DotNetNuke

Re: Anyone publishing new Editor Providers???

Inetcor — Fri, 22 Jul 2005 17:56:46 GMT

This thread has been "hijacked" a bit but here goes ...

Cathal, I would really like some sort of a message to be displayed to the user right after registration. Currently, the user hits the register button and they go to the login screen with no indication of what comes next (even though I have instructions on the registration screen itself). Just a simple language file setting that is displayed right after registration will do the trick.

Re: Anyone publishing new Editor Providers???

DocHoliday — Fri, 22 Jul 2005 15:41:07 GMT

Captcha should be optional for both login and registration.

Cheers,

DocHoliday

Re: Anyone publishing new Editor Providers???

RLyda — Fri, 22 Jul 2005 15:36:43 GMT

cathal wrote:
Hopefully the few points I've raised will give you an idea how carefully we consider introducing new aspects into DotNetNuke, and why whilst it might be infuriating to have to wait a bit longer, the efforts we make to ensure it works best for the community at large, are usually worth the wait.

"Infuriating," certainly not! While sooner will always be nicer, sooner is not always better. And how many hours can one reasonably expect from a volunteer effort? While I have no awards to offer, I concur with Microsoft that there are several good MVP candidates on the Core Team...

Re: Anyone publishing new Editor Providers???

cathal — Fri, 22 Jul 2005 15:26:37 GMT

3.11 definately not
3.2 - we'll have to wait and see, i'm not sure what will be in scope or what our estimate delivery cycle will be.

I've seen a number of the CAPTCHA crackers (theres a good example of the techniques they use @ http://www.mperfect.net/aiCaptcha/), so will be taking that into account. There are alternatives to the classic style captcha, which works by obscured text, but all have implications which will have to be considered e.g. http://www.brains-n-brawn.com/default.aspx?blog=http://www.mperfect.net/blog/browse.aspx?bid=632575523407500000, is an excellent example of a strong captcha, that we can't use as it assumes all users speak a common language. CAPTCHA's by their very nature are also a debatable feature, as mandatory use of them breaks a number of international disability laws i.e. how can a blind person using a Jaws reader see a captcha (note: some sites detect screen readers, and render a sound based captcha, but that does require speech software, which we can't assume).

At the end of the day, any computer generated security mechanism can always be cracked by computers, we're just aiming to raise the bar a bit, as part of our defence in depth policy. Hopefully the few points I've raised will give you an idea how carefully we consider introducing new aspects into DotNetNuke, and why whilst it might be infuriating to have to wait a bit longer, the efforts we make to ensure it works best for the community at large, are usually worth the wait.

Cathal

Re: Anyone publishing new Editor Providers???

RLyda — Fri, 22 Jul 2005 14:53:35 GMT

Any chance CAPTCHA will make DNN 3.1.1 or 3.2? Also, which formats are you looking to include--some have been broken by automated means?!

Re: Anyone publishing new Editor Providers???

cathal — Fri, 22 Jul 2005 13:30:52 GMT

both registration and login verification are use cases, so yes.

Cathal

Re: Anyone publishing new Editor Providers???

tamarabrown — Fri, 22 Jul 2005 13:24:02 GMT

Wow. That is some really nice thinking on making the app user proof. Exactly the features I would be looking for but don't know how to write myself. Novice users have such a hard time understanding image properties.

And thank you Locopon for the nice work.

Re: Anyone publishing new Editor Providers???

DocHoliday — Fri, 22 Jul 2005 10:46:47 GMT

Cathal,

does the use of a Captcha image for the account login module also cover the registration page in order to prevent automated bogus registrations?

Cheers,

DocHoliday

Re: Anyone publishing new Editor Providers???

cathal — Fri, 22 Jul 2005 10:07:10 GMT

communitypc wrote:

Hello Locopon

Thank you very much (again) ... have you considered showing your securelogin module to the guys at Bonosoft - I believe they are managing the core login module as a sub-project now that the "core modules" have been disconnected from the core. Perhaps they can roll-in your functionality to the core login module!

FYI: I'm actually the lead on the account login module. We're still drafting up requirements and use-cases at the moment, but optional CAPTCHA images as part of the login are on the roadmap (I've got a dnn 2.12 captcha module i wrote for a bank converted to dnn 3.x ready to use already).

Cathal

Re: Anyone publishing new Editor Providers???

communitypc — Fri, 22 Jul 2005 04:38:07 GMT

Hello Locopon

Thank you very much (again) ... have you considered showing your securelogin module to the guys at Bonosoft - I believe they are managing the core login module as a sub-project now that the "core modules" have been disconnected from the core. Perhaps they can roll-in your functionality to the core login module!

Re: Anyone publishing new Editor Providers???

locopon — Fri, 22 Jul 2005 03:24:52 GMT

communitypc wrote:
Hello Locopon
I noticed that when I registered on your website, the login control displayed an image of a number that needed to be typed in for verification purposes. This is a very useful feature ... tell me, how did you do that?

You can download it from my site too. It is a free module called MMSecureLogin

Regards

Re: Anyone publishing new Editor Providers???

robaxx — Fri, 22 Jul 2005 02:28:17 GMT

communitypc wrote:
Hello Locopon
I noticed that when I registered on your website, the login control displayed an image of a number that needed to be typed in for verification purposes. This is a very useful feature ... tell me, how did you do that?

look just a teeeeny bit closer ;)
http://dnn.tiendaboliviana.com/web/Default.aspx?tabid=78

Re: Anyone publishing new Editor Providers???

communitypc — Fri, 22 Jul 2005 02:12:20 GMT

Hello Locopon

Thank you very much for creating the FCKEditor provider.

I have a question on a different topic however ...

I noticed that when I registered on your website, the login control displayed an image of a number that needed to be typed in for verification purposes. This is a very useful feature ... tell me, how did you do that?

Thanks again

Re: Anyone publishing new Editor Providers???

robaxx — Fri, 22 Jul 2005 01:24:21 GMT

I don't want to jump the gun if this is something that is already in the works, but the ultimate release from DNN's file manager would be if the end-user with text editing rights would also be able to delete an image from the gallery, not just upload. I seem to recall this had been discussed at one point but I'm not sure what the outcome was.

A final luxury function would be if one could have an image resampled server-side once the user had determined how big they want the image to be. This might be done with an extra button on the Insert Image dialogue that could call a GetThumbnailImage or DrawImage combo... not up with this myself enough to know though.

Regards,
Rob

Re: Anyone publishing new Editor Providers???

locopon — Fri, 22 Jul 2005 00:19:31 GMT

It is great to know that the provider is working. I have received many contributions from different people. I would try to finish the provider as soon as I can.

Thanks all.