Hi

we have been made aware that there is another possible security bug in TSEP.

There are multiple PHP remote file inclusion vulnerabilities in TSEP 0.942 and earlier. These allow remote attackers to execute arbitrary PHP code via a URL in a parameter.
Please make sure your webserver does not allow execution of code which is comming from an external URL! This is a HIGHLY dangerous vulnerability.

Also again the hint that you should protect the "include" and the "admin" directory using .htaccess!

We also want to use this way to ask anyone reading this if you would be interested in taking part in developping TSEP. We have no time at the moment and would like to keep TSEP alive - and not only fix bugs, but also improve the program. Please get in touch with the administrator of the project using this email address (remove spaces and subsitute -at- by @):
admin 07 -at- tsep.info
Thanks

Hi

due to a bug ( http://sourceforge.net/forum/forum.php?thread_id=1546639&forum_id=369628 ) there is a security threat in TSEP. Since there are more then 1 file containing the problem please protect your include and admin directory with .htaccess!
( Same as we describe in the documentation:
http://www.tsep.info/tsep-latest/docs/install.php#security )

Hi

This newsletter is the 4th and our intention is to point out what's going on in TSEP development.

Topics in this newsletter:

* Gathering a new team
* TSEP ready for download directly from SVN
* Sitebar - Translation broken

-= Gathering a new team =-
--------------------------
We are gathering a new team.
If you want to join the development /administration team, please email me:
olaf /@/ tsep /./ info
We hope we can start work soon and that we will be able to release a better version in a not to fer future.

-= TSEP ready for download directly from SVN =-
-----------------------------------------------

In the path of gathering a new team, we have used the chance we got from Sourceforge to publish the latest code version(s) on the SVN. SVN is a successor of CVS as we see it.
Please feel free to download from there the very latest - not stable (!) - code version. (Absolutely NO support if you use the SVN!)

https://svn.sourceforge.net/svnroot/tsep/tsep-svn/trunk/

-= Sitebar - Translation broken =-
----------------------------------
At this time it's not possible for the translators to translate anymore the way it used to be. I have installed a new version of Sitebar which caused this. I hope to find either a new solution of install another instance so that translation can be done again. Which ever, it should be finished on time for a new version.

This newsletter is the 3rd and our intention is still to show you some special tricks, new features and maybe some software recommendation we as team have available for you. But we also want to point out what's going on in TSEP development.

Topics in this newsletter:

* Search Suggest?
* We lost ...
* Progress
* DBDesigner4
* Sitebar - Online Bookmarks

-= Search Suggest? =-
---------------------
Ever seen -Google Suggest-? Ever thought -Would be great to have that on my site-? And thought -Why doesn't TSEP have that-? Well we are working on it already.

-= We lost ... =-
-----------------
some information from you. If you have taken part in the feedback after the development process, this data did not get saved in our database due to an error which was discovered and removed on October 24th. If you wrote feedback containing suggestions, feature requests etc. please do not hesitate to email us those suggestions and / or post them to the sourceforge forum. Be reasured - we care for our users.


-= Progress =-
--------------
TSEP is making progress but at this time it's really slow. We have been caught up in discussions about further development, versions etc. But - we are on it. We have been busy doing brainwork which we hope will make TSEP more future safe. We have developed a paper for us and all TSEP team members which points out direction etc. Not that this is done we hope we can speed up development (coding) again.

-= DBDesigner4 =-
-----------------
What is DBDesigner 4? (free, open source)
DBDesigner 4 is a visual database design system that integrates database design, modeling, creation and maintenance into a single, seamless environment. It combines professional features and a clear and simple user interface to offer the most efficient way to handle your databases. All MySQL specific features have been built in to offer the most convenient way to design and keep control of your MySQL-Databases.
DBDesigner is located at http://www.fabforce.net/dbdesigner4

-= Sitebar - Online Bookmarks =-
--------------------------------
What is SiteBar? (free, open source)
SiteBar is a solution for people who use multiple browsers or computers and want to have their bookmarks available from anywhere without need to synchronize them or take them along. The bookmarks are stored on a server - this could be a public server or your own server running our free software. The bookmarks are displayable/modifiable in almost any standards compliant browser.
Sitebar is located at http://www.sitebar.org/

Hi

This newsletter is the second and our intention is to show you some special tricks, new features and maybe some software recommendation we as team have available for you.

