phpwiki-talk

[Phpwiki-talk] IncludeSiteMap/IncludePage and CreateToc

[Micki K. <mic...@co...>]

CreateToc looks great! IncludeSiteMap works great!

Can they work together? Right now any headers in an included page are ignored.

Thanks,
Micki


-- 

Micki
mailto:mic...@co...

Re: [Phpwiki-talk] CreateToc works well - two issues

[Micki K. <mic...@co...>]

That usage (no quotes around the !!!,!) worked delightfully! Thanks!

I'll test the new appearance tomorrow...
Micki

>Message: 5
>Date: Tue, 09 Mar 2004 20:20:39 +0100
>From: Reini Urban <ru...@x-...>
>To: php...@li...
>Subject: Re: [Phpwiki-talk] CreateToc works well - two issues
>
>First issue is now in CVS as liststyle=dl (default) or "ol" or "ul"
>
>Second issue works fine for me:
>
>http://reini/wiki/pref/TextFormattingRules?headers=!,!!!&jshide=0
>    h4 and h2 only
>http://reini/wiki/pref/TextFormattingRules?headers=!!,!!!&jshide=0
>    h3 and h2 only, and so on.
>
>Micki Kaufman schrieb:
>  > Hey there - tested CreateToc just now and it's looking much better.
>  > Yahoo - this is my user base's #1 issue, they'll be delighted.
>  >
>  > Two issues to raise:
>  >
>  > 1. the TOC shouldn't have bullets, especially ones that aren't indented.
>  > Since it's a TOC, it should be mulitple-space-indented only, imho.
>  > bullets and dashes like currently in place are a detriment to the
>  > elegant design of this plugin. I'm guessing it's an interim solution and
>  > this is already in your mind.
>  >
>  > 2. The TOC doesn't seem to generated any entries for '!' (h4's). I set
>  > headers to '!' and none appear, despite the presence of '!' headings.
>  > I'd recommend that the following functionality be in place:
>  >
>  > headers="!!!" should give you entries for the !!! headings only
>  >
>  > headers="!!" should give you a TOC containing ONLY '!!' headings, not
>  > !!! as well
>  >
>  > headers="!" should give you a TOC containing ONLY '!' headings, not !!!
>  > and !! as well
>  >
>  > headers="!!!,!" should give you a TOC containing ONLY '!!!' and '!'
>  > headings, not !! as well
>  >
>  > and last, no headers declaration should give you !!!, !! and ! headings.
>  >
>  > I'll be glad to futz about with the code to make it work as described,
>  > if you'd like.
>  >
>  Great job
-- 

Micki
mailto:mic...@co...

Re: [Phpwiki-talk] CreateToc works well - two issues

[Reini U. <ru...@x-...>]

First issue is now in CVS as liststyle=dl (default) or "ol" or "ul"

Second issue works fine for me:

http://reini/wiki/pref/TextFormattingRules?headers=!,!!!&jshide=0
   h4 and h2 only
http://reini/wiki/pref/TextFormattingRules?headers=!!,!!!&jshide=0
   h3 and h2 only, and so on.

Micki Kaufman schrieb:
> Hey there - tested CreateToc just now and it's looking much better. 
> Yahoo - this is my user base's #1 issue, they'll be delighted.
> 
> Two issues to raise:
> 
> 1. the TOC shouldn't have bullets, especially ones that aren't indented. 
> Since it's a TOC, it should be mulitple-space-indented only, imho. 
> bullets and dashes like currently in place are a detriment to the 
> elegant design of this plugin. I'm guessing it's an interim solution and 
> this is already in your mind.
> 
> 2. The TOC doesn't seem to generated any entries for '!' (h4's). I set 
> headers to '!' and none appear, despite the presence of '!' headings. 
> I'd recommend that the following functionality be in place:
> 
> headers="!!!" should give you entries for the !!! headings only
> 
> headers="!!" should give you a TOC containing ONLY '!!' headings, not 
> !!! as well
> 
> headers="!" should give you a TOC containing ONLY '!' headings, not !!! 
> and !! as well
> 
> headers="!!!,!" should give you a TOC containing ONLY '!!!' and '!' 
> headings, not !! as well
> 
> and last, no headers declaration should give you !!!, !! and ! headings.
> 
> I'll be glad to futz about with the code to make it work as described, 
> if you'd like.
> 
> Great job!
> 


-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

Re: [Phpwiki-talk] Ready for 1.3.8 ?

[Reini U. <ru...@x-...>]

Cédric Girard schrieb:
> I am working on french translation. When it will be OK, must I use the CVS
> to submit the files or use another way? 

Put it either into the sf.net patch tracker (preferred), or sent it to 
this list.

 > Don't wait for me for the 1.3.8.
> Is there any french speakers here? To validate my translation and test?

I can do the tests.
The other translators are in the fr.po header, with email.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

[Phpwiki-talk] CreateToc works well - two issues

[Micki K. <mic...@co...>]

Hey there - tested CreateToc just now and it's looking much better. 
Yahoo - this is my user base's #1 issue, they'll be delighted.

Two issues to raise:

1. the TOC shouldn't have bullets, especially ones that aren't 
indented. Since it's a TOC, it should be mulitple-space-indented 
only, imho. bullets and dashes like currently in place are a 
detriment to the elegant design of this plugin. I'm guessing it's an 
interim solution and this is already in your mind.

2. The TOC doesn't seem to generated any entries for '!' (h4's). I 
set headers to '!' and none appear, despite the presence of '!' 
headings. I'd recommend that the following functionality be in place:

headers="!!!" should give you entries for the !!! headings only

headers="!!" should give you a TOC containing ONLY '!!' headings, not 
!!! as well

headers="!" should give you a TOC containing ONLY '!' headings, not 
!!! and !! as well

headers="!!!,!" should give you a TOC containing ONLY '!!!' and '!' 
headings, not !! as well

and last, no headers declaration should give you !!!, !! and ! headings.

