www/dotproject out of date and vulnerable

[Fred Cox]

For my second iteration of installing this through the
original port, I was able to install mysql323-client
and php4 before installing dotproject, and everything
worked.  So it appears that php4-mysql will use
mysql323-client if it's already installed.  I haven't
dug through the code to see how that is done, though.

There are patches out there for making things work
with MySQL 4 and 5.  However, they are not officially
supported.

I am debating putting the patches in for MySQL 5, but
if someone goes to the trouble of installing MySQL
3.23 before installing php4-mysql and dotproject, I
think it will break.

Is there any way of getting the dotproject dependency
on MySQL 3.23 to be stronger than the php4-mysql
default dependency on mysql5-client?

Thanks,

Fred

--- Kris Kennaway <kris at obsecurity.org> wrote:

> On Tue, Sep 19, 2006 at 12:23:55PM -0700, Fred Cox
> wrote:
> > This is the first time I've tried to modify a
> port,
> > and I'm having a bit of trouble because this port
> > requires MySQL 3.23 and PHP 4.  Those dependencies
> > weren't specified in the port before.
> > 
> > I've gotten PHP4 by adding:
> > 
> > USE_PHP=        gd mysql session
> > DEFAULT_PHP_VER=4
> > WANT_PHP_WEB=   yes
> > IGNORE_WITH_PHP=5
> > 
> > Trying to get it to install MySQL 3.23 client
> seems to
> > be stymied by the php4-mysql default dependency on
> the
> > MySQL 5 client.  I haven't actually figured out
> how it
> > specifies this dependency, since the
> > php4-mysql/Makefile is very empty.
> 
> Basically if php4-mysql wants mysql5 then there is
> no way around it
> for your port.  You will need to create a
> php4-mysql3 port that
> specifies the mysql 3 dependency and use that
> instead.  Is it really a
> requirement to use this old version of mysql?
> 
> Kris
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com