Topics in this newsletter:
---------------------------
* Concerning TSEP releases
* Newsletter Cycle
* Additional help: Movies
* new phpcrawl version
* Plans for the next version

-= Concerning TSEP releases =-
------------------------------
More Frequent Releases! We have decided to release a new version every 3 months. The planned release dates are
December 9th 2005
March 9th 2006
June 9th 2006
September 9th 2006

We will be releasing additional versions if needed (because too many errors people report or extensive new features we want to make available sooner.)

We have also agreed to start a new system for the version numbers.
The versions we release on the regular (see above) dates will have either 0 or a 5 in the last position of the version number. This leaves room for us to release versions inbetween (bug fixes, features)

-= Newsletter Cycle =-
----------------------
We will send a newsletter once a month starting at the time of the first newsletter.

This means 2 newsletters until a new version is released. The 3rd newsletter will be release around the same time as a new version. This "last" will have details about the upcomming version, the other 2 will tell some interesting facts: Tips & Tricks, Links to must-have-programs and also show you (our users/interested audience), what we are working on.

-= Additional help: Movies =-
-----------------------------
We will start creating demo and help movies for you - our user. We will use a free tool called WINK - or Demostudio. They can produce Flash movies (.swf) which can be viewed in browsers and stand alone players. By using this opportunity we hope to show simple but also complex behaviour and workpath with TSEP much easier. We will make the movies available on our website as soon as they have been created.
Get your free (not opensource) Wink: http://www.debugmode.com/wink/
An open source alternative: Demostudio can be downloaded from http://sf.net/projects/demostudio

-= new phpcrawl version =-
--------------------------
A new version of the phpcrawl script has been released. You can download it from
http://phpcrawl.cuab.de/

-= Plans for the next version =-
--------------------------------
Things we have in mind for the next version:
* The admin can decide which page encoding to send, or not to send any
* setup.php : Several fixes have already been applied
* We started to create a more clear directory structure for TSEP. This will enable all users to apply their own changes to TSEP without breaking their configuration and/or working TSEP setup!

Hi
We try to keep the newsletters short and interesting. We will provide an
archive on our website as well.

This newsletter is the first and our intention is to show you some special
tricks, new features and maybe some software recommendation we as team have
available for you.

Topics in this newsletter:
---------------------------
* TSEP installation vastly improved
* Automatic Stopword Generation
* ContentImages
* Automatic indexing under Windows

-= TSEP installation vastly improved =-
---------------------------------------
TSEP version 0.942 introduces a new and improved setup procedure which helps
you get TSEP up and running in no time. It's not only pleasing to the eye but
effectively takes the pain out of upgrading to a new version by copying your
old settings, indexes, etc. to the new version. It also makes you aware of
security issues that you need to take care of.

As with any descent installer it gives you full control over what tasks it will
perform.


-= Automatic Stopword Generation =-
-----------------------------------
Stopwords can now be automatically generated based on the occurrences of a
typical word included in a website. The administrator has the ability to enter
an integer value of stopwords. The value entered will be the number of
stopwords searched for. The most frequently found words will then be added to
the stopwords database.

-= ContentImages =-
-------------------
Usually, searchresults are shown in textformat as page title, part of the
content and the link to the page.
ContentImages can be shown in addition.

ContentImages are small screenshots of your webpages, also known as thumbnails.
These ContentImages can be created automatically!

-= Automatic indexing under Windows =-
--------------------------------------
A new (nearly) ready-to-run example file has been added to directory tsep/admin/
example:
TSEPautoIndexing.cmd
It is an equivalent to TSEPautoIndexing.sh and is intended to launch the
indexer from the MS Windows Command Line (or via at-command / task-planer).

