Extension talk:Semantic Need
From MediaWiki.org
Contents
| Thread title | Replies | Last modified |
|---|---|---|
| Code review | 0 | 16:38, 4 May 2012 |
| Still under development? | 1 | 17:30, 4 February 2012 |
| Difference to Semantic Gardening | 1 | 16:40, 6 November 2011 |
- General:
- Don't use closing ?>, ever.
- $wgExtensionMessagesFiles is supported since 1.16, this check makes no sense.
- Don't use SMW-style localisation, it makes no sense in current MW versions.
- Don't use comparison operators with $wgVersion, it's unreliable. Use version_compare().
- Don't use global objects like $wgArticle, instead use RequestContext (for example, from $out).
- Don't use superglobals like $_POST, there's WebRequest for that.
- Don't create tables with hardcoded SQL, instead use LoadExtensionSchemaUpdates hook.
- While I don't see an SQL injection after a brief glance, all DB code is extremely clumsy and looks like there's a lack of understanding what Database::tableName() is for: it's for building table names with prefixes (using $wgDBprefix and $wgSharedTables), not for constructing filed names. All this code will fail with non-empty table prefix.
- SNE.php:
echo <<<EOT
To install my extension, put the following line in LocalSettings.php:
require_once( "$IP/extensions/SemanticNeed/SNE.php" );
EOT;
Double register_globals/XSS vulnerability, as it actually tries to substitute $IP.
-
- What Semantics from the people means?
- Use 'descriptionmsg' with l10n instead of 'description'.
- No need in global $wgVersion;
- SNEBox.php:
- Where is $sneBox defined? Looks like a register_globals vulnerability.
- SNEHooks.php:
- Don't include scripts and styles directly, use ResourceLoader.
Max Semenik (talk)
Hi, I accidentally stumbled upon this extension today. It looks like an interesting one to me. Is it still under active development? The download link is currently protected. Cheers
Hi,
The extention is at its completion phase. Feel free to look at the new version of the wiki page for it. There is some new functionality added to it and the final version will be available in a month. To download the extention just follow this link https://waves1.fzi.de/svn/waves/trunk/SemanticNeed/ and enter as credentials Username/Password "anonymous".
Regards
How is this different from Semantic Gardening, part of SMW+? Is it just a stand-alone version of the same?
--Aquatiki 14:56, 18 September 2010 (UTC)
-
- This extension is different from Semantic Gardening. Semantic Need analyzes SMW inline queries to give users hints on missing metadata based on actual information needs. Semantic Gardening rather does something like consistency checks on the existing semantic content, but does not tell you which annotationas are "missing" in your Wiki. You might want to have a look at the slides referenced on the main description page of this extension.
--Hhappel 09:39, 19 September 2010 (UTC)
