Jan 25

Secured Pages Under Public Menus Workaround in WhippleHill Podium

We had a need where we wanted some pages for the Parents’ Association to have public pages in our public navigation but also wanted to limit access to a few of the sibling pages. This is not the default functionality of the current WhippleHill Podium Page Manager system. Due to the way the pages get their security settings via the menu/page hierarchy makes it so that public or non-secured menus cannot have secured pages underneath it. All makes sense and totally acceptable. But, I still wanted to do it. Making sense and having things be acceptable has never stopped me before and didn’t this time either. I figured out a simple way to do that. It involves standard functionality of Podium, but a little use of redirect pages, vanity URLS. The initial effort is not minor, but the lasting value for your community might be worth it if you want to have a smooth transition from sibling pages that the world can view to those that you only want certain roles in your community to view. Here goes what I did with my example, your need will probably differ but hopefully this helps seeing the options you have.

Working within the functionality of the software

We have a top-level, or “Level 1″ menu that is part of our over navigation to every visitor of the website. Under that we have a menu that we wanted to have pages that are navigationally visible publicly, but require the visitor to have a level of security with a login to be able to view the content of the page. We did not want to do anything custom on the recently updated site, but still provide a non-disruptive flow for our parents. Again, your level of need may be different than ours. You might be able to just get by with a vanity URL for your community but we wanted something that would be more fluid for the parents, reward being logged-in to the site and blur the line between what was public and private content without constructing what felt like two separate sites under a single one.

Our Situation and Process

Here is what our sibling pages under the PA area of the website look like. We have the first two tabs (Mission & Welcome, Board & Committees) on the horizontal menu on the site are public and have page content. The other three tabs were actually pages (with channel content) nested under the PA public section originally but we wanted to secure them.

Sibling Pages with Horizontal Menu channel under a "Level 2" menu structure in WhippleHill Podium

Step 1: Get vanity URLs Going ASAP

If you aren’t using the SEO tab on your Podium pages, you are crazy. Do it immediately. If for no other reason, it is something that can really help you when you need to link to other pages and manage the site. As we also found out in the recent transition to a redesigned site, making effective use of the vanity URL functionality in WhippleHill Podium helps search engine referrals stay consistent between sites since Google and others reference those if you have them setup.

Adding a custom or vanity URL under the SEO tab in Page Manger

Step 2: Creating organization and redirects in the secured part of Page Manager

In Podium Page Manager, I took these three pages we wanted to only allow a certain group (role) in our community to have access to and created a new “open child” page with the desired security-level. Creating the “open child” page and securing it really is just to make a folder and something you can tack the pages you are moving into the secure world of Page Manager in an orderly way. Here is what the structure in Page Manager looks like after we are done.

In the above screenshot from Page Manager, the bottom three pages have actual content along with vanity URLs and were moved under this non-public “child only” page title “Parents’ Association (Secured)” which is kind of used too because of the page title channel to show users when they are in or out of a secured area. “Mission & Welcome” and “Board & Committess” are the same titles as the public pages under the website nagivation, but the are not really pages. They are just placeholders that redirect to the public page that has it’s same name. You can see in this detail of the page from Page Manager.

Page created in the secured area to redirect to the public page

I set up these two pages so when we have the horizontal nav on the secured pages linked to the siblings, it would look identical to the public pages. When clicked from one of the secured pages, it will use the vanity URL to go over to the public page cleanly. The user doesn’t know or care what is happening behind the scenes.

Step 3: Creating Redirects in the Public Part of Page Manager and Navigation

This is basically the same as step 2 but creating the redirect pages to go over to the secured pages vanity URLs. Here is a screenshot of the Page Manager structure in this area of our site.

In this public area (the 100. Parent’s Association page/menu is under a Level 1 menu that is public) all the pages inherit the public permissions. The first two pages have vanity URLs and have content channels and content for public viewing. But, the last three pages in the sort are just identically titled redirect pages to the secured pages from step 2. The redirect page to it’s vanity URL page equivalent is set to public.

But, when it redirects on these pages, it will prompt for a login and password because the target page has a security layer on it in Podium and I am not logged in.

In our case, we restrict these other pages to require “All School” role access level. This is the security setup on those pages.

Wrap-up

Anyway, I know this is a long blog post on this and it might be seem more confusing than it should. The overall concept of this workaround is to create two locations in Podium Page Manager where you will have secured and public pages. Then, get the pages you want it each area and hard-address them easily with vanity URLs and create whatever pages are necessary to make the areas identical through the use of complimentary URL redirect pages on both locations.

