Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Offical apps | Community apps | Demo | Docs | Install
humptyH

humpty

@humpty
Unfollow Follow
Everything related to the PHP CVE and eMudhra Cert Please read our Security issue thread - PHP and eMudhra cert compromise.
About
Posts
1.8k
Topics
239
Shares
0
Groups
1
Followers
1
Following
1

Posts

Recent Best Controversial

  • Chat
    humptyH humpty
    Announcements

    @nebulon said:

    which is an android

    I can help test the app if you're willing to share the APK.

    @nebulon said:

    Media handling will come, so far those are just files in a folder, so one can purge on timestamp if that is wanted. But I guess we will provide some better controls over time.

    To share some issues I ran into in Matrix. Last time I tried deleting media to save on space, it corrupted the rooms and I had to wipe the entire app. Luckily, I had exported the rooms via HTML/JSON beforehand. I used the Matrix admin tool btw. I didn't manually delete things. But, manual deletion of a room's media folder (assuming each room has its own folder) would be ideal. For instance, for DM rooms between users, we share a lot of media between each other but it serves its purpose once seen. Yet, that accounted for a huge percentage of the app's media storage.

    @nebulon said:

    Those make a lot of sense when you don't trust your coordinating server of course

    This will limit the app location to on-premise servers, really. I wouldn't trust a VPS provider with my chats.


  • Chat
    humptyH humpty
    Announcements
    • Clients: Any plans for desktop and mobile apps?
    • Security: Can you shed some light on the app's message encryption and overall security?
    • Media: How easy is it to delete uploaded media to keep app size down?
    • Export: Please add HTML and JSON export options for channels.
    • Import: some type of migration tool to move rooms from Matrix and other platforms.

  • Feature Request: Verified Sender Badge
    humptyH humpty
    Mail

    I'd like to propose a new feature. A verified badge like you see on social media nowadays next to a sender's name/email. I know it's easy to spoof the FROM address, so this feature would require some additional background work.

    We could have multiple badges/tags:

    • Known Contact
    • SPF, DKIM, and DMARC (if it aligns or not)
    • Authenticated identity (OpenPGP or S/MIME and cert verification)
    • Warning icon for bad actors

    A single "checkmark" could be added to the email list if it all passes. Detailed tags can be displayed once the email is opened. Is this feasible?


  • Please suggest a replacement for Nextcloud
    humptyH humpty
    Discuss

    @bazinga said:

    With "notes" I was referring to a note taking app - I don't care for complex apps, I just want a way to take simple notes and have them easily available on mobile + desktop.

    In that case, Joplin FTW.


  • Does cubby do file versioning?
    humptyH humpty
    Cubby

    There should be a poll for this. Until then, +1 for trashcan. Neutral on file versioning.


  • Please suggest a replacement for Nextcloud
    humptyH humpty
    Discuss

    Contacts, Calendar, Files = use the cloudron developed apps (contacts, calendar, cubby). Access on android will be through Dav5x that handles syncing with your native android apps.

    As for notes, I'm not sure what type of "notes" you're looking to share (status updates, knowledgebase, documents, etc), but there are a few options that I can recommend:

    • Outline
    • Affine
    • Joplin (this is what I use and has desktop/mobile clients; local storage, cloud syncing, plethora of plugins to extend functionality)
    • Cryptpad

    Edit: You can use Matrix/Element for note taking/sharing as well by making use of spaces/rooms. Encryption is top-notch, has desktop and mobile apps, and works with Cloudron user management.


  • Security issue thread - PHP and eMudhra cert compromise
    humptyH humpty
    Announcements

    @Lanhild What if the app gets started when an update is available, but the network gets disconnected somehow. Maybe by killing the nginx/proxy/ports temporarily? There's got to be a virtual equivalent to "cutting the ethernet cable", right?


  • Security issue thread - PHP and eMudhra cert compromise
    humptyH humpty
    Announcements

    +1 for having apps update while they're stopped. I have a few WP dev sites that I turn on for testing only and it's a PITA having to manually update them. From a security standpoint, what are the chances that an app will get compromised in the seconds it takes between the app start and triggering a manual update?


  • Security issue thread - PHP and eMudhra cert compromise
    humptyH humpty
    Announcements

    @timconsidine why does it feel like this is the new norm now because of AI?


