Problem: There's a security hole in gm-2-b2.php and blogger-2-b2.php in the 0.6.1 release.

Solution: Delete these files once your blog conversion is done, or edit them.

A fixed release will come shortly, and the CVS will be updated.

--

Ontopic:

• Matt Mullenweg and Mike Little are leading the new WordPress branch of b2, that is going to become the new official branch once they get a release out. If you want to help with WordPress, don't hesitate to contact either of them!
• This website will get a minimalist redesign soon. A lot of sections are going away, including the "powered by b2" list. That list hasn't been updated for months on end, and with only 592 weblogs it makes it look like b2 isn't used by as many weblogs as it really is. Judging from the emails I get and the forums' activity, I estimate there are around 2000 b2 weblogs. This is a great accomplishment for me, and for everyone who supported me and the project.
• The "recently updated b2" lists will disappear from the main page and wait for a maintainer to get back on the front. If you feel that you're up to the task of processing emails to add websites to this list, please email me and I'll give you the keys to the list's admin section if I feel that you are serious enough.

Now for the offtopic banter:

• I am still jobless. My evil plans to conquer the world, that kept me busy for the past months, have been put to an temporary halt. This is the cause of much troubles in my personal life.
• I am slowly but steadily redesigning my own website. I'm not opening the doors until I have more than just a weblog to show for it. By the way, the redesign will be based on standards as usual, but will also look different on everyone's computer.
• With some of the money that I made by taking over the world (a small piece of it, for starters), I bought a digital camera, and proceded to photograph various things. I hope to get better at it than I am at PHP.
• The current state of RSS is scaring me.
• Elvis says hi!

Now for some shameless promotion of my beginner photographs:
michelv.deviantart.com (gallery)

While all browsers support Last-Modified and ETag headers properly, MSIE seems not, it wouldn't let you refresh a page generated by b2 0.6.1. And that sucks, I know.
Here is the fix: clickie!
(This fix will be included in the releases asap.)

As some of you may have noticed, the calendar may show October 27th twice on some timezones.
This bug is there because of daylight savings, but there's a fix for it!
(Needless to say, that fix will be in the next version.)

There seems to be a little problem with the b2 update list, I'm looking into it. It should be fixed soon.

EDIT: it's fixed !

Oops, there was an error in b2install.php last time I uploaded it, that would make b2 not install at all and show a blank page. The releases have been updated to remove that bug.

Turns out all you have to do is find line #19 in b2install.php, and replace:
if (mysql_select_db("$base", $connexion)) {
with
if (!mysql_select_db("$base", $connexion)) {

Some bugs had managed to get in this release, I fixed them and re-packaged the release.
You may want to re-download and update these files: b2archives.php, b2comments.php, b2calendar.php, b2login.php, b2functions.php, b2template.functions.php, b2vars.php

Sorry for the outage in recently updated b2's this weekend. It was because of a small typo that I didn't notice before I went away for the weekend. It's now back and working.

I think there is some error with the archives. The January 2002 archives are not showing. That's all.

The form to submit comments from the admin area is not up-to-date with the one that's on the templates here. Please do not post comments from the admin area, as it would show you errors, and post your comment at the time of the server, which is unlikely to be what you want. Sorry for the inconvenience.

For those of you who are going to accuse me of persuading Michel to change things the way I like it, don't. Because simply, I don't use b2 on a daily basis any longer.

The feature in question is the prompt that is shown when posting. It can't be turned off, and it doesn't serve as much as a purpose as a Preview button (as suggested by many a user in the forums). Which means that I can type my post, but whether I am typing something that I do not want to remains in question-- which is why a Preview button (which is not made compulsory by default) would serve to be a better alternative.

I understand the kind of flaming that I will receive -- which is why I will distance myself from any ideas toward the development of Cafelog (or any other bugs that I may think that applies) as far as possible in the future--I am certainly not a selfish, unscrupulous maniac.

The AIM code that is in the source is

<a href="aim:me<br"<me<br</a< />

I login today and again I clicked on the profile. Everything was fine, just that the number of posts shown to me was 0 for Michel, ian and me or anyone else who had post at least 1 message before.

The latest b2 public release (installed on my dir in tidakada.com) has a bug in the comments, not the HTML tags issue, actually.

For instance the e-mail and website name fields require something to be put in, which shouldn't be (not required in GM comments anyway), especially when you're a long-time visitor and aren't too keen on entering your website and e-mail addresses for free advertisement and shameless hits

b2 is great, power to b2! [this blog powered by b2]

How come when I login into my account and click on the userid that made the posts, it open a small window with error messages inside? The error message looks like this -- Warning: Supplied argument is not a valid MySQL result resource in b2functions.php on line 42

I know I do three-at-a-time posts, and I'm like that.



However I do have a serious problem with the post navigator, especially when I'm editing a post. When I've got one post that I'm going to edit, what's the big deal about Previous 20/Next 20? Also, two identical post navigation tables are awkward-looking in my opinion, and mostly redundant.



I've been thinking about it, and I agree that the extended post navigation table (the current one) should be retained, probably condensed if ever possible. The one at the bottom, should however be reduced to just Next/Previous 20. I don't know, why don't you ask Bruce Tognazinni (inventor of the Apple UI)? I think his e-mail is [email protected], so you could ask him for some advice if he'll reply.

Updated: It seems that Brucey-boy is out of the country and will not be around to respond to e-mail, but should be ready to by next year.

