roller-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From David Johnson <>
Subject Re: JRoller replacement? (Was Re: Apache Roller 5.0.1 available & upgrade recommended for all Roller sites)
Date Sun, 24 Jun 2012 19:34:39 GMT

Sent from my iPad

On Jun 24, 2012, at 3:31 PM, Glen Mazza <> wrote:

> I think that's Roller's biggest problem right now with its adoption, namely the lack
of a community service providing hosting for it.  Perhaps it didn't work for DZone (JRoller
hosters) because they weren't shutting down inactive blogs (maybe hundreds create a "Hello
World!" blog entry and ignore their blog forever after), bloating the administrative load,
perhaps also in not requiring a blogroll linkage back to its site.  To fix the first problem,
maybe it would be good if Roller had an "auto-delete" feature, deleting all blogs that haven't
had a new entry after an administrator-defined number of months; the second, giving the administrator
an ability to force a blogroll entry or some other advertisement on everybody's blog, pointing
back to the hoster.
> As for working at a company that offers Roller hosting, I suspect most devs try not to
keep blogs with their company if they can avoid it, because people switch from company to
company and want to take their blogs with them.  For that reason, people might be reluctant
to ask their companies to host Apache Roller even if they prefer it.  The alternative for
people in my shoes, paying for Tomcat hosting, is time-consuming and not cost-effective (having
each user individually pay for Tomcat hosting just to host one blog is overkill.)
> I've used Roller for six years and am quite pleased with it--Google Blogger holds my
hand too much and is too restrictive, but having looked at it again last week, I can see that
Blogger has much improved over the last time I looked at it (2008), so switching is probably
doable for me.
> Glen
> On 06/24/2012 02:43 PM, Dave wrote:
>> I don't know of any other public Roller hosting services.
>> If you are really desperate for Roller you could get a job at Oracle
>> and get a blog on the Roller server at ;-)
>> - Dave
>> On Sun, Jun 24, 2012 at 2:05 PM, Glen Mazza<>  wrote:
>>> JRoller has long deprecated their service; they're stuck on 3.1 and not
>>> accepting new accounts.  Is anyone aware of another community blogging
>>> service that hosts using Apache Roller?  I couldn't find anything.  If not
>>> I'll need to transfer probably to Google's Blogger service.
>>> Glen
>>> On 06/24/2012 01:03 PM, Dave wrote:
>>>> New release: Apache Roller 5.0.1 is now available on Apache mirrors
>>>> world-wide and you can find it here:
>>>> This release fixes two security vulnerabilities in Roller, listed below:
>>>>    CVE-2012-2380: Apache Roller Cross-Site-Resource-Forgery (XSRF)
>>>> vulnerability
>>>>    CVE-2012-2381: Apache Roller Cross-Site-Scripting (XSS) vulnerability
>>>> Because the above are serious security vulnerabilities, we recommend
>>>> that all sites running Apache Roller upgrade to this new release as
>>>> soon as possible.
>>>> Thanks,
>>>> Dave
>>> --
>>> Glen Mazza
>>> Talend Community Coders -
>>> blog:
> -- 
> Glen Mazza
> Talend Community Coders -
> blog:

View raw message