Re: [Lazarus] cursor image

2010-01-27 Thread ik
http://ik.homelinux.org/


On Tue, Jan 26, 2010 at 18:42, Hans-Peter Diettrich drdiettri...@aol.comwrote:

 ik schrieb:


  Is there a cross platform (or a GTK/QT solution if not) how to get from
 X,Y the mouse cursor handle and from there to translate it to it's original
 icon ?


 What do you want:
 - an screenshot of the cursor,

- or get the icon associated with the current cursor,
 - or set the cursor to another (arrow) shape?


I have the Cursor handle from X, I need to find the associate cursor (depend
on the window) of an external program running X.



 DoDi


Ido





 --
 ___
 Lazarus mailing list
 Lazarus@lists.lazarus.freepascal.org
 http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus

--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] cursor image

2010-01-27 Thread Paul Ishenin

27.01.2010 16:27, ik wrote:

I have the Cursor handle from X, I need to find the associate cursor
(depend on the window) of an external program running X.


I read few times trying to undersatnd but it sounds too cryptic for me.

What is X? Some application or X server?

associate cursor (depend on the window) of an external program - can 
you explain better what is this?


Anyway, icon extraction from the cursor handle is not implemented in LCL 
and is not possible on some systems (as I remember).


Best regards,
Paul Ishenin.


--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] FCL-Web and new WebDesign packages

2010-01-27 Thread Bee Jay
For ExtPascal, it was true for every page I wanted to make, so that  
is far

over 5% :(


Yes, because ExtPascal is just a wrapper for ExtJS classes. What I  
meant in the previous email is the existence of a pascal to JS  
compiler, like Morfik's JST, will do the job. I prefer compiler term  
instead of converter because (I hope) it wouldn't just convert  
pascal code to JS code but also able to do compilation jobs  
(optimizing, etc).



fcl-web exists since a long time. It was never promoted or actively
developed, but that will change now.


Yes, I heard of fcl-web since I was still using Powtils. Since its  
features aren't better nor new, I still kept using Powtils.


I'll try to make a sample application so everyone can see what can  
be done

with very little work.


Please, keep us inform. Thanks.

--

-Bee-

...making buzzes at http://twitter.com/beezing
...writing stories at http://beeography.wordpress.com


--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] Lazarus Forum seems to be hacked!

2010-01-27 Thread Marc Weustink

Matt Shaffer wrote:

For the record, the lazarus site's SMF installation is out of date (by 1
version), I'd recommend patching it up. I love SMF's upgrade process...
so simple.


The infection is removed. We're currently investigating where it came 
from.
The smf forum was  uptodate (1.1.11). Unfortunately when restoring 
things, a previous index.php was used, which reports the older version. 
(which is the only diff of the file)


I fear the ease of the update process made it also possible to write new 
contents.


Marc

--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] FCL-Web and new WebDesign packages

2010-01-27 Thread Adrian Veith

Am 26.01.2010 11:45, schrieb Bee Jay:
 That's about it. It will use Qooxdoo-calls for the server-events. You
 can add more, offcourse... (does Qooxdoo also use some sort of
 'readyscript'?)

 My main reason using ExtPascal and this new fcl-web is I'm too lazy to
 study JS programming and getting my hand dirty of it. Every JS
 framework out there, due the nature of JS, has its own OO concept and
 implementation that also need to be learned. If I really have to study
 them, I think it might be better and faster if I build the application
 directly in JS, instead of using ExtPascal or fcl-web which would
 double my work and slow down my application development. But I don't
 like it. So, obviously, I can't avoid this JS thingy in order to
 develop dynamic web application using pascal. It's a bit ironic, don't
 you think? :D


Take a look at HaXe (haxe.org) - HaXe is a dynamic but type safe
programming language, which is much better suited for Web programming
than ExtPascal (in my opinion). Since HaXe has many targets (JavaScript,
Flash, Neko bytecode, php, and C++) it's almost one language for all.
And even if it is C derived language, it feels very pascalish. If you
use HaXe with FlashDevelop you have code completion. It's fun to code
against an API like Google Maps or JQuery, if you code completion -
without it's a pain in the a.. And with HaXe you are sure, that your
code works like intended, because it's type safe.

I use:
- pascal and HaXe/Neko for the server
- HaXe for the rest

Cheers,

Adrian.

