Navigation

    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Popular
    • Tags
    • Users
    • Groups
    1. Home
    2. frgilb
    F
    • Profile
    • Following 0
    • Followers 1
    • Topics 2
    • Posts 35
    • Best 11
    • Groups 0

    frgilb

    @frgilb

    13
    Reputation
    588
    Profile views
    35
    Posts
    1
    Followers
    0
    Following
    Joined Last Online

    frgilb Unfollow Follow

    Best posts made by frgilb

    • RE: Reset all database

      Not easy, but managable if you use a mongo database 😄 .

      I did the same. I installed mongo 3.2 in an Ubuntu (virtual) environment. In my local development environment, I did not enable the mongo security setting. This allows me to do the database administration without authentication. Of course you should not do this in your productive environment!

      Create your initial setup as documented. Configure everything according to your needs to the desired state before import.

      Then shutdown nodebb and login to mongo:

      use nodebb
      db.copyDatabase("nodebb", "nodebb-backup-171003")
      

      Now you have a copy, you can restore any time and can start testing your import tool.

      To revert your changes, first shutdown nodebb and login to mongo:

      use nodebb
      db.dropDatabase()
      use nodebb-backup-171003
      db.copyDatabase("nodebb-backup-171003", "nodebb")
      

      You can also switch between the copies of the nodebb databases easily by editing the file config.json.

      Good luck!

      posted in NodeBB Development
      F
      frgilb
    • RE: Custom favicons

      Have you tried to include multiple resolutions in your icon? I have used an online ICO converter (https://www.icoconverter.com) and I was quite happy with the result.

      posted in Technical Support
      F
      frgilb
    • RE: GDPR compliance and storage of IP addresses

      @julian I inspected my database export as well as the source code in github. I found a couple of occurences where IP addresses are stored into the database. According to many articles (e.g. https://www.ctrl.blog/entry/gdpr-web-server-logs) this is critical and should be minimized. I can not judge if this is compliant to the GDPR or not. Maybe only a lawyer can finally clarify, but I would like to avoid any kind trouble and reduce the risk for my forum.

      My analysis might not be right. Please correct me, if my view and understanding of the source code is not correct!

      IP Address of visitors is recorded to calculate the total Visitor Count

      IP address is stored in:
      https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/analytics.js#L40

      Used by:
      https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/controllers/admin/dashboard.js#L84

      Deleted:
      never

      IP Address of registered users is logged on each Login

      IP address is stored in:
      https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/user/admin.js#L16
      and
      https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/user/admin.js#L20

      logged by:
      https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/controllers/authentication.js#L324

      Used by:
      https://github.com/NodeBB/NodeBB/blob/v1.9.x/src/user/approval.js

      Deleted:
      Only on user deletion in https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/user/delete.js#L206

      IP Address is stored on events.log() call

      IP address is stored in:
      many lcode locations

      Used by:
      Admin panel Event History

      Deleted:
      From Admin panel

      Summary

      Out of above IP address usage, the first seem to me as most critical regarding GDPR compliance, as the IP address of visitors is stored forever without consensus. The purpose (counting unique visitors) from my perspective does not justify the storage. As a solution, a hash function could be applied to the IP address and the hash is stored in the database. With this you can still calculate the unique visitors, while not storing the IP address for visitors at all.

      The two other usages can justified to some extend, but from my understanding the storage duration should be limited to appropriate time which depends on the purpose. The current policy to delete on request only, does not look compliant to me. I propose to introduce a mechanism, which deletes the login IP addresses as well a the event log after a certain period of time, configurable via ACP.

      What do you think?

      posted in General Discussion
      F
      frgilb
    • RE: [nodebb-plugin-calendar] Fully featured calendar plugin for NodeBB - Testers needed

      @PitaJ Yes, this is the idea behind. You can select in the widget settings the scope: year, month, week. And it will show a table (inspired by the listview of FullCalendar) of events, with or without responses. I have to fine tune the layout of the table for mobile devices, but at the moment I am stuck because the responses for repeated events do not show up (due to my timezone). Soon I will announce it here 😄 . But first I need your help 🙏

      posted in NodeBB Plugins
      F
      frgilb
    • RE: browser console errors after v1.6.0 upgrade

      I observed the same after updating my board to v1.6.0, yesterday. I decided to cherry pick commit https://github.com/NodeBB/NodeBB/commit/dc87d7fc0f86d282553e40ba0f50d1bd4de9c3c1

      This solved the issue!

