pkgsrc/www/geeklog/Makefile

126 lines
3.8 KiB
Makefile
Raw Normal View History

# $NetBSD: Makefile,v 1.39 2013/04/02 15:46:36 taca Exp $
#
DISTNAME= geeklog-${VER}
Update Geeklog to 1.6.0sr2 (security release 2). o Add some pkgsrc patches to improve Content-Type header output. Geeklog 1.6.0sr2 This release addresses the following security issue: * Unauthorized file uploads were possible through FCKeditor. Uploaded files still had to go through FCKeditor's filter, so it was not possible to upload scripts (and the integrity of the Geeklog site as such was not in danger). There were, however, reports that this was used to host malware. This update prevents use of the upload feature when FCKeditor is disabled and disables it for anonymous users. It also doesn't allow uploading of archive files any more. Furthermore, you need some sort of "edit" permission now to be able to upload files through FCKeditor (this is meant as an interim measure - we will probably introduce a separate "upload" permission in future Geeklog versions). Other fixes: * Fixed installation using InnoDB tables. * Fixed a (non-exploitable) SQL error when auto-updating a story's commentcode field. * Fixed a wrong function name in the Links plugin. Geeklog 1.6.0sr1 This release addresses the following security issues: 1. Gerendi Sandor Attila reported an XSS in the forms to email a user and to email a story to a friend. 2. The "Mail Story to a Friend" function didn't check story permissions, so that it was possible to email a story even if you didn't have the permissions to view it on the site. Other fixes: * Fixed an SQL error when submitting a story and the story submission queue was off. * Fixed calls to a nonexistent function COM_outputMessageAndAbort. Geeklog 1.6.0 Results from the Summer of Code This release incorporates the following projects implemented during the the 2008 Google Summer of Code: * Site migration support and easier plugin installation, by Matt West * Improved search, by Sami Barakat * Comment moderation and editable comments, by Jared Wenerd Other changes * The minimum PHP version required by Geeklog is now PHP 4.3.0. Given that the PHP team ended support for PHP 4 in August 2008, you should be looking into upgrading to PHP 5 anyway. * Includes FCKeditor 2.6.4.1 * Includes a new plugin, XMLSitemap, that automatically generates a XML sitemap file, as supported by all major search engines. Plugin written and provided by mystral-kk. * Several new plugin API functions have been added and existing functions have been extended. * The included documentation has been moved to docs/english to allow for translations. Links to the documentation from within Geeklog will link to existing translations for the current language automatically (or fall back to the English documentation if no suitable translation can be found). * There were a variety of theme changes to support new functionality and fix inconsistencies in the layout. This release also includes a number of patches and improvements made by students applying for participation in the Google Summer of Code 2009. Thank you!
2009-09-15 12:48:46 +02:00
PKGNAME= geeklog-${VER:C/(sr|-)/./g}
CATEGORIES= www
MASTER_SITES= http://www.geeklog.net/filemgmt/upload_dir/
MAINTAINER= taca@NetBSD.org
HOMEPAGE= http://www.geeklog.net/
COMMENT= PHP/MySQL based application for managing dynamic web content
LICENSE= gnu-gpl-v2
DEPENDS+= ${APACHE_PKG_PREFIX}-${PHP_PKG_PREFIX}>=4.3.3:../../www/ap-php
DEPENDS+= ${PHP_PKG_PREFIX}-mysql>=4.3.0:../../databases/php-mysql
USE_TOOLS+= pax
VER= 2.0.0
NO_BUILD= YES
PKG_GROUPS_VARS+= APACHE_GROUP
BUILD_DEFS+= GEEKLOG_SITEBASE
CHECK_PERMS_SKIP= ${GEEKLOG_PUB}/backend ${GEEKLOG_PUB}/images/*
GL_SYS= emailgeeklogstories language plugins readme sql system
GL_TMPL_SUB= backend images/articles images/library images/topics \
images/userphotos
GL_CONF_FILES= db-config.php system/lib-custom.php
GL_CONF_PUB_FILES= public_html/siteconfig.php
CONF_FILES+= ${GL_EG}/geeklog.conf \
${PKG_SYSCONFDIR}/geeklog.conf
.for f in ${GL_CONF_FILES}
CONF_FILES_PERMS+= ${GL_EG}/${f:T} ${GEEKLOG_BASE}/${f} \
2010-02-19 20:58:38 +01:00
${REAL_ROOT_USER} ${APACHE_GROUP} 0660
.endfor
.for f in ${GL_CONF_PUB_FILES}
CONF_FILES_PERMS+= ${GL_EG}/${f:T} ${GEEKLOG_PUB}/${f:T} \
2010-02-19 20:58:38 +01:00
${REAL_ROOT_USER} ${APACHE_GROUP} 0660
.endfor
2010-02-19 20:58:38 +01:00
OWN_DIRS_PERMS+= ${GEEKLOG_BASE}/backups ${REAL_ROOT_USER} ${APACHE_GROUP} 0770 \
${GEEKLOG_BASE}/data ${REAL_ROOT_USER} ${APACHE_GROUP} 0770 \
${GEEKLOG_BASE}/logs ${REAL_ROOT_USER} ${APACHE_GROUP} 0775
