Imiphumela yokuqala yokuhlaziywa kwesigameko esihlobene nokuhlonzwa kwezenzo ezinonya ezimbili endaweni ye-Git yephrojekthi ye-PHP enomnyango ongemuva ovuliwe lapho kuthunyelwa isicelo esinesihloko esiklanywe ngokukhethekile Somenzeli Womsebenzisi ishicilelwe. Ngesikhathi sokutadisha iminonjana yemisebenzi yabahlaseli, kwafinyelelwa esiphethweni sokuthi iseva ye-git.php.net ngokwayo, lapho kwakukhona khona indawo yokugcina i-git, ayizange igqekezwe, kodwa isizindalwazi esinama-akhawunti abathuthukisi bephrojekthi sonakaliswe. .
Kungenzeka ukuthi abahlaseli bakwazile ukulanda isizindalwazi somsebenzisi esigcinwe ku-DBMS kuseva ye-master.php.net. Okuqukethwe kwe-master.php.net sekuthuthelwe kakade kuseva entsha ye-main.php.net efakwe kusukela ekuqaleni. Wonke amaphasiwedi onjiniyela asetshenziswa ukufinyelela ingqalasizinda ye-php.net asethwa kabusha futhi inqubo yokuwashintsha yaqalwa ngefomu elikhethekile lokuthola iphasiwedi. Amakhosombe we-git.php.net kanye ne-svn.php.net ahlala efundwa kuphela (ukuthuthukiswa kuhanjiswe ku-GitHub).
Ngemuva kokutholakala kwesenzo sokuqala esinonya esenziwe nge-akhawunti ka-Rasmus Lerdorf, umsunguli we-PHP, kwacatshangwa ukuthi i-akhawunti yakhe igqekeziwe futhi u-Nikita Popov, omunye wabathuthukisi ababalulekile be-PHP, wahlehlisa izinguquko futhi wavimba amalungelo okuzibophezela. i-akhawunti eyinkinga. Ngemva kwesikhathi esithile, ukuqaphela kwafika ukuthi ukuvinjelwa akwenzi mqondo, njengoba ngaphandle kokuqinisekisa ukuzibophezela usebenzisa isiginesha yedijithali, noma yimuphi umhlanganyeli onokufinyelela ku-php-src repository angenza ushintsho ngokufaka igama lombhali ongelona iqiniso.
Okulandelayo, abahlaseli bathumela ukuzinikela okunonya egameni likaNikita ngokwakhe. Ngokuhlaziya izingodo zesevisi ye-gitolite, esetshenziselwa ukuhlela ukufinyelela kumakhosombe, kwenziwa umzamo wokunquma umhlanganyeli owenze izinguquko ngempela. Ngaphandle kokufakwa kokubalwa kwezimali kwazo zonke izibophezelo, akukho okufakiwe kulogi ngezinguquko ezimbili ezinonya. Kwaba sobala ukuthi kukhona ukuyekethisa kwengqalasizinda, njengoba izibophezelo zengezwe ngokuqondile, ngokudlula uxhumano nge-gitolite.
Iseva ye-git.php.net yakhutshazwa ngokushesha, futhi inqolobane eyinhloko yadluliselwa ku-GitHub. Ngokushesha, kwalibaleka ukuthi ukufinyelela indawo yokugcina, ngaphezu kwe-SSH usebenzisa i-gitolite, kube nokunye okokufaka okukuvumela ukuthi uthumele imisebenzi nge-HTTPS. Kulesi simo, i-git-http-backend yasetshenziswa ukuze ihlanganyele ne-Git, futhi ukuqinisekiswa kwenziwa kusetshenziswa iseva ye-Apache2 HTTP, eqinisekise imininingwane ngokufinyelela kusizindalwazi esiphethwe ku-DBMS kuseva ye-master.php.net. Ukungena ngemvume akuvunyelwe kuphela ngokhiye, kodwa futhi nephasiwedi evamile. Ukuhlaziywa kwamalogi weseva ye-http kuqinisekise ukuthi izinguquko ezinonya zengezwe nge-HTTPS.
Lapho kufundwa izingodo, kwavezwa ukuthi abahlaseli abazange baxhumane okokuqala, kodwa ekuqaleni bazama ukuthola igama le-akhawunti, kodwa ngemva kokuyikhomba, bangena ekuzameni kokuqala, i.e. babazi amagama ayimfihlo kaRasmus noNikita kusenesikhathi, kodwa bengakwazi ukungena kwabo. Uma abahlaseli bekwazile ukufinyelela ku-DBMS, akucaci ukuthi kungani bengazange basebenzise ngokushesha ukungena okulungile okushiwo lapho. Lokhu kwehluka akukakayitholi incazelo ethembekile. Ukugebenga kwe-master.php.net kuthathwa njengesimo okungenzeka kakhulu, njengoba lesi siphakeli sasebenzisa ikhodi endala kakhulu kanye ne-OS ephelelwe yisikhathi, ebikade ingabuyekezwa isikhathi eside futhi ibe sengozini engashicilelwe.
Izenzo ezithathiwe zihlanganisa ukufakwa kabusha kwendawo yeseva ye-master.php.net kanye nokudluliselwa kweskripthi enguqulweni entsha ye-PHP 8. Ikhodi yokusebenza ne-DBMS ishintshiwe ukuze isebenzise imibuzo enepharamitha eyenza kube nzima ukushintshwa kwekhodi ye-SQL. I-algorithm ye-bcrypt isetshenziselwa ukugcina ama-hashi ephasiwedi kusizindalwazi (phambilini, amagama ayimfihlo ayegcinwa kusetshenziswa i-MD5 hash engathembekile). Amagama ayimfihlo akhona asethwe kabusha futhi ucelwa ukuthi usethe iphasiwedi entsha ngefomu lokuthola kabusha iphasiwedi. Njengoba ukufinyelela kumakhosombe we-git.php.net kanye ne-svn.php.net nge-HTTPS kuboshelwe kumahashi e-MD5, kwanqunywa ukuthi kushiye i-git.php.net kanye ne-svn.php.net kumodi yokufunda kuphela, futhi kuphinde kuhanjiswe konke. asele kubo amakhosombe esandiso se-PECL ku-GitHub, afana nendawo yokugcina ye-PHP.
Source: opennet.ru