Updating flarum from Bazaar

luceos

[deleted] we will add support to update flarum in bazaar if possible. Why would you need a separate extension that would do the same. In addition I expect self updates to be available in a stable version of flarum.

[deleted]

luceos Why would you need a separate extension that would do the same.

I do recall someone telling me that such feature won't make it to bazaar

luceos

[deleted] nope. We will definitely try to do it.

[deleted]

luceos awesome!!!!

Btw just for reference, here's what i was told a while ago :

clarkwinkelmann Extension update is coming soon. There are however no plans to allow a Flarum core update from Bazaar. You need to follow official update instructions for that ?

Kyrne

[deleted] also for future reference @luceos is the (one of the) developer(s) of bazaar

[deleted]

Kyrne yeah i know ?

[deleted]

This happened to me a while ago but I forgot to mention it here

I installed an extension using bazaar which crashed my forum so I figured out it was incompatible.... well now I forgot which one it is.... is there a way to find out so I can uninstall it the old fashioned way (using composer) ?

Kyrne

[deleted] look at the bottom of your composer.json requirements. It's likely that one

[deleted]

Kyrne alright thanks!

meetdilip

Auto access to your hosting / server is a huge security risk. MyBB developers once reminded me that if the forum got compromised, you would be handing over access to server as a gift that way. I know they said the truth.

The above discussion happened when I mentioned about some forums have the ability to install plugins by uploading through ACP. MyBB asks you to upload using FTP.

Kyrne

meetdilip flagrow.io doesn't send any data to your forum to install things, all the commands are local. The only thing that flagrow.io does is send the the list of packages, and get statistics about your forum.

clarkwinkelmann

Booterbrod please don't hijack multiple posts with the same question.

meetdilip Auto access to your hosting / server is a huge security risk

Installing extensions is a huge security risk ? . In the case of Bazaar feel free to review the code before installing it if you want to be certain of its inner working ? (Spoiler alert: we don't grant ourself SSH or FTP access to your server)

Booterbrod

Kyrne
Please, make it possible to embed banners in your posts, but so the system place it automatically, so you don't have to do it all the time.

Kyrne

Booterbrod what banners?

Booterbrod

Kyrne
Well, if I want to have my banner under my post. Let's say, to promote my website or a service. You might call it a signature.
Plus it would be nice to have an option to place the banners on my forum, so I can make some money.

meetdilip

I am not accusing anyone of bad code. I even gave you the source from where I got this view point. I like to believe there is some truth in it. But again, I could be wrong.

luceos

meetdilip there are different ways of updating. Off-site systems, taking infinitewp for example, take direct control of the complete installation running arbitrary commands through an inside proxy I guess. Bazaar runs only composer actions and if we do run updates from outside we will only allow specific limited actions and implement very strong authorization (currently we use oauth2 principles).

@Kyrne my apologies for hijacking this track.

jordanjay29

Split out the Bazaar discussion.

[deleted]

jordanjay29 wow how did you do that?

luceos

[deleted] using davis/flarum-ext-split

A flagrow based version of this is bound to be released soon that offers a bit more functionality (with approval from davis to pick the extension up again).