Made to Order Software Corporation - bad

Security Issue in many mail systems

Alexis Wilke — Wed, 06 Jul 2011 20:04:42 +0000

It always amazes me when one finds a security issue that looks like something that should never have happened in the first place.

This one was found earlier this year by Wietse Venema who first discovered the issue in Postfix.

He fixed the Postfix server quickly, however, he went further. He actually tested many other servers sending commands that bypass that very security measure and to his surprised he found out that Postfix wasn't the only system affected by the problem.

For those interested, all the details of the problem can be found on the Postfix website as CVE-2011-411.

Drupal Aggregator

Alexis Wilke — Tue, 05 Apr 2011 17:25:46 +0000

The default Aggregator Drupal module does not work very well. There are several problems with the Drupal Core module, one of which we have not fixed in our version (i.e. the flatness of the item table.)

There is a list of the known issues and our comments and whether we fixed the problem:

Problem	Solution in m2osw's version of Aggregator
Missing XML marker	The <?xml ... ?> marker is missing from some RSS feeds, add it as required
Spurious ...

MO Label Inside for Drupal

Alexis Wilke — Sat, 19 Mar 2011 05:22:50 +0000

$14.90

More and more, modern websites move the label attached to a text field input directly inside the text field. Especially, you see this feature when you are asked to enter an email address or a query string in a search box.

The MO Label Inside module offers this functionality for all of your Drupal text field input elements.

$14.90

jsMath Security Issue

Alexis Wilke — Sun, 18 Jul 2010 08:18:28 +0000

Security Issue

A security issue was found in all versions of jsMath before 2.x-dev for Drupal 6.x of Jul 29, 2010.

You may still securely use older versions of jsMath on private websites and websites were you are the only user (as in, the only one who can log in.)

The Drupal Security Advisory issue is here: http://drupal.org/node/854402

Cell Phones now open to telemarketers!

Alexis Wilke — Fri, 29 Jan 2010 20:57:14 +0000

That's it! The phone commissioners have finally decided that it's OK for telemarketers to call cell phones and try to sell you their products and services.

SWF Any Filter (swf_any_filter)

Alexis Wilke — Sun, 13 Dec 2009 04:32:03 +0000

SWF Structure Info

Tag Flash Version:

SWF Structure:

/* the filter type */
struct swf_filter_type {
	unsigned char	f_type;
};

struct swf_filter_glow {
	swf_filter_type	f_type;		/* 0, 2, 3, 4 or 7 */
	if(f_type == GradientGlow || f_type == GradientBevel) {
		unsigned char		f_count;
	}
	else {
		f_count = 1;
	}
	swf_rgba		f_rgba[f_count];
	if(f_type == Bevel) {
		swf_rgba		f_highlight_rgba[f_count];
	}
	if(f_type == GradientGlow || f_type == GradientBevel) {
		unsigned char		f_position[f_count];
	}
	signed long fixed	f_blur_horizontal;
	signed long fixed	f_blur_vertical;
	if(f_type != Glow) {
		signed long fixed	f_radian_angle;
		signed long fixed	f_distance;
	}
	signed short fixed	f_strength;
	unsigned		f_inner_shadow : 1;
	unsigned		f_knock_out : 1;
	unsigned		f_composite_source : 1;
	if(f_type == Bevel) {
		unsigned		f_on_top : 1;
	}
	else {
		unsigned		f_reserved : 1;
	}
	if(f_type == GradientGlow || f_type == GradientBevel) {
		unsigned		f_passes : 4;
	}
	else {
		unsigned		f_reserved : 4;
	}
};

struct swf_filter_blur {
	swf_filter_type		f_type;	/* 1 */
	unsigned long fixed	f_blur_horizontal;
	unsigned long fixed	f_blur_vertical;
	unsigned		f_passes : 5;
	unsigned		f_reserved : 3;
};

struct swf_filter_convolution {
	swf_filter_type	f_type;		/* 5 */
	unsigned char	f_columns;
	unsigned char	f_rows;
	long float	f_divisor;
	long float	f_bias;
	long float	f_weights[f_columns × f_rows];
	swf_rgba	f_default_color;
	unsigned	f_reserved : 6;
	unsigned	f_clamp : 1;
	unsigned	f_preserve_alpha : 1;
};

struct swf_filter_colormatrix {
	swf_filter_type	f_type;		/* 6 */
	long float	f_matrix[20];
};

struct swf_any_filter {
	swf_filter_type			f_fitler_type;
	swf_filter_blur			f_filter_blur;
	swf_filter_colormatrix		f_filter_colormatrix;
	swf_filter_convolution		f_filter_convolution;
	swf_filter_glow			f_filter_glow;
};

A filter defines how to transform the objects it is attached to. The first byte is the filter type. The data following depend on the type. Because each filter is much different, they are defined in separate structures. You can attach a filter to an object using an ActionScript or the PlaceObject3 tag.

The following describes the different filters available since version 8.

DefineSound

Alexis Wilke — Sun, 29 Nov 2009 23:57:55 +0000

Tag Info

Tag Number:

Tag Type:

Define

Tag Flash Version:

Tag Structure:

struct swf_definesound {
	swf_tag			f_tag;		/* 14 */
	unsigned short		f_sound_id;
	unsigned		f_sound_format : 4;
	unsigned		f_sound_rate : 2;
	unsigned		f_sound_is_16bits : 1;
	unsigned		f_sound_is_stereo : 1;
	unsigned long		f_sound_samples_count;
	unsigned char		f_sound_data[<variable size>];
};

A DefineSound tag declares a set of samples of a sound effect or a music.

The sound samples can be compressed or not, stereo or not and 8 or 16 bits. The different modes are not all available in version 2, although the same tag is used in newer versions with additional capabilities.

The f_sound_is_16bits is always set to 1 (16bits samples) if the samples are compressed (neither Raw nor Uncompressed).

One or two of the taxonomy columns are too wide

Alexis Wilke — Sat, 10 Oct 2009 23:32:27 +0000

It happens that a column in your main display look too wide. Say you use three columns, one may be real large and two are the normal size (1/3^rd of the screen.)

In general this happens because you have a URL in one of your description. (If the URL is in the title, I strongly advice that you move it to the description.) Then the description shows up as wide as that URL. Long URLs will have a real bad effect making the column much wider.

There are two ways to solve the problem:

Create a tiny URL, although tiny URLs may still be too big, it may help
Change the settings of the ...

PHP PayJunction

Alexis Wilke — Thu, 08 Oct 2009 06:01:19 +0000

$29.00

Made to Order Software developed the product named PHP PayJunction that works with the Trinity System, an e-Commerce capable credit card processing software.

We now went further and offer a PayJunction module for Drupal: install, setup, you are ready to go.

$29.00

XML Sitemap Setup

Alexis Wilke — Wed, 09 Sep 2009 00:38:35 +0000

The XML Sitemap module allows you to submit your websites to several search engines:

Google
Yahoo!
Windows Live (it was in Bing for a while, it is part of Windows Live again)
Ask.com
Moreover.com

You simply have to turn on the feature and the submissions will automatically happen. To do so, go to admin/settings/xmlsitemap/engines, open each search engine fieldset and select the checkbox, you are done.

Now you probably will notice other fields for the different search engines. Those are used to authenticate your site. It does not make any difference to