A Critical Security Flaw was discovered in RSS Package. Under the right conditions the security flaw can expose one's server to arbitrary creation and overwrite of server files and folders. This flaw effects all versions of bitweaver prior to 2.6.0. Details here …

You are strongly urged to apply the patch or upgrade to 2.6.1 or later

There is only one file to replace in the rss package: rss_inc.php. To replace it manually, […

Trying to stick to our seasonal release schedule, we have put out NEW 09-APR-2009 bitweaver2.6_RC2.zip. To see what's new, see the ReleaseTwoChangeLog. Please download the zip, or at least beat on the test server and let us know of any issues.

We have created bitweaver2.5 in the builds directory. This will go into sf.net release later today, unless I hear someone scream.

Please test now. Either download a copy for yourself, or register at http://testing.bitweaver.org and push all the bells and whistles you can. That site will be nuked shortly.

We need help running administrivia for the release. Please volunteer.

Along with this new release, we have changed our approach to releasing. For 5 years now (fear), we have been very conservative releasing rock solid releases that have locked schemas intermi…

Here is a cool graph created by /nickpalmer from our CVS source commits:


Bitweaver Code_Swarm from Nick Palmer on Vimeo.

bitweaver is community powered software. All of our contributors help with bitweaver because that enables them to complete their own endeavours, be it personal or professional. With our increased number of commits and features, bitweaver is looking for some talented individuals to help us grow. Any and all help is welcome, however, we do have several particular needs:

• Project Manager 1 position - This is an Project Admin level position open for anyone with a strong sense of organization, and a passion for web technology. Coding skills not required.
• Community Manager 2 positions - Help nuture and lead the community by tending to our forums, blogs, and outreach to other websites. Coding skills not required.
• Release Manager 2 positions - URGENT Unix shell guru need to get our ReleaseProcess going when so we can improve our release frequency. Also tends the bug database . Coding skills not required.
• Webmaster 1 position - Upkeep of the entire bitweaver.org website, in particular the wiki and usability improvements. No technical skills required, just a power user knowledge of bitweaver.
• Software Developers are always welcome. Top notch coding skills required.

If interested, please contact us on IRC or the bitweaver-core mailing list.

A significant new utility has been added to the TreasuryPackage: A script for converting it into your own custom gallery package. You say, "a custom gallery package? wha? who cares?, a gallery is a gallery is a gallery". So you might think, but think again. One of the great things about Treasury is that its generic, galleries with items and sub galleries in them. You can store anything in there. However, this is also its weakness for people looking for more specific gallery-to-item relationships. If you want to have say a gallery of data uploads, say word processing documents for example, or podcasts and audio episodes, would you want those all mixed in Treasury? And if you had those things on your site and did a search, would you want all results to say "TreasuryItems" even though some are Documents, and others are Podcast Episodes? With a new shell script included with Treasury you can convert the package to unique content types so that you can customize the package for those content types.

In Treasury you'll now find mkpackage.sh. You can run this file on the command line to convert Treasury to any package you want, and you can replace the content types of the TreasuryGallery and TreasuryItem with your own custom names. A great example is to consider if you want a PodcastsPackage. Podcasts are basically rss feeds of related mp3 files. Using the Treasury we can host multiple podcast programs, each with its own feed. Treasury Galleries are converted to Podcasts and Treasury Items are converted to episodes. Using the included shell script we just run:


and poof! we have a Podcasts package with unique content types. You can then add to this package if you want to customize it even further.

Because Treasury does not make perfect podcast rss feeds (after all its a general gallery package and does not include special rss tags for iTunes and such) we've created a few extra files that you can download as a podcasts kit. This has a special feeds file and some templates that have been customized to make your podcasts layout look nice. This kit also shows how with just a little tweaking of a TreasuryPackage conversion you can make new robust features for your website.

The great thing about this too is, by creating new content types from Treasury, you can have multiple instances of Treasury installed on your site, each a conversion from the original package, each tailored for a specific use.

Hope you enjoy.