Marci

We used to pay £700 per year for a funding consultant on retainer for P16... rarely needed him, but in the event of business cases etc over sums of money equating from thousands to tens of thousands, and funding optimisations that for the sake of him casting an eye over a spreadsheet for 20 minutes returned us an extra £18k in annual funding, it was well worth it. Need to know the full terms of the retainer, and any specialist knowledge that the person can provide that isn't already in-house to know the true value of having that person available at the end of a phone / able to appear on site whenever needed.

No, it doesn’t. No, they won’t. This is fact.

Certain data is near-live (student attendance / behaviour), rest is extracted on a schedule to an encrypted Amazon AWS instance... mainly to stop duff programmers hammering your MIS to death (easily done). And yes, standard behaviour amongst MIS extractors afaik (covered in both Wonde and Groupcall docs). See https://www.wonde.com/downloads/Wonde%20-%20School%20Data%20and%20GDPR.pdf

They (Wonde) pull whatever the app creator in question has specified as required data fields within the Wonde developer console. They _don’t_ pull everything by default. And then they ONLY pull what the end-user (school) has granted permissions for inside of the required data fields specified by the developer... So, as a for instance, here’s a screen cap of the (my) developer console and (some) required permissions for an app. The Contracts.Scales.Read datapoint contains several data items - see https://docs.wonde.com/docs/api/1.0#scale-object for each specific data item that is returned within the Contracts.Scales.Read object. The school can grant or revoke on a per-data-item basis... A notification goes to the school, requesting permission approval on a per-data-item basis. The app developer will receive the data-points he requested, MINUS any the school does NOT approve. In the above example, if the school didn’t approve access to Contracts.Scales.Read, then I as an app developer would receive everything else, but the Contracts.Scales record would turn up empty, as in the case of this being the only app utilising Wonde with a school, Wonde won’t have extracted Contracts.Scales into their data store (where the app being developed retrieves it from) at all to provide it to me. BUT... In the case of _multiple_ apps all using Wonde with a single school, Wonde will extract all the combined data requested by all the combined apps into their datastore, but no further than that. They would then only release what has been approved on a per-app basis by the school to each app developer. So, (fictitious example), Hegarty Maths requests Contract.Scales.Read, Fred’s App doesn’t. Both use Wonde. Both want data from the same school. Wonde will extract Contract.Scales.Read into their datastore, but will only pass it on to Hegarty Maths. Fred’s App won’t receive that datapoint (unless at a later date Fred’s App changes it’s permission model to need that data, in which case the school will get another notification asking for that specific data item to be approved. If the school approve it, Wonde will release it to Fred’s App. If they don’t, they won’t). A school can log in at any time to their Wonde console and revoke any / all permissions without notice, and app developers will immediately stop receiving that data. The Wonde user that is used to access your MIS will need access to whatever data fields are required by your combined apps... and as this may change, it defaults to needing access to everything (but doesn’t take everything, only what you’ve given them permission to take, and only pass on what you’ve given permission to pass on). NB: I have no affiliation to Wonde, but I do develop an app for our MAT that uses Wonde.

We do it - but we just phoned Konica and asked them to add it on to our current lease package.

It is not for us to decide the law / what legislation we adhere to. It is down to us to follow the law / legislation, should we wish to keep our jobs... all of which will have some clause somewhere regarding working within any applicable legal frameworks. I suggest if you decree things aren’t happening on your watch because you disagree with the law, you hand in your notice and find a job where the laws that apply don’t offend your sensibilities. Unless you are the Principal, whether it happens on your watch or not is not your decision to make.

Righty - you're saying you can't find those files - how are you looking for them? Are you trying to hit them in a web-browser, or are you SSH / ftp-ing into the server and checking for them? They've existed at some point for Sucuri to pick them up in a scan, so whether you can find them or not, yes - your site is compromised - these are not false positives (and it'll have very little to do with the hosting provider, Clook) Is it only a Wordpress install on there, or are there other things besides in the same hosting? What plugins are installed on the site? Are they all up-to-date from the WP Plugin Database? Are all your wp themes up to date also? Is the site running latest version of Wordpress (4.9.6 at time of writing)?

I suspect we're talking as a workstation/client not as a server... as in: the CentOS box currently can't get out on to the web. Configuring Web Proxy on CentOS ~ The Sysadmin Himself If you need to pass authentication per user, then in each user's .bashrc file in their home directory add as necessary: export http_proxy="http://username:password@yourproxy:port" export https_proxy="http://username:password@yourproxy:port" export ftp_proxy="http://username:password@yourproxy:port" export no_proxy="localhost,127.0.0.1"

I take it we're talking Wordpress here then seeing as Sucuri's involved...? Can you copy and paste or screenshot the specific audit log entry from the Sucuri dashboard in wp-admin? Sucuri's rarely wrong (ime)...

