Re: [tw] Who's minding the store(.php) ?

[Jeremy Ruston]

It would be good to track down a copy and then fork it to a repo in https://github.com/TiddlyWiki. I’m not a PHP user; is there anyone out there who can volunteer to help with this?

Best wishes

Jeremy

On 8 Jun 2016, at 18:30, 'Mark S.' via TiddlyWiki <tiddl...@googlegroups.com> wrote:

Where do I find store.php?

Tried to go to the site that is recommended on TiddlyWiki.com, but there's nothing there. Under downloads there's zip files that turn out to contain html files, but no store.php. Other links ended with 404 messages.

Thanks,
Mark

--
You received this message because you are subscribed to the Google Groups "TiddlyWiki" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tiddlywiki+...@googlegroups.com.
To post to this group, send email to tiddl...@googlegroups.com.
Visit this group at https://groups.google.com/group/tiddlywiki.
To view this discussion on the web visit https://groups.google.com/d/msgid/tiddlywiki/bc3a03f0-6295-4542-b4c2-8f730dee30d8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Mark S.]

Hi Jeremy,

I deleted my original post.

There was a copy of store.php, but buried  in one of the zip files relating to a home server. But the instructions how to use it are gone (site for rent) and it took hours to figure out how it was supposed to be set up. It didn't want to work with Jed's files at all because, as it turns out, his Federation TW is over the default limits for PHP uploading.  Even now, every time it saves, it gives a host of warnings that have something to do with the date stamp. I'm guessing that most people just use tiddlyspot these days.

Thanks,
Mark

[wimm]

Hi Jeremy

I want to give it a go, but I'm a little concerned about the copyright

it says

      * Copyright (c) BidiX.at.BidiX.info 2005-2007

not CC or BSD or similar, any ideas?

KR

WiM

[Birthe C]

Hi Wimm,

Tobias Beer writes about it here: http://tobibeer.github.io/tb5/#store.php

It was used by many TWclassic users with Tiddlyhome. I think the development of that stopped many years ago.


Birthe

[Mark S.]

Wimm is concerned about copyright infringement. Is BidiX around to clarify?

I wish I had known about Tobias' write-up before yesterday, or, better yet, that it had been included at TiddlyWiki.com.

What's missing from Tobias' text is that users are likely going to need to modify their htaccess file or local php.ini file to increase the maximum upload file size above 2M. The twederation file by itself is 2M. The store.php script will fail without an error code when the upload amount exceeds the PHP limits.

Mark

[Mark S.]

The last post by Bidix (or at least containing text bidix) I can find is from November 2008.

The bidix.info site is held & maintained by an all-Japanese individual/entity and seems to be selling glucosamine when I run a translator.

Mark

On Thursday, June 9, 2016 at 8:51:40 AM UTC-7, Jeremy Ruston wrote:

[Jeremy Ruston]

I’ve been in touch with BidiX more recently than that. I’ve dropped him a line via email drawing his attention to this thread and asking for clarification about the license.

Best wishes

Jeremy

To view this discussion on the web visit https://groups.google.com/d/msgid/tiddlywiki/c9025a35-931b-4a82-b37a-fc7008f2839d%40googlegroups.com.

[Mark S.]

Any response back? It's one of the primary ways to run TW on the net. It would be nice if it had a secure home somewhere.

Thanks,
Mark

[sendwheel]

Wanted to drop a quick line on this old thread for anyone still interested.

I recently wrote a PHP backend and supporting plugin that replaces the functionality of the legacy store.php (but in many ways based on it's functionality)

The plugin is a bit more streamlined, updated code base, and adds some security enhancements to the process.

Security wise offers:

 - Challenge Digest Authentication (enhanced security)

 -- This simple mechanism avoids passing the password in plain text. Instead the server is queried for a challenge token and that token is then combined with the password to form a new string that is both unique and temporary.

 - Data Integrity Signing (enhanced security)

 -- This practice creates a unique signature of the wiki text with the secret key. Checking the validity of this signature ensures the integrity of the wiki data and helps prevent tampering in transit.

The plugin and the backend are GPL license.

Project page here:

https://github.com/sendwheel/tw-receiver