Creating a Sanitize Specification

Problem

You want to permit different HTML tags in your comment and TrackBack ping displays than what is allowed by default.

Solution

Create your own Sanitize specification.

Discussion

The default Sanitize specification does a good job of protecting your weblogs from malicious markup making its way into your layouts. It is generally recommended that you stick with the defaults unless you have good reason and are confident you understand the format of the sanitize specification as described here. Improper specification could result in a breach...

continue reading ...

11.29.2001

MT-Search Release

Jay Allen has released MT-Search, an add-on module that will enable users to perform end-user searches on MT-powered weblogs.

Some features: • Easy install and setup • Completely template driven • Multiple template support • Multiple blog search • Configurable search • Editing links if logged in

While MT-Search is not an "official" Movable Type release, we wholeheartedly support Jay's work and recommend this add-on to our users.

If you have any MT-Search related questions or comments, please direct them to Jay.

Posted by Mena at 03:36 PM | Permalink

11.29.2001

Donors List Update

The Movable Type donor list...

continue reading ...

A long overdue update to the InlineEditor plugin. For those that don't remember, this plugin allows you to edit entries and comments without leaving your weblog as illustrated by this animation. This plugin includes plenty of new features: • It is much simplier to enable Inline Editing on a blog now, simply click a link and the necessary files will be downloaded from movalog.com and installed • Implementation of Inline Editing both of comments and entries has become far easier. Simply make 3 changes to your templates! • Saving is done through Perl which means its far more secure and works far more efficiently than previous versions (thanks Brad!) • Inline comment editing now defaults...

continue reading ...

07.09.2004

Movable Type 3.01D bug fix release

We've just released Movable Type 3.01D. You can download the new version by logging into your Movable Type Account and using the "download" link for the appropriate license. If you're upgrading from 3.0D, there's no need to run any upgrade script for this release: just upload the files to your server and you should be ready to go!

This release fixes a number of bugs that were present in 3.0D. The lot of it boils down to this: • Comment preview is no longer dropped (see below for instructions) • Default templates now have valid HTML in a few places where they didn't before. • Lots of bugs fixed with export...

continue reading ...

UPDATE: I've released v1.01 due to bugs faced with the paths to the plugin being incorrect on pre-3.16 systems. Download MT-RebuildBlogs_1.01.zip and follow the installation instructions.

I often need to rebuild many blogs on my system because I make system wide changes (for example renaming the comment script) and the way MT currently works, I need to go around, blog-to-blog hitting rebuild.

The previous script did work but it was too much of a security risk, anyone could hit the script multiple times bringing the server crashing down. As a result, I whipped up a quick plugin so that I could quickly rebuild multiple blogs (since it is a proper plugin, it uses MT's authentication so...

continue reading ...

Sending ripples of joy/shock/fear through the web development community, Macromedia announced Contribute this weekend, a $99US content editing system.

The Golden Age?

The smarter web shops have realized that the best approach to site updating comes through enabling the client to literally do it themselves. Comfortable with competition like Vignette, Interwoven and Microsoft's Content Management Server pricing into the hundreds of thousands of dollars, many have elected to create their own Content Management Systems, allowing control over page layout, text formatting, image libraries and more.

Revenue comes from licensing this proprietary technology, and comfortable margins...

continue reading ...

With MT 2.6x there was a really useful script called mt-rebuild-all.cgi that would rebuild all blogs. Unfortunately, this script didn't mix well with the MT 3.x interface.

So, I re-styled the script to fit in better with MT 3.x, the credit goes to the author ( -lc- on the forums). This is only compatible with MT 3.x and does not work in Opera (if you manage to figure this out drop me a line)

There is a major security risk with this script, as it doesn't use MT authentication, anyone can just execute the rebuild script.

Download mt-rebuild-all.zip or mt-rebuild-all.tar.gz

You can dump this file into your mt directory (the same location as mt.cgi) and it will extract the...

continue reading ...

Applying cryptographic functions for fun and profit.

I've got two books sitting on my desk, PHP and MySQL for Dynamic Web Sites by Larry Ullman which is absolutely fantastic for bringing yourself up to speed if you already have rudimentary programming skills in other languages (though it could stand for an update), and the PHP Cookbook, an O'Reilly book which (so far) seems like a good reference for getting beyond the basics.

So, any guess on what I've been working with lately? I've been running this site on a pretty basic PHP foundation for a while now, and by basic I mean aside from some PHP includes, passing a couple of variables from page to page, and...

continue reading ...

So Thursday AM is "The Big Day", the day when we all get to experience Movable Type 3.2, sans beta.

My entries are slow-in-coming for a few days while I launch my brand new design site. The current site is truly ghastly. I'm also currently slogging my way through 12 rounds in the ring with a couple of ornary problems:

Headache#1: .htaccess

First, I'm trying to get my server to process my .html files as .php files so I can use includes for my sidebar. I'm up to my neck in .htaccess, and I've tried adding the simple "AddHandler application/x-httpd-php .html" with no luck. The site keeps returning a happy 500 error any time I try to view a .php file or...

continue reading ...

UPDATE The beta blog is live. Read all the entries and download 3.2, there's plenty to play with!

Jay's just posted an announcement to ProNet with some juicy details. Movable Type 3.2 will be going into a beta sometime tomorrow in the afternoon. Here comes the best part of the announcement, its a public beta, what this means is that the beta blog will be an open environment and anyone will be able to download a copy and use it.

