Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-27 Thread Kevin Chadwick
> No, don't use a form;- the site can't be static HTML with scripts to > process the form. I used PHP and lock it down pretty tight with suhosin. Not sure I would do it the same way now or not (use a cgi or something) but I am happy with it and it is another reason why I avoid online CMS systems a

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-27 Thread Craig Skinner
Hi David, On 2016-04-27 Wed 00:54 AM |, David Lou wrote: > > a blog. Honestly, for now I just want a piece of the web that I own, > where I can just post whatever I want. It could just be that I have > something I want to share with friends or colleagues, and I can > direct them to a URL that poi

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-27 Thread Craig Skinner
Hi David, On 2016-04-27 Wed 00:54 AM |, David Lou wrote: > Instead of a comment section, which seems > like a headache, I'll just replace it with an email address so a > reader can reach me if he/she really wanted to. Though I'm not sure > what's the best way to prevent spam (or other ways in whic

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-27 Thread Mihai Popescu
Folks, move the cheap chat bazar to somewhere else, please. I am pretty sure anyone is a blog expert those days. I damn hope you will not bring in the Google Ad Sense program or other crazy thing related. Thank you.

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-27 Thread Kevin Chadwick
> So, given all the feedback I got, I'm gonna adjust my proposed > project a bit. It's just gonna be a web server, and a bunch of static > content pages. You guys proposed many different solutions for these-- > I haven't had the chance yet but I'll need to assess which one I'm > going to use I jus

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Steve Shockley
On 04/26/2016 04:47 AM, Erling Westenvik wrote: $ pkg_info blogsum I use(d) Blogsum, but last I looked it pulled in Apache 1.3. I tried and failed to get it working under the new httpd chroot (too many Perl dependencies). I have a better understanding of httpd now, but I've lost enthusiasm

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Michael McConville
David Lou wrote: > (btw, isn't the "built-in" httpd webserver just Apache? Google seems > to tell me that they're synonyms) Nope, Apache was bundled a long time ago and was replaced with Nginx, which was replaced with httpd in July 2014. httpd is an HTTP server that is developed in the OpenBSD sou

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread David Lou
Hello, Wow, thank you for all responses. I did not expect this many. You guys are really helpful! I had a feeling my original plan was too complicated. I appreciate that you guys are pointing it out. Honest feedback is good feedback. No need to spare any feelings if I'm doing something wrong. :)

Re: Fwd: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Murk Fletcher
> Anyway, if you wnat to add comments to a static site, you can host it yourself instead of using Disqus. Disqus is unfortunately Linux only due to Docker. There's an effort to port Docker to FreeBSD but I haven't tested it yet. Disqus, being Ruby on Rails, could be deployed like a conventional R

Fwd: Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread rain1
On 2016-04-26 14:24, Kamil Cholewiński wrote: On Tue, 26 Apr 2016, ra...@openmailbox.org wrote: If you want to make a dynamic "web application" then consider using ur/web [1]. The programming language itself protects against SQL injection, XSS attacks, CSRF attacks. I hate to bring the bad new

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread lists
Tue, 26 Apr 2016 09:29:30 +0200 Kamil Cholewiński > On Tue, 26 Apr 2016, David Lou wrote: > > Hello, > > > > This is my first post. :) I suppose this is a high level kind of > > question. And can have way too many answers, not that many of them OpenBSD related. > > When I say 'blog', I'm referr

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread lists
Tue, 26 Apr 2016 12:36:32 +0200 Kamil Cholewiński > On Tue, 26 Apr 2016, li...@wrant.com wrote: > > Reality check, structured text presentation beats any sort of generator: > > > > [https://en.wikipedia.org/wiki/Lightweight_markup_language] > > I agree with using an LML, but that's just one piece

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Alex Poslavsky
On 04/26, David Lou wrote: When I say 'blog', I'm referring to a website that contains essentially many pages of content. Each content page has attributes such as title, date, category, tags, and so on. When a user browsers this website, the content pages are served in a visually attractive layou

Re: Fwd: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Thuban
The thing you should ask yourself is "what do I really need?" before installing a huge and useless CMS. +1 for a static site generator. I use swx [1] on my own, its just a markdown converter with some script to add rss feed, sitemap and so. But there are so many. There is also many small blog uti

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Kamil Cholewiński
On Tue, 26 Apr 2016, ra...@openmailbox.org wrote: > If you want to make a dynamic "web application" then consider using > ur/web [1]. The programming language itself protects against SQL > injection, XSS attacks, CSRF attacks. I hate to bring the bad news, but this language / framework has close

