Archive for the 'PHP' Category

SPAW Editor PHP Edition Hotfix Release

September 10th, 2008 by ailon

Thanks to our forum user mtxd a potential security issue has been identified in SPAW Editor PHP Edition v.2. We have released a hotfix 2.0.8.1 release which addresses the issue.

Users of previous versions can download a simple 1 file hotfix only release. It is compatible with all 2.0.x versions. We strongly recommend you to apply this hotfix to all your SPAW v.2 installations.

SPAW Editor v.2.0.6 Released

December 20th, 2007 by ailon

We have just released SPAW Editor v.2.0.6. This is the first simultaneous release of both PHP and .NET editions. Though .NET edition still has RC (release candidate) moniker due to unfinished documentation, not ported themes and plugins and other minor side issues. But generally both editions are now totally equivalent in terms of features and user experience.

Globally this release adds CSS class setting in image properties dialog and quick links in hyperlink dialog. It also fixes a long standing bug when invalid HTML was causing content to multiply under IE each time you resubmit it (or switch to HTML). Lots of smaller bugs were fixed too and several language files were added and updated.

You can get the latest release through our download page.

Here are complete changelogs…

PHP Edition:

  1. FEATURE ADDED: Quick links in hyperlink dialog
  2. FEATURE ADDED: CSS class in image properties dialog
  3. BUGFIX: fixed (hopefully) long-standing bug with content doubling under IE in some invalid HTML cases
  4. BUGFIX: calls to getPageHtml were destroying DOM tree
  5. BUGFIX: in some cases <br /> was multiplying empty lines in source code under Firefox
  6. BUGFIX: html mode textareas where set to zero width when switching between tabs
  7. BUGFIX: spaces between tags were completely removed
  8. BUGFIX: inputName variable name was mistyped in editor.class.php
  9. BUGFIX: SpawFm plugin: fixed uploaded image height checking
  10. BUGFIX: SpawFm plugin: fixed failing files listing when current directory has a single quote in it’s nam
  11. CHANGE: SpawFm plugin: files/directories list sorting changed from sort() to  natcasesort()
  12. LANGUAGE FILE UPDATED: German (Martina Greiner)
  13. LANGUAGE FILE UPDATED: Bulgarian (Stoyan Dimitrov)
  14. LANGUAGE FILE UPDATED: French
  15. LANGUAGE FILE UPDATED: Czech (Radek Uhlir)
  16. LANGUAGE FILE UPDATED: Finnish (Teemu Joensuu)
  17. LANGUAGE FILE UPDATED: Arabic (Mohammed Ahmed)
  18. LANGUAGE FILE ADDED: SpawFM: Bulgarian (Stoyan Dimitrov)
  19. LANGUAGE FILE ADDED: SpawFM: Arabic (Mohammed Ahmed)
  20. LANGUAGE FILE ADDED: Spaw FM: Finish (Teemu Joensuu)

.NET Edition:

  1. FEATURE ADDED: CSS class in image properties dialog
  2. FEATURE ADDED: added SpawFMConfiguration class to streamline access to File Manager configuration
  3. FEATURE ADDED: pages (documents/tabs) could be added through designer/markup
  4. BUGFIX: substitute toolbars were not used
  5. BUGFIX: there were errors when maintainScrollPositionOnPostback=”true” was set globally in Web.Config file
  6. BUGFIX: Floating/shared toolbars didn’t work as expected when several SPAWs were inside naming container (like master pages etc.). They still have to be inside single parent to set controlling toolbar through ToolbarFromID property. ToolbarFrom could be assigned from code to overcome this limitation.
  7. BUGFIX: it is now possible to use application root-relative paths (~/) in file manager configuration
  8. BUGFIX: it is now possible to use application root-relative paths (~/) to specify stylesheet
  9. BUGFIX: .NET framework was trying to apply themes to spaw.js.aspx file and failed in websites using application wide themes
  10. FIX: made Text property bindable (can’t find a reason why can’t set bind expression through “Edit Bindings” dialog)
  11. BUGFIX: fixed (hopefully) long-standing bug with content doubling under IE in some invalid HTML cases
  12. BUGFIX: calls to getPageHtml were destroying DOM tree
  13. BUGFIX: in some cases <br /> was multiplying empty lines in source code under Firefox
  14. BUGFIX: html mode textareas where set to zero width when switching between tabs
  15. BUGFIX: spaces between tags were completely removed
  16. BUGFIX: inputName variable name was mistyped in editor.class.php

PHP Vulnerability Possibly Affecting SPAW 1.x Installations

January 19th, 2007 by ailon

In case you are running SPAW 1.x on PHP4 with version number below 4.4.3 or PHP5 version below 5.1.4 and have register_globals turned on, you should upgrade SPAW to version 1.2.4 or version 2.

SPAW Editor PHP Edition version 1.2.4 can be downloaded from here. Package to upgrade version 1.2.3 to 1.2.4 is available here.

In case you are running version earlier than 1.2.3 and don’t want to upgrade, just open the file dialogs/img_library.php and change the line 16:

unset($spaw_imglib_include);

to:

if (isset($spaw_imglib_include)) die(’set this in configuration’);

Solmetra Maps (Hearts) Google AJAX Search API

October 25th, 2006 by qemm

Solmetra Maps is a tiny class I developed while working on just another of my personal sites - trippingshoes.com. Mainly because I wanted to play with Google Maps API. It is a simple Google Maps API wrapper that utilizes third party geocoding webservice to relate real life queries to a physical location on a map and display them. The functionality Google Maps API does not provide.

Despite the fact that I’m geting a decent amount of positive feedback about this class, I don’t consider it to be truly useful utility. At least not until it has address search support.

So in the upcoming months — whenever I will have spare time (from gaming and handling my kids) — I will be researching into recently released Google AJAX Search API. It, among other miraculously cool things, is said to support address search. I’m already getting wet about all the things that can be done combining power of Google and AJAX.

OOP Mumbo-Jumbo

October 20th, 2006 by ailon

For the past couple of years I’ve been developing in C# under .NET (most of the time) which is [almost] classic object-oriented programming. During that period I had to do some PHP4 development from time to time which is very simplistic and a little strange OOP. Now I’m working on SPAW 2 and do some JavaScript OOP which is even crazier. And at this moment I have to switch among the three a couple of times each day. I’m scared my brain is going to explo!%%^*

[Host is unreachable]