Saiweb

Whilst I refrain from swearing and throwing my arms in the air shouting questions of how many generations of inbreeding does it take to produce this idiot: http://answers.yahoo.com/question/index?qid=20090105032418AAa6Gwd

And here is a screen shot for when the question is removed:

I am now taking bets on how long it takes before “Cletus” here realises “he dun gon bwoke his intarnets …. lawl …”

*facepalm*

Blog updates very well may become few and far between over the next couple of weeks, whilst I literally hammer out some issues with the Joomla database structure breaking mySQL replication *sigh*.

Then there is the varios nagios addons I am writing for monitoring/alerting/gathering perf data for the solution (closed source atm sorry).

You can however follow me on twitter: http://twitter.com/saiweb which I will try to update at least once a day.

The next *big* release planned is 2.0.1.0 of Wordpress-Flowplayer, the release will address Issue #6 meaning an overhaul of the current admin menu.

If you want to request a feature or report a bug with the plugin you can do so in our TRAC system, you do not even have to register anymore.

Cheers

Buzz

Due to the security issues with wordpress pre 2.6.5, I have deleted all registered users.

All the accounts were registered around the same time, and had never been logged in to.

So please re-register if you are a genuine user.

Cheers

Buzz

Well I have managed to plug the security hole, and I am currently working on refining the deployment by using the ability to disable functions in php …

The downside?

Some 5244 approx functions over 23 a4 pages …

update 04/12/2008:

For the impatient you can grab a php script I have written to build the complete comma separated list from subversion here: http://svn.saiweb.co.uk/branches/zen_of_secured_shared_hosting/trunk/disable_functions_string.php

Please note this is a ‘paranoid’ list (some 354 functions!), you will need to for instance remove phpversion, ini_get and http_build_query from the list to get wordpress working.

Customize to your needs

This series is officially on hold until further notice,

I have found a serious security bug in the method I was using the deploy suPHP and lock down the environment.

Until I have found a solution to this, I will not be publishing the method of suPHP’s deployment, the bug itself is a very obscure but serious one, which of course makes it all the harder to fix.

Information on the bug once a fix is deployed.

Cheers

Buzz

I am still in the midst of getting everything made available.

http://svn.saiweb.co.uk

http://trac.saiweb.co.uk

From now all all development will be checked into the saiweb subversion, the existing sourceforge and wordpress repositories will only be used to push releases to.

If you should find a bug and/or have a feature request please register with the trac system and start creating tickets.

Cheers

Buzz

The dedi server is online, as such saiweb.co.uk will be migrating over this weekend
I am currently getting subversion and trac setup taking svnsync copies of adimpleo, wordpress-flowplayer and acies
phpbuzz.co.uk should make it live this weekend also, once I have some content hand ins from people contributing articles.

Well the giant banner at the top of the blog can’t of escaped your attention, and I still need your votes! so please check out the blog entry for IT Super Hero 2008

For those awaiting the ‘Build your own HD youtube’ series completion, I have a dedi server en route, to allow completion of this series.

“Dell Core 330 v2 - Core2Duo E4600 (2×2.4GHz) 1GB RAM 160GB HDD”

CentOS 64bit, from what I have read the cpu uses Intels EMT, which is realy only about 48bits … but neither here or there at the moment, this is coming from the guy’s at UkFast.

So with the new dev server on the way the question is … what do you want to see?

What tutorials / videos would you be of intrest to you?

Post a comment with suggestions, and just so you are aware comments are on moderation due to the couple of thousand spam comments posted every day … so don’t worry if your comment doesn’t appear right away it’s just waiting for me to review it.

Cheers

Buzz

Basically I have actually been shortlisted “woo”

So if you have found anything usefull on this blog please vote for me here

“David Busby”

http://www.firebrandtraining.co.uk/itsuperheroes/

This question has arrived at my feet a few times now.

Sould I participate with http://no-www.org/ and remove support for www. on my sites?

The answer is no you shouldn’t whilst I appreciate and do belive www. has become deprecated, a LOT of end users still use www. So by removing support for this you are excludinga potentialy large user base from reaching your website, can you as a business afford to do that … of course not!

So what _should_ you do?

In my opinion, add support for both.

You will see that http://saiweb.co.uk and http://www.saiweb.co.uk BOTH work, this allows both “classes” of end users to reach my website, and I have applied this principle to all sites I have recently worked on.

Example httpd.conf entry

ServerName saiweb.co.uk
ServerAlias www.saiweb.co.uk

DNS for saiweb.co.uk is an A record to the IP of my webhost and www.saiweb.co.uk is a CNAME of saiweb.co.uk

This method however does not http://no-www.org/ validate as www. subdomain still exists, so don’t expect a “no-www” validated image to appear on my blog anytime soon.

www. may be depreciated, but businesses can not afford to exclude any potential customers, so don’t expect this no-www to become standard anytime either.

“July 2, 2008

Today we passed 38,000 domains validated through no-www. This is a nice round number so it seems worthy of tooting our horn over. ”

As I write this there are 77,343,623 active domains (source: http://www.domaintools.com/internet-statistics/) making the no-www support less than 0.05% of active domains.

I would be intrested to know how many of this 38k domains are actual businesses, and how support no-www has affected thier online sales.

I can tell you however of the 300 or so domains I currently controll, non would no-www validate as they are all configured using the method above.

Thoughts?