-
Notifications
You must be signed in to change notification settings - Fork 226
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
QST - Quiz/Survey/Test #574
Comments
No version control/git repository? 🤔 Sourceforge does provide it (example: https://sourceforge.net/p/keepass/code/HEAD/tree/) |
Hi,
The generation of programmers i come from are not concerned with that
per se.
All that is not required to program software if you are the only one
programming it.
I do not let others contribute to the software as security is our
overriding mandate.
And only by doing the programming myself can the integrity of the
software be ensured.
I do not take chances as i have seen many, many decades of other
peoples programming.
I do take feature requests, and implement features as users ask for
them or i introduce them myself.
Only the most recent version of the software is ever available.
There is a sudo changelog in README.txt.
QST is one program (QST.pm) instead of many php files, so only one file
is ever changed.
What you found may be part of summernote (the WYSIWYG editor) or
mathjax (creates/displays math and chemistry equations).
If you could name the files, i will check them out.
On 2024-02-18 07:05, nodiscc wrote:
No version control/git repository? 🤔 Sourceforge does provide it
(example: https://sourceforge.net/p/keepass/code/HEAD/tree/)
The release files contain a few precompiled binaries, minified js
files, apk, etc. for which I can't find the source code.
No changelog?
--
Reply to this email directly, view it on GitHub [1], or unsubscribe
[2].
You are receiving this because you authored the thread.Message ID:
***@***.***>
Links:
------
[1]
#574 (comment)
[2]
https://github.com/notifications/unsubscribe-auth/AJZEHKSIPMGHFGIROFLDJEDYUIDBVAVCNFSM6AAAAABDOCZ7LWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNJRGMZTKMZZGM
--=_b44b05b17c3a2c3bd64a06f054c6daa6
Content-Type: multipart/related;
boundary="=_6cb20c036796dd58dd1a5041df21d062"
--=_6cb20c036796dd58dd1a5041df21d062
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=
=3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen=
eva,sans-serif'>
<p>Hi,</p>
<p> The generation of programmers i come from are not concerned with t=
hat per se.</p>
<p> All that is not required to program software if you are the only o=
ne programming it.</p>
<p> I do not let others contribute to the software as security is our =
overriding mandate.</p>
<p> And only by doing the programming myself can the integrity=
of the software be ensured.</p>
<p> I do not take chances as i have seen many, many decades of=
other peoples programming.</p>
<p> I do take feature requests, and implement features as users ask fo=
r them or i introduce them myself.</p>
<p>Only the most recent version of the software is ever available.</p>
<p> There is a sudo changelog in README.txt.</p>
<p> QST is one program (QST.pm) instead of many php files, so only one=
file is ever changed.</p>
<p> What you found may be part of summernote (the WYSIWYG editor) or m=
athjax (creates/displays math and chemistry equations).</p>
<p> If you could name the files, i will check them out.</p>
<p><br /></p>
<p id=3D"reply-intro">On 2024-02-18 07:05, nodiscc wrote:</p>
<blockquote type=3D"cite" style=3D"padding: 0 0.4em; border-left: #1010ff 2=
px solid; margin: 0">
<div id=3D"replybody1">
<p><br /></p>
<p dir=3D"auto">No version control/git repository? =F0=9F=A4=94 Sourceforge=
does provide it (example: <a href=3D"https://sourceforge.net/p/keepass/cod=
e/HEAD/tree/" target=3D"_blank" rel=3D"noopener noreferrer">https://sourcef=
orge.net/p/keepass/code/HEAD/tree/</a>)<br />The release files contain a fe=
w precompiled binaries, minified js files, apk, etc. for which I can't find=
the source code.<br />No changelog?</p>
<p style=3D"font-size: small; -webkit-text-size-adjust: none; color: #666;"=
—<br />Reply to this email directly, <a href=3D"https://github.com/a=
wesome-selfhosted/awesome-selfhosted-data/issues/574#issuecomment-195133539=
