phpwiki-talk

Re: [Phpwiki-talk] Upload plugin and relative paths

[Bernd P. <Ber...@cn...>]

Hi Reini,

there's no way for the user to get access to the parent directory on the 
server. As long as the user only sees the upload button/textfield he/she 
cannot do anything evil on the server-filesystem. The destination is 
always the upload directory since the file content is copied from 
/tmp/myfile to uploads/. The user cannot do anything against it.

/Bernd

Reini Urban wrote:

> Bernd Porr schrieb:
>
>> Hi all,
>>
>> wouldn't be a good idea to introduce relative paths in the UpLoad 
>> plugin as well?
>>
>>    var $url_prefix = "http:../uploads/";
>>
>> ...and changing the output
>>
>>                $message->pushContent(_("File successfully uploaded to 
>> location:"));
>>                $message->pushContent(HTML::br());
>>
>>                
>> $message->pushContent(HTML::strong(_("[$url_prefix$userfile_name]")));
>>                $message->pushContent(HTML::br());
>>
>> to boldface. Otherwise the ".." might be interpreted as dirt on the 
>> monitor. :-)
>>
>>
>> --------------------
>>
>> The same applies to the file location:
>>
>>   var $file_dir;
>>
>>    function WikiPlugin_EmbedUpload() {
>>        if (defined('PHPWIKI_DIR')) {
>>            $this->file_dir= PHPWIKI_DIR . "/uploads/";
>>        } else {
>>            $this->file_dir= "uploads/";
>>        }
>>    }
>>
>>
>> ----------------------
>>
>> this would make the plugin usable without any modification in the 
>> source.
>> If this, however, is already in the CVS then simply forget it. :-)
>
>
> good idea, but hard to implement.
> it needs more security tests. "../../" must not be allowed e.g.
>

-- 
Contact information:
http://www.cn.stir.ac.uk/~bp1/

[Phpwiki-talk] Tercer estudio del segmento de desarrollo de software y/o sistemas en América Latina

[MBI - L. A. D. R. <la...@mb...>]

Este mensaje es una invitación especial para que participe de nuestro tercer estudio sobre el segmento de mercado compuesto por desarrolladores de software y/o sistemas en toda América Latina. El objetivo es monitorear la evolución de las preferencias y opiniones, compartiendo los resultados con todos los participantes.

Este estudio es una iniciativa de MBI, empresa establecida en São Paulo (Brasil). Si aún no conoce nuestro trabajo, o deseara informaciones más detalladas sobre la empresa, le recomendamos que lea la descripción que se encuentra al final del mensaje.

El objetivo de este estudio es servir como herramienta auxiliar a los profesionales que actúan con desarrollo de software y/o sistemas, cualquier que sea el perfil de su trabajo. Suponemos que al tener acceso a información objetiva sobre el mercado en que actúa, estará apto a tomar mejores decisiones para su propia carrera profesional y en beneficio del equipo o empresa en que trabaja.

Resaltamos que la información resultante de estudios como este está libre de influencias del marketing de los proveedores y de opiniones inflamadas de los amantes de un tipo de tecnología o producto específico.

Aceptando nuestra invitación, recibirá los resultados ni bien estén disponibles, con gráficos detallados presentando los datos al nivel de la región y por países. El acceso a esta información es privilegio de los participantes del estudio.

Estimamos que el tiempo necesario para contestar las preguntas es de apenas cinco minutos. Simplemente responda este mensaje y marque con X o con números (según las instrucciones de cada pregunta del cuestionario) dentro de los espacios limitados por paréntesis.

Como forma adicional de agradecer por su participación en la encuesta, donaremos la importancia de un dólar estadounidense a los programas asistenciales de Unicef por cada participante de la encuesta. 

Nuestro objetivo es alcanzar cerca de 1.400 respuestas en toda América Latina. Con una muestra de este tamaño, el margen de error estimado para el estudio es del 2,8 por ciento.

Como ha sido nuestra práctica desde siempre, garantizamos la privacidad total de todas las informaciones individuales. Serán publicados solamente datos estadísticos, obtenidos a partir de la totalidad de las respuestas. Tenemos la obligación de cumplir este compromiso para garantizar la continuidad de nuestro trabajo.

Permítame agradecerle su participación por adelantado.

Saludos cordiales,


Roberto C. Mayer
Director
MBI - http://www.mbi.com.br
+55 11 3812 5939

Informamos que su dirección de e-mail ha sido obtenida de páginas
públicas através de la Web. Como preparación para este estudio,
muchos miles de profesionales ... 

P.S.: esta encuesta se destina a todos los profesionales de desarrollo 
      de software y/o sistemas de América Latina que hemos identificado
      a lo largo de varios años de trabajo. Su dirección de e-mail ha 
      sido obtenida de páginas públicas en la Web, de la participación 
      en congresos y exposiciones y/o listas de discusión.

      Nuestro uso de esta información se restringe a la realización de 
      encuestas como esta. A lo sumo, recibirá un mensaje como este a 
      cada pocos meses.