  • Security issue thread - PHP and eMudhra cert compromise
    humptyH humpty
    Announcements

    Invoice Ninja v5.13.50 is out, but I'm not sure if it has the php fixes. In any case, please update the package!

    https://github.com/invoiceninja/invoiceninja/releases/tag/v5.13.50


  • Security issue thread - PHP and eMudhra cert compromise
    humptyH humpty
    Announcements

    @sebastienserre 10.1.6 is needed and on the way. Stay tuned.


  • Security issue thread - PHP and eMudhra cert compromise
    humptyH humpty
    Announcements

    @sebastienserre yes, it's best to stop the PHP-based apps. You can see which apps are affected a few posts up. App updates are being rolled out. For instance, Wordpress and Freescout fixes are ready. As for the server, go to the initial post, log in to your server(s) via SSH, and run the commands to make sure the server is up to date. That's all you need to do right now.


  • Security issue thread - PHP and eMudhra cert compromise
    humptyH humpty
    Announcements

    @jdaviescoates according to chatgpt the following are php based (not a complete list):

    • nextcloud
    • roundcube
    • wordpress
    • freescout
    • yourls
    • Invoiceninja

    edit: I know you also use navidrome (not php). N8n, Joplin, Vaultwarden are all safe (non-php based).


  • Security issue thread - PHP and eMudhra cert compromise
    humptyH humpty
    Announcements

    Is the new cloudron "mail" app php based?


  • Mail app Feature Requests : UI enhance
    humptyH humpty
    Mail

    My bad! I did that code when my system was in dark mode and now the yellow isn't visible on the white. I added a dark blue background to make the text pop.

    .mail-item.unread {
        color: #ffbf00 !important;
        background: #124978;
        animation: pulseUnread 2.3s ease-in-out infinite;
    }
    
    @keyframes pulseUnread {
    0%, 100% { opacity: 0.50; }
    50%      { opacity: 1; }
    }
    
    .mail-item.unread::after {
        width: 4px !important;
        background-color: #ffbf00 !important;
    }
    
    .col-star.starred {
        color: #ffbf00 !important;
        animation: glowUnread 1.8s ease-in-out infinite;
    }
    
    @keyframes glowUnread {
        0%, 100% {
            opacity: 0.6;
            filter: drop-shadow(0 0 1px #f50);
        }
        50% {
            opacity: 1;
            filter: drop-shadow(0 0 5px #f50);
        }
    }
    

  • Mail app Feature Requests : UI enhance
    humptyH humpty
    Mail

    @timconsidine the latest mail updates changed the code and the circle got wonky so here's an updated version. I went with gold, similar to the app's native yellow for the unread bar and still matches with the blue nicely.

    .mail-item.unread {
        color: #ffbf00 !important;
        animation: pulseUnread 2.3s ease-in-out infinite;
    }
    
    @keyframes pulseUnread {
    0%, 100% { opacity: 0.50; }
    50%      { opacity: 1; }
    }
    
    .mail-item.unread::after {
        width: 4px !important;
        background-color: #ffbf00 !important;
    }
    

     

    Edit: This version modifies the starred icon as well (drop in replacement code for the above).

    .mail-item.unread {
        color: #ffbf00 !important;
        animation: pulseUnread 2.3s ease-in-out infinite;
    }
    
    @keyframes pulseUnread {
    0%, 100% { opacity: 0.50; }
    50%      { opacity: 1; }
    }
    
    .mail-item.unread::after {
        width: 4px !important;
        background-color: #ffbf00 !important;
    }
    
    .col-star.starred {
        color: #ffbf00 !important;
        animation: glowUnread 1.8s ease-in-out infinite;
    }
    
    @keyframes glowUnread {
        0%, 100% {
            opacity: 0.6;
            filter: drop-shadow(0 0 1px #f50);
        }
        50% {
            opacity: 1;
            filter: drop-shadow(0 0 5px #f50);
        }
    }
    

  • RomM App For Cloudron
    humptyH humpty
    Package development

    Vice city, Robocop, Blades of Steel... Man, the memories 🥹

  • Login

  • Don't have an account? Register

  • Login or register to search.
  • First post
    Last post
0
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search