I'll be glad to futz about with the code to make it work as 
described, if you'd like.

Great job!

-- 

Micki
mailto:mic...@co...

Re: [Phpwiki-talk] Ready for 1.3.8 ?

[<ce...@da...>]

I am working on french translation. When it will be OK, must I use the CVS
to submit the files or use another way? Don't wait for me for the 1.3.8.
Is there any french speakers here? To validate my translation and test?

Cédric

-- 
> informaticien qui tire à l'arc ou archer qui informatise?
> http://plcoder.net

[Phpwiki-talk] Re: Phpwiki-talk digest, Vol 1 #942 - 11 msgs

[Micki K. <mic...@co...>]

So far, so good - can I pass 'reclimit=1' next to quiet=1? In other 
words, "quiet=1 reclimit=1"?

Troubleshooting note - UnfoldSubPagesPlugin kills the include (and 
the footer, etc.), with a fatal error (excluding it with 
'exclude=UnfoldSubpagesPlugin' worked).

Thanks,
Micki
>Deprecated Arguments:
>pages
>deprecated. renamed to maxpages.
>sort
>'asc' or 'desc'. deprecated: use "+" or "-" before the column name 
>with sortby.
>
>Example:
>
>

At 9:54 AM -0800 3/9/04, php...@li... wrote:
><?plugin IncludeSiteMap page=HomePage includepages="quiet=0" ?>
>
>--
>Reini Urban
>http://xarch.tu-graz.ac.at/home/rurban/


-- 

Micki
mailto:mic...@co...

[Phpwiki-talk] Problem with WikiGroup

[Konstantin Z. <kza...@ho...>]

Hello, Konstantin!
You wrote to All on Mon, 8 Mar 2004 15:28:38 -0800:

    Ok, now after I been logged in as admin I'm having:
    Fatal error: Call to undefined function: file_passwd() in
/homepages/4/d88171581/htdocs/fidolook/wiki/lib/WikiGroup.php on line 645
    for every page. Any ideas how to understand what is going on?

 KZ> I'm new in php and I'm tring to get work latest snapshot from cvs.
 KZ> I have some problems so far:

 KZ> Then I try type any user name instead of (admin) into "Sign in as: "
 KZ> I've got:
 KZ> Fatal error: Call to undefined function: file_passwd() in
 KZ> /homepages/4/d88171581/htdocs/fidolook/wiki/lib/WikiUserNew.php on line
 KZ> 1813

 KZ> What is missing? require 'lib/pear/File_Passwd.php'; goes fine couple
 KZ> lines beafore.

 KZ> login page for admin user shows:
 KZ> lib/WikiUserNew.php:2165: Notice[8]: unserialize() failed at offset 0
 KZ> of 5 bytes

 KZ> Also wiki installation refused to work until I set USE_COMPRESSION
 KZ> false.

 KZ> PHP 4.2.3, Linux infong 2.4.21, Apache 1.3


With best regards, Konstantin Zadorozhny.
np:

Re: [Phpwiki-talk] Ready for 1.3.8 ?

[Reini U. <ru...@x-...>]

Dan F schrieb:
> Reini Urban wrote:
>> Steve,
>> I think we are ready now for 1.3.8.
> 
> So any updated plans for releasing 1.3.8? Are there things people could 
> help with?
> 
> Again, I am not demanding any particular release time, and I'm grateful 
> for the existence of phpwiki. I'd just like to make sure that releasing 
> doesn't fall off the radar, and I've seen a lot of non-release traffic 
> lately (including my own).

As soon as auth and prefs work for other people, esp. on the two
sf.net installations.
http://phpwiki.sf.net/demo and http://phpwiki.sf.net/test

on my other test installations it works fine.

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

Re: [Phpwiki-talk] Ready for 1.3.8 ?

[Dan F <dfr...@cs...>]

Reini Urban wrote:

> Steve,
> I think we are ready now for 1.3.8.


So any updated plans for releasing 1.3.8? Are there things people could 
help with?

Again, I am not demanding any particular release time, and I'm grateful 
for the existence of phpwiki. I'd just like to make sure that releasing 
doesn't fall off the radar, and I've seen a lot of non-release traffic 
lately (including my own).

Dan

-- 
Dan Frankowski    dfr...@cs...      612-626-8396

[Phpwiki-talk] LDAP_SET_OPTION error

[John C. <joh...@ua...>]

Reini,
  The ldap_set_option is incorrect in the CVS index.php.  Could you change
it to:

$LDAP_SET_OPTION = array('LDAP_OPT_PROTOCOL_VERSION' => 3,
                         'LDAP_OPT_REFERRALS' => 0);

  It's normally commented out and the latest cvs version started throwing
warnings because the array wasn't correct :-)

Thanks!

John Cole

-------------------------------------
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.

RE: [Phpwiki-talk] RichTable plugin...

[John C. <joh...@ua...>]

Reini,
  Thanks!  I'll give it a spin in a few minutes.

John Cole

-----Original Message-----
From: php...@li...
[mailto:php...@li...]On Behalf Of Reini
Urban
Sent: Tuesday, March 09, 2004 7:18 AM
To: php...@li...
Subject: Re: [Phpwiki-talk] RichTable plugin...


John Cole schrieb:
>   I just updated from CVS and RichTable is throwing
> the following error.
> 
> Fatal error: Call to undefined function:
> transformtext() in C:\Program Files\Apache
> Group\Apache2\htdocs\phpwiki\lib\plugin\RichTable.php
> on line 76
> 
> Thanks for looking into this.

fixed in CVS.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Phpwiki-talk mailing list
Php...@li...
https://lists.sourceforge.net/lists/listinfo/phpwiki-talk

-------------------------------------
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.