I've managed to get my hands on some early test builds and the new release is just staggering. So much has changed that 32 posts simply don't do it justice. Almost every single hack I've ever posted onto Movalog has found its way into this release in one way or...

continue reading ...

0.09 (2001.10.06)

• Improved look and functionality of default templates; also added default templates for all archive types. • Set more default options when creating a new blog or editing 'First Blog'. • Added instructions for exporting NewsPro entries into the correct format; thanks to Jeremy W for sending along the instructions, which are now in the manual. • Added author attribute to MTEntries tag, so you can grab all of the posts by a particular author (can also be combined with category and lastn). (Jeremy W) • In comment notifications, the...

continue reading ...

2.63 (2003.02.23)

• Fixed faultCodes returned from XML-RPC server to override the default SOAP::Lite value, which wasn't an int (it should be). (Adriaan Tijsseling) • Fixed Javascript error with MT It! caused by Windows security update. Thanks to Phil Ringnalda for the fix. • Creative Commons licenses can now be removed (but should be done so sparingly, as the licenses are designed to be irrevocable). Also, added more warning text before setting up a license. Thanks to Matt Haughey for the help. • Added a GenerateTrackBackRSS option to mt.cfg, which determines whether the individual RSS files for TrackBack items are created....

continue reading ...

Now that Movable Type supports a real database with the MySQL support in version 2.2, it's time for some new tags that can let you select entries, comments and categories using any criteria you'd like. Click the 'more' link for full docs and download link.

Availability

You can download this plugin here: mtsql-1_52.zip

Installation

To install, place the 'sql.pl' file in your Movable Type 'plugins'...

continue reading ...

3.2 (2005.08.25)

Major Features

• New dead-simple AJAX-powered installation/upgrade process (see screencast demo) which replaces mt-load.cgi and all mt-upgrade* scripts. Also eliminated the upgrade distribution since only the config file would be different. • Combined mt.cfg and mt-db-pass.cgi into mt-config.cgi. Shipping as mt-config.cgi-original so as to prevent overwriting when upgrading. • Introduced the new System Overview section which allows administrators to configure and manage aspects of the system across all weblogs • Introduced a plugin-based feedback rating framework which scores comments and TrackBacks upon submission on a scale from -10 (least desirable) to 10 (most desirable)...

continue reading ...

10.29.2004

Firefox on the March

Red Herring's got an interview with Rob Davis, the man behind the campaign to advertise Firefox in the New York Times. It's especially good timing for promoting every geek's favorite browser, since the updated roadmap shows the browser scheduled for release on November 9th.

Posted by Anil in at 03:58 PM | Permalink | Trackback (0)

10.29.2004

Advice to the bloglorn

Metaforix President Lois C. Ambash has some advice for those afraid of business blogging. It's a solid set of guidelines, but we also loved the praise for TypePad:

As a novice blogger, I chose TypePad for my own blog, and I couldn't be happier. The...

continue reading ...

We have just released Movable Type v3.14 which fixes the issue of extreme loads witnessed on servers under the strain of a massive spam attack. Because these attacks are increasing in both frequency and severity, we strongly recommend that all Movable Type users install this update. This is particularly important for any installation that is visible to the public on the web.

This release is a free update for Movable Type v3.x users and has been thoroughly tested both in-house, by our ProNet members and also by many of the web hosting companies initially affected by the problem. If you already purchased Movable Type or downloaded the free version, you’ll be able to download...

continue reading ...

07.27.2005

Dynamic Publishing support for PostgreSQL and SQLite

It's a common refrain for us to talk about Movable Type's wide platform support, but we really are committed to making sure Movable Type's full power is available on the widest variety of platforms. It's an investment that takes a lot of care and attention, but we think it's well worth the effort.

For example, take databases. Movable Type has long supported multiple databases, with MySQL and Berkeley DB being among the most popular. But two mature, popular open-source database technologies that a lot of our users have requested have also part of our platform support for over two years: PostgreSQL and...

continue reading ...

One of Movable Type's most powerful traits is its flexibility to adapt to practically any weblog design or use you can imagine. For the average user, most of this flexibility comes from Movable Type's template engine.

The template engine is crucial to automating the process of publishing and is what makes a publishing system go. When a rebuild is performed, templates are merged with content to create a page that visitors can view in their browsers.

These templates are what control the design and layout of your site and what keeps that design separate from the content. Templates describe where you want...

continue reading ...

Learning Movable Type is now hosted on a new server and now has its own domain name - http://www.learningmovabletype.com. In the process of changing servers and changing URLs, we may have created some broken links or other site hiccups. If you encounter something that just doesn't seem to be working properly, please email me using the contact form.

Humongous thanks to Chad and Arvind for their invaluable assistance with this move.

If you link to Learning Movable Type (and we hope you do) please, please, please change the URL in your link to the new one. That way, Google will find us more easily, and those using Google to find things regarding Movable Type will find us more easily too....

continue reading ...

Yes, it's another anti-spam plugin. I would have called it MT-DSBL 2.0, but the feature set grew beyond the name, so a more generic name was chosen. This is a 2.0 release however… the plugin deserves more seniority than a 1.0 release, since it was built of the carcass that was MT-DSBL 1.1.

The first beta release is now available. Please visit the project page for SpamLookup to download it.

So, what does this thing do? Well, in a nutshell: • Filters inbound comments for all installed weblogs. • Filters inbound TrackBack pings for all installed weblogs. • Checks IP address of sender against DNSBL services....

continue reading ...