      Si no desea recibir invitaciones para participar en nuestras 
      encuestas, por favor nos indique haciendo clic abajo:
            mailto:la...@mb...?Subject=No%20me%20inviten%20más

      Si, por otro lado, no recibió este mensaje directamente de MBI 
      y quisiera recibir invitaciones futuras, haga clic abajo:
            mailto:la...@mb...?Subject=Inviten-me%20otras%20veces

======================= C U E S T I O N A R I O =======================

 1. El país en que trabaja actualmente es:

    ( ) Argentina   
    ( ) Bolivia
    ( ) Brasil
    ( ) Chile
    ( ) Colombia
    ( ) Costa Rica
    ( ) El Salvador
    ( ) Guatemala
    ( ) México
    ( ) Panamá
    ( ) Paraguay
    ( ) Peru
    ( ) Puerto Rico
    ( ) Uruguay
    ( ) Venezuela
    ( ) Otro ____________


 2. A seguir, indicamos una lista de atributos que pueden ser usados para
    decidir por el uso de herramientas de desarrollo de uno u otro provedor.
    Por favor, llene con 1 los paréntesis al lado del atributo que para 
    Usted es el más importante de todos, con 2 los paréntesis al lado del 
    segundo más importante, y así sucesivamente.
    No deje ninguna de los cinco paréntesis en blanco.

    ( ) Costo total de propiedad (TCO)
    ( ) Disponibilidad de entrenamiento y otros recursos de terceros
    ( ) Programas de certificación profesional
    ( ) Soporte técnico local del provedor
    ( ) Velocidad de desarrollo de los aplicativos


 3. Por favor llene cada paréntesis de la tabla siguiente con un número de 
    1 a 5 (siendo 1 = malo, 2 = inferior al promedio de la industria, 
    3 = al nivel del promedio de la industria, 4 = superior al promedio 
    de la industria, 5 = excelente), para evaluar los atributos indicados 
    para cada uno de los provedores:

    a. Costo total de propiedad (TCO)

       Borland       : ( )
       IBM           : ( )
       Microsoft     : ( )
       Oracle        : ( )
       Software libre: ( ) 
       Sun           : ( )

    b. Disponibilidad de entrenamiento y otros recursos de terceros

       Borland       : ( )
       IBM           : ( )
       Microsoft     : ( )
       Oracle        : ( )
       Software libre: ( ) 
       Sun           : ( )

    c. Programas de certificación profesional

       Borland       : ( )
       IBM           : ( )
       Microsoft     : ( )
       Oracle        : ( )
       Software libre: ( ) 
       Sun           : ( )

    d. Soporte técnico local del provedor

       Borland       : ( )
       IBM           : ( )
       Microsoft     : ( )
       Oracle        : ( )
       Software libre: ( ) 
       Sun           : ( )

    e. Velocidad de desarrollo de los aplicativos

       Borland       : ( )
       IBM           : ( )
       Microsoft     : ( )
       Oracle        : ( )
       Software libre: ( ) 
       Sun           : ( )


 4. Por favor, jerarquize los sistemas operativos actualmente más 
    utilizados en las computadoras dedicadas al desarrollo de 
    software y/o sistemas, marcando el más usado con 1, el segundo 
    con 2 y el tercero con 3:

    ( ) HP/UX
    ( ) IBM AIX
    ( ) IBM mainframe
    ( ) IBM medio (OS/400)
    ( ) IBM OS/2
    ( ) Linux en desktop (cualquier distribución)
    ( ) Linux en servidores (cualquier distribución)
    ( ) Novell Netware
    ( ) Sun Solaris
    ( ) Windows 2000
    ( ) Windows 9x (95/98/Me)
    ( ) Windows NT
    ( ) Windows XP
    ( ) Otro: ______________________


 5. Cuáles sistemas operativos adicionales pretende usar en los 
    próximos seis meses? Marque con X todos los que se apliquen:

    ( ) HP/UX
    ( ) IBM AIX
    ( ) IBM mainframe
    ( ) IBM medio (OS/400)
    ( ) IBM OS/2
    ( ) Linux en desktop (cualquier distribución)
    ( ) Linux en servidores (cualquier distribución)
    ( ) Novell Netware
    ( ) Sun Solaris
    ( ) Windows 2000
    ( ) Windows 9x (95/98/Me)
    ( ) Windows NT
    ( ) Windows XP
    ( ) Otro: ______________________
    ( ) Ninguno


 6. Y en los próximos doce meses? Marque con X todos los que se 
    apliquen:

    ( ) HP/UX
    ( ) IBM AIX
    ( ) IBM mainframe
    ( ) IBM medio (OS/400)
    ( ) IBM OS/2
    ( ) Linux en desktop (cualquier distribución)
    ( ) Linux en servidores (cualquier distribución)
    ( ) Novell Netware
    ( ) Sun Solaris
    ( ) Windows 2000
    ( ) Windows 9x (95/98/Me)
    ( ) Windows NT
    ( ) Windows XP
    ( ) Otro: ______________________
    ( ) Ninguno


 7. Cuál es la principal motivación para su opción por estos nuevos
    sistemas operativos?

    _______________________________________________________________


 8. Por favor, jerarquize los sistemas de bases de datos actualmente 
    más utilizados en las computadoras dedicadas al desarrollo de 
    software y/o sistemas, marcando el más usado con 1, el segundo 
    con 2 y el tercero con 3:

    ( ) Access
    ( ) Cache
    ( ) DB/2
    ( ) Informix
    ( ) Interbase
    ( ) MySQL
    ( ) Oracle
    ( ) PostgreSQL
    ( ) Progress
    ( ) SQL Server
    ( ) Sybase
    ( ) Otro: ________________


 9. Cuáles sistemas de bases de datos adicionales pretende usar en 
    los próximos seis meses? Marque con X todos los que se apliquen:

    ( ) Access
    ( ) Cache
    ( ) DB/2
    ( ) Informix
    ( ) Interbase
    ( ) MySQL
    ( ) Oracle
    ( ) PostgreSQL
    ( ) Progress
    ( ) SQL Server
    ( ) Sybase
    ( ) Otro: ________________
    ( ) Ninguno