Update geeklog to 1.4.1. pkgsrc's change: improving our README file. Geeklog 1.4.1 New Features * Support for Microsoft SQL Server. Starting with this release, Geeklog can now also be installed on Microsoft SQL Server, so it's no longer restricted to just MySQL. The MS SQL support was developed by Randy Kolenko. Thanks, Randy! Please note that any third-party plugins will have to offer support for MS SQL before they can be installed on Microsoft SQL Server. The bundled plugins (Calendar, Links, Polls, Spam-X, Static Pages) have already been updated accordingly. * Calendar plugin. The formerly built-in calendar and events have now been moved into a separate plugin. This complements the move of the polls and links sections into plugins in Geeklog 1.4.0 and makes Geeklog more modular as you can now easily disable or replace functionality that you don't need for your site. * Multi-language support. It is now possible to build truly multi-linugal sites with Geeklog where not only the navigation but also the content of the site changes with the language. * Ships with FCKeditor 2.3.1, which once again includes a file manager for uploading images. * A function for mass-deletion of old or inactive users. The list automatically searches for users that have never logged in, only used the site for a very short time or have not been online since a very long time. The time span can be varied, and found users can be selectively deleted. Security In the light of the security issues discovered in Geeklog 1.4.0 and earlier versions, the Geeklog source code has undergone a code review. We have identified and addressed several minor issues and introduced new measures to enhance security in this release. As a welcome side effect, the code reviews have also uncovered a few bugs and inconsistencies that we also fixed in this release. Spam Protection With this release we are finally removing support for the discontinued MT-Blacklist. In its place, we are now using a system called Spam Link Verification (SLV) run by Russ Jones at www.linksleeve.org. SLV could be described as a community-driven, automatically updated blacklist. See the documentation of the Spam-X plugin for details.
2007-05-20 17:56:44 +02:00
OWN_DIRS+= ${GEEKLOG_PUB}
FILES_SUBST+= APACHE_GROUP=${APACHE_GROUP:Q} \
GEEKLOG_BASE=${GEEKLOG_BASE:Q} \
GL_EG=${GL_EG:Q} \
GEEKLOG_PUB=${GEEKLOG_PUB:Q} \
GL_ADMIN=${GL_ADMIN:Q} \
GL_TMPL_SUB=${GL_TMPL_SUB:Q} \
GL_TMPL=${GL_TMPL:Q} \
Update geeklog to 1.4.1. pkgsrc's change: improving our README file. Geeklog 1.4.1 New Features * Support for Microsoft SQL Server. Starting with this release, Geeklog can now also be installed on Microsoft SQL Server, so it's no longer restricted to just MySQL. The MS SQL support was developed by Randy Kolenko. Thanks, Randy! Please note that any third-party plugins will have to offer support for MS SQL before they can be installed on Microsoft SQL Server. The bundled plugins (Calendar, Links, Polls, Spam-X, Static Pages) have already been updated accordingly. * Calendar plugin. The formerly built-in calendar and events have now been moved into a separate plugin. This complements the move of the polls and links sections into plugins in Geeklog 1.4.0 and makes Geeklog more modular as you can now easily disable or replace functionality that you don't need for your site. * Multi-language support. It is now possible to build truly multi-linugal sites with Geeklog where not only the navigation but also the content of the site changes with the language. * Ships with FCKeditor 2.3.1, which once again includes a file manager for uploading images. * A function for mass-deletion of old or inactive users. The list automatically searches for users that have never logged in, only used the site for a very short time or have not been online since a very long time. The time span can be varied, and found users can be selectively deleted. Security In the light of the security issues discovered in Geeklog 1.4.0 and earlier versions, the Geeklog source code has undergone a code review. We have identified and addressed several minor issues and introduced new measures to enhance security in this release. As a welcome side effect, the code reviews have also uncovered a few bugs and inconsistencies that we also fixed in this release. Spam Protection With this release we are finally removing support for the discontinued MT-Blacklist. In its place, we are now using a system called Spam Link Verification (SLV) run by Russ Jones at www.linksleeve.org. SLV could be described as a community-driven, automatically updated blacklist. See the documentation of the Spam-X plugin for details.
