Re: [Lazarus] cursor image
http://ik.homelinux.org/ On Tue, Jan 26, 2010 at 18:42, Hans-Peter Diettrich drdiettri...@aol.comwrote: ik schrieb: Is there a cross platform (or a GTK/QT solution if not) how to get from X,Y the mouse cursor handle and from there to translate it to it's original icon ? What do you want: - an screenshot of the cursor, - or get the icon associated with the current cursor, - or set the cursor to another (arrow) shape? I have the Cursor handle from X, I need to find the associate cursor (depend on the window) of an external program running X. DoDi Ido -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] cursor image
27.01.2010 16:27, ik wrote: I have the Cursor handle from X, I need to find the associate cursor (depend on the window) of an external program running X. I read few times trying to undersatnd but it sounds too cryptic for me. What is X? Some application or X server? associate cursor (depend on the window) of an external program - can you explain better what is this? Anyway, icon extraction from the cursor handle is not implemented in LCL and is not possible on some systems (as I remember). Best regards, Paul Ishenin. -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] FCL-Web and new WebDesign packages
For ExtPascal, it was true for every page I wanted to make, so that is far over 5% :( Yes, because ExtPascal is just a wrapper for ExtJS classes. What I meant in the previous email is the existence of a pascal to JS compiler, like Morfik's JST, will do the job. I prefer compiler term instead of converter because (I hope) it wouldn't just convert pascal code to JS code but also able to do compilation jobs (optimizing, etc). fcl-web exists since a long time. It was never promoted or actively developed, but that will change now. Yes, I heard of fcl-web since I was still using Powtils. Since its features aren't better nor new, I still kept using Powtils. I'll try to make a sample application so everyone can see what can be done with very little work. Please, keep us inform. Thanks. -- -Bee- ...making buzzes at http://twitter.com/beezing ...writing stories at http://beeography.wordpress.com -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] Lazarus Forum seems to be hacked!
Matt Shaffer wrote: For the record, the lazarus site's SMF installation is out of date (by 1 version), I'd recommend patching it up. I love SMF's upgrade process... so simple. The infection is removed. We're currently investigating where it came from. The smf forum was uptodate (1.1.11). Unfortunately when restoring things, a previous index.php was used, which reports the older version. (which is the only diff of the file) I fear the ease of the update process made it also possible to write new contents. Marc -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] FCL-Web and new WebDesign packages
Am 26.01.2010 11:45, schrieb Bee Jay: That's about it. It will use Qooxdoo-calls for the server-events. You can add more, offcourse... (does Qooxdoo also use some sort of 'readyscript'?) My main reason using ExtPascal and this new fcl-web is I'm too lazy to study JS programming and getting my hand dirty of it. Every JS framework out there, due the nature of JS, has its own OO concept and implementation that also need to be learned. If I really have to study them, I think it might be better and faster if I build the application directly in JS, instead of using ExtPascal or fcl-web which would double my work and slow down my application development. But I don't like it. So, obviously, I can't avoid this JS thingy in order to develop dynamic web application using pascal. It's a bit ironic, don't you think? :D Take a look at HaXe (haxe.org) - HaXe is a dynamic but type safe programming language, which is much better suited for Web programming than ExtPascal (in my opinion). Since HaXe has many targets (JavaScript, Flash, Neko bytecode, php, and C++) it's almost one language for all. And even if it is C derived language, it feels very pascalish. If you use HaXe with FlashDevelop you have code completion. It's fun to code against an API like Google Maps or JQuery, if you code completion - without it's a pain in the a.. And with HaXe you are sure, that your code works like intended, because it's type safe. I use: - pascal and HaXe/Neko for the server - HaXe for the rest Cheers, Adrian. -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] FCL-Web and new WebDesign packages
Take a look at HaXe (haxe.org) - HaXe is a dynamic but type safe programming language, which is much better suited for Web programming than ExtPascal (in my opinion). I've heard about it and wasn't interested since it doesn't support pascal. :P Since HaXe has many targets (JavaScript, Flash, Neko bytecode, php, and C++) it's almost one language for all. It's useless since it can't work with existing JS library i.e. ExtJS, etc. It's just like Morfik in this regard. I use: - pascal and HaXe/Neko for the server - HaXe for the rest Why should I learn another new language while I could do all those things in pascal? Except for using external existing JS library. That's why I'm very interested with what Michael, Joost and Mattias doing currently. Thank you, but no thanks. :) -- -Bee- ...making buzzes at http://twitter.com/beezing ...writing stories at http://beeography.wordpress.com -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] FCL-Web and new WebDesign packages
On Wed, 27 Jan 2010, Lee Jenkins wrote: Bee Jay wrote: I finally decided to bite the bullet, and to dump the idea of extpascal and the likes for the moment. All these conversion tools have the same problems: - Always behind the latest versions of the corresponding JS toolkits. - They only do a subset of what the JS toolkits support natively. Yes! It happens to ExtPascal each time ExtJS releases a new version. - For anything reasonably advanced, you need to write JavaScript anyway. It's sad but true. While I believe it can be avoided for any common purposes, but in some advance optimization it just can't be. Just like the way we're using assembler in pascal. But it should be 1-5 percents of all cases. I have the first server-side things ready, namely: the server-side interface to ExtJS's data API. It's a breeze in FPC, and lightning fast. It would be better if the server side interface is plain and independent to any JS framework API. The interface result then could be translated to any client side API, or SOAP, or WST, or whatever is required format by the client side framework using some kind of API dictionary or something similar. Interesting. I'm currently working on a project to do Adobe Flex through ObjectPascal and I've been working to generalize as much of the interface for widgets as possible so that it could be compatible with some JS framework later on as well, like OpenLazlo does in concept. Though honestly, I'm only interested in doing flex right now personally, but nice to have options :-). Another thing that I've been careful to do and I think is important is abstracting the widget-framework away from any particular protocol or transport framework so I could easily compile it to stand alone, apache_mod or ISAPI using any of the technologies available to freepascal or Delphi. Currently there is no ISAPI interface, but this is planned for the near future. Michael. -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] Lazarus is invisible?
