January 2015 - Pharo-dev - lists.pharo.org

Prepared Statements on PostgresV2?

by David Carlos Manuelda

I've installed and tested PostgresV2 under pharo with the following doits Gofer new smalltalkhubUser: 'PharoExtras' project: 'PostgresV2'; configuration; load. (#ConfigurationOfPostgresV2 asClass project version: '2.4') load While it works good, it is missing a very important feature from both security and performance point of view: The prepared statements. As a brief, prepared statements are parameterized SQL statements that are loaded ONCE per connection instead of sending the whole query to DB every time, and also, they are parameterized, so it completelly prevents SQL injection, as the parameters are automatically 'detected' and scaped and/or handled accordingly without allowing in any case a parameter to alter the SQL meaning, which can happen by using regular SQL queries made by string concatenation. I browsed the class and did not find any prepare: method nor anything similar. Also, you can give a name to a SQL sentence, which makes the code much more readable without messing too much logic with SQL commands and string concatenation. An example is as follows: (supposing we have an instance variable connection, already initialized and connected via PGConnection class) Instead of: self connection execute: 'SELECT data FROM mytable WHERE name=''', anUser userName, ''';'. Would be something like this: self connection executePrepared: 'getUserData' with: anUser userName. And another suggestion could be something like: self connection prepare: 'getUserData' withSQL: 'SELECT data FROM mytable WHERE name=$1' Any plan for this to be implemented or any hint to other PostgreSQL class that already has it? David. P.S. I've written in my blog about this some time ago: http://stormbyte.blogspot.com.es/2012/06/programming-with-database-using.ht… if someone finds it useful.

Jan. 10, 2015

Re: [Pharo-dev] TextMorph broken?

by Atlas

I used PluggableTextMorph instead and an override to vIsScrollbarNeeded. However, it seems problem (4) is also present in the PluggableTextMorph class. Also, there is no font change button for LabelItems in the morphic menu. Looking at the, sometimes rather obscure code in Morphic classes, it seems that some major refactoring is in order. Are there any plans to revise Morphic? Also, is there additional documentation for Morphic? (Unfortunately, the Squeak Wiki is rather superficial :(). Well, at least the live environment makes inspection and experimentation easy :) -- View this message in context: http://forum.world.st/TextMorph-broken-tp4798645p4798713.html Sent from the Pharo Smalltalk Developers mailing list archive at Nabble.com.

Jan. 10, 2015

[ANN] Rewritten EventRecorder (now based on Spec)

by Torsten Bergmann

Hi, I've rewritten, refactored, commented the Event Recorder. The most visible feature is that the UI is now based on Spec to fit Pharo style. Currently it can record and replay events. Saving and loading of events as *.tape files is still missing and (depending on time) will be added as a next step. With this tool we have the ability to record and exchange actions done in an image to reproduce bugs. The tool can also be used for demo purposes. As it is already usable I made it available in the config browser of Pharo 4. Attached is a screenshot, Code is on STHub [1]. Have fun T. [1] http://smalltalkhub.com/#!/~TorstenBergmann/EventRecorder

Jan. 9, 2015

Re: [Pharo-dev] [Pharo4] Slots can now be saved with MC

by Torsten Bergmann

Markus wrote: >Everything I ever did for Pharo I wanted to do for Squeakâ¦ but I could not because >someone was violently against it. Pharo now looks more and more what I dreamed about already back in the Squeak days. The toyish look is gone, the system gets cleaner and cleaner. Lots of tests, nice libs, CI infrastructure, easy image handling/downloading with launcher Still we are not there... Â Eliot wrote: >We will heal.Â It may take a long time, but we will.Â I wonder how we can all come together again. It would help both sides to grow. Squeak facilities could sit on top of Pharo. Maybe with a cleaner morphic like Bloc. Phratch shows that this is possible. Things I currently miss in Pharo that were cool to use and demo in Squeak: - Support for more media and devices (video, mp3, sound recording/replaying, cam, joystick, ...) - Collaboration tools: - Shared worlds/remote views similar to Nebraska (to collaborate on code or remote interact with an image) and Telemorphic - Text and Audio Chat application, possibly video chat - Sending morphs over the network (using the Badge morph) - Shared world (Morphic) projects/Image segments - Bookmorphs (putting some text and graphic, saving as *.book, loading later again or sending to others) Also it would be supercool if Pharo images would run on Berts SqueakJS... Bye T.

Jan. 9, 2015

Re: [Pharo-dev] Essay Topics

by stepharo

Oh yes! The ESUG talk is particularly cool. Stef Le 9/1/15 16:20, Tudor Girba a Ã©crit : > Hi Richard, > > A note about the IDE: we put together a team that is working on > building the future Pharo IDE. Our goal is not to reproduce existing > IDE but created a new and integrated experience that plays to the > strengths of Pharo. > > This is a rather ambitious project that will likely last a couple of > years. You can see our current page here: > http://gt.moosetechnology.org > > Regarding the philosophy, you can get some input by watching the > "Designing for Developer Experience" talk: > part 1 - https://www.youtube.com/watch?v=LKVPJU3W5Ys > part 2 - https://www.youtube.com/watch?v=Q9_JDpFq6qI > part 3 - https://www.youtube.com/watch?v=s9IBGEOPLmY > > We think this is worth advertising. Please let me know if it is of > interest to you. > > Cheers, > Doru > > > > On Fri, Jan 9, 2015 at 2:23 PM, horrido <horrido.hobbies(a)gmail.com > <mailto:horrido.hobbies@gmail.com>> wrote: > > I haven't heard from anyone else, which concerns me a little. > > I remind everyone that this campaign is about you. Without your > participation, it cannot succeed. > > Just drop me a line and tell me which topic you're writing on. You > may, if > you wish, create a new topic, as well. My list of topics was > chosen based on > the concerns I heard from other developers. Thanks. > > > horrido wrote > > Our first essay (in response to Topic #2)! > > > http://smalltalkrenaissance.wordpress.com/2015/01/06/smalltalk-in-business-… > > > <http://smalltalkrenaissance.wordpress.com/2015/01/06/smalltalk-in-business-…> > > > > Please step up. We need more. > > > > Thanks. > > horrido wrote > >> As promised, here is my first list of essay topics. I would > like to ask > >> you to submit an essay on one of these topics. Multiple > submissions are > >> welcome; if they're good, they will all get published at Smalltalk > >> Renaissance. > >> > >> I will edit the articles for grammar and style. You should look > good > >> after I'm done. > >> > >> There's no deadline, but obviously the sooner you can write > them, the > >> better. SRP is a fast-moving campaign. > >> > >> If you have other suggestions for essay topics, please let me know. > >> > >> Without further ado, here are the topics... > >> > >> > >> Topic #1: > >> > >> How do modern IDEs, such as Eclipse and IntelliJ and Visual Studio, > >> compare with the tried-and-true Smalltalk development environment? > >> > >> ----- > >> Topic #2: > >> > >> It is the contention of some critics, including > >> Robert Martin <https://www.youtube.com/watch?v=YX3iRjKj7C0> > >> , that Smalltalk did not (does not?) address the needs of the > enterprise. > >> Present a counter-argument. > >> > >> Explain how Smalltalk can assist the enterprise in team > development, in > >> large-scale development, and in integrating with existing > (typically > >> Windows-based) infrastructures. > >> > >> Pay particular attention to the question of RDBMS usage, which > is often > >> critical in the enterprise. > >> > >> ----- > >> Topic #3: > >> > >> Some critics complain that Smalltalk does not play well with > existing > >> file-based tooling. > / > >> Duh! > / > >> Smalltalk is a "new" approach to IDEs and software engineering. We > >> should be advancing this paradigm with new tooling, rather than > falling > >> back on the old again and again. Otherwise, things will never > change for > >> the better. > >> > >> Make a case for why we should embrace this change now, rather than > >> waiting (for what?). > >> > >> Also, this > >> webpage > <http://thoughtstorms.info/view/smalltalkunix/view/smalltalk> > >> poses an interesting argument against Smalltalk. Perhaps > someone can > >> tackle it. > >> > >> ----- > >> Topic #4: > >> > >> In the age of multi-core processors and concurrency > programming, how is > >> Smalltalk addressing the concerns of developers? > >> > >> ----- > >> Topic #5: > >> > >> How should we address the issue of compatibility (ie, > fragmentation) > >> among various implementations of Smalltalk? Does this issue > hamper the > >> creation of an ecosystem of libraries and shared code? > > > > > > -- > View this message in context: > http://forum.world.st/Essay-Topics-tp4797847p4798569.html > Sent from the Pharo Smalltalk Developers mailing list archive at > Nabble.com. > > > > > -- > www.tudorgirba.com <http://www.tudorgirba.com> > > "Every thing has its own flow"

Jan. 9, 2015

Re: [Pharo-dev] are senders and implementors broken in Pharo40?

