Talk:Mod Murmur

From Mumble Wiki
Revision as of 15:40, 25 July 2011 by Mrsdonovan (talk | contribs) (Reverted Ngollan's unilateral article deletion.)
Jump to: navigation, search

Using the "Direct" Method

While the idea of having separate documentation for the channel viewer protocol is good, I do not think the mislabeled "direct" approach should be mentioned here. It is a very ugly hack depending on exposing the server's database file to the world, thus providing neither current information nor any kind of security. If you want to retrieve server information, use the Ice interface together with one of the CVP providers, or make solid proposals towards an alternative as has already been discussed. Ngollan 09:13, 25 July 2011 (UTC)

Having looked at the code and used the plugin, I thought it was very elegant. Did you look at the code very closely? It hardly "exposes the server's database file to the world" and gives the web surfer exactly what they came for, a list of who is on the server and in what channel. I fail to see your point "thus providing neither current information"?? As to your point "nor any kind of security", as if putting the plain-text ICE password in an ini file is great security. My host, Dreamhost who hosts hundreds of thousands of websites, seems fit to give all it's users access to the SQLite3 PHP library by default but not to ZeroC ICE, which should tell you something about how secure ICE is. Also, using SQLite3 to access the Murmur database directly from a PHP file is no less secure then using PHP file to access MySQL, the databases are just in different places. Mod_Murmur is as safe as using ICE and if Mumble developers were worried about their database, they would password protect it, but it isn't.

The point here is that those without access to ICE have no method by which to get channel information out of Mumble and it is a critical problem. The entry here I spent considerable time writing, documents the various options available to create a channel viewer and should be left alone, even if you don't agree with the method. Mrsdonovan 15:40, 25 July 2011 (UTC)