10. Y en los próximos doce meses? Marque con X todos los que se 
    apliquen:

    ( ) Access
    ( ) Cache
    ( ) DB/2
    ( ) Informix
    ( ) Interbase
    ( ) MySQL
    ( ) Oracle
    ( ) PostgreSQL
    ( ) Progress
    ( ) SQL Server
    ( ) Sybase
    ( ) Otro: ________________
    ( ) Ninguno


11. Cuál es la principal motivación para su opción por estos nuevos
    sistemas de bases de datos?

    _______________________________________________________________


12. Por favor, jerarquize los compiladores y/o lenguajes de progra-
    mación actualmente más utilizados en las computadoras dedicadas 
    al desarrollo de software y/o sistemas, marcando el más usado 
    con 1, el segundo con 2 y el tercero con 3:

    ( ) ASP
    ( ) ASP.net
    ( ) Borland C++
    ( ) Borland Delphi
    ( ) Borland JBuilder
    ( ) Borland Kylix
    ( ) C#
    ( ) Clipper
    ( ) Cobol
    ( ) Forté for Java
    ( ) FoxBase, FoxPro o VisualFox
    ( ) HTML
    ( ) Java (otros compiladores)
    ( ) Javascript
    ( ) Perl
    ( ) PHP
    ( ) XML
    ( ) Visual Age for Java
    ( ) Visual Basic .net
    ( ) Visual Basic 6 o versión anterior:
    ( ) Visual Studio .net
    ( ) Visual Studio 6 o versión anterior:
    ( ) Otro: ______________


13. Cuáles compiladores y/o lenguajes de programación adicionales 
    pretende usar en los próximos seis meses? Marque con X todos 
    los que se apliquen:

    ( ) ASP
    ( ) ASP.net
    ( ) Borland C++
    ( ) Borland Delphi
    ( ) Borland JBuilder
    ( ) Borland Kylix
    ( ) C#
    ( ) Clipper
    ( ) Cobol
    ( ) Forté for Java
    ( ) FoxBase, FoxPro ou VisualFox
    ( ) HTML
    ( ) Java (otros compiladores)
    ( ) Javascript
    ( ) Perl
    ( ) PHP
    ( ) XML
    ( ) Visual Age for Java
    ( ) Visual Basic .net
    ( ) Visual Basic 6 o versión anterior:
    ( ) Visual Studio .net
    ( ) Visual Studio 6 o versión anterior:
    ( ) Otro: ______________
    ( ) Ninguno


14. Y en los próximos doce meses? Marque con X todos los que se 
    apliquen:

    ( ) ASP
    ( ) ASP.net
    ( ) Borland C++
    ( ) Borland Delphi
    ( ) Borland JBuilder
    ( ) Borland Kylix
    ( ) C#
    ( ) Clipper
    ( ) Cobol
    ( ) Forté for Java
    ( ) FoxBase, FoxPro ou VisualFox
    ( ) HTML
    ( ) Java (otros compiladores)
    ( ) Javascript
    ( ) Perl
    ( ) PHP
    ( ) XML
    ( ) Visual Age for Java
    ( ) Visual Basic .net
    ( ) Visual Basic 6 o versión anterior:
    ( ) Visual Studio .net
    ( ) Visual Studio 6 o versión anterior:
    ( ) Otro: ______________
    ( ) Ninguno


15. Cuál es la principal motivación para su opción por estos nuevos
    compiladores y/o lenguajes de programación?

    _______________________________________________________________


16. Por favor, evalúe su nivel de conocimiento de las siguientes 
    tecnologías, con valores de 1 a 5, siendo:

        1 = ya oí o leí algo al respecto 
        2 = ya intenté o estoy intentado usar, 
            con el objetivo de implantarla en el futuro
        3 = ya la estoy usando actualmente durante el desarrollo
        4 = soy capaz de enseñar otros a usar esta tecnología
        5 = no sé absolutamente nada al respecto


    a. COM/DCOM/MTS     : ( )
    b. IBM WebSphere    : ( )
    c. J2EE             : ( )
    d. Microsoft .net   : ( ) 
    e. Sun ONE (iPlanet): ( )
    f. Web Services     : ( )


17. Cuál de estas frases describe mejor su trabajo? Marque con X 
    sólo una de las tres opciones siguientes:

    El producto de mi desarrollo se destina:

    ( ) a la venta/uso para muchos clientes/usuarios
    ( ) a un único cliente/usuario
    ( ) sólo se usa internamente en mi empresa

Gracias nuevamente!

=======================================================================

Quién es MBI?

MBI es una empresa brasileña, fundada en 1990, dedicada al desarrollo 
de trabajos de investigación de mercado. Su foco está en el mercado de 
desarrollo y/o utilización de tecnologías de la información y las 
telecomunicaciones.

Para mayores detalles, visite nuestro sitio en Internet

                       http://www.mbi.com.br

entre en contacto contestando a este e-mail, o llámenos por teléfono 
al +55 11 3812 5939.