3" target=3D"_blank" rel=3D"noopener noreferrer">view it on GitHub</a>, or =
<a href=3D"https://github.com/notifications/unsubscribe-auth/AJZEHKSIPMGHFG=
IROFLDJEDYUIDBVAVCNFSM6AAAAABDOCZ7LWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUH=
MYTSNJRGMZTKMZZGM" target=3D"_blank" rel=3D"noopener noreferrer">unsubscrib=
e</a>.<br />You are receiving this because you authored the thread.<img src=
***@***.***" width=3D"1" height=3D=
"1" /><span style=3D"color: transparent; font-size: 0; display: none; visib=
ility: hidden; overflow: hidden; opacity: 0; width: 0px; height: 0px; max-w=
idth: 0; max-height: 0; mso-hide: all;">Message ID: <span><awesome-selfh=
osted/awesome-selfhosted-data/issues/574/1951335393</span><span>@</span><sp=
an>github</span><span>.</span><span>com></span></span></p>
</div>
</blockquote>
<p><br /></p>
</body></html>
…--=_6cb20c036796dd58dd1a5041df21d062
Content-Transfer-Encoding: base64
Content-ID: ***@***.***>
Content-Type: image/gif;
name=blocked.gif
Content-Disposition: inline;
filename=blocked.gif;
size=118
R0lGODlhZAAyAIAAAPrOzgAAACH5BAAAAAAALAAAAABkADIAAAJNhI+py+0Po5y02ouz3rz7D4bi
SJbmiabqyrbuC8fyTNf2jef6zvf+DwwKh8Si8YhMKpfMpvMJjUqn1Kr1is1qt9yu9wsOi8fksvls
KwAAOw==
--=_6cb20c036796dd58dd1a5041df21d062--
--=_b44b05b17c3a2c3bd64a06f054c6daa6--
|
it's not truly open source unless the source code is visible to everyone and you can audit the code. So you can prove said software is doing its intended purpose, not like a backdoor or anything. We could, of course label this as non-free and add it on to the list, but without the source code, the useful tool will go into obscurity. @nodiscc what are your thoughts? |
I don't presume bad intentions.
A changelog is useful to inform users of breaking changes and new/removed features or breaking changes, but the content in README.txt looks sufficient. Version control is always useful [1] even for a single-person project, especially since security is a concern for you as it provides the ability to cryptographically sign changesets, provides accountability, etc. But it is not a requirement. The main problem is the presence of binary/precompiled files without the accompanying source code:
|
Fair enough, it's not bad intentions, but it'd be nice to inspect source code. |
I will remove the following as they are leftovers from testing and
should not be there:
android_quiz_survey_test.apk
libapreq2-2.17.tar
math.zip
NEXT:
mod_perl-2.0.10-strawberryperl-5.26.1.1-64bit.zip is distributed by
Apache Lounge and can be found on the web.
httpd-2.4.43-win64-VS16.zip is distributed by Apache Lounge and can be
found on the web.
strawberry-perl-5.26.1.1-64bit.msi is distributed by Strawberry Perl and
can be found on the web.
mysql-installer-web-community-5.7.29.0.msi is distributed by MySQL and
can be found on the web.
They are provided for the windows install of QST.
I provide them in the package because they are important in the way QST
scales to large amounts of simultaneous users.
MySQL 5.7 provides a cache in the database which newer versions of MySQL
do not.
In the linux and mac install there is instructions to install them from
the vendor.
On 2024-02-19 12:27, kokomo123 wrote:
So you can prove said software is doing its intended purpose, not like
a backdoor or anything
I don't presume bad intentions.
All that is not required to program software if you are the only one
programming it.
A changelog is useful to inform users of breaking changes and
new/removed features or breaking changes, but the content in README.txt
looks sufficient. Version control is always useful [1] [1] even for a
single-person project, especially since security is a concern for you
as it provides the ability to cryptographically sign changesets,
provides accountability, etc. But it is not a requirement.
The main problem is the presence of binary/precompiled files without
the accompanying source code:
If you could name the files, i will check them out.
