I agree that uploading files by default can be dangerous, but that's really one of the valuable things about centralizing the code that does it. The code that does the uploading could be designed so that all files go into non-web accessible locations, and could also include any other security measures needed. If it were designed to be secure and all files were uploaded using it, there'd be no chance of someone accidentally forgetting to do it properly.
On the actionpack front, why not just suggest that people upload actionpacks to RIAForge, and make sure that they have MG:ActionPack (or some such) in the name. Then the MG team can advertise that fact and people will be able to find them. On Tue, Oct 20, 2009 at 5:04 PM, denstar <[email protected]> wrote: > > On Tue, Oct 20, 2009 at 2:35 PM, Chris Blackwell wrote: > > I'm not aware of an actionpack repo, and i'm not sure if any of the > exisint > > actionpacks have been tested against Gesture. But seems like there > probably > > should be one! > > Long ago, in a far away land, I helped someone hack up the RIAForge > code for use as a framework actionpack type deal. > > I cannot even remember for whom I was providing help, nor the URL, > currently. > > Anyways, I've got a metric crapload of actionpacks that are being used > with Gesture. Just none of the ones that came with it. > > Dunno if anyone would really find them that interesting, they're > nothing special. The ones that are actually useful in the lot are > things like G11n, exception handling, and maybe the SVN or jExcelAPI > ones. > > Eh. > > As for convention for file uploads... well, it's fine, but I'll be > honest, and say that anything that does uploading out o' the box > scares the bigeeziz outta me. At least if it's enabled by default. > > You have no idea how many times I said on the FCKEditor forums we > shouldn't be shipping the connectors all in there like that... I > mean, it was like, at least twice. :)p > > -- > Great persecutors are recruited among martyrs whose heads haven't been cut > off. > Emile M. Cioran > > > > -- Bob Silverberg www.silverwareconsulting.com --~--~---------~--~----~------------~-------~--~----~ Model-Glue Sites: Home Page: http://www.model-glue.com Documentation: http://docs.model-glue.com Bug Tracker: http://bugs.model-glue.com Blog: http://www.model-glue.com/blog You received this message because you are subscribed to the Google Groups "model-glue" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/model-glue?hl=en -~----------~----~----~----~------~----~------~--~---