=======================================================================

Re: [Phpwiki-talk] Understanding user/pass of ADMIN

[Carsten K. <car...@us...>]

On Tuesday, November 18, 2003, at 02:49  pm, Sergio Trejo wrote:

> I was wondering if anyone can help me confirm my understanding. I've 
> got PhPWiki version 1.3.4 with MySQL 4.0.13 ... its working just great 
> on Mac OS X (Jaguar, haven't tried Panther yet but Steve mentioned 
> Panther is working with 1.3.5 so probably a good time to upgrade).
>
> Inside index.php for one of my Wikis, following the install 
> directions, I uncommented the lines below and added an ADMIN_USER and 
> ADMIN_PASSWD as follows:
>
> // Username and password of administrator.
> // Set these to your preferences. For heaven's sake
> // pick a good password or use our passwordencrypt.php tool.
> if (!defined('ADMIN_USER')) define('ADMIN_USER', "testing_wikiadm");
> if (!defined('ADMIN_PASSWD')) define('ADMIN_PASSWD', "testing_passwd");
>
> Further down in index.php, since I'm using MySQL, I have a line like 
> this with respect to a DSN:
>
> 'dsn' => 'mysql://le_user:le_pass@localhost/le_wiki',
>
> So as I mentioned, everything works great (the MySQL database properly 
> contains the username "le_user" and its password, "le_pass", for the 
> wiki "le_wiki" ... but what I can't figure out is how and where is the 
> ADMIN_USER and ADMIN_PASSWD used? Certainly not in the database (as I 
> was not required to replicate in the administration of MySQL used in 
> conjunction with PhPWiki). Am I just supposed to sign in to my Wiki 
> (le_wiki) as "testing_wikiadm", "testing_passwd" to start using? I 
> have a few other username, password pairs that I just created 
> on-the-fly with the Wiki's "Sign In" page. Thank you for any 
> clarification on how the ADMIN_USER and its ADMIN_PASSWD is to be 
> properly used.
>
> Sincerely,
>
> Serj

Hi Serj,

Sounds like you got it right, the ADMIN_USER and ADMIN_PASSWD are for 
signing in to the Wiki and are separate from any database userid and 
password.


* Normally you would sign in with your regular WikiName, SergioTrejo or 
SerjTrejo.

* Whenever you want to lock, unlock, delete pages, or use any 
PhpWikiAdministration functions then you must sign in using the 
ADMIN_USER and ADMIN_PASSWD.


I am considering adding some kind of ADMIN_USER_ALIAS, so that the 
admin could log in and any changes made would then appear as though the 
WikiName specified in ADMIN_USER_ALIAS had made the changes. This way 
no one could glean the ADMIN_USER simply from browsing around the wiki. 
I have no idea yet how to implement it, still just a thought (inspired 
by the unix 'sudo' command).


Carsten

Re: [Phpwiki-talk] Upload plugin and relative paths

[Reini U. <ru...@x-...>]

Bernd Porr schrieb:

> Hi all,
> 
> wouldn't be a good idea to introduce relative paths in the UpLoad plugin 
> as well?
> 
>    var $url_prefix = "http:../uploads/";
> 
> ...and changing the output
> 
>                $message->pushContent(_("File successfully uploaded to 
> location:"));
>                $message->pushContent(HTML::br());
> 
>                
> $message->pushContent(HTML::strong(_("[$url_prefix$userfile_name]")));
>                $message->pushContent(HTML::br());
> 
> to boldface. Otherwise the ".." might be interpreted as dirt on the 
> monitor. :-)
> 
> 
> --------------------
> 
> The same applies to the file location:
> 
>   var $file_dir;
> 
>    function WikiPlugin_EmbedUpload() {
>        if (defined('PHPWIKI_DIR')) {
>            $this->file_dir= PHPWIKI_DIR . "/uploads/";
>        } else {
>            $this->file_dir= "uploads/";
>        }
>    }
> 
> 
> ----------------------
> 
> this would make the plugin usable without any modification in the source.
> If this, however, is already in the CVS then simply forget it. :-)

good idea, but hard to implement.
it needs more security tests. "../../" must not be allowed e.g.

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

[Phpwiki-talk] Understanding user/pass of ADMIN

[Sergio T. <ser...@ho...>]

I was wondering if anyone can help me confirm my understanding. I've got 
PhPWiki version 1.3.4 with MySQL 4.0.13 ... its working just great on Mac OS 
X (Jaguar, haven't tried Panther yet but Steve mentioned Panther is working 
with 1.3.5 so probably a good time to upgrade).

Inside index.php for one of my Wikis, following the install directions, I 
uncommented the lines below and added an ADMIN_USER and ADMIN_PASSWD as 
follows:

// Username and password of administrator.
// Set these to your preferences. For heaven's sake
// pick a good password or use our passwordencrypt.php tool.
if (!defined('ADMIN_USER')) define('ADMIN_USER', "testing_wikiadm");
if (!defined('ADMIN_PASSWD')) define('ADMIN_PASSWD', "testing_passwd");

Further down in index.php, since I'm using MySQL, I have a line like this 
with respect to a DSN:

'dsn' => 'mysql://le_user:le_pass@localhost/le_wiki',

So as I mentioned, everything works great (the MySQL database properly 
contains the username "le_user" and its password, "le_pass", for the wiki 
"le_wiki" ... but what I can't figure out is how and where is the ADMIN_USER 
and ADMIN_PASSWD used? Certainly not in the database (as I was not required 
to replicate in the administration of MySQL used in conjunction with 
PhPWiki). Am I just supposed to sign in to my Wiki (le_wiki) as 
"testing_wikiadm", "testing_passwd" to start using? I have a few other 
username, password pairs that I just created on-the-fly with the Wiki's 
"Sign In" page. Thank you for any clarification on how the ADMIN_USER and 
its ADMIN_PASSWD is to be properly used.

Sincerely,

Serj

_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*. 
http://join.msn.com/?page=features/featuredemail

Re: [Phpwiki-talk] Wiki spam, an emerging trend?

