<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-forward-container">
<pre>On 8/7/2012 1:22 PM, Frank Karlitschek wrote:
>> This is a very nice idea Frank, coz it lowers the needed user experience.
>> >Nice work:-)
>> >
>> >BUT. OC is a very sensible piece of software because u store a lot of sensible data in it.
>> >
>> >I think the zip file should be some kind of hash checked.
>> >Where to get a secure hash?
>> >If u just compare it to a hash that stands near to the zip on the webpage, it would be useless.
>> >So what about kind of https page with a signed/trusted cert, where the installer could fetch the md5 of the actual release?With this signed page the installer could check that it did not download a malicious/harmfull piece of software.
> Good point. I will add this.
>
> Frank
I think the installer should have the hash of the latest release (not the development version). This would require making a new installer for
every release but i think that would be doable. If the hash doesn't match the user should be informed showing the problem and information
about the files. I am not sure if it would be wise to add a option to continue anyway. Most users who need the script would click continue
anyway regardless of whats written in the warning message. I think for the development release there is no real need for a precooked script as
most of the development users would know how to change it.
I want to test the script on my hosting but i had to change settings to use PHP5.3 that will take some time to apply. Ill send my feedback about
it when i tested it on my hosting.
Settings appears to been applied now; At step 3 i received the following error message:
Cannot modify header information - headers already sent by path/to/file/<b>web-installer_setup-owncloud.php</b> on line <b>222
</b>At the looks of it ownload was downloaded and installed. The webinstaller was deleted. So no problem there. Browsing to
/owncloud/ allowed me to compete the setup. A quick look into OC suggested that everything is working there.
Maybe it would be nice to select the folder of installation. Current directory or subdirectory. And the possibly to give it a custom name (for subdirectory).
Nice work.
Pimmetje
</pre>
<br>
<br>
</div>
<br>
</body>
</html>