Who We Are
bmk
girlie
kristine
Search



Notify List
Let us keep you posted on new entries! Join the notify list!
Blog Status
14 entries
146 comments
12.06.04 11:44 am last update
last 50 referrers

Listed on BlogShares
Syndication
link to us!

virtual venus

virtual venus: MT Wiki
Powered By
because weblogs need love too
Thursday, February 12, 2004
Comment Manager script

Are the 5 most recent comments inside MT's interface just not enough of a listing for you? With multiple blogs or high amounts of comments, you may want a longer listing with more info. I created this script because I wanted a way to view a longer list of the recent comments, and also have links for easy editing and to enhance blacklisting.

Required:

Comments Manager script -- save as commentmgr.php. There are several variables that should be set at the top of the file.

You'll also need connect.php (save as connect.php).
if you've used any PHP/MySQL scripts in the past, you probably already have it.

Upload these files and run commentsmgr.php from your browser. A list of your comments should appear with details. Links on the top bar will allow you to see the next set of oldest comments.

Future enhancements could be made; feel free to leave comments with suggestions and I'll see what I can do. :)

Known issue: The listing is for all blogs in the system. If someone on a shared copy of MT was wanting to use this, they'd probably see all of the comments. They wouldn't be able to edit any that their MT username didn't have permission to, though.


Monday, February 9, 2004
Alphabetical Archives by letter

Sites with topical articles or listings may wish to provide a variety of archive options to their readers. One good way to present a lot of data is by alphabetical order.

  • PHP required.

The script has notations for what each section does. For a working example, TheRedKitchen's alphabetical archives were the initial place this code was used. It's been cleaned up and optimized a bit.

Continue reading "Alphabetical Archives by letter"

Sunday, February 1, 2004
Winamp Hoverable Playlist updated

This is a revised version of the tutorial to update and improve the original code.

Displaying the songs you are listening to in real time, along with detail about them, is a nice addition to your site. Using a combination of plugins can give many options for the display of info. My goal was to not only make a list of the songs I was listening to, but to display an album cover from the song upon hovering.

Continue reading "Winamp Hoverable Playlist updated"

Sunday, January 4, 2004
Link to View All Comments for Comment Author

I posted an entry on my Tips Blog on how to show all comments for a particular comment author. In an effort to share the love between my blogs, I'm posting here to tell users how to use this script more dynamically: to create a link in the comment "posted by" line that, when clicked, will generate a list of all comments made by that comment author.

Required: PHP and the MySQL database option in MT

Update 04.15.04: The original code has been updated to strip tags from comment text as a precautionary measure against malicious code.

Continue reading "Link to View All Comments for Comment Author"

Sunday, November 23, 2003
"Mail This Entry" Used For Spam

SEE UPDATE BELOW

If you are using Movable Type's "Mail This Entry" feature on your blog, you are advised to rename your mt-send-entry.cgi file, or remove the feature entirely.

If you are not using the feature on your blog, you still need to either rename the script, disable it by changing the permissions, or remove it from your server altogether.

Spammers have discovered a means of using this script to send messages that will appear to be coming from your server.

Renaming the script won't prevent them from finding it if you continue to use the feature on your site, but it will slow them down a little if everyone chooses a unique name for the script.

Also, if you're using other versions of this feature such as Pop-Up Mail This Entry or MT-Mail-Entry, you may want to take a similar approach to those as well.

If there are any developers out there interested in working on a fix for this vulnerability, please leave a comment and I will contact you with the details of the method being used (if you need them).

Update: Ben posted a fix in the previously-mentioned forum thread:

Before line 40 in mt-send-entry.cgi, add these lines:

die "Invalid from or to value"
if $to =~ /[\r\n]/ || $from =~ /[\r\n]/;

Save mt-send-entry.cgi, upload to your server in ASCII mode, and CHMOD permissions to 755 again (if necessary).

(Cross-posted at The Girlie Matters)


Copyright © Virtual Venus