FYI About Phonebo.cx

wardmundy

Nerd Uno
Joined
Oct 12, 2007
Messages
14,922
Reaction score
2,572
I'm a little confused about the focus. FreePBX is a code generator for Asterisk, nothing more. Are we now talking about building a complete ISO "solution"?? That's obviously a much bigger (and much more dangerous) product for anonymous people to be building. It's fairly easy to identify changes that are made in FreePBX. When you introduce a complete operating system, it's a very different beast.
 

chris_c_

Active Member
Joined
Aug 19, 2010
Messages
509
Reaction score
67
What issues?

5.6 and 7 are the only supported versions of PHP right now. http://www.php.net/supported-versions.php
@phonebo.cx Agree with @billsimon As a php developer, think of how much slower the code is running on php 5.4 or 5.5 than on 7.0. It's about a 70% speed improvement to go to php 7.0
So, I suggest do basic minimal work to remove privacy issues from freepbx 13, then move forward quickly to freepbx 14, and focus energy there, remove the privacy issues, 14 is very similar to 13 at the present time, the added benefit is, it has the php 7 support.
Bonus, command line php 7 compatibility checker app https://github.com/sstalle/php7cc
 

billsimon

Experienced in Asterisk, FreePBX, and SIP
Joined
Jan 2, 2011
Messages
929
Reaction score
282
If you had tried to use FreePBX 13 with PHP 5.6 or higher, you would have seen the issues. Obviously you haven't, so why are you even trying to ask?
You're kidding, right?

Code:
[email protected]:~# fwconsole --version
FW Console - FreePBX Utility version 13.0.190.3
[email protected]:~# php -v
PHP 5.6.27-0+deb8u1 (cli) (built: Oct 15 2016 15:53:28)
Copyright (c) 1997-2016 The PHP Group
Zend Engine v2.6.0, Copyright (c) 1998-2016 Zend Technologies
    with Zend OPcache v7.0.6-dev, Copyright (c) 1999-2016, by Zend Technologies
Again, what are you talking about?

(Edited to add: This is a production-status PBX and works flawlessly. No hacking or tricks to make FreePBX 13 work fine with the latest PHP 5.6.)
 

phonebo.cx

New Member
Joined
Jul 25, 2016
Messages
17
Reaction score
3
Location
Mumbai, India
I don't think you understand. It is not our job to argue with you. It is your job to help us. If you do not wish to help, then please do not interact. We do not like troublemakers like you. But check your history! Dashboard was perfectly broken! Many other things did not work, or gave strange errors. You imply that we are liars.

Also many symphony components are non-functional and buggy. CDR fixes were only recently pulled into 13 from 14. You are not watching freepbx git, so why do you try to make out like you are?

Here is a hint for you:

https://github.com/phonebocx/framework/blob/release/14.0/amp_conf/htdocs/admin/libraries/Composer/composer.json

The PHP requirement is php 5.6 in FreePBX 14.

https://github.com/phonebocx/framework/blob/release/13.0/amp_conf/htdocs/admin/libraries/Composer/composer.json

The PHP requirement is PHP 5.3.3 in FreePBX 13.

As you know so much about php, you will obviously know that there are many changes between 5.3 and 5.4, and so on.

We have decided that FreePBX 13 is wrong for our project, and we are using FreePBX 14. That is our decision, not yours.
 
Last edited by a moderator:

wardmundy

Nerd Uno
Joined
Oct 12, 2007
Messages
14,922
Reaction score
2,572
@phonebo.cx: This is a friendly place. We intend to keep it that way. Please take the personal attacks elsewhere. Commenting on your (would-be) project is fair game. To be clear, none of us work for you so kindly treat people with the same respect you expect. Suggesting that individuals are troublemakers or know-it-alls or that someone has called you a liar when they haven't is off limits. Because someone disagrees with you doesn't make them an idiot nor does it make you a liar.
 
  • Like
Reactions: dicko

phonebo.cx

New Member
Joined
Jul 25, 2016
Messages
17
Reaction score
3
Location
Mumbai, India
OK, to clarify what's going on, because there seems to be some confusion.
1. Automatically synchronizing branches between various repositories and preserving all of our changes is actually hard. We thought it would be easy. It's not. However, we think we've solved it. We actually solved it a month or so ago, but never actually started it running.
2. We've never hidden the fact that PhoneBo.cx is a pure GPL fork of FreePBX.
3. Some of us can get easily annoyed. Sorry about that.
4. We haven't looked at FreePBX 13 on PHP 5.6 recently. When we started, it was broken in lots of places. Maybe it's better now.
 

billsimon

Experienced in Asterisk, FreePBX, and SIP
Joined
Jan 2, 2011
Messages
929
Reaction score
282
I don't think you understand. It is not our job to argue with you. It is your job to help us. If you do not wish to help, then please do not interact. We do not like troublemakers like you. But check your history! Dashboard was perfectly broken! Many other things did not work, or gave strange errors.
I wish for factual discussion that progresses the technology. Historical bugs that no longer exist are not a good basis for making decisions. That is all I will say.
 
