From: Alessio G. <ale...@gm...> - 2012-01-11 15:57:01
|
Hello, I tried to launch this command: curl http://localhost:82/mantisbt/plugin.php?page=Source/repo_import_latest&id=30 I would to import the latest data from a WebSVN repository, but i got this error: APPLICATION ERROR #2800 Invalid form security token. What is the problem? Thanks in advance. Bye. Alessio |
From: Damien R. <dam...@me...> - 2012-01-11 16:08:13
|
That's due to the XSRF protection mechanism in MantisBT. If you don't want this (WARNING: SECURITY RISK !), set $g_form_security_validation = OFF; Damien On 11/01/12 16:56, Alessio Gennari wrote: > Hello, I tried to launch this command: > > curl > http://localhost:82/mantisbt/plugin.php?page=Source/repo_import_latest&id=30 > <http://localhost:82/mantisbt/plugin.php?page=Source/repo_import_latest&id=30> > > I would to import the latest data from a WebSVN repository, but i got > this error: > > APPLICATION ERROR #2800 > Invalid form security token.. > > > > What is the problem? > > Thanks in advance. > > Bye. > > Alessio > > > > ------------------------------------------------------------------------------ > Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex > infrastructure or vast IT resources to deliver seamless, secure access to > virtual desktops. With this all-in-one solution, easily deploy virtual > desktops for less than the cost of PCs and save 60% on VDI infrastructure > costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox > > > > _______________________________________________ > mantisbt-dev mailing list > man...@li... > https://lists.sourceforge.net/lists/listinfo/mantisbt-dev |
From: Alessio G. <ale...@gm...> - 2012-01-11 16:14:20
|
Thank you very much. Alessio. On 11 January 2012 17:04, Damien Regad <dam...@me...> wrote: > That's due to the XSRF protection mechanism in MantisBT. > > If you don't want this (WARNING: SECURITY RISK !), set > $g_form_security_validation = OFF; > > Damien > > > On 11/01/12 16:56, Alessio Gennari wrote: > > Hello, I tried to launch this command: > > > > curl > > > http://localhost:82/mantisbt/plugin.php?page=Source/repo_import_latest&id=30 > > < > http://localhost:82/mantisbt/plugin.php?page=Source/repo_import_latest&id=30 > > > > > > I would to import the latest data from a WebSVN repository, but i got > > this error: > > > > APPLICATION ERROR #2800 > > Invalid form security token.. > > > > > > > > What is the problem? > > > > Thanks in advance. > > > > Bye. > > > > Alessio > > > > > > > > > ------------------------------------------------------------------------------ > > Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex > > infrastructure or vast IT resources to deliver seamless, secure access to > > virtual desktops. With this all-in-one solution, easily deploy virtual > > desktops for less than the cost of PCs and save 60% on VDI infrastructure > > costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox > > > > > > > > _______________________________________________ > > mantisbt-dev mailing list > > man...@li... > > https://lists.sourceforge.net/lists/listinfo/mantisbt-dev > > > > > ------------------------------------------------------------------------------ > Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex > infrastructure or vast IT resources to deliver seamless, secure access to > virtual desktops. With this all-in-one solution, easily deploy virtual > desktops for less than the cost of PCs and save 60% on VDI infrastructure > costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox > _______________________________________________ > mantisbt-dev mailing list > man...@li... > https://lists.sourceforge.net/lists/listinfo/mantisbt-dev > |
From: John R. <jo...@no...> - 2012-01-11 16:22:34
|
The page name for remote imports should just be Source/import -- John Reese noswap.com Sent from my Android phone. Alessio Gennari <ale...@gm...> wrote: Hello, I tried to launch this command: curl http://localhost:82/mantisbt/plugin.php?page=Source/repo_import_latest&id=30 I would to import the latest data from a WebSVN repository, but i got this error: APPLICATION ERROR #2800 Invalid form security token. What is the problem? Thanks in advance. Bye. Alessio |
From: John R. <jo...@no...> - 2012-01-11 18:29:52
|
On 01/11/2012 08:13 AM, Alessio Gennari wrote: > Thank you very much. > > Alessio. > > > > On 11 January 2012 17:04, Damien Regad <dam...@me... > <mailto:dam...@me...>> wrote: > > That's due to the XSRF protection mechanism in MantisBT. > > If you don't want this (WARNING: SECURITY RISK !), set > $g_form_security_validation = OFF; > > Damien That is incorrect. That page is only supposed to be used by a logged in user, hence the CSRF token. Turning off that protection is the wrong fix. The real correction is to use 'page=Source/import', as I mentioned in my other reply to this thread. Cheers -- John Reese noswap.com |