$ for i in qst*zip; do als $i |grep -v -E
'(htm|jpg|png|gif|js|css|pm|txt|sql|conf|pdf|pl|/)$'; done
Archive: qst_linux_mac.zip
Length Date Time Name
--------- ---------- ----- ----
2808085 2021-08-06 03:05 qst_linux/android_quiz_survey_test.apk
4413440 2022-12-29 07:35 qst_linux/libapreq2-2.17.tar
363059 2021-05-11 10:33 qst_linux/qst/math.zip
Archive: qst.zip
Length Date Time Name
--------- ---------- ----- ----
2808085 2021-08-06 03:05 qst_gpl/android_quiz_survey_test.apk
4588101 2020-05-01 02:30
qst_gpl/WINQST_files/mod_perl-2.0.10-strawberryperl-5.26.1.1-64bit.zip
10100585 2020-05-01 01:24
qst_gpl/WINQST_files/httpd-2.4.43-win64-VS16.zip
99017793 2020-05-01 15:25
qst_gpl/WINQST_files/strawberry-perl-5.26.1.1-64bit.msi
19488768 2020-05-01 17:38
qst_gpl/WINQST_files/mysql-installer-web-community-5.7.29.0.msi
4413440 2022-12-29 07:35 qst_gpl/libapreq2-2.17.tar
363059 2019-11-08 23:30 qst_gpl/qst/math.zip
Fair enough, it's not bad intentions, but it'd be nice to inspect source
code.
…--
Reply to this email directly, view it on GitHub [2], or unsubscribe [3].
You are receiving this because you authored the thread.Message ID:
***@***.***>
Links:
------
[1] https://en.wikipedia.org/wiki/Version_control#Costs_and_benefits
[2]
#574 (comment)
[3]
https://github.com/notifications/unsubscribe-auth/AJZEHKR3SU6RHMSEYLUMNKLYUORSNAVCNFSM6AAAAABDOCZ7LWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNJTGA2TMNBYHA
|
Alrighty then, feel free to add a PR and we can take a look as that's fine |
Hi,
I removed the math.zip and the google apk and uploaded new zips to
https://sourceforge.net/projects/qstonline/
libapreq2-2.17.tar can be found at
https://httpd.apache.org/apreq/download.cgi
It is used for the Mac OS install.
You guys probably don't see much perl stuff let alone modperl ...
Thanks!
On 2024-02-19 16:21, kokomo123 wrote:
Alrighty then, feel free to add a PR and we can take a look as that's
fine
--
Reply to this email directly, view it on GitHub [1], or unsubscribe
[2].
You are receiving this because you authored the thread.Message ID:
***@***.***>
|
I tried to add a PR, but could not (even with reading the instructions) surmise how to find the qst.zip that you have and compare it to the new qst.zip? I see you likely got it from sourceforge.net, but i don't use their versioning? system either, i just upload new zips. This way users can only download the newest version. |
Yes, it is good.
Much appreciated...
On 2024-02-29 19:46, Ryan Gurnick wrote:
@bobb34 [1] If you can ensure the template in here [2] is still
accurate, I can put the PR in for you.
Let me know if you have any questions. I have not fully reviewed the
entire discussion so please be sure to make any edits discussed
otherwise it will cause both of us extra work. Thanks!
--
Reply to this email directly, view it on GitHub [3], or unsubscribe
[4].
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
@bobb34, can you please verify the demo link. When I go to that URL, I do not see the demo. The demo_url is optional so let me know if we need to remove it. Sorry for the delayed response, been busy. |
Hey, a user must create a Free Account at qstonline.org to try the software. We do not retain their email addresses. |
I am not sure, @nodiscc you think that suffices as a demo? |
@ryangurn I'm not sure, do you think we should allow demos that require sign up? I don't think we should (bad user experience), but I have no strong opinion yet. There is a precedent [1] that leads to the same conclusion. Another one [2] was accepted but it does not require an e-mail address. @bobb34 Is the demo immediately available after signing up, or does the user have to wait for an approval/action on your part? |
We immediately send you an email with your password and you're good to go. We are not interested in selling information, that is not why we write open source software. |
Hi, I updated the link to the demo/signup page. |
Contributing on behalf of @bobb34 for awesome-selfhosted#574
Thanks for taking the time to suggest an addition to awesome-selfhosted!
Please fill out information below (all fields are mandatory unless noted otherwise):
To ensure your issue is dealt with swiftly, please check the following (check the boxes
[x]
):The text was updated successfully, but these errors were encountered: