<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Ricky,<br>
<br>
The only way it will affect future upgrades (and/or
upgrade_preferences_php) is that upgrade_preferences_php will always
reset it to the version number given in the new preferences.php
file.<br>
The value itself is *purely* cosmetic.<br>
No part of ZendTo or any accompanying script ever depends on the
value it sees in there.<br>
<br>
Rather than edit the template, to get rid of it you should just
customise the "translation" of the strings in the UI.<br>
This is described in<br>
<a class="moz-txt-link-freetext" href="http://zend.to/translators.php">http://zend.to/translators.php</a><br>
<br>
If you've got preferences.php saying that<br>
<tt>'language' => 'en_US',</tt><br>
then look in<br>
<tt>/opt/zendto/config/locale/en_US/LC_MESSAGES</tt><br>
In there, edit the "<tt>zendto.po</tt>" file.<br>
Search for the lines<br>
<tt>msgid "Version %1 has been developed by %2."</tt><br>
and<br>
<tt>msgid "Version %1"</tt><br>
Immediately under each line is the "msgstr" which is what the string
is translated into. If the msgstr value is "" then the "msgid" value
above it is used by default. But if you set something simple like<br>
<tt>msgstr "Developed by %2."</tt><br>
and<br>
<tt>msgstr " "</tt><br>
for them, then the "Version %1" text simply won't appear.<br>
Then run<br>
<tt>/opt/zendto/bin/makelanguages</tt><br>
to compile all the .po files into .mo files.<br>
<br>
If a quick refresh of your browser doesn't show the new content,
restart Apache as sometimes it caches stuff it shouldn't.<br>
<br>
That may sound more complicated than simply editing the template
file.<br>
But.....<br>
When I change the template files in future versions, you won't have
to re-apply your edit, or risk ending up with an out-of-date
template because you missed the ".rpmnew" version that got created.<br>
Instead, your changes to the output for those 2 strings will
survive, and the .po files automatically get all the new strings
added to them whenever makelanguages is run (which happens as part
of the rpm/deb install/upgrade process).<br>
<br>
This is described on<br>
<a class="moz-txt-link-freetext" href="http://zend.to/translators.php">http://zend.to/translators.php</a><br>
and is now the more reliable method of changing the text in the UI
to match your own requirements.<br>
<br>
Hope that helps,<br>
Jules.<br>
<br>
<div class="moz-cite-prefix">On 13/07/2018 15:16, Ricky Boone wrote:<br>
</div>
<blockquote type="cite"
cite="mid:WM!1cac5d5871746de991f8453e4a20e0bb719554b053e58b7c5c9890043c9939875aafea0c9b4c3980b525747952001d51ab1bb05b439d4f0ccd70ab96d05baf58f01488048096e1b3e8e9d5272717e62c!@mx.jul.es">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<div dir="ltr">
<div dir="auto">I thought about that, but wasn't sure it
wouldn't cause issues with future upgrades (specifically with
the config/preferences upgrade scripts), and the intent was to
completely remove the version string from non-administrative
users.</div>
<div dir="auto"><br>
</div>
<div>Again, not a major issue, I have the option of changing
ZTVERSION, as well as modifying the template, just thought
this could be something that might be worth implementing at
some point. No worries. :)</div>
<div><br>
</div>
<div>Thanks for the quick reply.</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Thu, Jul 12, 2018, 12:31 PM Jules Field <<a
href="mailto:Jules@zend.to" target="_blank"
moz-do-not-send="true">Jules@zend.to</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Why not just
set "ZTVERSION" in preferences.php to any other string you <br>
like?<br>
That's exactly why I let you set it. Just change it to "1" or
something <br>
like that.<br>
<br>
Cheers,<br>
Jules.<br>
<br>
On 12/07/2018 16:30, Ricky Boone via ZendTo wrote:<br>
> I think it would be helpful to include an option that
disables the<br>
> visibility of the version, at least to
non-administrators, that is<br>
> normally rendered at the footer of every page. While
there are<br>
> absolutely other ways to secure a system, or ways that
bad actors<br>
> could determine what version you're potentially running,
handing out<br>
> information like the version string can be a risk if
there is a zero<br>
> day or other vulnerability. Several best practices
related to<br>
> securing a web server include disabling version strings
or otherwise<br>
> obfuscating the Server header in Apache httpd, for
example:<br>
><br>
> <a
href="https://www.owasp.org/index.php/Fingerprint_Web_Server_%28OTG-INFO-002%29"
rel="noreferrer noreferrer" target="_blank"
moz-do-not-send="true">https://www.owasp.org/index.php/Fingerprint_Web_Server_(OTG-INFO-002)</a><br>
><br>
> For the time being, I'm just clearing out the parts of
the footer.tpl<br>
> template that include this, but I think this would be
cleaner to do<br>
> within the config. If I'm going about this the wrong
way, let me<br>
> know, however I'm still of the opinion that publicly
announcing this<br>
> level of detail is probably not the most secure option,
either.<br>
><br>
> _______________________________________________<br>
> ZendTo mailing list<br>
> <a href="mailto:ZendTo@zend.to" rel="noreferrer"
target="_blank" moz-do-not-send="true">ZendTo@zend.to</a><br>
> <a href="http://jul.es/mailman/listinfo/zendto"
rel="noreferrer noreferrer" target="_blank"
moz-do-not-send="true">http://jul.es/mailman/listinfo/zendto</a><br>
<br>
Jules<br>
<br>
-- <br>
Julian Field MEng CEng CITP MBCS MIEEE MACM<br>
<br>
'Adversity is like a strong wind. I don't mean just that it
holds<br>
us back from places we might otherwise go. It also tears
away from<br>
us all but the things that cannot be torn, so that afterward
we see<br>
ourselves as we really are, and not merely as we might like
to be.'<br>
- Arthur Golden<br>
<br>
<a href="http://www.Zend.To" rel="noreferrer noreferrer"
target="_blank" moz-do-not-send="true">www.Zend.To</a><br>
Twitter: @JulesFM<br>
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415
B654<br>
<br>
</blockquote>
</div>
</blockquote>
<br>
<pre class="moz-signature" cols="72">Jules
--
Julian Field MEng CEng CITP MBCS MIEEE MACM
Trafalgar: Northwesterly but cyclonic at first in southeast, and later in
north, 4 or 5. Slight or moderate. Occasional rain. Good, occasionally
moderate.
<a class="moz-txt-link-abbreviated" href="http://www.Zend.To">www.Zend.To</a>
Twitter: @JulesFM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
</pre>
</body>
</html>