programming

Well, it's been an incredibly long time since I've written anything, so here's a little something to get started again.

I wrote a in-house Drupal module for one-use ticket file streaming. Basically, a unique identifier is used to stream the file, then is discarded, making the url invalid after one use. Everything worked fine for logged-in users, but just today I noticed a giant hole: users who are not logged in can access the file as much as they want, thanks to Drupal's caching system.

A while ago I submitted a patch for the Drupal bio module that added the option to force users to create a bio when they first log in. That patch is still in development, but it’s now getting merged in with a new patch by Webchick that is adding some really great functionality. Basically, the new patch will let you define fields that you want to appear on the user registration page.