Discuss mailing list

[Julian DeMarchi <julian AT jdcomputers.com.au>]

On 12/12/2010 06:15 PM, Caleb Langeslag wrote:
> Been curiously looking through the Galium source code tonight and
> noticed some bugs and vulnerabilities within Galium (which NovaKing
> also found a couple hours earlier before I had). Regardless; there's
> SQL injection vulnerabilities throughout Galium, and lack of
> consistent development styles and structure. Therefore; it would
> probably be most sane to just do a complete rewrite of it (which
> wouldn't take all that long to do either) that would be more versatile
> and offer more functionality.
> 
> Thus I'm curious: What you like to see in a rewrite of Galium (if
> we'll still call it such; I'm not the original developer or anything)?

Great idea, I have heavily modified Galium to suit my need. My fork has
SQL protection and additions so that Galium talks to a FRED registry.

My code also uses different methods for zone generation and is
compatible with myDNS out of the box. It also syncs with your DNS
servers, so it automatically updates the named.conf.galium with new
zones. You will need a minimum of 1 web server and 2 DNS servers to run
this version.

Code is not perfect, I am not a developer. If people are interested in
it, I can provide the code.

--julian