[Sergio T. <ser...@ho...>]

This brings up a question about backing up a Wiki. Perhaps more of a 
question that could be targetted to MySQL (I'm in process of learning more 
about MySQL nuances), but I'm wondering if anyone here has had any 
experiences and recommended methods for cloning an entire PHPWiki, in a way 
that is not specific to, say, MySQL (for example, I may want to make backup 
copies in another database type and then also be able to recover from that 
backup copy in case someone starts spamming my Wiki).

Thanks for any suggestions...

-Serj

>From: "Oliver Betz" <ob...@de...>
>To: php...@li...
>Subject: Re: [Phpwiki-talk] Wiki spam, an emerging trend?
>Date: Mon, 10 Nov 2003 13:05:53 +0100
>
>Steve Wainstead wrote:
>
> > First blogs, and now wikis. There ain't no justice.
>
>Ack. Another reason for some kind of user management/authentication.
>
>I'm also afraid about vandalism, spam, illegal contents etc.
>
>Having some small and not very active Wikis for small groups, there
>is no large community to check for changes, and sometimes I don't
>visit the pages for weeks.
>
>Oliver
>
>
>-------------------------------------------------------
>This SF.Net email sponsored by: ApacheCon 2003,
>16-19 November in Las Vegas. Learn firsthand the latest
>developments in Apache, PHP, Perl, XML, Java, MySQL,
>WebDAV, and more! http://www.apachecon.com/
>_______________________________________________
>Phpwiki-talk mailing list
>Php...@li...
>https://lists.sourceforge.net/lists/listinfo/phpwiki-talk

_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. 
http://join.msn.com/?page=features/virus

RE: [Phpwiki-talk] Different DB 4.1 problems

[Frank S. <fra...@rn...>]

> >>> "mp...@he..." 11/18/03 14:27 >>>

> Does this behaviour ring a bell with anyone?  If someone 
> needs access to a
> machine with DB4.1 and whatnot, I'm more than happy to 
> provide shell access
> to the development server so you can play with it.  I just 
> really don't have
> time to be trolling through piles of unfamiliar code, unfortunately.

It doesn't really help you much, but what you could so as a fairly
last resort is dump your wiki as RFC822 messages - a zipdump (in other
words phpwiki:?action=zip&include=all) and reload your wiki into a
mysql db or such. No doubt you'd have to do that from your previous
version of phpwiki.

A caveat is that I had to hack loadsave.php to get the wikis to reload
exactly as they were saved. There is a merge/edit conflict checker, but
it just didn't work on my 1.3.5pre wiki.

I moved from gdbm storage a while ago because my freebsd box thought
my (linux-produced) gdbms were trashed, when they would work just fine
on a linux box - despite gdbm, php and apache all being the same
version. Besides, I like being able to craft SQL statements against my
wikis.

I'm sorry I can't be more helpful!

frank

[Phpwiki-talk] Different DB 4.1 problems

[Matthew P. <mp...@he...>]

OK, I'm thoroughly stumped.  PHPWiki and Berkeley DB 4.1 just don't want to
get along, and it's really starting to give me the shits.  An upgrade to
1.3.6 provided me with a limited amount of joy - I no longer get DB locking
problems.

Instead I get a database that is continually being reloaded!  Every time a
page is accessed, the database gets removed and we start again.

Does this behaviour ring a bell with anyone?  If someone needs access to a
machine with DB4.1 and whatnot, I'm more than happy to provide shell access
to the development server so you can play with it.  I just really don't have
time to be trolling through piles of unfamiliar code, unfortunately.

- Matt

Re: [Phpwiki-talk] How-to upgrade 1.3.x to 1.3.6

[Carsten K. <car...@us...>]

On Monday, November 17, 2003, at 08:37  pm, Stanislaw Berka wrote:

> How do I do this?  All new docs are in the pages that are loaded by 
> default if starting a new PhpWiki.  But I need only to upgrade.


Hi Stanislaw,

There is a new feature in the 1.3.5 PhpWikiAdministration page when 
using "Load File" (for example with the directory "pgsrc/"). When there 
is a load vs. edit conflict the page is not overwitten, you have the 
option to merge and edit the content of your own Wiki's page with the 
page being loaded, or just overwrite it with the new version you're 
loading.

So no pages should be overwritten until you have a chance to see the 
differences.

Hope this helps,
Carsten

[Phpwiki-talk] How-to upgrade 1.3.x to 1.3.6

[Stanislaw B. <sb...@po...>]

How do I do this?  All new docs are in the pages that are loaded by 
default if starting a new PhpWiki.  But I need only to upgrade.

[Phpwiki-talk] Escaping [ and | characters

[Frank S. <fra...@rn...>]

The OldStyleTable plugin can't display | characters with its cells. That's
reasonable, up to a point. How would one escape the character though? It's a
bit hard to wikify an ASCII table otherwise.

Further, in 1.3.3 one could use escape an opening square bracket [ as [[ to
display "[". The CVS version, however, can't (this is in the New Markup
Rules).

So is there a uniform syntax for escaping special characters?

frank

[Phpwiki-talk] Upload plugin and relative paths

[Bernd P. <bp...@cn...>]

Hi all,

wouldn't be a good idea to introduce relative paths in the UpLoad plugin 
as well?

    var $url_prefix = "http:../uploads/";

...and changing the output

                $message->pushContent(_("File successfully uploaded to 
location:"));
                $message->pushContent(HTML::br());

                
$message->pushContent(HTML::strong(_("[$url_prefix$userfile_name]")));
                $message->pushContent(HTML::br());

to boldface. Otherwise the ".." might be interpreted as dirt on the 
monitor. :-)


--------------------

The same applies to the file location:

   var $file_dir;

    function WikiPlugin_EmbedUpload() {
        if (defined('PHPWIKI_DIR')) {
            $this->file_dir= PHPWIKI_DIR . "/uploads/";
        } else {
            $this->file_dir= "uploads/";
        }
    }


----------------------

this would make the plugin usable without any modification in the source.