      @PitaJ: Thanks for providing this commit!

      0 pitaj committed to NodeBB/NodeBB
      Use .js instead of .jst
      
      Fix #5934
      posted in Technical Support
      F
      frgilb
    • RE: [nodebb-plugin-calendar] Fully featured calendar plugin for NodeBB - Testers needed

      I finally got my development setup for the calendar plugin working 😄 ! I tried to fix https://github.com/pitaj/nodebb-plugin-calendar/issues/89 along with some other minor stuff I came across.

      @PitaJ: I created a pull request: https://github.com/pitaj/nodebb-plugin-calendar/pull/97

      Please have a look at my changes! 👋

      Fank created this issue in pitaj/nodebb-plugin-calendar

      closed Events have -1 day #89

      gtfr created this issue in pitaj/nodebb-plugin-calendar

      closed Fixed responses and repetions #97

      posted in NodeBB Plugins
      F
      frgilb
    • RE: Tips to get 1.6.0 running after updating from 1.5.x

      @Adam-Poniatowski: You might want to check browser-console-errors-after-v1-6-0-upgrade as well. I had the same issue, and I could solve it with a fix in nodebb.

      posted in Technical Support
      F
      frgilb
    • RE: [nodebb-plugin-calendar] Fully featured calendar plugin for NodeBB - Testers needed

      @PitaJ: Could you please review my pull request and merge to your calendar plugin (https://github.com/pitaj/nodebb-plugin-calendar/pull/97)?

      Many thanks in advance! 🙂

      gtfr created this issue in pitaj/nodebb-plugin-calendar

      closed Fixed responses and repetions #97

      posted in NodeBB Plugins
      F
      frgilb
    • RE: MongoDB crashes sometimes

      @Tekin: You should also check /var/log/mongodb/mongod.log. What is the output of "sudo service mongod status"?

      BTW: What version of MongoDB are you using?

      posted in Technical Support
      F
      frgilb
    • RE: [nodebb-plugin-calendar] Fully featured calendar plugin for NodeBB - Testers needed

      @PitaJ: After v1.6.0 is released now, could you please have a look a this plugin again?

      I would like to enable the calendar plugin on my (German) board and publish my listview widget for your calendar, but for both I need a fix for https://github.com/pitaj/nodebb-plugin-calendar/issues/89. If there is anything I can do to improve/adapt my pull request (https://github.com/pitaj/nodebb-plugin-calendar/pull/97), please let me know 😀.

      Fank created this issue in pitaj/nodebb-plugin-calendar

      closed Events have -1 day #89

      gtfr created this issue in pitaj/nodebb-plugin-calendar

      closed Fixed responses and repetions #97

      posted in NodeBB Plugins
      F
      frgilb

    Latest posts made by frgilb

    • RE: [nodebb-plugin-custom-pages] Custom Static pages for NodeBB

      @psychobunny : Can you please look into https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/57. It seems the latest version 1.10.2 has an issue at least in some installations 😞 . Many thanks in advance!

      nilsramsperger created this issue in NodeBB-Community/nodebb-plugin-custom-pages

      closed Custom page not navigable #57

      posted in NodeBB Plugins
      F
      frgilb
    • RE: HTML sanitize (dont working)

      If you have copied the rules 1:1, I might have an Idea: there ist a "," missing!

      Here: ..."button": ["type", "class" ], "table": ["class"], ...

      Give a try!

      posted in Technical Support
      F
      frgilb
    • RE: Incomplete Installation - Missing Directories

      I would guess, that your plugins still have the wrong permissions set. Try to run "sudo chown -R nodebb:nodebb <nodebb folder>". Of course replace "nodebb:nodebb" with the user/group you have created in your installation.

      posted in Technical Support
      F
      frgilb
    • RE: MongoDB crashes sometimes

      @Tekin: You should also check /var/log/mongodb/mongod.log. What is the output of "sudo service mongod status"?

