Entries Tagged as “Mango Blog”
Facebook LikeMe Plugin
The likeMe plugin adds the facebook Like or Recommended buttons to your posts footer. The Like button lets a user share your content with friends on Facebook. When the user clicks the Like button on your site, a story appears in the user's friends' News Feed with a link back to your website.
Okay, So I am must admit I am not a big Facebook fan. In fact, I deleted my facebook account and haven't looked back. But that does not mean other people don't use. In fact the only reason I wrote this plugin was because my co-worker who's in charge of or companies marketing asked me too.
I was not the first to release a Facebook like button plugin for Mango Blog. Pyae Phyoe Shein actually announced his plugin about the same time I finished mine up. No I didn't rip him off, it was just a coincidence.
The LikeMe plugin follows the same configuration convention as the Facebook developers like button configuration wizard. So if your used to the wizard then this plugin functions very similarly.
Download and Installation
- Plugin version:
- 1.0
- Last Updated:
- September 16, 2010
- Requires:
- Mango Blog 1.3+
- Auto-install URL:
- http://www.visual28.com/assets/content/mango/LikeMe_1.0.zip
→ Respond NowTags: Mango Blog · Plugins
Mango Blog FormRemember Plugin Fixed
Something that has bothered me for a long time is the display code of the FormRemember plugin. The issue for me is that the display code has used extraneous break tags, both before and after the plugin, causing it to have odd spacing issues with other form elements. It also wraps the label around the input instead of attaching it with a for="comment_rememberme".
For years now, I have manually fixed the plugin install after install. I guess I was hoping that this would get fixed in one of the releases since 2008. But after several updates and no fix I guess it's time for me to step up to the plate and just offer up a plugin update of my own.
So finally, here is the unofficial plugin update that addresses these issues until such time that this can be intigrated into the mangoblog core.
Plugin Info & Download
- Plugin version:
- 1.2
- Last Updated:
- July 12, 2010
- Requires:
- Mango Blog 0.2+
- Auto-install URL:
- http://www.visual28.com/assets/content/mango/formRememberer_1.2.zip
→ Respond NowTags: Mango Blog · Plugins
Mango Blog Setup Folder Security
Over the last few days I have found an alarming number of 404 errors in my coldfusion server logs. They all had one thing in common. A missing setup.cfm page. Naturally we don't want 404 error's right? In this case it's a good thing.
It is my belief that someone, or some group of people are testing the security of Mango Blog by looking for the setup directory that comes with Mango blog when you first download and setup your blog. The installation instructions state that once your blog is setup correctly, you should remove the setup folder from the admin, to prevent no-gooders from doing anything malicious to your site.
I went to the mangoblog.org site and took a look at a long list of people in the "Who uses Mango" section of the site and most everyone still had the setup directory intact. I was actually really surprised to see the carelessness of so many people. Especially by a few people that SHOULD know better than that.
What's worse is that I was able to add a new table to one unlucky site by guessing the username, password, and datasource! And it wasn't very hard! How lazy are we people!? Do we have to get hacked before we wise up? This is just plain ridiculous! I am not even a security person and was able to compromise one system in just a few minutes. Imagine what a security expert could do with all their tools and knowledge
Mango Blog owners. Remember you need to delete the setup folder after installation has been verified. It's obvious to me that people are checking for the existence of the setup.cfm so we best be on our toes.
My Solution
Here is what I am proposing as a solution. I am interested in your feedback.
The idea I had was to have the admin overview page check for the existence of the folder and if it finds the setup folder intact it could warn you that leaving the setup folder on the server is a security risk. It should then offer the admin user a chance to delete the folder. I think this is a better method as it provides the blog administrator a good chance to verify that things are working before deleting the folder. It also gives continual reminder to those that forget to delete the folder on their own.
Here is a sample design that I had. Maybe there is a better way to do things. I just thought I would get the ball rolling and see what can be done.
A plugin could easily be built for this, but I honestly feel it should be apart of the core install and not a plugin provided by an end user. That would pretty much defeat the purpose really.
→ Respond NowTags: Mango Blog · Opinions & Rants
Konami Code Plugin
Just in time for April Fools Day, I am releasing my next totally useless Mango Blog plugin for adding easter eggs to your Mango Blog. It uses the SnapTortoise Konami-JS script to handle the pattern matching, url loading and alert notifications.
I couldn't just stop there, so I added easy setups for Rick Rolling, and some of the more popular Konami Code services like Cornify, Ninjafy, Sharkify, and Nippleit. I have plans to add more services and features in the near future. If you have a favorite service not listed here please leave a comment below with a link to the service.
Whats Currently Supported
- Easy setups for above listed services
- Custom url forwarding
- Javascript Alerts
- iPhone gesture support
- Custom key code pattern matching. Your not limited to just the Konami Code!
Go ahead and try it! up, up, down, down, left, right, left, right, b, a
Download the Konami Code Plugin
- Plugin version:
- 0.1
- Last Updated:
- 2010-02-19
- Requires:
- Mango Blog 1.3+
- Auto-install URL:
- http://konamicode.riaforge.org/index.cfm?event=action.download
→ Respond NowTags: Freebies · Mango Blog · Plugins
Project Honey Pot
I think it's safe to say that we all hate spam. Whether it's email spam or comment spam, something needs to be done about it. That's where Project Honey Pot comes in. By installing a small script on your website you can help, and be apart of a massive movement to catch and eradicate spammers and email harvesters.
Project Honey Pot is a sophisticated system designed to trap spam bots and report them to various blacklisting services like SpamHaus, OpenRBL, SpamCop, Google and several others.
There are several options for webmeisters to contribute to Project Honey Pot. You can install a honey pot on your site someplace. This is a single file that can be placed anywhere on your site, and called anything you want it to be. Then you can link to it with hidden links embedded into your website that your visitors do not see but spam bots do. I built a Mango Blog plugin to help with this part. More on that below. The second option is to install a quick link to another site that does have a honeypot installed. and lastly you can help out by donating an MX record to the project. This gives the project a trackable email address, to help identify spammers. If your interested in donating an MX record, or obtaining a quick link please go to the Project Honey Pot site and read more about it there.
In the last year, I have personally helped catch 25+ harvesters from just one honey pot. Imaging how many more can be caught if everyone that used Mango Blog had a honey pot! That's exactly why I created the Honey Pot plugin for Mango Blog. It makes it that much easier to run a honey pot on your site. You need only to snag a honey pot script from the Project Honey Pot site, upload it to your server and activate it. Then using the plugin provided here, specify the location of your honey pot and that's it. The plugin will randomly install the hidden honey pot links on all of your sites pages. Viola!
If your using the CFFormProtect plugin (and I hope you are) By creating your account with Project Honey Pot, you now have the ability to get an API key that you can use with the CFFormProtect plugin. Having your own API key adds comment spam protection and helps to build a list of known spammers. As you can see this is a great relationship to have both plugins working together to fight spam. And that's good for everyone!
Download the Project Honey Pot Plugin
- Plugin version:
- 0.1
- Last Updated:
- 2009-11-10
- Requires:
- Mango Blog 1.3+
- Auto-install URL:
- http://projecthoneypot.riaforge.org/index.cfm?event=action.download
→ Respond NowTags: Freebies · Mango Blog · Plugins