  • Like
Reactions: dicko and wardmundy

phonebo.cx

New Member
Joined
Jul 25, 2016
Messages
17
Reaction score
3
Location
Mumbai, India
Historical bugs that no longer exist are not a good basis for making decisions.
They are, when they were present when we made the decisions. And there are still more bugs!

http://issues.freepbx.org/secure/ManageFilters.jspa?filterView=popular

You can see that the top one there is 'FreePBX Triage List', which is the list that the Commercial FreePBX Developers use, we think. We all watch that, to see what bugs are around. You will see many bugs and issues there in regards to PHP versions.
 

phonebo.cx

New Member
Joined
Jul 25, 2016
Messages
17
Reaction score
3
Location
Mumbai, India
Another update: We have discussed this, and we'll be re-looking into FreePBX 13. A quick run showed that it IS working, at lot better than it was 3 months ago. We're still aiming for FreePBX 14, and there's lots of activity in the release/14.0 branches that shows that work is being done, but if there's no public movement, we'll either release 14 ourselves, or, switch back to 13.

14 is much faster than 13, as well.
 

chris_c_

Active Member
Joined
Aug 19, 2010
Messages
509
Reaction score
67
Thumbs up for faster :thumbsup: relatively automatic in PHP 5.6/7 with Zend Opcache, and even faster when using memcached or redis for the in memory session caching.
 

chris_c_

Active Member
Joined
Aug 19, 2010
Messages
509
Reaction score
67
We have. We are happy with this implementation, as it does what it is designed to do. However, it does not allow third parties to act as signatories easliy. This is one of the first things we are going to fix.

This can be easily done by changing the hard-coded GPG key in GPG.class.php, but that just moves the authority. We aim to open the authority up, like your web browser has multiple trusted CAs. That is the significant design flaw in module signatures.

We have also discovered issues with PHP 5.6 and higher. We will not be supporting PHP 5.6 or 7, as only FreePBX 14 is meant to work with that (there are many changes, please look at core and framework 14 branches yourself for the commits). This means we are limiting our usability of FreePBX 13 to Ubuntu 14.04 and CentOS 7. This will be put on the website soon.
I welcome one improvement to the code signing code.
It needs to be made more like the code signing on the smart phone (ios or android) app store.
When a module is about to be installed, the FreePBX Clone needs to read the signature from the module, display it to the user, and ask permission from the user to install it.
The signature shown, needs to be human readable and show: the company which publishes the module, the https URL of the module, the SHA384 hash of the code, and the verified email address of the signer.
All of which are accessible with ONE CLICK to pop open the page of the publisher and confirm that indeed, the secure hash, and email, are confirmed matching by the original publisher.
Problem solved.
With all this information presented clearly and cryptographically verified through the secure HTTPS page, when asked "Do you want to install this module?", the user can then confidently click either "Accept" or "Cancel".
Anyone with coding ability, and an HTTPS powered website, will then have the ability to publish verified signed modules which are sworn to be clean of hacking code by the original publisher.
 

smarks

Guru
Joined
Jan 7, 2015
Messages
102
Reaction score
24
My 2cents.

Keep it simple. I would focus on a straight fork for now. That's it. Don't try run before you walk. I would drop the whole idea of trying to replicate the signature system unless it's easier to do than to just get rid of it. The signature system adds almost nothing but headaches imo. Certainly did nothing to prevent the latest hack. You get a message when some existing files are altered but not when files are added like with the latest hack. So it's kind of useless from a security point of view imo.

I wouldn't spend much time updating for newer versions of php either. That is a feature. You have to fork it first before you start adding features. I don't see how the speed of newer php versions is relevant. FreePBX is a config file generator. It doesn't need to be fast.

So just keep it simple. KISS
 
Last edited:

Members online

PIAF 5 - Powered by 3CX

Forum statistics

Threads
22,260
Messages
136,393
Members
14,499
Latest member
BenMcClements