Hi

we have been made aware that there is another possible security bug in TSEP.

There are multiple PHP remote file inclusion vulnerabilities in TSEP 0.942 and earlier. These allow remote attackers to execute arbitrary PHP code via a URL in a parameter.
Please make sure your webserver does not allow execution of code which is comming from an external URL! This is a HIGHLY dangerous vulnerability.

Also again the hint that you should protect the "include" and the "admin" directory using .htaccess!

We also want to use this way to ask anyone reading this if you would be interested in taking part in developping TSEP. We have no time at the moment and would like to keep TSEP alive - and not only fix bugs, but also improve the program. Please get in touch with the administrator of the project using this email address (remove spaces and subsitute -at- by @):
admin 07 -at- tsep.info
Thanks

Hi

due to a bug ( http://sourceforge.net/forum/forum.php?thread_id=1546639&forum_id=369628 ) there is a security threat in TSEP. Since there are more then 1 file containing the problem please protect your include and admin directory with .htaccess!
( Same as we describe in the documentation:
http://www.tsep.info/tsep-latest/docs/install.php#security )

Hi

This newsletter is the 4th and our intention is to point out what's going on in TSEP development.

Topics in this newsletter:

* Gathering a new team
* TSEP ready for download directly from SVN
* Sitebar - Translation broken

-= Gathering a new team =-
--------------------------
We are gathering a new team.
If you want to join the development /administration team, please email me:
olaf /@/ tsep /./ info
We hope we can start work soon and that we will be able to release a better version in a not to fer future.

-= TSEP ready for download directly from SVN =-
-----------------------------------------------

In the path of gathering a new team, we have used the chance we got from Sourceforge to publish the latest code version(s) on the SVN. SVN is a successor of CVS as we see it.
Please feel free to download from there the very latest - not stable (!) - code version. (Absolutely NO support if you use the SVN!)

https://svn.sourceforge.net/svnroot/tsep/tsep-svn/trunk/

-= Sitebar - Translation broken =-
----------------------------------
At this time it's not possible for the translators to translate anymore the way it used to be. I have installed a new version of Sitebar which caused this. I hope to find either a new solution of install another instance so that translation can be done again. Which ever, it should be finished on time for a new version.

This newsletter is the 3rd and our intention is still to show you some special tricks, new features and maybe some software recommendation we as team have available for you. But we also want to point out what's going on in TSEP development.

Topics in this newsletter:

* Search Suggest?
* We lost ...
* Progress
* DBDesigner4
* Sitebar - Online Bookmarks

-= Search Suggest? =-
---------------------
Ever seen -Google Suggest-? Ever thought -Would be great to have that on my site-? And thought -Why doesn't TSEP have that-? Well we are working on it already.

-= We lost ... =-
-----------------
some information from you. If you have taken part in the feedback after the development process, this data did not get saved in our database due to an error which was discovered and removed on October 24th. If you wrote feedback containing suggestions, feature requests etc. please do not hesitate to email us those suggestions and / or post them to the sourceforge forum. Be reasured - we care for our users.


-= Progress =-
--------------
TSEP is making progress but at this time it's really slow. We have been caught up in discussions about further development, versions etc. But - we are on it. We have been busy doing brainwork which we hope will make TSEP more future safe. We have developed a paper for us and all TSEP team members which points out direction etc. Not that this is done we hope we can speed up development (coding) again.

-= DBDesigner4 =-
-----------------
What is DBDesigner 4? (free, open source)
DBDesigner 4 is a visual database design system that integrates database design, modeling, creation and maintenance into a single, seamless environment. It combines professional features and a clear and simple user interface to offer the most efficient way to handle your databases. All MySQL specific features have been built in to offer the most convenient way to design and keep control of your MySQL-Databases.
DBDesigner is located at http://www.fabforce.net/dbdesigner4

-= Sitebar - Online Bookmarks =-
--------------------------------
What is SiteBar? (free, open source)
SiteBar is a solution for people who use multiple browsers or computers and want to have their bookmarks available from anywhere without need to synchronize them or take them along. The bookmarks are stored on a server - this could be a public server or your own server running our free software. The bookmarks are displayable/modifiable in almost any standards compliant browser.
Sitebar is located at http://www.sitebar.org/

Hi

This newsletter is the second and our intention is to show you some special tricks, new features and maybe some software recommendation we as team have available for you.