From: Alessio G. <ale...@gm...> - 2012-01-11 22:08:34
|
Hi newly, in the afternoon based to some internet page, I tried with page=Source/checkin by use of key_api. In this way I caused import of the last subversion revision (non intermediate) and the issues are correctly closed. Can I now the difference between use of 'page=Source/import' and ' page=Source/checkin'? Thanks in advance. Alessio On 11 January 2012 19:29, John Reese <jo...@no...> wrote: > On 01/11/2012 08:13 AM, Alessio Gennari wrote: > > Thank you very much. > > > > Alessio. > > > > > > > > On 11 January 2012 17:04, Damien Regad <dam...@me... > > <mailto:dam...@me...>> wrote: > > > > That's due to the XSRF protection mechanism in MantisBT. > > > > If you don't want this (WARNING: SECURITY RISK !), set > > $g_form_security_validation = OFF; > > > > Damien > > That is incorrect. That page is only supposed to be used by a logged in > user, hence the CSRF token. Turning off that protection is the wrong > fix. The real correction is to use 'page=Source/import', as I mentioned > in my other reply to this thread. > > Cheers > > -- > John Reese > noswap.com > > > ------------------------------------------------------------------------------ > Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex > infrastructure or vast IT resources to deliver seamless, secure access to > virtual desktops. With this all-in-one solution, easily deploy virtual > desktops for less than the cost of PCs and save 60% on VDI infrastructure > costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox > _______________________________________________ > mantisbt-dev mailing list > man...@li... > https://lists.sourceforge.net/lists/listinfo/mantisbt-dev > |
From: John R. <jo...@no...> - 2012-01-11 22:55:00
|
On 01/11/2012 02:07 PM, Alessio Gennari wrote: > Hi newly, > in the afternoon based to some internet page, I tried with > page=Source/checkin by use of key_api. > In this way I caused import of the last subversion revision (non > intermediate) and the issues are correctly closed. > > Can I now the difference between use of 'page=Source/import' and > 'page=Source/checkin'? > > Thanks in advance. > > Alessio Source/checkin is used when the source control hook can provide enough data to tell Mantis what commit data needs to be imported, eg revision # for svn. Source/import triggers an import on all configured branches, similar to use Import Latest from the repository management interface, and is generally there for use with cronjobs when post-commit hooks are available or possible. Similarly, Source/import&id=all allows a cronjob to trigger imports for all repositories at once, meant to be used by a cronjob. -- John Reese noswap.com |
From: Alessio G. <ale...@gm...> - 2012-01-13 06:50:30
|
Thank tour very much John. Bye Alessio Il giorno 11/gen/2012 23:55, "John Reese" <jo...@no...> ha scritto: > On 01/11/2012 02:07 PM, Alessio Gennari wrote: > > Hi newly, > > in the afternoon based to some internet page, I tried with > > page=Source/checkin by use of key_api. > > In this way I caused import of the last subversion revision (non > > intermediate) and the issues are correctly closed. > > > > Can I now the difference between use of 'page=Source/import' and > > 'page=Source/checkin'? > > > > Thanks in advance. > > > > Alessio > > Source/checkin is used when the source control hook can provide enough > data to tell Mantis what commit data needs to be imported, eg revision # > for svn. Source/import triggers an import on all configured branches, > similar to use Import Latest from the repository management interface, > and is generally there for use with cronjobs when post-commit hooks are > available or possible. Similarly, Source/import&id=all allows a cronjob > to trigger imports for all repositories at once, meant to be used by a > cronjob. > > -- > John Reese > noswap.com > > > ------------------------------------------------------------------------------ > Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex > infrastructure or vast IT resources to deliver seamless, secure access to > virtual desktops. With this all-in-one solution, easily deploy virtual > desktops for less than the cost of PCs and save 60% on VDI infrastructure > costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox > _______________________________________________ > mantisbt-dev mailing list > man...@li... > https://lists.sourceforge.net/lists/listinfo/mantisbt-dev > |