yuan-projects/yuan-pad

YuanPad is a PHP-based guestbook script

yuan-pad

YuanPad is a PHP-based guestbook script.

Developer Guide

Back End Developer Guide

1. Download and install XAMPP on your computer.
2. Make sure this folder in in your htdocs.

Front End Developer Guide

cd yuan-pad/themes/spa
yarn

On the develop stage, run:

yarn run dev

Run the following in your terminal when you want to generate the compressed files:

yarn run build

yuan-pad's Issues

Failed to show the default post after installation

There should be a default post on the message list after installation, but nothing was displayed on the page.

There were some errors on the developer tools:

<br />
<b>Deprecated</b>:  strip_tags(): Passing null to parameter #1 ($string) of type string is deprecated in <b>D:\Apache24\htdocs\yuan-pad\includes\functions.php</b> on line <b>332</b><br />
<br />

DOM related operation should be done in client side

I know PHP can do almost everything, but document related work should be accomplished in client side, because JavaScript is really good at it and more efficient.

Curly braces should always be placed after the if/else, for, foreach and while statements

Curly braces could be omitted after these statements in PHP but that's not a best practice. And the application is vulnerable if you try to format you code.

Date format feature is required

The date format of comment is hard-coded in the m-d H:i format in the current version.

The date format feature is very usefully and already existed in most applications, it should be implemented in Yuan Pad too.

Fatal error: Call to undefined function mcrypt_create_iv()

Fatal error: Call to undefined function mcrypt_create_iv() in includes\functions.php on line 576.

OS: Windows XP 32bit
PHP: 5.2.6

Passwords are stored in database without hashing

Login the administrator after installation successful

Login the administrator after installation successful

Original issue reported on code.google.com by [email protected] on 13 Jan 2013 at 11:53

CSRF Vulnerabilities

As title.

The Chinese characters should not be found in source files

Please remove all Chinese characters from source files.

Original issue reported on code.google.com by [email protected] on 13 Jan 2013 at 9:30

Unable to post a message

Unable to post a message with the admin account, even if there is just one character, the popup always says:
Your words was too much

Fatal error: Call to undefined function openssl_random_pseudo_bytes()

Fatal error: Call to undefined function openssl_random_pseudo_bytes() in C:\AppServ\www\yuan-pad\includes\functions.php on line 556

Windows XP 32 bit,
PHP 5.2.6

code 标签内的表情图案代表的文字被替换为图片

What steps will reproduce the problem?
1.允许的 HTML 标签中含有 <code>
2.后台设置“过滤 HTML 标签”为“移除不允许的标签”
3.前台页面以及后台“留言管理”中<code>内的表情文本被替换
为图片

What is the expected output? What do you see instead?

应当保持文本原样显示

Please use labels and text to provide additional information.

Original issue reported on code.google.com by [email protected] on 24 Feb 2012 at 6:51

Attachments:

• o1.png
• o2.png

Please remove jquery dependency

For such a small project, we would like not to use JavaScript library such as 
jQuery, because it will increments the project size, and also it's overkill to 
use it for simple tasks.

Original issue reported on code.google.com by [email protected] on 13 Jan 2013 at 9:36

需要新特征：插件支持

需要支持插件，目前急需的插件是邮件提醒和Google统计插件��
�

Original issue reported on code.google.com by [email protected] on 31 Oct 2011 at 9:00

Unable to setup this app on Windows

System: Windows 10
Software: XAMPP 8.1.12 (PHP 8.1.12)

Fatal error: Uncaught Error: Call to undefined function dl() in D:\Apache24\htdocs\yuan-pad\includes\functions.php:139 Stack trace: #0 D:\Apache24\htdocs\yuan-pad\includes\preload.php(55): gd_loaded() #1 D:\Apache24\htdocs\yuan-pad\index.php(17): require_once('D:\\Apache24\\htd...') #2 {main} thrown in D:\Apache24\htdocs\yuan-pad\includes\functions.php on line 139

The data/ directory should not be writable if possible

The data/ directory was forced to be writable in the installation process, but it is not necessary when SQLite was not supported in the server. Because MySQL and MS SQL Server don't use this directory to store data.

Please consider removing the directory permission checkup if SQLite was not supported in the server for security reasons.

The comment form looks weird in IE6

What steps will reproduce the problem?
1.Visit the index page
2.Click the "Click to post" link
3.The comment form shown, but looks weird in IE6.

What is the expected output? What do you see instead?
Should looks fine as the same as in Google Chrome, but the layout seems bad 
now. 

What version of the product are you using? On what operating system?
r21. on Windows XP.

Please provide any additional information below.

Original issue reported on code.google.com by [email protected] on 19 Jan 2013 at 4:36

Attachments:

• ie6_css_20130119123013.png

Php Textfile DB API will be removed from YuanPad

Php Textfile DB API did a great job in the past, it supports several commonly used SQL statements and the performance is decent.

At the same time, we have to keep in mind that there are many disadvantages in using such a text file database, such as less security, not suitable for large amount of data, lack of concurrency control and ACID support. Also, things changed a lot now, the cost of traditional RDBMS is acceptable, it's time to drop the support of text file database.

If you are not willing to use MySQL, SQLite is a really good choice.

CJSON.php is no longer needed

json_encode and json_decode functions were introduced in PHP 5.2, and now PHP 5.2 is no longer supported by the PHP team. For more, visist http://php.net/supported-versions.php

CJSON.php provides an alternate way of handling JSON if you are using PHP 5.2 lower versions. We will never support PHP 5.2, so the CJSON.php should be removed from this project.

代码高亮表现不一致

What steps will reproduce the problem?
1.默认情况下看到的代码高亮部分，每行之间的空隙较大
2.新发布一条留言，重新渲染后的页面中代码高亮部分，每行
代码之间的缝隙变小了

What is the expected output? What do you see instead?
希望一直表现的如发表新留言后重新渲染的页面那样，代码��
�间的缝隙较小。

What version of the product are you using? On what operating system?
YuanPad 1.0 Windows XP

Please provide any additional information below.

浏览器：Opera 11.52

Original issue reported on code.google.com by [email protected] on 16 Nov 2011 at 9:40