Topics in this newsletter:
---------------------------
* Concerning TSEP releases
* Newsletter Cycle
* Additional help: Movies
* new phpcrawl version
* Plans for the next version

-= Concerning TSEP releases =-
------------------------------
More Frequent Releases! We have decided to release a new version every 3 months. The planned release dates are
December 9th 2005
March 9th 2006
June 9th 2006
September 9th 2006

We will be releasing additional versions if needed (because too many errors people report or extensive new features we want to make available sooner.)

We have also agreed to start a new system for the version numbers.
The versions we release on the regular (see above) dates will have either 0 or a 5 in the last position of the version number. This leaves room for us to release versions inbetween (bug fixes, features)

-= Newsletter Cycle =-
----------------------
We will send a newsletter once a month starting at the time of the first newsletter.

This means 2 newsletters until a new version is released. The 3rd newsletter will be release around the same time as a new version. This "last" will have details about the upcomming version, the other 2 will tell some interesting facts: Tips & Tricks, Links to must-have-programs and also show you (our users/interested audience), what we are working on.

-= Additional help: Movies =-
-----------------------------
We will start creating demo and help movies for you - our user. We will use a free tool called WINK - or Demostudio. They can produce Flash movies (.swf) which can be viewed in browsers and stand alone players. By using this opportunity we hope to show simple but also complex behaviour and workpath with TSEP much easier. We will make the movies available on our website as soon as they have been created.
Get your free (not opensource) Wink: http://www.debugmode.com/wink/
An open source alternative: Demostudio can be downloaded from http://sf.net/projects/demostudio

-= new phpcrawl version =-
--------------------------
A new version of the phpcrawl script has been released. You can download it from
http://phpcrawl.cuab.de/

-= Plans for the next version =-
--------------------------------
Things we have in mind for the next version:
* The admin can decide which page encoding to send, or not to send any
* setup.php : Several fixes have already been applied
* We started to create a more clear directory structure for TSEP. This will enable all users to apply their own changes to TSEP without breaking their configuration and/or working TSEP setup!

Hi
We try to keep the newsletters short and interesting. We will provide an
archive on our website as well.

This newsletter is the first and our intention is to show you some special
tricks, new features and maybe some software recommendation we as team have
available for you.

Topics in this newsletter:
---------------------------
* TSEP installation vastly improved
* Automatic Stopword Generation
* ContentImages
* Automatic indexing under Windows

-= TSEP installation vastly improved =-
---------------------------------------
TSEP version 0.942 introduces a new and improved setup procedure which helps
you get TSEP up and running in no time. It's not only pleasing to the eye but
effectively takes the pain out of upgrading to a new version by copying your
old settings, indexes, etc. to the new version. It also makes you aware of
security issues that you need to take care of.

As with any descent installer it gives you full control over what tasks it will
perform.


-= Automatic Stopword Generation =-
-----------------------------------
Stopwords can now be automatically generated based on the occurrences of a
typical word included in a website. The administrator has the ability to enter
an integer value of stopwords. The value entered will be the number of
stopwords searched for. The most frequently found words will then be added to
the stopwords database.

-= ContentImages =-
-------------------
Usually, searchresults are shown in textformat as page title, part of the
content and the link to the page.
ContentImages can be shown in addition.

ContentImages are small screenshots of your webpages, also known as thumbnails.
These ContentImages can be created automatically!

-= Automatic indexing under Windows =-
--------------------------------------
A new (nearly) ready-to-run example file has been added to directory tsep/admin/
example:
TSEPautoIndexing.cmd
It is an equivalent to TSEPautoIndexing.sh and is intended to launch the
indexer from the MS Windows Command Line (or via at-command / task-planer).