All depends where the warnings are coming from... and what they say!

SHOULD be a case of copying the crt to /etc/pki/ca-trust/source/anchors/ and running update-ca-trust extract

See Same Origin policy introduced in (decent) browsers quite some time ago: https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy You have to disable that within your browser of choice (if it lets you) and then ensure that the Cross-Domain Policy is also set to allow it via CORS. Ultimately, the file URL protocol was deemed a security risk, hence these measures being put in place. Best bet: serve all files to a browser appropriately over http(s).

@pfl's last post was July last year. I don't think you'll be getting a response.

Duplicate a backup onto your test server, then truncate all it's tables to empty them but retain structure. https://www.mssqltips.com/sqlservertip/3218/truncate-all-tables-in-a-sql-server-database/

SIMS Business Objects (dll). That's about it... see http://www.edugeek.net/forums/mis-systems/96181-business-objects-documentation.html If you want more flexible / traditional web-based API access, then Wonde's School Sync API client can abstract the data into something more universally usable - see https://docs.wonde.com/docs/api/1.0 and their PHP SDK at https://github.com/wondeltd/php-client

See bottom-most example at https://www.rondebruin.nl/win/s9/win015.htm for breaking links to other external workbooks. Other examples on same page cover converting formula to values. Other variants available at https://www.ozgrid.com/forum/forum/tip-tricks-code/28823-convert-formulas-to-values-instantly-for-the-entire-workbook

I take it you've already seen the issues dating back to Sib5 regarding this particular matter...? Sibelius - the leading music composition and notation software (ie: usually a result of using percussion instrument on musical notation track rather than percussion track... without transposing the notation) Percussion Staves: you can input notes onto drum staves with your MIDI keyboard using either the actual keys on your keyboard that produce the correct sound (so not all keys on the keyboard - only mapped to specific keys), or using the pitches defined in the instrument definition of the chosen staff (and the correct notehead type etc - so you can't just assign percussion instruments to any existing notated track - these instruments only play on specific notes) IE: s'all down to drum maps etc. Covered somewhere around P166 in Sib manual iirc.

Whilst there's no hard and fast rule, the accepted convention (as it favours semantics and accessiblity) is to use ul / li within a nav tag for Navigation menus. Semantic navigation with the nav element | HTML5 Doctor Specific , and elements were brought out in HTML5 spec to reduce the need for div.header / #header / div.footer / #footer etc, again due to semantically correct coding and increased compatibility for accessibility.

ePub is an archive - essentially a zip file with an xml manifest (same as docx / xlsx etc). The problem it's throwing is that the attached epub archive contains a JAR (java archive) within it, and that's why it's been blocked... unless it's an ePub on JAVA programming including bundled source samples as executable JAR modules, I'd be questioning it's authenticity. See https://www.ibm.com/developerworks/xml/tutorials/x-epubtut/index.html

A thread full: Opensource or cheaper alternative to Dreamweaver This questions crops up frequently.

Following gist explains how to enable it on 10.7.5... https://gist.github.com/clarencesong/3768688 ...or you can use Chameleon SSD (Chameleon SSD Optimizer), or you can buy a TrimEnabler 4 license and use TrimEnabler 3 - see https://cindori.org/trimenabler/#versions

That just embeds your instagram feed onto a page, it doesn't create a new WP post per Instagram post. There are none that achieve what the OP requires (as far as I'm aware). Best bet is check GitHub for Instagram scrapers (there are lots), find one in a language your comfortable with (all the mainstream languages are represented), and adapt it to auto create posts using the Wordpress REST API (which will probably need one of the JWT auth plugins and an application key generating for use by the script).

If they're an iPhone user used to using the native iPhone email client, leave them with that rather than the gMail app. If they had the gumption to use the gmail app, then logic would suggest they would've just asked for the username and password and cracked on with it, rather than for specific instructions on how to add an email account. (imo)

Change external contractors.

Don't think your internet providers will be able to do a great deal. Assuming your staff use a domain name to access externally rather than typing in the IP address, you just add the same domain name entry (not the external IP) to your internal DNS servers, resolving to the internal IP (ie: nslookup any of our web servers against our internal DNS servers, they reply with the internal IP address. Do it from home against a public DNS server, they reply with the external IP address). If they don't use a domain name to access it externally, buy one and start (or use a subdomain of an existing domain name).