--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] FCL-Web and new WebDesign packages

2010-01-27 Thread Bee Jay

Take a look at HaXe (haxe.org) - HaXe is a dynamic but type safe
programming language, which is much better suited for Web programming
than ExtPascal (in my opinion).


I've heard about it and wasn't interested since it doesn't support  
pascal. :P



Since HaXe has many targets (JavaScript,
Flash, Neko bytecode, php, and C++) it's almost one language for all.


It's useless since it can't work with existing JS library i.e. ExtJS,  
etc. It's just like Morfik in this regard.



I use:
- pascal and HaXe/Neko for the server
- HaXe for the rest


Why should I learn another new language while I could do all those  
things in pascal? Except for using external existing JS library.  
That's why I'm very interested with what Michael, Joost and Mattias  
doing currently.


Thank you, but no thanks. :)

--

-Bee-

...making buzzes at http://twitter.com/beezing
...writing stories at http://beeography.wordpress.com


--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] FCL-Web and new WebDesign packages

2010-01-27 Thread Michael Van Canneyt



On Wed, 27 Jan 2010, Lee Jenkins wrote:


Bee Jay wrote:
I finally decided to bite the bullet, and to dump the idea of extpascal 
and
the likes for the moment. All these conversion tools have the same 
problems:

- Always behind the latest versions of the corresponding JS toolkits.
- They only do a subset of what the JS toolkits support natively.


Yes! It happens to ExtPascal each time ExtJS releases a new version.


- For anything reasonably advanced, you need to write JavaScript anyway.


It's sad but true. While I believe it can be avoided for any common 
purposes, but in some advance optimization it just can't be. Just like the 
way we're using assembler in pascal. But it should be 1-5 percents of all 
cases.



I have the first server-side things ready, namely: the server-side
interface to ExtJS's data API. It's a breeze in FPC, and lightning fast.


It would be better if the server side interface is plain and independent to 
any JS framework API. The interface result then could be translated to 
any client side API, or SOAP, or WST, or whatever is required format by the 
client side framework using some kind of API dictionary or something 
similar.




Interesting.  I'm currently working on a project to do Adobe Flex through 
ObjectPascal and I've been working to generalize as much of the interface for 
widgets as possible so that it could be compatible with some JS framework 
later on as well, like OpenLazlo does in concept.  Though honestly, I'm only 
interested in doing flex right now personally, but nice to have options :-).


Another thing that I've been careful to do and I think is important is 
abstracting the widget-framework away from any particular protocol or 
transport framework so I could easily compile it to stand alone, apache_mod 
or ISAPI using  any of the technologies available to freepascal or Delphi.


Currently there is no ISAPI interface, but this is planned for the near future.

Michael.

--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] Lazarus is invisible?

2010-01-27 Thread Paul Nicholls
- Original Message - 
From: Graeme Geldenhuys graemeg.li...@gmail.com
To: JoshyFun joshy...@gmail.com; Lazarus mailing list 
lazarus@lists.lazarus.freepascal.org

Sent: Wednesday, January 27, 2010 5:39 PM
Subject: Re: [Lazarus] Lazarus is invisible?



JoshyFun wrote:


Well, all-purpose would be almost impossible due the specialization


all-purpose was probably not the best word to use. I was looking for a
relatively simple implementation of FTL and Indexing to see how it works,
and possibly use that simple implementation or create my own 
implementation
that I could embed in applications (as you mentioned about IODA). I did 
not
want to use external tools for everything, maybe only for the generation 
of

Indexing database/text file over the text you want to FTS.


Regards,
 - Graeme -


LOL! I must read too much sci-fi (is this even possible?!?!)...

I saw FTL, and straight away read it as Faster Than Light!! hahaha

cheers,
Paul 



--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] Lazarus Forum seems to be hacked!

2010-01-27 Thread Matt Shaffer
Well, there doesn't have to be shell/ftp for the person to have access to
files ;) As long as they're able to upload their own file manager through an
exploit...

Anyway, I can't think of any other possibilities. But, wouldn't it be
possible to change the permissions of SMF's files when an update is needed,
and then changing the permissions back to read only? Granted, this could be
limiting and is certainly annoying, but it's better than having the forums
hacked to pieces.

