Thank you for your reply. I found this thread because I am in the same boat as the OP. Like you said, I was completely unaware this plugin was on the Bad List or that such a list existed. IMO, there should be a mention of this on the plugin's download page. Maybe the plugin should be moved to a different section or removed completely. I don't think users should have to check the bad plugin list every time the want to install a plugin.
I'm new to e107 and PHP, so I'm already trying to learn a lot. Anything that makes my job easier is appreciated. I wish I found this thread sooner, I've spent a lot of time trying to figure it out and customize it for my needs. That plugin was the reason I tried e107. Back to the drawing board.
PHPnoobie wrote ...
After reading this thread Im just going to put my 2cents worth in.
@Princer1 came here and asked a simple question. As a new user it is highly likely that he wasnt aware of the bad plugin list of potential security issues related to the plugins in question.
Instead of putting him down and flaming him for asking a simple innocent question, I think some of your replies could have been dealt with a bit more professionally and tactful. Jumping on the bandwagon and and flooding his thread with negative comments and stories is not the way to build up a good community. I think people need to think outside the box a little when writing their replies.
He is a new member on e107.org, and most likely new to using e107 which is great and exactly what we want for e107 as a community, more members = more exposure. We all were e107 noobs at one time or another and in my opinion every thread should be treated on the same level regardless of topic. We should advise and encourage rather than belittle and discourage novice / new users.
Yes in this instance, not offering support publicly for the "bad" plugins is a the right choice 100%
But that doesnt mean to say that he shouldnt go ahead and attempt to create the plugin himself / fix the bugs. Aslong as he is informed that its a potential security problem then its up to him what he does with that information.
--------------
This post wasnt aimed at anyone in particular, just speaking my mind for the better of e107.
As far as I'm aware the plugins on the bad plugin list are already removed from the downloads on this website. If not, they should be (and should have been).
Plugins that were on plugins.e107 and e107coders (now all listed here) that are on the list have been removed from the site and the authors contacted (by way of PM).
If a plugin is listed on another site, it's not our responsibility (or right) to get it removed. If you find a plugin on the list that is still on the site, please point it out to myself or someone else on the team and we'll get it removed.
Plugins are added to the list as soon as they are found, and they may not get removed from the site right away. In the case of the plugin mentioned in this thread -- I'm fairly sure it was removed during the first wave.
Hmm, looks like someone combined the plugs on plugins.e107 into the main site, including all the ones we had flagged as 'admin removed'so were inactive
Now I don't have access to them to remove them
Very poor situation having vulnerable plugins available to download from the main site