Here is what the two sides of the section look like. I used the Page Title channel options to reference the “Secured” title to subtly show parents they were in different areas when they click between if they were already logged-in. We do lose the nested menu orientation in the side nav because the pages are not really under the navigation if you are on a secured page, but that is a minor issue in our opinion so long as we can make the flow from public to private pages seem non-disruptive for community members.

Public Page

Secured Page

Hope this was helpful in some way if you are looking to get around the security limitation on public and secured pages that you might run into using the WhippleHill Podium CMS.

If there are any questions, don’t hesitate to drop me a line.

Jonathan Mergy
mergy@mergy.org

 

Nov 04

Blocking The Big Education (Edu-Junk) Spammers


There are two main organizations that I know must be dishing a thousands or millions of spam a day out to the school community. I have been watching the constant spam spewing from a few sources over the last couple of years and I have finally starting to look at some patterns to alleviate at least some of the junk our teachers are getting specifically from these junk engines. The two organizations I see as massive senders of edu-junk are Mindstreams / Lifetime Learning and Edupartners. I am sure there are many others out there you might be dealing with, but these two sources are prolific in the volume they spew daily.

Both Mindstreams / Lifetime Learning and Edupartners do put unsubscribe links on their junk, but the way they acquire the addresses would mean every single member of your faculty and staff would need to individually unsubscribe. This is not something any of us what to deal with so if you can, it is worth just getting some simple rules in at the server-side to inhibit this as much as possible. They seem to be immune to RBLs for some reason, so you will have to go it alone.

Here are some examples of the kind of junk they have servers pump to the school community.

EDUPartners SPAM

Lifetime Learning / Mindstreams SPAM

Except they pump thousands of these out and insert teacher names from the database, etc. This is nothing different than other spammers out there do daily either, but the difference here is a real volume increase and targeted audience for people that work in schools. They use multiple servers, outside spam vendors and tools like Silverpop Engage and probably a lot of other tools we don’t even know about. I finally had to do something on this.

If you want to inhibit this as well, here are a few items that have worked.

 

Block the entire routable IPs that Lifetime Learning / Mindstreams owns.

They have servers across their Class C ranges that do nothing but send and send. I have currently seen and blocked a couple of their ranges from even being able to send email to our networks. Here are the ranges I have seen and blocked outright because I have seen in the logs spam attacks across the entire ranges.

12.9.130.0/24
12.9.134.0/24

Just block it from even connecting to your network at all or at least at port 25 for SMTP. They are not (yet) doing SSL on port 465.

Here is a log showing a quick round from the second class c trying to send to us.

 

Anything from 208.85.51.183 is bad news.

This is a Silverpop-owned IP address. The whole block can probably be blocked, but I have consistently seen 208.85.51.183 do nothing but spam.

Here is there WHOIS lookup (as of 11/04/11)

#     “n 208.85.51.183″

NetRange:       208.85.48.0 – 208.85.55.255

CIDR:           208.85.48.0/21

OriginAS:       AS19795

NetName:        SILVERPOP-IP

NetHandle:      NET-208-85-48-0-1

Parent:         NET-208-0-0-0-0

NetType:        Direct Assignment

RegDate:        2007-12-03

Updated:        2008-02-22

Ref:            http://whois.arin.net/rest/net/NET-208-85-48-0-1

OrgName:        Silverpop Systems Inc.