Re: [Phpwiki-talk] RichTable plugin...

[Reini U. <ru...@x-...>]

John Cole schrieb:
>   I just updated from CVS and RichTable is throwing
> the following error.
> 
> Fatal error: Call to undefined function:
> transformtext() in C:\Program Files\Apache
> Group\Apache2\htdocs\phpwiki\lib\plugin\RichTable.php
> on line 76
> 
> Thanks for looking into this.

fixed in CVS.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

Re: [Phpwiki-talk] bug report from phpwiki.nightly...

[Reini U. <ru...@x-...>]

三重想健身 schrieb:
> phpwiki.nightly.tar.gz 1764954
> hi , I come from Taiwan,
> Yesterday I downloaded phpwiki from 
> http://phpwiki.sf.net/nightly/phpwiki.nightly.tar.gz
> 
> Work with UTF-8 charset encoding in Chinese and MySQL
> 4.0.17 php 4.3.4 apache 2.0.48
> 
> installation procedure along with documents is very
> smoothly.
> 
> HERE SOMETHING WRONG ARE:
> 
> PhotoAlbumPlugin
> 
> lib/plugin/PhotoAlbum.php (In template 'browse') (In
> template 'body') (In template 'html'):271:
> Notice[1024]: Unable to
> getimagesize(http://phpwiki.sourceforge.net/demo/themes/Hawaiian/images/pictures/#
> Sample file for PhotoAlbum plugin)

This was fixed today.

> Php Wiki Administration/Remove
> lib/plugin/WikiAdminRemove.php (In template 'browse')
> (In template 'body') (In template 'html'):82:
> Warning[2]: Missing argument 4 for collectpages()

This was fixed a couple of days ago.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

Re: [Phpwiki-talk] Re: feature idea - TOC (de facto IncludeHeadings)

[Reini U. <ru...@x-...>]

> Joby Walker schrieb:
>> Nice catch.
>> This could be resolved by appending an (invisible) index number to 
>> every TOC link/anchor.

Reini Urban schrieb:
> yes, CreateToc is not quite stable enough.
> I'll have more time on sunday for this and more.

CreateToc is now finished.
Instead of "x20." I used "_" for spaces. This is not reversible, but 
anchors doesn't need to be reversed.

>> Whit Blauvelt wrote:
>>
>>> On Tue, Mar 02, 2004 at 07:24:12PM +0100, Reini Urban wrote:
>>>
>>>> I fixed now CreateToc to link to the headers and
>>>> optionally link back to the TOC.
>>>
>>>
>>>
>>>
>>> Nice addition.
>>>
>>> One thing the current scheme misses is when two different headings 
>>> have the
>>> same subheading. So if you have a page with sections like:
>>>
>>>   Category One
>>>     Examples
>>>
>>>   Categore Two
>>>     Examples
>>>
>>> - the two Examples subcategories try to set up links to the headers 
>>> like:
>>>
>>> <li><a href="InPage#Categoryx20.1" class="named-wiki" 
>>> title="InPage">Category 1</a></li>
>>> <li><a href="InPage#Examples" class="named-wiki" 
>>> title="InPage">Examples</a></li>
>>> <li><a href="InPage#Categoryx20.2" class="named-wiki" 
>>> title="InPage">Category 2</a></li>
>>> <li><a href="InPage#Examples" class="named-wiki" 
>>> title="InPage">Examples</a></li>


-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

[Phpwiki-talk] Re: Bugs! - IncludeSiteMap

[Reini U. <ru...@x-...>]

Micki Kaufman schrieb:
> Hi there - let me know when I should pull down the fresh code and give 
> it a spin.
> 
> Hoep you had/have fun at the festival!

sure I had!

> At 1:55 PM +0100 3/2/04, Reini Urban wrote:
>> Micki Kaufman schrieb:
>>> Was wondering if you'd had a chance to bulletproof 'IncludeSiteMap' yet.
>>
>> I'm just fighting with the culprit extractSection().
>> Some other plugins use that also.

couldn't find an error here yet. works for me like a charm unfortunately.

>> PS: from this wednesday on I am on a film festival for one week.
>> So I will have not much time there.
>>
>>> Thanks so much for bringing it into the code base - it's so close to 
>>> being complete!
>>> Micki
>>>
>>>> Reini's rewrite of IncludeSiteMap looks great, but needs a bit more 
>>>> bugproofing.
>>>>
>>>> Right now, it appears not to load the included pages on the second 
>>>> page load. In addition, it's unclear how to bypass the reclimit and 
>>>> includepages defaults, to allow inclusion of a page's full content 
>>>> and modify the depth of recursion.
>>>>
>>>> Anyone else using IncludeSiteMap - can you verify?
>>>>
>>>> Thanks!
>>>> Micki
>>>>
>>>>> Hi Reini. Testing my migrated wiki in my test environment - 1.3.8 
>>>>> looks good!
>>>>>
>>>>> One question with my tests re: 'IncludeSiteMap' - For document 
>>>>> chunking (Single-source), we need full, quiet includes as in the 
>>>>> original.
>>>>>
>>>>> Currently, it's defaulted to 50 words, and I can't seem to make a 
>>>>> change by editing the IncludeSiteMap source. If you have a moment, 
>>>>> do you mind helping me figure out how can I accomplish this?

<?plugin IncludeSiteMap page=HomePage includepages="quiet=0" ?>

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

[Phpwiki-talk] Re: Bugs! - IncludeSiteMap

[Micki K. <mic...@co...>]

Hi there - let me know when I should pull down the fresh code and 
give it a spin.

Hoep you had/have fun at the festival!