      BTW: What version of MongoDB are you using?

      posted in Technical Support
      F
      frgilb
    • RE: Rebuild error

      The error message says where to start looking at first:
      no such file or directory, open '/root/nodebb/build/public/templates/404.tpl'

      The file is either not there (I doubt that) or owner/permissions are not correctly set. You should check that!

      posted in Technical Support
      F
      frgilb
    • RE: GDPR compliance and storage of IP addresses

      @julian I inspected my database export as well as the source code in github. I found a couple of occurences where IP addresses are stored into the database. According to many articles (e.g. https://www.ctrl.blog/entry/gdpr-web-server-logs) this is critical and should be minimized. I can not judge if this is compliant to the GDPR or not. Maybe only a lawyer can finally clarify, but I would like to avoid any kind trouble and reduce the risk for my forum.

      My analysis might not be right. Please correct me, if my view and understanding of the source code is not correct!

      IP Address of visitors is recorded to calculate the total Visitor Count

      IP address is stored in:
      https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/analytics.js#L40

      Used by:
      https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/controllers/admin/dashboard.js#L84

      Deleted:
      never

      IP Address of registered users is logged on each Login

      IP address is stored in:
      https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/user/admin.js#L16
      and
      https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/user/admin.js#L20

      logged by:
      https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/controllers/authentication.js#L324

      Used by:
      https://github.com/NodeBB/NodeBB/blob/v1.9.x/src/user/approval.js

      Deleted:
      Only on user deletion in https://github.com/NodeBB/NodeBB/blob/12337302a7e746e36cd4fb5bd0e48fbb3707fae6/src/user/delete.js#L206

      IP Address is stored on events.log() call

      IP address is stored in:
      many lcode locations

      Used by:
      Admin panel Event History

      Deleted:
      From Admin panel

      Summary

      Out of above IP address usage, the first seem to me as most critical regarding GDPR compliance, as the IP address of visitors is stored forever without consensus. The purpose (counting unique visitors) from my perspective does not justify the storage. As a solution, a hash function could be applied to the IP address and the hash is stored in the database. With this you can still calculate the unique visitors, while not storing the IP address for visitors at all.

      The two other usages can justified to some extend, but from my understanding the storage duration should be limited to appropriate time which depends on the purpose. The current policy to delete on request only, does not look compliant to me. I propose to introduce a mechanism, which deletes the login IP addresses as well a the event log after a certain period of time, configurable via ACP.

      What do you think?

      posted in General Discussion
      F
      frgilb
    • RE: GDPR compliance and storage of IP addresses

      @julian I still have some doubts, but I need to dig deeper into this topic 🤔 . I will export the database of my forum and check what is stored there and do some code reading in the nodebb sources. I will come back to you, if I still have concerns after that.

      posted in General Discussion
      F
      frgilb
    • RE: GDPR compliance and storage of IP addresses

      @julian Many thanks for your answer and pointing out the DPA. I really appreciate, that the GDPR is professionally addressed by you guys 🙂 !

      Nevertheless, I am not an data protection expert. I also might want to "over-fullfill" the GDPR, but as IP addresses need to be considered as personal data, I feel the need to somehow have control over this data. Limiting the storage duration and/or remove this data on request, seem to me like a requirement to be fully GDPR compliant. Is it planned to make this possible?

      posted in General Discussion
      F
      frgilb
    • RE: GDPR compliance and storage of IP addresses

      🤔 I am not sure it is that easy. It think the GPDR requires, that the purpose of the collected data is clearly documented, and duration of the storage is "for no longer than is necessary for the purposes for which the personal data are processed".

      Both I am currently not able to describe in the declaration of data protection of my forum. Can you help me out on that?

      posted in General Discussion
      F
      frgilb
    • GDPR compliance and storage of IP addresses

      The GDPR states that IP addresses should be considered personal data. In the latest nodebb version 1.9.1 I do not find this adressed. In the account information in my forum, I can see a list of recent IP-addresses for all my users. I do not find settings to limit the storage duration, remove this data, etc. Do I overlook something in the ACP?

      Any help and guidance would be much appreciated 🙂 !

      posted in General Discussion
      F
      frgilb