2007-05-20 17:56:44 +02:00
PAX=${PAX:Q}
PLIST_SUBST+= GEEKLOG_BASE=${GEEKLOG_BASE:Q} \
GEEKLOG_PUB=${GEEKLOG_PUB:Q} \
GL_ADMIN=${GL_ADMIN:Q} \
GL_TMPL=${GL_TMPL:Q} \
GL_DOC=${GL_DOC:Q} \
GL_EG=${GL_EG:Q}
.include "../../www/geeklog/Makefile.common"
PKG_SYSCONFSUBDIR?= geeklog
SUBST_CLASSES+= paths
SUBST_FILES.paths+= ${WRKDIR}/README
SUBST_FILES.paths+= ${WRKSRC}/emailgeeklogstories
SUBST_FILES.paths+= ${WRKSRC}/public_html/admin/install/index.php
SUBST_FILES.paths+= ${WRKDIR}/geeklog.conf
SUBST_SED.paths+= -e 's,@GEEKLOG_BASE@,${GEEKLOG_BASE:Q},g'
SUBST_SED.paths+= -e 's,@GEEKLOG_PUB@,${GEEKLOG_PUB:Q},g'
SUBST_SED.paths+= -e 's,@GEEKLOG_SITESUBDIR@,${GEEKLOG_SITESUBDIR:Q},g'
SUBST_SED.paths+= -e 's,@PKG_SYSCONFDIR@,${PKG_SYSCONFDIR:Q},g'
SUBST_SED.paths+= -e 's,@PREFIX@,${PREFIX:Q},g'
.if empty(GEEKLOG_SITEBASE)
SUBST_SED.conf+= -e '/^Alias/s,^,\#,'
.endif
SUBST_STAGE.paths= post-configure
INSTALLATION_DIRS= ${GEEKLOG_BASE} ${GEEKLOG_PUB} ${GL_TMPL}/images \
share/examples/geeklog ${GL_DOC} ${GL_EG}
post-extract:
${CP} ${FILESDIR}/README ${FILESDIR}/geeklog.conf ${WRKDIR}
pre-install:
${FIND} ${WRKSRC} -type f -name "*.orig" -exec ${RM} -f {} \;
cd ${WRKSRC}/public_html; \
${FIND} ${GL_TMPL_SUB} -type f -exec ${CHMOD} -x {} \;
Update geeklog to 1.4.1. pkgsrc's change: improving our README file. Geeklog 1.4.1 New Features * Support for Microsoft SQL Server. Starting with this release, Geeklog can now also be installed on Microsoft SQL Server, so it's no longer restricted to just MySQL. The MS SQL support was developed by Randy Kolenko. Thanks, Randy! Please note that any third-party plugins will have to offer support for MS SQL before they can be installed on Microsoft SQL Server. The bundled plugins (Calendar, Links, Polls, Spam-X, Static Pages) have already been updated accordingly. * Calendar plugin. The formerly built-in calendar and events have now been moved into a separate plugin. This complements the move of the polls and links sections into plugins in Geeklog 1.4.0 and makes Geeklog more modular as you can now easily disable or replace functionality that you don't need for your site. * Multi-language support. It is now possible to build truly multi-linugal sites with Geeklog where not only the navigation but also the content of the site changes with the language. * Ships with FCKeditor 2.3.1, which once again includes a file manager for uploading images. * A function for mass-deletion of old or inactive users. The list automatically searches for users that have never logged in, only used the site for a very short time or have not been online since a very long time. The time span can be varied, and found users can be selectively deleted. Security In the light of the security issues discovered in Geeklog 1.4.0 and earlier versions, the Geeklog source code has undergone a code review. We have identified and addressed several minor issues and introduced new measures to enhance security in this release. As a welcome side effect, the code reviews have also uncovered a few bugs and inconsistencies that we also fixed in this release. Spam Protection With this release we are finally removing support for the discontinued MT-Blacklist. In its place, we are now using a system called Spam Link Verification (SLV) run by Russ Jones at www.linksleeve.org. SLV could be described as a community-driven, automatically updated blacklist. See the documentation of the Spam-X plugin for details.