Micki

At 1:55 PM +0100 3/2/04, Reini Urban wrote:
>Micki Kaufman schrieb:
>>Was wondering if you'd had a chance to bulletproof 'IncludeSiteMap' yet.
>
>I'm just fighting with the culprit extractSection().
>Some other plugins use that also.
>
>PS: from this wednesday on I am on a film festival for one week.
>So I will have not much time there.
>
>>Thanks so much for bringing it into the code base - it's so close 
>>to being complete!
>>Micki
>>
>>>Reini's rewrite of IncludeSiteMap looks great, but needs a bit 
>>>more bugproofing.
>>>
>>>Right now, it appears not to load the included pages on the second 
>>>page load. In addition, it's unclear how to bypass the reclimit 
>>>and includepages defaults, to allow inclusion of a page's full 
>>>content and modify the depth of recursion.
>>>
>>>Anyone else using IncludeSiteMap - can you verify?
>>>
>>>Thanks!
>>>Micki
>>>
>>>>Hi Reini. Testing my migrated wiki in my test environment - 1.3.8 
>>>>looks good!
>>>>
>>>>One question with my tests re: 'IncludeSiteMap' - For document 
>>>>chunking (Single-source), we need full, quiet includes as in the 
>>>>original.
>>>>
>>>>Currently, it's defaulted to 50 words, and I can't seem to make a 
>>>>change by editing the IncludeSiteMap source. If you have a 
>>>>moment, do you mind helping me figure out how can I accomplish 
>>>>this?
>--
>Reini Urban
>http://xarch.tu-graz.ac.at/home/rurban/


-- 

Micki
mailto:mic...@co...

Re: [Phpwiki-talk] security of PHPWiki

[<ce...@da...>]

Reini Urban wrote:
> We use adodb and peardb quoting of database args,
> so I would consider it safe enough. We didn't test it enough for the=20
> plain file backends: CVS and file.

I use mysql, so it does not matter

> Write a robot blocker and abuse checker.
> Store ip and current time in the session and block for 20 minutes if=20
> client connects too often. (> 5/sec)

I will try it, I need this kind of tool for my CMS too.
I may also need one day to export all pages to make a structured=20
document (in PDF for example).

> Yes, we would need some updates for the french translation.
> See locale/po/fr.po and locale/fr/pgsrc/
> There are a lot of fuzzy and empty strings, and not yet translated new=20
> pages.

It's far more easy, I do it now.

Thanks for answer. PHPWiki is a great tool.

C=E9dric

[Phpwiki-talk] Problem with WikiUserNew

[Konstantin Z. <kza...@ho...>]

Hello, All!

I'm new in php and I'm tring to get work latest snapshot from cvs.
I have some problems so far:

Then I try type any user name instead of (admin) into "Sign in as: " I've
got:
Fatal error: Call to undefined function: file_passwd() in
/homepages/4/d88171581/htdocs/fidolook/wiki/lib/WikiUserNew.php on line 1813

What is missing? require 'lib/pear/File_Passwd.php'; goes fine couple lines
beafore.

login page for admin user shows:
lib/WikiUserNew.php:2165: Notice[8]: unserialize() failed at offset 0 of 5
bytes

Also wiki installation refused to work until I set USE_COMPRESSION false.

PHP 4.2.3, Linux infong 2.4.21, Apache 1.3

With best regards, Konstantin Zadorozhny.

Re: [Phpwiki-talk] (no subject)

[Reini U. <ru...@x-...>]

Cédric Girard schrieb:
> I have just created a wiki with 1.3.7 (group writing of a help document
> for archery competition organisation).
> I have a few questions about phpwiki
>  - is it safe to make it public on the internet? 

It depends on your webserver, database and php settings. we require 
register_globals = off. it's a wiki, but normally it's safe.

 > Have you tested sql injection,

We use adodb and peardb quoting of database args,
so I would consider it safe enough. We didn't test it enough for the 
plain file backends: CVS and file.

But as admin you can define malicious sql statements for $DBAuthParams 
in index.php, which could cause harm.
allow_url_fopen should be turned off to disable index.php overrides.

 > cross-site scripting?

GET and POST args are not treated specially, besides 
fix_magic_quotes_gpc and the fix_multipart_form_data upload 
vulneribility for older php's.
So you might try to pass javascript or other malicous args to PhpWiki, 
but normally every arg or page content is escaped via htmlentities() 
before printing, besides template content.
See HTML::raw and the RawHtml plugin for exceptions.

However, one could easily abuse PhpWiki by saving or changing pages
with custom scripts.
We have no fancy robot blocker or abuse checker as in ward's c2 wiki, 
since there was no need for it yet. I wrote a short one some years ago, 
but never needed it after fixing our robot and google-friendly meta headers.

>  - if not, what can I do to make it safer?

Write a robot blocker and abuse checker.
Store ip and current time in the session and block for 20 minutes if 
client connects too often. (> 5/sec)

See http://phpwiki.sourceforge.net/phpwiki/HowToBlockRobots for my 
analysis some years ago. most external links to my scripts are gone.

>  - do you need help: php, french translations

Yes, we would need some updates for the french translation.
See locale/po/fr.po and locale/fr/pgsrc/
There are a lot of fuzzy and empty strings, and not yet translated new 
pages.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

[Phpwiki-talk] (no subject)

[<ce...@da...>]

Hi,

I have just created a wiki with 1.3.7 (group writing of a help document
for archery competition organisation).
I have a few questions about phpwiki
 - is it safe to make it public on the internet? Have you tested sql
injection, cross-site scripting?
 - if not, what can I do to make it safer?
 - do you need help: php, french translations

Thanks you for this great tool.
Cédric

-- 
> informaticien qui tire à l'arc ou archer qui informatise?
> http://plcoder.net

Re: [Phpwiki-talk] LDAP Authentication...