On Wed, Jan 27, 2010 at 5:04 PM, Marc Weustink m...@dommelstein.net wrote:

 Matt Shaffer wrote:

  On Wed, Jan 27, 2010 at 10:37 AM, Marc Weustink 
 marc.weust...@cuperus.nlmailto:
 marc.weust...@cuperus.nl wrote:

The infection is removed. We're currently investigating where it
came from.
The smf forum was  uptodate (1.1.11). Unfortunately when restoring
things, a previous index.php was used, which reports the older
version. (which is the only diff of the file)

I fear the ease of the update process made it also possible to write
new contents.

Marc

  I don't see how the ease of the update process would give hackers an
 advantage... after all, you still have to have an admin account to perform
 that activity.


 It requires the smf dir and file to be writable for the user the forum is
 runnng on. Which means that any leak can write to these files.


  Keep in mind:
 1. An outdated index.php could be a possible culprit, if it had any
 security vulnerabilities with it (although I highly doubt this)


 Is up to date


  2. Any  mods installed may have vulnerabilities


 We don't have many mods


  3. If the person updating the forum to 1.1.11 ignored warning messages
 about files not being writable, etc, there may still be an outdated file
 with a vulnerability from 1.1.10


 We were up to date without any warning.


  4. SMF doesn't necessarily have to be the culprit. Exploits in other
 software may have given the intruder file/ftp access, allowing him to change
 any files anywhere.


 there is no public external access to that machine. No shell, no ftp. only
 web.


 Marc

 --
 ___
 Lazarus mailing list
 Lazarus@lists.lazarus.freepascal.org
 http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus

--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] Lazarus Forum seems to be hacked!

2010-01-27 Thread waldo kitty

On 1/27/2010 16:10, Matt Shaffer wrote:

Keep in mind:
1. An outdated index.php could be a possible culprit, if it had any
security vulnerabilities with it (although I highly doubt this)
2. Any  mods installed may have vulnerabilities
3. If the person updating the forum to 1.1.11 ignored warning messages
about files not being writable, etc, there may still be an outdated file
with a vulnerability from 1.1.10
4. SMF doesn't necessarily have to be the culprit. Exploits in other
software may have given the intruder file/ftp access, allowing him to
change any files anywhere.


and just to add to this and expand on my comment that i made earlier about 
frames with extremely high Z axis numbers... those that have been seen, caught 
and analyzed were done with postings in the forums where they happened... none 
of the content was actually messed with... the high Z axis number just ensured 
that that content was over the top of all other and made it appear that 
everything was done...


--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] Lazarus is invisible?

2010-01-27 Thread Graeme Geldenhuys
Paul Nicholls wrote:
 
 I saw FTL, and straight away read it as Faster Than Light!! hahaha

:-)  Sorry, that was a spelling mistake. It should have read FTS (full text
search). Either way, it would be nice to have a FTS implementation that is
FTL. ;-)



Regards,
  - Graeme -

-- 
fpGUI Toolkit - a cross-platform GUI toolkit using Free Pascal
http://opensoft.homeip.net/fpgui/


--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] Lazarus Forum seems to be hacked!

2010-01-27 Thread Florian Klaempfl
Matt Shaffer schrieb:
 Well, there doesn't have to be shell/ftp for the person to have access
 to files ;) 

To ssh, you've to hack a vpn first ;)

--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus


Re: [Lazarus] Lazarus Forum seems to be hacked!

2010-01-27 Thread Matt Shaffer
Right, but what I meant was if someone manages to upload their own PHP file
to the lazarus server, they can easily have uploaded a PHP file manager
which has the capability of deleting files, etc, without ever needing
ssh/ftp (this assumes the attack was done through a vulnerable piece of
software, that had write permissions, etc.)

I don't think this scenario is extremely likely.

On Thu, Jan 28, 2010 at 2:42 AM, Florian Klaempfl flor...@freepascal.orgwrote:

 Matt Shaffer schrieb:
  Well, there doesn't have to be shell/ftp for the person to have access
  to files ;)

 To ssh, you've to hack a vpn first ;)

 --
 ___
 Lazarus mailing list
 Lazarus@lists.lazarus.freepascal.org
 http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus

--
___
Lazarus mailing list
Lazarus@lists.lazarus.freepascal.org
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus