services

Guys,

Scott Nelson (snelson) included me as one of the maintainers last friday and im glad to announce a new version of Services module for D6 (in fact, i released 2 versions today). The 6.x 0.11 contains several bugs fixed, a new security fix and some nice and long waited features:
* user.get service
* user.save service
* user.delete service
* file.get service
* file.getNodeFiles service
* menu.get service
* Several services were renamed for consistency, including node.load service to node.get
* node and user services now have a very granular permissions

Thomas Saunders and I are releasing our ActionScript 3 (Flash 9/CS 3/Flex 2) framework for interfacing with Drupal sites running the Services and AMFPHP modules.

Our framework handles some of the basic aspects of connecting a Flash application with a Drupal site, invoking service methods, and retrieving data.

To download the ActionScript class files or view the API documentation, please see our site at:
http://thirdavedesign.com/drupalsite

Please let us know if you find this useful, and if you have any questions or suggestions.

Hello fellow Adobe enthusiasts...

This is a cross-post of a forum topic that I recently added about a brand new media player that I built for Drupal CMS (http://drupal.org/node/295597)... Please forgive me for the cross-post, but I felt this topic has much relevance in this group. I basically created a Media Player that uses Services and the Views module to create and manage media playlists using Drupal CMS. I also created a project page at http://www.drupal.org/project/dashplayer, and here is the homepage for the player... http://www.tmtdigital.com/project/dash_player. This player works with most if not all media modules in Drupal, and is able to query your views using remoting technology to construct its playlists on the fly. There are many other features, but those are discussed in the forum topic.

Hi,
I'm very new to drupal services and I've been trying to use the rest_server module and it seems to work pretty well for my purposes (just getting the data out rather than putting it in). I'm now getting to the point where I'd like to be able to add attributes to the xml elements in the response, but I'd like these to be extensible to other server modules if possible (so i'd like to do it in my service module rather than implement a new server.

Most of the discussion here is about Flex, AIR etc', but I wasn't able to fully crack how to use services on a simple site to site.

Here's the task - how to node.save as a logged in user from one Drupal site to another?

Just thought I'd let everyone know I've started the Python Services API project, which provides a set of classes and and tests that Python developers can use as a basis for integration with the Services module. It's fairly bare-bones at the moment, and I'm by no means and expert Python developer, so feedback and contributions are more than welcome.

I've been trying to build two modules that will talk to each when installed on separate sites. The functions appear to work in unit testing, but they do not talk to each other. I am not sure what I'm doing wrong. I made up a hook_xmlrpc and a hook_service function to see if that was the difference, but no luck there.

Function on calling site and the function that "should" be calling the remote site:

// basically the cron job-- the tool that updates the links and spiders for new entries
function plrhub_update_index($site_id = -1) {
if ($site_id == -1) {

For those who don't get the Security email announcements:

------------SA-2008-038 - SERVICES - ARBITRARY CODE EXECUTION------------

 * Advisory ID: DRUPAL-SA-2008-038

 * Project: Services (third-party module)

 * Versions: 5.x and 6.x

 * Date: 2008-June-18

 * Security risk: Highly critical

 * Exploitable from: Remote

 * Vulnerability: Arbitrary code execution

------------DESCRIPTION------------

The Services module package was created out of a need for a standardized
solution to integrate external applications with Drupal. It builds on concepts
from Drupal core's XMLRPC interface, but abstracts service callbacks so that
they may be used with multiple interfaces such as XMLRPC, SOAP, REST, and AMF.
This enables a Drupal site to provide web services via multiple interfaces while
using the same callback code.

Unfortunately, the access control system is not sufficiently granular; Users
with access to use a services have access to all provided services. With the
provided node services, or the system services enabled, it allowed arbitrary
code execution for those users.

Access to services can optionally be limited to certain ip addresses or
configured to need an API key, somewhat mitigating the issue.

------------VERSIONS AFFECTED------------

 * Versions of Services for Drupal 5.x prior to 5.x-0.9

 * Versions of Services for Drupal 6.x prior to 6.x-0.9

If you do not use the Services module, there is nothing you need to do.

------------SOLUTION------------

Install the latest version:

 * If you use Services for Drupal 5.x upgrade to Services 5.x-0.9 [
http://drupal.org/node/272203 ]

 * If you use Services for Drupal 6.x upgrade to Services 6.x-0.9 [
http://drupal.org/node/272202 ]

Review the new security features within the module, and upgrade all of your
remote service calls to authenticate a user session ID before making any Service
calls requiring secure communication.

See also the Services project page [ http://drupal.org/project/services ].

------------REPORTED BY------------

Scott Nelson [ http://drupal.org/user/31156 ], Gerhard Killesreiter [
http://drupal.org/user/227 ], Heine Deelstra [ http://drupal.org/user/17943 ].

------------CONTACT------------

The security contact for Drupal can be reached at security at drupal.org or via
the form at [ http://drupal.org/contact ].

Hi,

Just a simple announcement, short and sweet.

ThinkLeft, a Drupal service provider, has relocated and is now based in Perth, Australia.

Whether you're looking for someone to build your site, or someone to help alleviate your overloaded staff, please have a look at http://thinkleft.com.au if interested.

Thanks for reading.

Beng Tan

ThinkLeft
thinkleft.com.au

I'm using Flex to build cross-domain widgets that can be embedded on any domain. These widgets consume data via Services and AMFPHP. Unfortunately, I've been notified that my site is now vulnerable to attacks because I have a liberal crossdomain.xml policy file that allows connections from any domain.