[Reini U. <ru...@x-...>]

Norberto Meijome schrieb:
> John, Reini,
> FWIW, I submitted a patch against 1.3.4 that enabled this functionality

Latest CVS code should work with Microsoft's Active Directory 
non-anonymous LDAP and LDAPS.
See index.php and lib/WikiUserNew.php

We don't maintain 1.3.4 anymore.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

[Phpwiki-talk] Errors restoring pgsrc...

[John C. <joh...@ua...>]

I was updating my wiki to the top of the cvs tree and ran into a problem
with some of the files in pgsrc.
 
Using Load File, the restore fails with a "Document contains no data" error
and apache exits with 'Parent: child process exited with status 128 --
Restarting.' in the error.log file when attempting to restore
FrameIncludePlugin and RawHtmlPlugin.  
 
Removing these two files let's all of the other files restore except for
OldTextFormattingRules, which has a confluct and throws the same "Document
contains no data" error when you hit Restore Anyway.
 
It looks like the first two pages didn't exist in my wiki database and
adding them by hand allowed the restore to complete, although I still cannot
edit them.
 
Other oddities...  I have two HomePage pages listed in the restore (there is
only one in the directory) and I get the following notice at the bottom of
the restore page...
 
 C:\Program Files\Apache Group\Apache2\htdocs\phpwiki\lib\loadsave.php:553:
Notice[1024]: Loading InterWikiMap from external file lib/interwiki.map. 
 
Thanks,
 
John Cole

-------------------------------------
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.

RE: [Phpwiki-talk] LDAP Authentication...

[John C. <joh...@ua...>]

Norberto,
  I think that is where I was able to get my 1.3.4 wiki working with LDAP
:-)  If you go back in the thread far enough, I hope I said that.

  I did have to change the search field for our setup, and I wonder if
everyones AD setup is going to be different.  I'd recomend to anyone trying
to configure their wiki for LDAP to  dump an LDIF file before you start
trying to figure out what your DN and search fields are.  

  Other than that, I've just been trying to keep AD working with the top of
the tree, which got dicy for a while.

  I run two wiki's pointed at the same database, and when I feel the top of
the tree is stable enough, I move it from my working version to the main
version.  I try and sync my development copy once a week to catch up to
Reini.

John Cole

-----Original Message-----
From: php...@li...
[mailto:php...@li...]On Behalf Of Norberto
Meijome
Sent: Monday, March 08, 2004 1:14 AM
To: php...@li...
Subject: Re: [Phpwiki-talk] LDAP Authentication...
Importance: Low


John, Reini,
FWIW, I submitted a patch against 1.3.4 that enabled this functionality 
-- 
http://sourceforge.net/tracker/index.php?func=detail&aid=738150&group_id=612
1&atid=306121

Some of the code and comments provided in this thread above looks quite 
similar (same?) to the one provided in my patch. I guess I used the 
wrong system to post that patch :-)

I've had 1.3.4 running with this changes doing authentication against my 
W2K Active Directory since I've submitted the patch. I only have to 
spend some time figuring out how to enable LDAP queries over TLS against 
this AD (not sure how to enable it @ W2K end, no problems from PHP).

The reason of using a specific define for LDAP_PORT was in case a user 
had an LDAP server running on another port without changing the lib/ files.

Keep on the great work -- looking forward 1.3.8 + 1.4 :-)

Best regards,

-- 
Norberto Meijome | numard at meijome dot net
"Everything is interesting if you go into it deeply enough." - Richard
Feynman



Reini Urban wrote:

> John,
> could you please zip your diff and attach it.
> email mangles it unreadable.
>
> A few things:
> LDAP_PORT is not needed.
> Just set
>   LDAP_HOST = "ldaps://server:636"
> or
>   LDAP_HOST = "ldap://server:389"
> Could you please try that out with your php_ldap.dll
>
> Thanks for the non-anonymous bind sample and for finding the stupid 
> password error.
>
> John Cole schrieb:
>
>> Ok, I got it working.  There are a few issues here. First if you use 
>> strict USER_AUTH_POLICY with only
>> LDAP defined, you will get an error
>>
>> Fatal error: Call to a member function on a non-object
>> in C:\Program Files\Apache
>> Group\Apache2\htdocs\phpwiki\lib\WikiUserNew.php on
>> line 855
>>
>> inside the checkPass function.
>>
>> using USER_AUTH_POLICY stacked works however.
>>
>> After, that is,
>> the line
>>
>>                         if ($r = @ldap_bind($ldap,
>> $dn, $passwd)) {
>>
>> is changed to
>>
>>                         if ($r = @ldap_bind($ldap,
>> $dn, $submitted_password)) {
>>
>>
>> Here is the patch to make LDAP actually work and work
>> with Active Directory.  I do not know if the AD stuff
>> interfers with OpenLDAP or not.
>>
>> -----------------------------------------------
>> Index: lib/WikiUserNew.php
>> ===================================================================
>> RCS file:
>> /cvsroot/phpwiki/phpwiki/lib/WikiUserNew.php,v
>> retrieving revision 1.20
>> diff -u -r1.20 WikiUserNew.php
>> --- lib/WikiUserNew.php    26 Feb 2004 01:29:11 -0000
>> 1.20
>> +++ lib/WikiUserNew.php    26 Feb 2004 21:38:13 -0000
>> @@ -459,6 +459,7 @@
>>              return false;       // Nothing to do?
>>  
>>          $authlevel = $this->checkPass($passwd);
>> +                 if (!$authlevel)
>>              return _("Invalid password or userid.");
>>          elseif ($authlevel < $require_level)
>> @@ -1370,25 +1371,38 @@
>>      function checkPass($submitted_password) {
>>          $this->_authmethod = 'LDAP';
>>          $userid = $this->_userid;
>> -        if ($ldap = ldap_connect(LDAP_AUTH_HOST)) {
>> // must be a valid LDAP server!
>> -            $r = @ldap_bind($ldap); // this is an
>> anonymous bind
>> -            // Need to set the right root search
>> information. see ../index.php
>> -            $sr = ldap_search($ldap, LDAP_BASE_DN,
>> "uid=$userid");
>> -            $info = ldap_get_entries($ldap, $sr); //
>> there may be more hits with this userid. try every
>> -            for ($i = 0; $i < $info["count"]; $i++) {
>> -                $dn = $info[$i]["dn"];
>> -                // The password is still plain text.
>> -                if ($r = @ldap_bind($ldap, $dn,
>> $passwd)) {
>> -                    // ldap_bind will return TRUE if
>> everything matches
>> -                    ldap_close($ldap);
>> -                    $this->_level = WIKIAUTH_USER;
>> -                    return $this->_level;
>> +
>> +        if ($ldap = ldap_connect(LDAP_AUTH_HOST,
>> LDAP_PORT)) { // must be a valid LDAP server!
>> +            ldap_set_option($ldap,
>> LDAP_OPT_PROTOCOL_VERSION, 3);
>> +            ldap_set_option($ldap,
>> LDAP_OPT_REFERRALS, 0);
>> +            +            // anonymous binds do not work with
>> active directory
>> +            if ($r = @ldap_bind($ldap,
>> LDAP_AUTH_USER, LDAP_AUTH_PASSWORD)) {
>> +                // AD search field is different that
>> uid
>> +                $st_search =
>> LDAP_SEARCH_FIELD."=$userid";
>> +
>> +                // Need to set the right root search
>> information. see ../index.php
>> +                if ($sr = ldap_search($ldap,
>> LDAP_BASE_DN, "$st_search")) {  +                    $info = 
>> ldap_get_entries($ldap,
>> $sr);
>> +
>> +                    for ($i = 0; $i < $info["count"];
>> $i++) {
>> +                        $dn = $info[$i]["dn"];
>> +                        // The password is still
>> plain text.
>> +                        if ($r = @ldap_bind($ldap,
>> $dn, $submitted_password)) {
>> +                            // ldap_bind will return
>> TRUE if everything matches
>> +                            ldap_close($ldap);
>> +                            $this->_level =
>> WIKIAUTH_USER;
>> +                            return $this->_level;
>> +                        }
>> +                    }
>> +                } else {
>> +                    trigger_error("LDAP Search Failed
>> " . LDAP_AUTH_HOST, E_USER_WARNING);
>>                  }
>> +            } else {
>> +                trigger_error("LDAP Search Failed " .
>> LDAP_AUTH_HOST, E_USER_WARNING);
>>              }
>>          } else {
>> -            trigger_error(fmt("Unable to connect to
>> LDAP server %s", LDAP_AUTH_HOST), -                          
>> E_USER_WARNING);
>> -            //return false;
>> +            trigger_error(_("Unable to connect to
>> LDAP server "). LDAP_AUTH_HOST, E_USER_WARNING);
>>          }
>>  
>>          if (USER_AUTH_POLICY === 'strict') {
>> @@ -1406,13 +1420,28 @@
>>  
>>      function userExists() {
>>          $userid = $this->_userid;
>> -        if ($ldap = ldap_connect(LDAP_AUTH_HOST)) {
>> // must be a valid LDAP server!
>> -            $r = @ldap_bind($ldap);                // this is an 
>> anonymous bind
>> -            $sr = ldap_search($ldap, LDAP_BASE_DN,
>> "uid=$userid");
>> -            $info = ldap_get_entries($ldap, $sr);
>> -            if ($info["count"] > 0) {
>> -                ldap_close($ldap);
>> -                return true;
>> +
>> +        if ($ldap = ldap_connect(LDAP_AUTH_HOST,
>> LDAP_PORT)) { // must be a valid LDAP server!
>> +            ldap_set_option($ldap,
>> LDAP_OPT_PROTOCOL_VERSION, 3);
>> +            ldap_set_option($ldap,
>> LDAP_OPT_REFERRALS, 0);
>> +            +            // anonymous binds do not work with
>> active directory
>> +            if ($r = @ldap_bind($ldap,
>> LDAP_AUTH_USER, LDAP_AUTH_PASSWORD)) {
>> +                // AD search field is different that
>> uid
>> +                $st_search =
>> LDAP_SEARCH_FIELD."=$userid";
>> +
>> +                // Need to set the right root search
>> information. see ../index.php
>> +                if ($sr = ldap_search($ldap,
>> LDAP_BASE_DN, "$st_search")) {  +                    $info = 
>> ldap_get_entries($ldap,
>> $sr);
>> +                    if ($info["count"] > 0) {
>> +                        ldap_close($ldap);
>> +                        return true;
>> +                    }
>> +                } else {
>> +                    trigger_error("LDAP Search Failed
>> " . LDAP_AUTH_HOST, E_USER_WARNING);
>> +                }
>> +            } else {
>> +                trigger_error("LDAP Search Failed " .
>> LDAP_AUTH_HOST, E_USER_WARNING);
>>              }
>>          } else {
>>              trigger_error(_("Unable to connect to
>> LDAP server "). LDAP_AUTH_HOST, E_USER_WARNING);
>> @@ -1955,7 +1984,6 @@
>>          return $this->_prefs;
>>      }
>>  }
>> -
>>  
>>  // $Log: WikiUserNew.php,v $
>>  // Revision 1.20  2004/02/26 01:29:11  rurban
>> ------------------------------------------------------
>>
>> You will need the following added to index.php
>>
>> //LDAP's Server Port. If using SSL, aka ldaps://, port
>> should be 636 if (!defined('LDAP_PORT')) define('LDAP_PORT', "389");
>>
>> //our AD's LDAP is locked down, no anonymous
>> connections are //allowed. A real username / password must be given in
>> order to perform //a search. if (!defined('LDAP_AUTH_USER'))
>> define('LDAP_AUTH_USER', "CN=ldap
>> user,CN=Users,DC=company,DC=com");
>> if (!defined('LDAP_AUTH_PASSWORD'))
>> define('LDAP_AUTH_PASSWORD', "ldappassword");
>>
>>
>> //Defines which field of AD's LDAP to search for.
>> needs to match the //username entered by the user in the webpage.
>> //samaccountname = //Pre-Win2k username if 
>> (!defined('LDAP_SEARCH_FIELD'))
>> define('LDAP_SEARCH_FIELD', "sAMAccountName");
>>
>> Thanks,
>>
>> John Cole
>>
>>
>>
>> -------------------------------------------------------
>> SF.Net is sponsored by: Speed Start Your Linux Apps Now.
>> Build and deploy apps & Web services for Linux with
>> a free DVD software kit from IBM. Click Now!
>> http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
>> _______________________________________________
>> Phpwiki-talk mailing list
>> Php...@li...
>> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>>
>
>