OrgId:          SILVE-32

Address:        200 Galleria Pkwy

Address:        Ste 750

City:           Atlanta

StateProv:      GA

PostalCode:     30339

Country:        US

RegDate:        2007-02-22

Updated:        2011-08-03

Ref:            http://whois.arin.net/rest/org/SILVE-32

OrgTechHandle: NETWO1905-ARIN

OrgTechName:   Network Operations

OrgTechPhone:  +1-678-247-0500

OrgTechEmail:  InfrastructureTeam@silverpop.com

OrgTechRef:    http://whois.arin.net/rest/poc/NETWO1905-ARIN

OrgAbuseHandle: ABUSE1713-ARIN

OrgAbuseName:   Abuse Handler

OrgAbusePhone:  +1-678-247-0500

OrgAbuseEmail:  abuse@deliver.silverpop.com

OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE1713-ARIN

OrgNOCHandle: NETWO1905-ARIN

OrgNOCName:   Network Operations

OrgNOCPhone:  +1-678-247-0500

OrgNOCEmail:  InfrastructureTeam@silverpop.com

OrgNOCRef:    http://whois.arin.net/rest/poc/NETWO1905-ARIN

RTechHandle: NETWO1905-ARIN

RTechName:   Network Operations

RTechPhone:  +1-678-247-0500

RTechEmail:  InfrastructureTeam@silverpop.com

RTechRef:    http://whois.arin.net/rest/poc/NETWO1905-ARIN

RAbuseHandle: ABUSE1713-ARIN

RAbuseName:   Abuse Handler

RAbusePhone:  +1-678-247-0500

RAbuseEmail:  abuse@deliver.silverpop.com

RAbuseRef:    http://whois.arin.net/rest/poc/ABUSE1713-ARIN

RNOCHandle: NETWO1905-ARIN

RNOCName:   Network Operations

RNOCPhone:  +1-678-247-0500

RNOCEmail:  InfrastructureTeam@silverpop.com

RNOCRef:    http://whois.arin.net/rest/poc/NETWO1905-ARIN

 

Setup rules on your email server

Provided you still run your own email now that most schools seem to be going the Google Apps route while it is currently no charge.) I have a few rules that pick-off the current batches of junk from the Edu-Junk companies.

1. Anything received/sent from or has text string matching mkt5354.com

2. Anything received/sent from or has text string matching edupartners.com

3. Anything that gets a received from text string that has PowerMTA in it. This is a junk email sender they (and many others use constantly.

4. Block 208.85.51.183 outright as well. Crazy how much spam that IP is trying to send on behalf of edupartners.com.

208.85.51.183 Spam Attempts

 

I will continue to update as I can when new patterns emerge. Hope this helps.

Sep 26

Great Amplified Classroom Speakers: Epson ELPSP02

One Epson ELPSP02 On A Classroom Wall

Amplified speakers for classroom use are tough to come by. We have gone through many models. If you get desktop speakers, you need to then get wall mounts. So, you can go cheap, but adding the cost of decent wall mounts and the time involved to install them spikes the price. There unfortunately are very few options out there under $200 that have decent wall mounting kits that come with them and that are really set for use in a classroom setting.

I was able to find the Epson ELPSP02 Active Speakers. They are a pair of speakers that were designed to be wall mounted and ready to go for teachers. They cost around $150 or so from CDWG or another distributor.

The treble and bass adjustments are also a nice touch. It also comes with a mounting bracket for the power adapter which is great for cabling organization. We have a few pairs of these in now, but will be using this as the new standard for classrooms. They are also white in color and the cases are durable, so I feel they will hold-up to the rough environment of the high school classroom.

Couple of points to note: RCA to 3.5 audio connector cables are NOT included, so you need to get those separately. Also, the cable that connects the powered speaker to the non-powered is not standard speaker wire, so you cannot have these more than about 12 feet apart from each other. But, there is plenty of length to put them above or around a standard dry-erase whiteboard.

All and all in our testing, we are finding they are holding-up well and provide decent sound for the rooms. The mounting brackets come with the units, so that is just a huge time-saver on getting third-party mounts from Peerless or something and then having to rig something crazy.

The Epson site product page actually doesn’t even do a decent job of giving you information or pictures of what they really look like so I have added some additional images here. For me, seeing the way the connections are located is super-important. These speakers are designed to hang on the wall so the cabling that comes with it works well with the wall mounted setup.

Sep 02

Adding Film To Minimize Glare On Large LCDs

We installed a 50″ LCD with built-in speakers in a very tricky and bright classroom to try and allow easy projection capabilities for the teacher and eliminate the always problematic use of normal projector systems. Three of the walls of the shop are fully windowed and the room is bright no matter what the weather. There are workstation islands through the space, so having everyone have to move to a part of the studio to see a presentation or demonstration was never ideal. This is a classroom envronment, so we really need to have everyone in the room be able to connect with what is happening on the screen no matter where they are in the room.

Pictures of the Glass Studio space.

As you can see, lots of windows that can make it tough to project anything. After hanging the LCD we noticed, that the glossy screen (common on most large LCDs) still created an issue because it picked-up on the glare through the windows when it was sunny or overcast. The mirroring effect of the windows and space outside the studio was impossible to ignore. Relocating the display was not an option. So, I tried to find something standard that would provide anti-glare. But, there is really nothing ready-made on the market that I found to buy through my channels that could work with something as large as a 50″ display to cut the glare and not possible damage it in the process.