- Original Message - From: Graeme Geldenhuys graemeg.li...@gmail.com To: JoshyFun joshy...@gmail.com; Lazarus mailing list lazarus@lists.lazarus.freepascal.org Sent: Wednesday, January 27, 2010 5:39 PM Subject: Re: [Lazarus] Lazarus is invisible? JoshyFun wrote: Well, all-purpose would be almost impossible due the specialization all-purpose was probably not the best word to use. I was looking for a relatively simple implementation of FTL and Indexing to see how it works, and possibly use that simple implementation or create my own implementation that I could embed in applications (as you mentioned about IODA). I did not want to use external tools for everything, maybe only for the generation of Indexing database/text file over the text you want to FTS. Regards, - Graeme - LOL! I must read too much sci-fi (is this even possible?!?!)... I saw FTL, and straight away read it as Faster Than Light!! hahaha cheers, Paul -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] Lazarus Forum seems to be hacked!
Well, there doesn't have to be shell/ftp for the person to have access to files ;) As long as they're able to upload their own file manager through an exploit... Anyway, I can't think of any other possibilities. But, wouldn't it be possible to change the permissions of SMF's files when an update is needed, and then changing the permissions back to read only? Granted, this could be limiting and is certainly annoying, but it's better than having the forums hacked to pieces. On Wed, Jan 27, 2010 at 5:04 PM, Marc Weustink m...@dommelstein.net wrote: Matt Shaffer wrote: On Wed, Jan 27, 2010 at 10:37 AM, Marc Weustink marc.weust...@cuperus.nlmailto: marc.weust...@cuperus.nl wrote: The infection is removed. We're currently investigating where it came from. The smf forum was uptodate (1.1.11). Unfortunately when restoring things, a previous index.php was used, which reports the older version. (which is the only diff of the file) I fear the ease of the update process made it also possible to write new contents. Marc I don't see how the ease of the update process would give hackers an advantage... after all, you still have to have an admin account to perform that activity. It requires the smf dir and file to be writable for the user the forum is runnng on. Which means that any leak can write to these files. Keep in mind: 1. An outdated index.php could be a possible culprit, if it had any security vulnerabilities with it (although I highly doubt this) Is up to date 2. Any mods installed may have vulnerabilities We don't have many mods 3. If the person updating the forum to 1.1.11 ignored warning messages about files not being writable, etc, there may still be an outdated file with a vulnerability from 1.1.10 We were up to date without any warning. 4. SMF doesn't necessarily have to be the culprit. Exploits in other software may have given the intruder file/ftp access, allowing him to change any files anywhere. there is no public external access to that machine. No shell, no ftp. only web. Marc -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] Lazarus Forum seems to be hacked!
On 1/27/2010 16:10, Matt Shaffer wrote: Keep in mind: 1. An outdated index.php could be a possible culprit, if it had any security vulnerabilities with it (although I highly doubt this) 2. Any mods installed may have vulnerabilities 3. If the person updating the forum to 1.1.11 ignored warning messages about files not being writable, etc, there may still be an outdated file with a vulnerability from 1.1.10 4. SMF doesn't necessarily have to be the culprit. Exploits in other software may have given the intruder file/ftp access, allowing him to change any files anywhere. and just to add to this and expand on my comment that i made earlier about frames with extremely high Z axis numbers... those that have been seen, caught and analyzed were done with postings in the forums where they happened... none of the content was actually messed with... the high Z axis number just ensured that that content was over the top of all other and made it appear that everything was done... -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] Lazarus is invisible?
Paul Nicholls wrote: I saw FTL, and straight away read it as Faster Than Light!! hahaha :-) Sorry, that was a spelling mistake. It should have read FTS (full text search). Either way, it would be nice to have a FTS implementation that is FTL. ;-) Regards, - Graeme - -- fpGUI Toolkit - a cross-platform GUI toolkit using Free Pascal http://opensoft.homeip.net/fpgui/ -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] Lazarus Forum seems to be hacked!
Matt Shaffer schrieb: Well, there doesn't have to be shell/ftp for the person to have access to files ;) To ssh, you've to hack a vpn first ;) -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
Re: [Lazarus] Lazarus Forum seems to be hacked!
Right, but what I meant was if someone manages to upload their own PHP file to the lazarus server, they can easily have uploaded a PHP file manager which has the capability of deleting files, etc, without ever needing ssh/ftp (this assumes the attack was done through a vulnerable piece of software, that had write permissions, etc.) I don't think this scenario is extremely likely. On Thu, Jan 28, 2010 at 2:42 AM, Florian Klaempfl flor...@freepascal.orgwrote: Matt Shaffer schrieb: Well, there doesn't have to be shell/ftp for the person to have access to files ;) To ssh, you've to hack a vpn first ;) -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus -- ___ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus