Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Blogit lets you add a blog to your Ruby on Rails application in just a few seconds.
Add these to your Gemfile
gem "blogit"
# Blogit depends on ActsAsTaggableOn
gem "acts-as-taggable-on"
...and run bundle install
to install the gem.
Next, run:
# add an initializer to config/initializers with all of the configuration options
$ rails g blogit:install
# This will add the necessary migrations to your app's db/migrate directory
rake blogit:install:migrations
# You don't need to run this again if you've already done so
rake acts_as_taggable_on_engine:install:migrations
# This will run any pending migrations
rake db:migrate
then add the following to your routes.rb file:
# config/routes.rb
mount Blogit::Engine => "/blog"
Finally, declare which of your models acts as blogger in your app (probably User or Admin).
class User < ActiveRecord::Base
blogs
end
Go to http://localhost:3000/blog and see your marvelous new blog.
Blogit provides you with the following features
/blog/posts.xml
/blog/posts.rss
*= require pygments
to your app's stylesheet)We're designing blogit to be as modular as possible, so you can pick and choose the elements you'd like to use.
Full documentation and how-to guides available here: http://blogit.katanacode.com
If you discover a problem with Blogit, please let us know about it.
Remember to search the issues list first in case your issue has already been raised by another Githuber
Want to help make Blogit better?. Please read the contribution guidelines for more information on how you can contribute.
See LEGAL for full details.
Blogit was developed by Katana Code with generous contributions from:
Katana Code are web developers based in Edinburgh, Scotland.
Copyright © 2011 - 2015 Katana Code Ltd.
FAQs
Unknown package
We found that blogit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.