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Phpwiki-talk mailing list
Php...@li...
https://lists.sourceforge.net/lists/listinfo/phpwiki-talk

-------------------------------------
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.

Re: [Phpwiki-talk] LDAP Authentication...

[Norberto M. <nu...@me...>]

John, Reini,
FWIW, I submitted a patch against 1.3.4 that enabled this functionality 
-- 
http://sourceforge.net/tracker/index.php?func=detail&aid=738150&group_id=6121&atid=306121

Some of the code and comments provided in this thread above looks quite 
similar (same?) to the one provided in my patch. I guess I used the 
wrong system to post that patch :-)

I've had 1.3.4 running with this changes doing authentication against my 
W2K Active Directory since I've submitted the patch. I only have to 
spend some time figuring out how to enable LDAP queries over TLS against 
this AD (not sure how to enable it @ W2K end, no problems from PHP).

The reason of using a specific define for LDAP_PORT was in case a user 
had an LDAP server running on another port without changing the lib/ files.

Keep on the great work -- looking forward 1.3.8 + 1.4 :-)

Best regards,

-- 
Norberto Meijome | numard at meijome dot net
"Everything is interesting if you go into it deeply enough." - Richard Feynman



Reini Urban wrote:

> John,
> could you please zip your diff and attach it.
> email mangles it unreadable.
>
> A few things:
> LDAP_PORT is not needed.
> Just set
>   LDAP_HOST = "ldaps://server:636"
> or
>   LDAP_HOST = "ldap://server:389"
> Could you please try that out with your php_ldap.dll
>
> Thanks for the non-anonymous bind sample and for finding the stupid 
> password error.
>
> John Cole schrieb:
>
>> Ok, I got it working.  There are a few issues here. First if you use 
>> strict USER_AUTH_POLICY with only
>> LDAP defined, you will get an error
>>
>> Fatal error: Call to a member function on a non-object
>> in C:\Program Files\Apache
>> Group\Apache2\htdocs\phpwiki\lib\WikiUserNew.php on
>> line 855
>>
>> inside the checkPass function.
>>
>> using USER_AUTH_POLICY stacked works however.
>>
>> After, that is,
>> the line
>>
>>                         if ($r = @ldap_bind($ldap,
>> $dn, $passwd)) {
>>
>> is changed to
>>
>>                         if ($r = @ldap_bind($ldap,
>> $dn, $submitted_password)) {
>>
>>
>> Here is the patch to make LDAP actually work and work
>> with Active Directory.  I do not know if the AD stuff
>> interfers with OpenLDAP or not.
>>
>> -----------------------------------------------
>> Index: lib/WikiUserNew.php
>> ===================================================================
>> RCS file:
>> /cvsroot/phpwiki/phpwiki/lib/WikiUserNew.php,v
>> retrieving revision 1.20
>> diff -u -r1.20 WikiUserNew.php
>> --- lib/WikiUserNew.php    26 Feb 2004 01:29:11 -0000
>> 1.20
>> +++ lib/WikiUserNew.php    26 Feb 2004 21:38:13 -0000
>> @@ -459,6 +459,7 @@
>>              return false;       // Nothing to do?
>>  
>>          $authlevel = $this->checkPass($passwd);
>> +                 if (!$authlevel)
>>              return _("Invalid password or userid.");
>>          elseif ($authlevel < $require_level)
>> @@ -1370,25 +1371,38 @@
>>      function checkPass($submitted_password) {
>>          $this->_authmethod = 'LDAP';
>>          $userid = $this->_userid;
>> -        if ($ldap = ldap_connect(LDAP_AUTH_HOST)) {
>> // must be a valid LDAP server!
>> -            $r = @ldap_bind($ldap); // this is an
>> anonymous bind
>> -            // Need to set the right root search
>> information. see ../index.php
>> -            $sr = ldap_search($ldap, LDAP_BASE_DN,
>> "uid=$userid");
>> -            $info = ldap_get_entries($ldap, $sr); //
>> there may be more hits with this userid. try every
>> -            for ($i = 0; $i < $info["count"]; $i++) {
>> -                $dn = $info[$i]["dn"];
>> -                // The password is still plain text.
>> -                if ($r = @ldap_bind($ldap, $dn,
>> $passwd)) {
>> -                    // ldap_bind will return TRUE if
>> everything matches
>> -                    ldap_close($ldap);
>> -                    $this->_level = WIKIAUTH_USER;
>> -                    return $this->_level;
>> +
>> +        if ($ldap = ldap_connect(LDAP_AUTH_HOST,
>> LDAP_PORT)) { // must be a valid LDAP server!
>> +            ldap_set_option($ldap,
>> LDAP_OPT_PROTOCOL_VERSION, 3);
>> +            ldap_set_option($ldap,
>> LDAP_OPT_REFERRALS, 0);
>> +            +            // anonymous binds do not work with
>> active directory
>> +            if ($r = @ldap_bind($ldap,
>> LDAP_AUTH_USER, LDAP_AUTH_PASSWORD)) {
>> +                // AD search field is different that
>> uid
>> +                $st_search =
>> LDAP_SEARCH_FIELD."=$userid";
>> +
>> +                // Need to set the right root search
