New Plugin tw-receiver saves wiki to PHP

89 views
Skip to first unread message

sendwheel

unread,
Sep 5, 2018, 1:22:02 PM9/5/18
to TiddlyWikiDev
Created a new plugin to handle saving the wiki to a PHP based server.
This can replace legacy store.php usage. The plugin is a bit more streamlined, updated code base, and adds some security enhancements to the process.

It also has a fairly thorough debug test that can be run during setup to help squash environment/server problems


Project page here:

Comments and contributions welcome.



Security wise offers:
 - Challenge Digest Authentication (enhanced security)
 -- This simple mechanism avoids passing the password in plain text. Instead the server is queried for a challenge token and that token is then combined with the password to form a new string that is both unique and temporary.
 - Data Integrity Signing (enhanced security)
 -- This practice creates a unique signature of the wiki text with the secret key. Checking the validity of this signature ensures the integrity of the wiki data and helps prevent tampering in transit.


Please let me know your thoughts.
Message has been deleted

Mat

unread,
Sep 7, 2018, 5:07:27 AM9/7/18
to TiddlyWikiDev
Hm, I must have mistakenly deleted my post. Sorry for that. Here is another attempt:

Some time ago I put up http://setup.tiddlyspot.com/ intended to tive an overview of the various server, saving, etc alternatives. It would be valuable if you could provide info for your creation with regards to these criteira:



If you're on that site and click on the criteria you'll see a brief explanation respectively. Also, if you have other info that doesn't fit in the criteria this can be seen when one clicks of the name of the "setup".

Again, thank you for sharing stuff!

<:-)

sendwheel

unread,
Sep 7, 2018, 9:34:33 AM9/7/18
to TiddlyWikiDev
This is a nice resource. Here's how TW Receiver fits

TW Receiver - a plugin used for saving to a PHP based server.
auto-backup: Yes
browser: Any-standard-br.
data-storage-location: Server-location
dependencies: PHP
encryption: Native-TW-encr.
file-or-folder: File
format: TW-plugin and PHP-file
mobile-first: No
multi-user: No
os: Any-standard-OS
portable: No
versioning: Yes
works-offline: Yes 

The only other categories I'd be interested in seeing on the list is something like "Offers Additional Security Features" or "Enhanced Security" and "Offers Debugging or Setup Wizard".

Thank you for including this plugin in your list. Helpful to get some adoption.

sendwheel

unread,
Sep 29, 2018, 3:51:46 PM9/29/18
to TiddlyWikiDev
Added a new feature to the plugin:
Stale Instance Overwrite Protection
- This ensures the wiki you're working on isn't out of date with the server before saving changes. 
- It avoids a scenario where changes made earlier in another window were not loaded into the current instance of the wiki and would be lost by overwrite.
Reply all
Reply to author
Forward
0 new messages