2007-05-20 17:56:44 +02:00
${CHMOD} 0664 ${WRKSRC}/public_html/backend/geeklog.rss
cd ${WRKSRC}/system; \
${FIND} pear -type f -exec ${CHMOD} 0644 {} \;
do-install:
${INSTALL_DATA} ${WRKDIR}/README ${DESTDIR}${PREFIX}/${GL_DOC}
.for f in ${GL_CONF_FILES} ${GL_CONF_PUB_FILES}
${INSTALL_DATA} ${WRKSRC}/${f} ${DESTDIR}${PREFIX}/${GL_EG}
${RM} ${WRKSRC}/${f}
.endfor
${INSTALL_DATA} ${WRKDIR}/geeklog.conf ${DESTDIR}${PREFIX}/${GL_EG}
.for f in ${GL_SYS}
cd ${WRKSRC}; pax -rw ${f} ${DESTDIR}${PREFIX}/${GEEKLOG_BASE}
Update geeklog to 1.4.1. pkgsrc's change: improving our README file. Geeklog 1.4.1 New Features * Support for Microsoft SQL Server. Starting with this release, Geeklog can now also be installed on Microsoft SQL Server, so it's no longer restricted to just MySQL. The MS SQL support was developed by Randy Kolenko. Thanks, Randy! Please note that any third-party plugins will have to offer support for MS SQL before they can be installed on Microsoft SQL Server. The bundled plugins (Calendar, Links, Polls, Spam-X, Static Pages) have already been updated accordingly. * Calendar plugin. The formerly built-in calendar and events have now been moved into a separate plugin. This complements the move of the polls and links sections into plugins in Geeklog 1.4.0 and makes Geeklog more modular as you can now easily disable or replace functionality that you don't need for your site. * Multi-language support. It is now possible to build truly multi-linugal sites with Geeklog where not only the navigation but also the content of the site changes with the language. * Ships with FCKeditor 2.3.1, which once again includes a file manager for uploading images. * A function for mass-deletion of old or inactive users. The list automatically searches for users that have never logged in, only used the site for a very short time or have not been online since a very long time. The time span can be varied, and found users can be selectively deleted. Security In the light of the security issues discovered in Geeklog 1.4.0 and earlier versions, the Geeklog source code has undergone a code review. We have identified and addressed several minor issues and introduced new measures to enhance security in this release. As a welcome side effect, the code reviews have also uncovered a few bugs and inconsistencies that we also fixed in this release. Spam Protection With this release we are finally removing support for the discontinued MT-Blacklist. In its place, we are now using a system called Spam Link Verification (SLV) run by Russ Jones at www.linksleeve.org. SLV could be described as a community-driven, automatically updated blacklist. See the documentation of the Spam-X plugin for details.
2007-05-20 17:56:44 +02:00
.endfor
cd ${WRKSRC}/public_html; \
pax -rw admin ${DESTDIR}${PREFIX}/${GEEKLOG_BASE}; \
Update geeklog to 1.4.1. pkgsrc's change: improving our README file. Geeklog 1.4.1 New Features * Support for Microsoft SQL Server. Starting with this release, Geeklog can now also be installed on Microsoft SQL Server, so it's no longer restricted to just MySQL. The MS SQL support was developed by Randy Kolenko. Thanks, Randy! Please note that any third-party plugins will have to offer support for MS SQL before they can be installed on Microsoft SQL Server. The bundled plugins (Calendar, Links, Polls, Spam-X, Static Pages) have already been updated accordingly. * Calendar plugin. The formerly built-in calendar and events have now been moved into a separate plugin. This complements the move of the polls and links sections into plugins in Geeklog 1.4.0 and makes Geeklog more modular as you can now easily disable or replace functionality that you don't need for your site. * Multi-language support. It is now possible to build truly multi-linugal sites with Geeklog where not only the navigation but also the content of the site changes with the language. * Ships with FCKeditor 2.3.1, which once again includes a file manager for uploading images. * A function for mass-deletion of old or inactive users. The list automatically searches for users that have never logged in, only used the site for a very short time or have not been online since a very long time. The time span can be varied, and found users can be selectively deleted. Security In the light of the security issues discovered in Geeklog 1.4.0 and earlier versions, the Geeklog source code has undergone a code review. We have identified and addressed several minor issues and introduced new measures to enhance security in this release. As a welcome side effect, the code reviews have also uncovered a few bugs and inconsistencies that we also fixed in this release. Spam Protection With this release we are finally removing support for the discontinued MT-Blacklist. In its place, we are now using a system called Spam Link Verification (SLV) run by Russ Jones at www.linksleeve.org. SLV could be described as a community-driven, automatically updated blacklist. See the documentation of the Spam-X plugin for details.
2007-05-20 17:56:44 +02:00
${RM} -rf admin
.for d in ${GL_TMPL_SUB}
cd ${WRKSRC}/public_html; \
if [ -d ${d} ]; then \
pax -rw ${d} ${DESTDIR}${PREFIX}/${GL_TMPL}; \
${RM} -rf ${d}; \
fi
.endfor
cd ${WRKSRC}/public_html; pax -rw . ${DESTDIR}${PREFIX}/${GEEKLOG_PUB}
.include "../../mk/apache.mk"
.include "../../lang/php/phpversion.mk"
.include "../../mk/bsd.pkg.mk"