Enter Photodon.

Photodon (http://www.photodon.com) is one of the few/only to have film that will work to address the issue on large LCDs or TVs. I called them and Mary Ellen was super-helpful. I went back to get an exact measurement of the surface area of the screen and gave her the dimensions. They cut it to the specs I gave them for the Samsung LCD we recently put in there. When we got the film in, it fit perfectly. But – If you think putting a protective screen on a phone or iPad is tough, try doing it to a 50″ LCD! We took our time and stayed relatively patient throughout to get a great result with minimal blemishes on the contact of the screen to the film.

Before and After Shots Of The LCD

The result has made the LCD absolutely visible throughout the space of the studio with windows and all. The film was reasonably priced and well-worth the investment to really make the LCD functional in that space now. Very happy customer. If you are dealing with glare issues on your large LCD, TV or digital signage I suggest you give these guys a shot.

Apr 19

Using Dock Cleats As Cable Managers In Classrooms

Powder-Coated Dock Edge Classic™ Cleats

When it comes to computer cabling in classroom environments, no matter what you do for the long runs, you usually a mess on your hands those final few feet to the faculty equipment.

No matter what you do in your school classrooms to handle cabling for faculty, there is that final length of cable for audio and video to projectors, interactive boards and audio that usually is a total cluster. Then, add-in the multiple uses and people in the rooms doing a variety of different types of presentations in different locations in the room and you compound the issue.  In our case, we had long cables running from the projector and speakers and the length connecting to faculty laptops has always been a nightmare to deal with. They sits on the ground and constantly get kicked around, removed, lost and/or damaged. It also just looks bad when you come in and see a pile of cables you need to rely on for a teaching session.

In addition to adding cable management from the projectors and speakers in the room through putting then behind the walls (if you can) or going with cable tracking to conceal and secure cables, you still need some slack to allow teachers to setup in the space in different locations. Because you want to leave some slack, but it can stay unorganized. All strict cable management systems from the usual vendors are really geared to hold the cabling in a fixed position. This doesn’t work for that final few feet from the wall you want for the teacher to be flexible with depending on their material and hardware use.

I found nothing great out there in the cabling vertical market intended to handle this sort of scenario. But, there are many solutions out there for dealing with situations LIKE this on boats with rope, which is why I looked to solutions with rope management and found that dock cleats could be a perfect solution. Different materials and environments, but very similar form and function. After a talk with L-W Visual Arts teacher, Robert Sanborn, who happens to be extremely knowledgeable of boat hardware and interiors, I found out that I should head down to West Marine and see what they have that could work for VGA and other rope-like cabling we deal with in schools.

DockEdge Classic™ Cleat in White Finish

West Marine had many different types of dock cleats but the Dock Edge Classic Cleat models seemed to be the best one to use in my opinion because it was lightweight, sturdy and seemed like our walls could handle it without too much trouble. Going through the check-out, the cashier asked if I had a boat (which we do not.) After briefly explaining I would be using this in a classroom, he smiled pretending to understand and was happy to sell whatever to me for whatever reason. Sidenote: If you have never had the chance to go in and look around store that carry boat supplies, I highly recommend it. There is a lot of really cool equipment and tools for boats but have so many other applications as well.

After We are getting a bunch in and will be installing in every classroom as we can in addition to normalizing the cabling runs with boxes and tracking. The have white and powder-coated models. We will get a mix of both depending what we can continue to acquire from vendors. I prefer 8 1/2 inch model (PN#2508W-F) as it provides enough spacing for decent extra length from the wall to take into the room for a table or desk use presentation.

Besides working quite well to tether the last few feet of a VGA, audio and USB cable, the cleat provides relief on the cable run itself to the rest of the run when it is pulled from the desk or table with the equipment. It stops the pull to the rest of the cabling in the track or behind the wall while still providing organization.

Lastly, it is also pretty fun to say you are getting a piece of equipment for your classrooms of your school from Bass Pro Shops (as they sell this model as well!) But, there are many places on the web you can order them from if you don’t have a local boat shop in your area. Depending on which sizes you get, the pricing ranges from $10-$30 or so.

Boating Dock Cleat in Lick-Wilmerding's Room C