Ok, I have squashed a little bug in the login form, Michel -- change ALL the td valign values that carry the input boxes to top, and everything should work fine.

Another thing, I've hacked also some parts of the b2profile.php page for osx users, it works on osx anyway

i've also hacked b2edit.php to remove every part of the navigation system except the previous 20 and next 20 buttons, because that will simplify the interface greatly.

Aren't we all sick of this?

And oh, the b2 distribution is also in a .sit file, avail here.

It looks like the formatting buttons might have to go. No function on IE, behaves strangely on OmniWeb, and a waste of space on lynx.

I wonder if this qualifies as a bug, but the Blogged indicator has disappeared. And about the formatting buttons, they should probably be given a newline instead of squeezing them with the Post thing.

And about the non-functioning of the buttons, I suggest we just go rip off some of those code from one of those Bulletin Board scripts because it happens to work on IE 5, other kinds on the web don't...

There seems to be a problem with AOL's embedded browser that keeps users from logging in. Just so you know. Surely this has to do with the session cookies. If anyone knows a fix, comment.

oh yeah there is. The login box is still broken, no fix yet.

By the way, I couldn't post to the forum, so if there's anything I'll post it on Prozac.

In the teams section, when your name is selected, why not shade the whole row of your information? Now this cannot be argued (let's say that you'll incur the wrath of UI experts like Tognazinni (asktog.com), heh).

I still see a profile pop-up window, but no link in the b2 interface. It's going to be useful.

Another big-time problem is the 'Blogged' indicator. First of all it's placed too far away from the Post box. Second thing: it shouldn't even be there (near the Post box).

And finally -- why don't you integrate PostEdit with Post? Since there's now a new Post box, you could actually put edit date/time functions in the box itself.

Michel, is there a bug in the comment page. I can't seem to comment on your previous post. It brings me to an error page.

This should qualify as a bug, in my opinion. b2 looks totally horrible in lynx. The UI elements are actually placed on the far right. This shouldn't be the case, and it would be better if it were on the left, wouldn't it?

Now you can search on any b2 blog.

copy this code:

<form name="searchform" action="../index_php.html" method="get">
<input type="hidden" name="a" value="s" />
<input type="text" name="s" value="" size="20" style="width:150px;" /><br />
<input type="submit" name="submit" value="search" />
</form><br />



There you have it. It's in XHTML and fresh from the oven Addresses another feature that we supposedly don't have that gm does...

Although this search does more of a grep. I'll explain this: for instance if I'm looking for a post with the word 'lain', but I'll find posts with words like 'explain', 'plain' or 'slain'. What I want is 'lain', not 'explain'!

And this is why I typed "if it looks weird don't worry", because it does look and behave weird/unstable/buggy at the moment. I have lots of things besides b2 at the moment, and I didn't have the time to fix these 'bugs'.
The current release is usable code

When I click on the username of ANY user at all, I can actually edit my profile. Now there's something wrong about this, and totally defies every UI rule in the book. If you're going to keep the b2team.php page, then remove the links for every user because his info is already kept there. Towards world domination on a b2-weblog

Something while I was working on the b2 register tip: why does a b2 password allow up to 100 characters?

And why is the e-mail below the password/confirmation password field? To comply with UI standards (and common sense) , you ought to move the e-mail above the password/confirmation field.

The reason why I'm working on this register trick is because I find it almost pointless to have a few fields in such a big page. It's almost better to incorporate it inside the b2 page, if you know what I mean.

Not much of a bug, but neither is it a huge security flaw: with the right html coding, one can register on a b2 weblog (i won't reveal the code, but i might tell michel )

removing b2register.html is unnecessary: b2register.php is another file to register on b2, and many non-php coders like myself have no idea how to turn signoffs OFF on our weblogs.

meanwhile, i shall make a little file explaining how to move the sign-in forms onto your weblog (like on mine), and how to include a register form on your weblog as well.

b2installer update: b2unix is done with, however, however, tar refuses to work with me, as with gzip. cat-ing the file doesn't work; it chokes on a directory. shit.

reported but unaddressed: after one updates his own profile under the users section by clicking on the update button, there is a redirection to b2edit.php!

two suggested fixes: close the pop-up after updating, or bring the person back to his updated profile page.

also: when a person has blogged, it is kind of strange to have 'Blogged!' at the post column. I'd like to see it next to the post that has been posted, so it's kind of clearer and makes more sense, if you see what I mean. just cosmetic changes.

ERRATUM: in the ReadMe it said you can use the_content() with an argument, like for example the_content(50) to load only the first 50 characters of a post. This functionnality has been disabled because it didn't work the way I wanted: it would be capable of breaking pages if in this example the 50th character is inside a tag.
I will bring that functionnality back when I have coded something to strip the tags from the char count.

It really should be 'whereever third party code is used', and not 'whenever'. thank you.

On my Mac OS X box (and OS 9.1 as well), b2 displays b2edit.php?a=b after i post. this is normal behaviour i think, but when you reload the page (refresh in ie terms), the post actually duplicates itself. i'm sure that there's a workaround somewhere (like disabling duplication of posts), and that this problem will be addressed soon.

This isn't a big security flaw, a minor one in fact, but why is it that non-admins can change/add categories (when it is supposed to be an admin-only command)?

i just added two categories, and managed to delete and rename one. this almost means that someone who knows the b2 filestructure can do 'potential' damage. Haven't checked the other files though, but I'm glad to know that b2template.php is admin-protected.