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread rain1
On 2016-04-26 10:03, Rubén Llorente wrote: On Tue, 26 Apr 2016 06:15:22 +, David Lou wrote: When I say 'blog', I'm referring to a website that contains essentially many pages of content. Each content page has attributes such as title, date, category, tags, and so on. When a user browsers t

Fwd: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Murk Fletcher
If I'm not mistaken Obama used Jekyll (https://jekyllrb.com/) for his campaign. --Murk -- Forwarded message -- From: Kristaps Dzonsons Date: Tue, Apr 26, 2016 at 2:10 PM Subject: Re: Creating a blog using OpenBSD: technology choices and security considerations To:

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Kristaps Dzonsons
FWIW, I use my own http://kristaps.bsd.lv/sblg all the time. It just knits together HTML (XML style) articles via a Makefile. No python or markdown or any crap. Not sure if it's in ports yet. (I think A. Bentley had one?)

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Pablo Méndez Hernández
Hi David: I'd recommend you using a static content generator like pelikan (which is in ports). The generator is written in python but the content is static. Regards. Pablo On Tue, Apr 26, 2016 at 12:54 PM, Murk Fletcher wrote: > Hi! > > Both Perl and PHP are dying languages. Python is nice, bu

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Murk Fletcher
> This is infantile, and stupid beyond acceptable. [...snip...] Bullshit. Usually when people get this emotional it's because they either a) spent their entire lifes learning one of these obsolete languages and are now getting defensive, b) never actually built anything that people want to use. P

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Martijn van Duren
On 04/26/16 12:54, Murk Fletcher wrote: > Hi! > > Both Perl and PHP are dying languages. Python is nice, but Ruby on Rails is > way nicer. That's just my opinion though, and I build tons of super cool > web and mobile apps. I'm looking forward to your reimplementation of pkg_* and dpb in ruby. Ho

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Murk Fletcher
Hi! Both Perl and PHP are dying languages. Python is nice, but Ruby on Rails is way nicer. That's just my opinion though, and I build tons of super cool web and mobile apps. Ruby on Rails vs PHP - Commercial #3 of 9: https://www.youtube.com/watch?v=p5EIrSM8dCA etc. --Murk On Tue, Apr 26, 2016 a

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Kamil Cholewiński
On Tue, 26 Apr 2016, li...@wrant.com wrote: > Reality check, structured text presentation beats any sort of generator: > > [https://en.wikipedia.org/wiki/Lightweight_markup_language] I agree with using an LML, but that's just one piece of the puzzle. There are numerous converters available: - htt

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Craig Skinner
On 2016-04-26 Tue 05:03 AM |, Jiri B wrote: > or you can choose perl Template Toolkit > This is a superb static page generator David: http://www.template-toolkit.org/ OpenBSD ported & packaged as 'p5-Template' Web experts say "write articles not blogs": http://www.nngroup.com/articles/write-arti

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Rubén Llorente
On Tue, 26 Apr 2016 06:15:22 +, David Lou wrote: > When I say 'blog', I'm referring to a website that contains essentially > many pages of content. Each content page has attributes such as title, > date, category, tags, and so on. When a user browsers this website, the > content pages are serv

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Jiri B
This thread is unreleated to OpenBSD. If you like to have a blog, there is a trillion of template systems like one used by OpenBSD to build web pages (perl, awk, shell) or you can choose perl Template Toolkit, jinja2, whatever... j.

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Erling Westenvik
On Tue, Apr 26, 2016 at 06:15:22AM +, David Lou wrote: > Hello, Hi there, > This is my first post. :) I suppose this is a high level kind of > question. > > When I say 'blog', I'm referring to a website that contains > essentially many pages of content. Each content page has attributes > suc

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Kamil Cholewiński
On Tue, 26 Apr 2016, David Lou wrote: > Hello, > > This is my first post. :) I suppose this is a high level kind of > question. > > When I say 'blog', I'm referring to a website that contains > essentially many pages of content. Each content page has attributes > such as title, date, category, tag

Creating a blog using OpenBSD: technology choices and security considerations

2016-04-25 Thread David Lou
Hello, This is my first post. :) I suppose this is a high level kind of question. When I say 'blog', I'm referring to a website that contains essentially many pages of content. Each content page has attributes such as title, date, category, tags, and so on. When a user browsers this website, the