[wpkg-users] [Bug 61] Feed back wpkg. xml into database so overview of installed packages can be generated

bugzilla-daemon at bugzilla.wpkg.org bugzilla-daemon at bugzilla.wpkg.org
Mon Nov 19 22:51:02 CET 2007


http://bugzilla.wpkg.org/show_bug.cgi?id=61


Rainer Meier <skybeam at users.sourceforge.net> changed:

           What    |Removed                     |Added

                 CC|                            |skybeam at users.sourceforge.ne
                   |                            |t
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX




--- Comment #7 from Rainer Meier <skybeam at users.sourceforge.net>  2007-11-19 22:50:55 ---
I think this is an add-on which is quite sensitive for errors. While it could
be done much more safe in another way:
http://wpkg.org/index.php/Viewing_software_installed_on_workstations

The wpkg.xml files stored on the server might be parsed by a server process
instead of directly trying to connect to any database instance from WPKG.

Additionally this could probably impose some security constraints as well. The
client needs to know the password to feed back data to the server (no matter if
using a PHP script or direct DB connection). As user machines usually have to
be regarded as compromised I prefer not do have such a feature.

If somebody really wants to feed back wpkg.xml directly by the client then I
could imagine creating a package with "execute=always" attribute which is doing
the parsing and storing.
Or executing a batch file instead of wpkg.js directly which then runs wpkg.js
and the "feed back" script right after.


-- 
Configure bugmail: http://bugzilla.wpkg.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.


wpkg-users mailing list
wpkg-users at lists.wpkg.org
http://lists.wpkg.org/mailman/listinfo/wpkg-users



More information about the wpkg-users mailing list