>> information. see ../index.php
>> +                if ($sr = ldap_search($ldap,
>> LDAP_BASE_DN, "$st_search")) {  +                    $info = 
>> ldap_get_entries($ldap,
>> $sr);
>> +
>> +                    for ($i = 0; $i < $info["count"];
>> $i++) {
>> +                        $dn = $info[$i]["dn"];
>> +                        // The password is still
>> plain text.
>> +                        if ($r = @ldap_bind($ldap,
>> $dn, $submitted_password)) {
>> +                            // ldap_bind will return
>> TRUE if everything matches
>> +                            ldap_close($ldap);
>> +                            $this->_level =
>> WIKIAUTH_USER;
>> +                            return $this->_level;
>> +                        }
>> +                    }
>> +                } else {
>> +                    trigger_error("LDAP Search Failed
>> " . LDAP_AUTH_HOST, E_USER_WARNING);
>>                  }
>> +            } else {
>> +                trigger_error("LDAP Search Failed " .
>> LDAP_AUTH_HOST, E_USER_WARNING);
>>              }
>>          } else {
>> -            trigger_error(fmt("Unable to connect to
>> LDAP server %s", LDAP_AUTH_HOST), -                          
>> E_USER_WARNING);
>> -            //return false;
>> +            trigger_error(_("Unable to connect to
>> LDAP server "). LDAP_AUTH_HOST, E_USER_WARNING);
>>          }
>>  
>>          if (USER_AUTH_POLICY === 'strict') {
>> @@ -1406,13 +1420,28 @@
>>  
>>      function userExists() {
>>          $userid = $this->_userid;
>> -        if ($ldap = ldap_connect(LDAP_AUTH_HOST)) {
>> // must be a valid LDAP server!
>> -            $r = @ldap_bind($ldap);                // this is an 
>> anonymous bind
>> -            $sr = ldap_search($ldap, LDAP_BASE_DN,
>> "uid=$userid");
>> -            $info = ldap_get_entries($ldap, $sr);
>> -            if ($info["count"] > 0) {
>> -                ldap_close($ldap);
>> -                return true;
>> +
>> +        if ($ldap = ldap_connect(LDAP_AUTH_HOST,
>> LDAP_PORT)) { // must be a valid LDAP server!
>> +            ldap_set_option($ldap,
>> LDAP_OPT_PROTOCOL_VERSION, 3);
>> +            ldap_set_option($ldap,
>> LDAP_OPT_REFERRALS, 0);
>> +            +            // anonymous binds do not work with
>> active directory
>> +            if ($r = @ldap_bind($ldap,
>> LDAP_AUTH_USER, LDAP_AUTH_PASSWORD)) {
>> +                // AD search field is different that
>> uid
>> +                $st_search =
>> LDAP_SEARCH_FIELD."=$userid";
>> +
>> +                // Need to set the right root search
>> information. see ../index.php
>> +                if ($sr = ldap_search($ldap,
>> LDAP_BASE_DN, "$st_search")) {  +                    $info = 
>> ldap_get_entries($ldap,
>> $sr);
>> +                    if ($info["count"] > 0) {
>> +                        ldap_close($ldap);
>> +                        return true;
>> +                    }
>> +                } else {
>> +                    trigger_error("LDAP Search Failed
>> " . LDAP_AUTH_HOST, E_USER_WARNING);
>> +                }
>> +            } else {
>> +                trigger_error("LDAP Search Failed " .
>> LDAP_AUTH_HOST, E_USER_WARNING);
>>              }
>>          } else {
>>              trigger_error(_("Unable to connect to
>> LDAP server "). LDAP_AUTH_HOST, E_USER_WARNING);
>> @@ -1955,7 +1984,6 @@
>>          return $this->_prefs;
>>      }
>>  }
>> -
>>  
>>  // $Log: WikiUserNew.php,v $
>>  // Revision 1.20  2004/02/26 01:29:11  rurban
>> ------------------------------------------------------
>>
>> You will need the following added to index.php
>>
>> //LDAP's Server Port. If using SSL, aka ldaps://, port
>> should be 636 if (!defined('LDAP_PORT')) define('LDAP_PORT', "389");
>>
>> //our AD's LDAP is locked down, no anonymous
>> connections are //allowed. A real username / password must be given in
>> order to perform //a search. if (!defined('LDAP_AUTH_USER'))
>> define('LDAP_AUTH_USER', "CN=ldap
>> user,CN=Users,DC=company,DC=com");
>> if (!defined('LDAP_AUTH_PASSWORD'))
>> define('LDAP_AUTH_PASSWORD', "ldappassword");
>>
>>
>> //Defines which field of AD's LDAP to search for.
>> needs to match the //username entered by the user in the webpage.
>> //samaccountname = //Pre-Win2k username if 
>> (!defined('LDAP_SEARCH_FIELD'))
>> define('LDAP_SEARCH_FIELD', "sAMAccountName");
>>
>> Thanks,
>>
>> John Cole
>>
>>
>>
>> -------------------------------------------------------
>> SF.Net is sponsored by: Speed Start Your Linux Apps Now.
>> Build and deploy apps & Web services for Linux with
>> a free DVD software kit from IBM. Click Now!
>> http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
>> _______________________________________________
>> Phpwiki-talk mailing list
>> Php...@li...
>> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>>
>
>