one.
Of course if you have enough time it would be great to see a true hack for this component.

I deleted the patch and edited my first message.

Zenoni
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Tue Jan 09, 2007 4:46 pm

Re: Component development idea/proposal

Post by Zenoni » Sun Dec 23, 2007 7:44 am

It's really very good news :D. Please add also support for Joomla 1.0 branch.

I currently removed the component from my website. I had once the experience when my site was hacked and I try to avoid this.
garyamort wrote:
Zenoni wrote: Do I understand correctly that this is a serious security threat and I should disable the component ASAP ?
It is no more nor less of a security threat than register globals being on....

It's up to you how bad of a threat that is.

I downloaded the component and module, it won't take more than an hour to fix it to work with register globals off properly.

It will be no better than it is now, ie no new features, but I can at least update it and move it out of the dead application pile, as well as taking another hour or so and see if I can make it work with 1.5 natively.


ggww
Joomla! Apprentice
Joomla! Apprentice
Posts: 11
Joined: Fri Sep 21, 2007 6:11 pm

Re: Component development idea/proposal

Post by ggww » Sat Jan 12, 2008 10:07 pm

garyamort,

Any chance you looked at fixing the MyLinks extension?  I am still looking for this functionality.  If a nominal payment would speed things along, I would be open to that.  Tried to PM you but your inbox is full.

Thanks,
Bryan


Locked

Return to “Components”