by stepharo

Ahhh. Good to know. Le 9/1/15 18:17, Marcus Denker a Ã©crit : > >> On 08 Jan 2015, at 18:27, Marcus Denker <marcus.denker(a)inria.fr >> <mailto:marcus.denker@inria.fr>> wrote: >> >> >>> On 08 Jan 2015, at 17:16, stepharo <stepharo(a)free.fr >>> <mailto:stepharo@free.fr>> wrote: >>> >>> When I do senders of buildFrom: I get nautilus pointing a class but >>> not the method? >>> No time to fix it but we should avoid to integrate enh that breaks >>> the browser like that. >>> >> >> The strange thing is that it does not happen always. >> >> If I download the image it works. But I had already multiple cases >> where it stopped working >> I have not yet found out why. >> > > This is an effect of the change that the Browser remembers the search > for categories put in the > upper right corner: When this is set and the method is not in the > scope, then it is not correctly > selected in the browser (as it is not in the limited scope). > > https://pharo.fogbugz.com/f/cases/14634/Package-Filter-in-Nautilus-should-u… > > Marcus > >

Jan. 9, 2015

Re: [Pharo-dev] The "death" of Smalltalk

by stepharo

> Hi everyone, > > I just watched https://www.youtube.com/watch?v=YX3iRjKj7C0 and had a > few comments that I thought I would share. > > First, there is a real opportunity for Smalltalk to come back in the > guise of Pharo. Steph and Marcus are doing a great job providing > leadership towards that end and the community is great. Second, we > need to be careful in spreading the word. Slowly but surely (the > current Pharo approach) is a great approach as it allows really > building something worth spreading before trying to get everyone into > it. If it spreads too quickly, bad API or immature toolkits will > become ingrained and flaws will be apparent. The books, websites, etc. > are really good things to get right before trying to get others into > it; they are already very good. Third, if you want to really spread > Smalltalk, then the fundamentals that newcomers experience need to be > without obvious flaws. Yes > From personal experience, I can tell you that BitBlt rendering makes > newbies think that Pharo is a toy language. Switching to Athens > rendering is therefore tremendously important for adoption. Package > management really needs to be cleaned up. yes > There needs to be a simple way to merge resources (bitmaps, audio, > external files) into the codebase. Simple audio needs to work on all > platforms. This may seem trivial but audio is one of the simplest > things that newcomers want to do. From a Linux perspective, this will > probably necessitate switching to a 64-bit VM as the 32-bit sound > plug-ins are a giant pain. Given that even phone OSs are switching to > 64-bit, there may not be a need for a 32-bit Pharo. Of course, much of > this is already on the horizon. > > As the new year begins, I'll once again be coding in Pharo and look > forward to it. I'm really hopeful about the future. > > Cheers, > > Jeff > > -- > Jochen "Jeff" Rick, Ph.D. > http://www.je77.com/ > Skype ID: jochenrick

Jan. 9, 2015

Re: [Pharo-dev] '(\w+s*){1, 3}' asRegex - image locks up in Pharo 3 & 4

by Nicolai Hess

Looks like a circular loop in RxMatcher, which results in a endless loop in RxmLink postCopy I would look at RxMatcher makeQuantified: anRxmLink min: min max: max makeStar makePlus 2015-01-09 19:59 GMT+01:00 Paul DeBruicker <pdebruic(a)gmail.com>: > Hi - > > In a workspace, if you inspect (or print, doIt, ... ) the following: > > '(\w+s*){1,3}'' asRegex > > > > The image will enter into a loop that the Cmd+. can't break out of. > > > '(\w\s){1,3}' asRegex > > does not lock up the image. > > Including just one + or * causes the infinite loop when using a quantifier > (the {} part). > > > Does anyone know enough about how the Regex parts of the system to know > where to look to fix it? > > > Thanks > > Paul >

Jan. 9, 2015

Re: [Pharo-dev] [Pharo4] Slots can now be saved with MC

by Eliot Miranda

On Fri, Jan 9, 2015 at 11:47 AM, Marcus Denker <marcus.denker(a)inria.fr> wrote: > > > On 09 Jan 2015, at 16:45, Eliot Miranda <eliot.miranda(a)gmail.com> wrote: > > > > Hi Marcus, > > > > > > P.S. Maybe now Slots are ready for stealing by Squeak ;-) > > Everything I ever did for Pharo I wanted to do for Squeakâ¦ but I could not > because > someone was violently against it. > We will heal. It may take a long time, but we will. And things are going great right now, especially for Pharo. So I hope that your pain will ease and that one day you will be free of it. Hugs, and happy new year. And thanks for Slots and Opal and all the other wonderful things you do. Marcus > > > -- best, Eliot

Jan. 9, 2015

Re: [Pharo-dev] [Pharo4] Slots can now be saved with MC

by Marcus Denker

> On 09 Jan 2015, at 16:45, Eliot Miranda <eliot.miranda(a)gmail.com> wrote: > > Hi Marcus, > > > P.S. Maybe now Slots are ready for stealing by Squeak ;-) Everything I ever did for Pharo I wanted to do for Squeakâ¦ but I could not because someone was violently against it. Marcus

Jan. 9, 2015