If this, however, is already in the CVS then simply forget it. :-)

/Bernd

-- 
Contact information:
http://www.cn.stir.ac.uk/~bp1

Re: [Phpwiki-talk] relative paths to images?

[Bernd P. <bp...@cn...>]

Frank,

thanks. And it also works like that:

[http:../uploads/screen.png]

good to know. This makes the whole wiki much more portable.

/Bernd

Frank Shearar wrote:

>>>>>"Ber...@cn..." 11/15/03 21:07 >>>
>>>>>          
>>>>>
>>Hi all,
>>
>>can I also write a relative path to images? Something like:
>>[uploads/myimage.png]
>>    
>>
>
>It's a bit of a hack, but I use URLs of the form http:/my/relative/path.
>They act just like absolute URLs - you can inline images, etc.
>
>I don't know if this behaviour is just because of the web server or not - it
>works on both Apache and IIS, at any rate.
>
>frank
>
>
>
>
>-------------------------------------------------------
>This SF. Net email is sponsored by: GoToMyPC
>GoToMyPC is the fast, easy and secure way to access your computer from
>any Web browser or wireless device. Click here to Try it Free!
>https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl
>_______________________________________________
>Phpwiki-talk mailing list
>Php...@li...
>https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>  
>

-- 
Contact information:
http://www.cn.stir.ac.uk/~bp1

RE: [Phpwiki-talk] relative paths to images?

[Frank S. <fra...@rn...>]

> >>> "Ber...@cn..." 11/15/03 21:07 >>>
>
> Hi all,
>
> can I also write a relative path to images? Something like:
> [uploads/myimage.png]

It's a bit of a hack, but I use URLs of the form http:/my/relative/path.
They act just like absolute URLs - you can inline images, etc.

I don't know if this behaviour is just because of the web server or not - it
works on both Apache and IIS, at any rate.

frank

[Phpwiki-talk] PhpWiki 1.3.6 released

[Steve W. <sw...@pa...>]

In keeping with my vow to release around the 15th of the month every
month, here's a new tarball of PhpWiki.

Changes for this release:
Zip dump fix for Windows
Updates for German translation
Graphic file updates
Addtional plugin documentation

http://sourceforge.net/projects/phpwiki/

~swain

----
                  http://www.panix.com/~swain/
    "It has all the faults of a photograph." -- David Hockney
----

[Phpwiki-talk] PHPWiki and Berkely DB4.1

[Matthew P. <mp...@he...>]

Is anyone successfully using PHPWiki (1.3.4, specifically) and Berkeley DB 4
or 4.1?  I'm trying to work out why PHPWiki doesn't seem to like DB 4.1,
having gotten some bug reports on the Debian package which I'm having
trouble getting sorted.  I'd like to hear from anyone successful in this
endeavour.

- Matt

[Phpwiki-talk] relative paths to images?

[Bernd P. <Ber...@cn...>]

Hi all,

can I also write a relative path to images? Something like: 
[uploads/myimage.png]

/Bernd

-- 
Contact information:
http://www.cn.stir.ac.uk/~bp1/

[Phpwiki-talk] 1.3.6 tomorrow

[Steve W. <sw...@pa...>]

I'll release PhpWiki 1.3.6 tomorrow evening (Eastern Standard Time). 
This will be a minor bugfix/documentation release.

~swain

Re: [Phpwiki-talk] Bug in BlockParser.php: indented lines starting with...

[Bernd P. <Ber...@cn...>]

Hi!

So. Next try. Actually I should have read the doco of php. I hava to 
initialise the variable "really_match" in a constructor... Otherwise it 
is always false. Or with some php versions the behaviour is undefined.

/Bernd

Carsten Klapp wrote:

>
> Hi All,
> I'm forwarding this bug for discussion here on the list, I didn't see 
> a  copy of this thread here yet.
>
> A similar problem was fixed in the past about a year ago or so, but I  
> can't find it in the ChangeLog yet.
>
> Does anyone remember this bug or how it was fixed? I'm betting the 
> fix  will be similar here.
>
> It had something to do with the compared content/value of a string 
> vs.  an integer:
>
>
> "0" == true vs. 0 != true
>
>
> Unfortunately that's all I remember.
>
> Thanks,
> Carsten
>
> Workaround:
>
> Yes those indented zeros seem to be what is uncovering this bug in 
> the  BlockParser. Change the 0s to Ohs and the problem is gone. 
> Probably  what you want anyway for this page is to enclose the 
> ascii-art diagram  in <pre></pre> or <verbatim></verbatim>, the 
> problem also goes away  that way.
>
>
> Begin forwarded message:
>
>> From: Bernd Porr <Ber...@cn...>
>> Date: Thu Nov 13, 2003  2:16:52  pm Canada/Eastern
>> To: Carsten Klapp <car...@us...>
>> Subject: Re: phpwiki
>> User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4.1)  
>> Gecko/20031008
>> X-Accept-Language: en
>>
>> Hi Carsten,
>>
>> it works so far. The error in the error has disappeared. Still 
>> there's  the error on that page:
>>
>> http://www.cn.stir.ac.uk/teaching/phpwiki-1.3.5/index.php/ 
>> The%20Experiment
>>
>> I've sent you the wiki src. I think it's the ASCII art which 
>> generates  the error.
>>
>> /Bernd
>>
>> Carsten Klapp wrote:
>>
>>>
>>> Try this one-line patch, it should fix the second error in  
>>> Request.php  that shows up right after the error in BlockParser.php  
>>> ("Error while  handling error").
>>>
>>> Carsten
>>>
>>> RCS file: /cvsroot/phpwiki/phpwiki/lib/Request.php,v
>>> retrieving revision 1.35
>>> diff -U2 -r1.35 Request.php
>>> --- Request.php 6 Nov 2003 19:39:55 -0000       1.35
>>> +++ Request.php 13 Nov 2003 18:09:20 -0000
>>> @@ -610,4 +610,5 @@
>>>              $time = time();
>>>          $offset = date("Z", $time);
>>> +        $negoffset = "";
>>>          if ($offset < 0) {
>>>              $negoffset = "-";
>>>
>>>
>>>
>>> On Thursday, November 13, 2003, at 09:49  am, Bernd Porr wrote:
>>>
>>>> Hi!
>>>>
>>>>
>>>>
>>>> One of my students did a ASCII art in the wiki and crashed it.
>>>>
>>>>
>>>>
>>>> http://www.cn.stir.ac.uk/teaching/phpwiki-1.3.5/index.php/  
>>>> The%20Experiment
>>>>
>>>>
>>>>
>>>> I get an error message:
>>>>
>>>>
>>>>
>>>> lib/BlockParser.php:465: Fatal[0]: <br
>>>>
>>>> />/usr/local/httpd/html/teaching/phpwiki-1.3.5/lib/ 
>>>> BlockParser.php:465:
>>>>
>>>> : Assertion failed <br />
>>>>
>>>>
>>>>
>>>> I'll try to fix it but I would appreciate some hints.
>>>>
>>>>
>>>>
>>>> Thanks
>>>>
>>>>
>>>>
>>>> /Bernd
>>>>
>>
>> -- 
>> Contact information:
>> http://www.cn.stir.ac.uk/~bp1/
>>
>>
>> Date: Thu, 13 Nov 2003 12:54:36 +0000
>> Mime-Version: 1.0 (Produced by PhpWiki 1.3.5pre)
>> Content-Type: application/x-phpwiki;
>>   pagename=The%20Experiment;
>>   flags="";
>>   author=cjc08;
>>   version=8;
>>   lastmodified=1068728076;
>>   author_id=cjc08;
>>   markup=2;
>>   hits=23;
>>   charset=iso-8859-1
>> Content-Transfer-Encoding: binary
>>
>> In a separate room to the Playground, the Human Player was faced 
>> with  a computer screen with the following layout:
>>
>>                                           0 - - - - - - - 0
>>
>>                                           0 - - - - - - - 0
>>
>>                                                   0
>>
>> This is exactly eqivalent to the Bruce the Robot's desired state 
>> goal:  all sensors are silent (shown as 0).
>
>
>
>
> -------------------------------------------------------
> This SF. Net email is sponsored by: GoToMyPC
> GoToMyPC is the fast, easy and secure way to access your computer from
> any Web browser or wireless device. Click here to Try it Free!
> https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk


-- 
Contact information:
http://www.cn.stir.ac.uk/~bp1/

Re: [Phpwiki-talk] A partial fix. Please test this (was Re:Bug in BlockParser.php: indented...)

[Bernd P. <Ber...@cn...>]

Carsten,

same with me. I've also a very limited understanding of regexp... :-(

And the funny thing is that the patch works here and not on your machine...

I'll have a look what your new patch does to my wiki.

/Bernd
P.S.: Here's the compete patch for the list again.

Carsten Klapp wrote:

> Hi Bernd,
>
> This seems to fix the bug. It's probably not great, and incomplete 
> (i.e. "     /0 - -" still does not work as a line either), due to my 
> limited experience with regex as well as my limited understanding of 
> the BlockParser classes:
>
> class Block_blockquote extends BlockMarkup
> {
>     var $_depth;
>
> -    var $_re = '\ +(?=\S)';
> +    var $_re = '\ +(?=\S|\d)';
>
>
> Not that I'm not discounting your patch just yet, it just doesn't work 
> for me at the moment and I'm not 100% sure what is going on/program 
> flow inside these classes.
>
> I don't really understand why my fix works either. I thought that \S 
> included \d. If PHP's regex matching really is supposed to behave this 
> way, then there may be a bug in PHP itself because clearly \S is not 
> matching digits in this case.
>
> Carsten
>
> ref: http://ca3.php.net/manual/en/pcre.pattern.syntax.php
>
> The third use of backslash is for specifying generic character types:
> \d    any decimal digit
> \D    any character that is not a decimal digit
> \s    any whitespace character
> \S    any character that is not a whitespace character
> \w    any "word" character
> \W    any "non-word" character
>
>
> On Thursday, November 13, 2003, at 04:17  pm, Bernd Porr wrote:
>
>> Hi Carsten,
>>
>> is would like to suggest a very simple fix for that problem:
>>
>> BlockParser.php:
>>
>> class Block_blockquote extends BlockMarkup
>> {
>>    var $_depth;
>>
>>    var $_re = '\ +(?=\S)';
>>
>>    var $_really_match = true;
>>
>>    function _match (&$input, $m) {
>>        $this->_depth = strlen($m->match);
>>        $indent = sprintf("\\ {%d}", $this->_depth);
>>        $this->_element = new SubBlock($input, $indent, $m->match,
>>                                       'blockquote');
>>        return $this->_really_match;
>>    }
>>
>>    function merge ($nextBlock) {
>>        if (get_class($nextBlock) == get_class($this)) {
>>                if (!($nextBlock->_depth < $this->_depth)) {
>>                        $this->_really_match=false;
>>                        return false;
>>                }
>>                $nextBlock->_element->unshiftContent($this->_element);
>>                $nextBlock->_tight_top = $this->_tight_top;
>>                return $nextBlock;
>>        }
>>        return false;
>>    }
>> }
>>
>> Match always returned a true value. Now it is so that if 
>> !($nextBlock->_depth < $this->_depth) it returns the next time a 
>> false. This prevents the main loop from looping forever.
>>
>> Maybe this is not the best fix but it does not generate a crash with 
>> the "assert" function.
>>
>> /Bernd
>>
>> -- 
>> Contact information:
>> http://www.cn.stir.ac.uk/~bp1/
>>
>>
>
>
>
> -------------------------------------------------------
> This SF. Net email is sponsored by: GoToMyPC
> GoToMyPC is the fast, easy and secure way to access your computer from
> any Web browser or wireless device. Click here to Try it Free!
> https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk


-- 
Contact information:
http://www.cn.stir.ac.uk/~bp1/

[Phpwiki-talk] A partial fix. Please test this (was Re:Bug in BlockParser.php: indented...)

[Carsten K. <car...@us...>]

Hi Bernd,

This seems to fix the bug. It's probably not great, and incomplete 
(i.e. "     /0 - -" still does not work as a line either), due to my 
limited experience with regex as well as my limited understanding of 
the BlockParser classes:

class Block_blockquote extends BlockMarkup
{
     var $_depth;

-    var $_re = '\ +(?=\S)';
+    var $_re = '\ +(?=\S|\d)';


Not that I'm not discounting your patch just yet, it just doesn't work 
for me at the moment and I'm not 100% sure what is going on/program 
flow inside these classes.

I don't really understand why my fix works either. I thought that \S 
included \d. If PHP's regex matching really is supposed to behave this 
way, then there may be a bug in PHP itself because clearly \S is not 
matching digits in this case.

Carsten

ref: http://ca3.php.net/manual/en/pcre.pattern.syntax.php

The third use of backslash is for specifying generic character types:
\d    any decimal digit
\D    any character that is not a decimal digit
\s    any whitespace character
\S    any character that is not a whitespace character
\w    any "word" character
\W    any "non-word" character


On Thursday, November 13, 2003, at 04:17  pm, Bernd Porr wrote:

> Hi Carsten,
>
> is would like to suggest a very simple fix for that problem:
>
> BlockParser.php:
>
> class Block_blockquote extends BlockMarkup
> {
>    var $_depth;
>
>    var $_re = '\ +(?=\S)';
>
>    var $_really_match = true;
>
>    function _match (&$input, $m) {
>        $this->_depth = strlen($m->match);
>        $indent = sprintf("\\ {%d}", $this->_depth);
>        $this->_element = new SubBlock($input, $indent, $m->match,
>                                       'blockquote');
>        return $this->_really_match;
>    }
>
>    function merge ($nextBlock) {
>        if (get_class($nextBlock) == get_class($this)) {
>                if (!($nextBlock->_depth < $this->_depth)) {
>                        $this->_really_match=false;
>                        return false;
>                }
>                $nextBlock->_element->unshiftContent($this->_element);
>                $nextBlock->_tight_top = $this->_tight_top;
>                return $nextBlock;
>        }
>        return false;
>    }
> }
>
> Match always returned a true value. Now it is so that if 
> !($nextBlock->_depth < $this->_depth) it returns the next time a 
> false. This prevents the main loop from looping forever.
>
> Maybe this is not the best fix but it does not generate a crash with 
> the "assert" function.
>
> /Bernd
>
> -- 
> Contact information:
> http://www.cn.stir.ac.uk/~bp1/
>
>

[Phpwiki-talk] Bug in BlockParser.php: indented lines starting with a 0 (zero)

[Carsten K. <car...@us...>]

Hi All,
I'm forwarding this bug for discussion here on the list, I didn't see a  
copy of this thread here yet.

A similar problem was fixed in the past about a year ago or so, but I  
can't find it in the ChangeLog yet.

Does anyone remember this bug or how it was fixed? I'm betting the fix  
will be similar here.

It had something to do with the compared content/value of a string vs.  
an integer:


"0" == true vs. 0 != true


Unfortunately that's all I remember.

Thanks,
Carsten

Workaround:

Yes those indented zeros seem to be what is uncovering this bug in the  
BlockParser. Change the 0s to Ohs and the problem is gone. Probably  
what you want anyway for this page is to enclose the ascii-art diagram  
in <pre></pre> or <verbatim></verbatim>, the problem also goes away  
that way.


Begin forwarded message:

> From: Bernd Porr <Ber...@cn...>
> Date: Thu Nov 13, 2003  2:16:52  pm Canada/Eastern
> To: Carsten Klapp <car...@us...>
> Subject: Re: phpwiki
> User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4.1)  
> Gecko/20031008
> X-Accept-Language: en
>
> Hi Carsten,
>
> it works so far. The error in the error has disappeared. Still there's  
> the error on that page:
>
> http://www.cn.stir.ac.uk/teaching/phpwiki-1.3.5/index.php/ 
> The%20Experiment
>
> I've sent you the wiki src. I think it's the ASCII art which generates  
> the error.
>
> /Bernd
>
> Carsten Klapp wrote:
>
>>
>> Try this one-line patch, it should fix the second error in  
>> Request.php  that shows up right after the error in BlockParser.php  
>> ("Error while  handling error").
>>
>> Carsten
>>
>> RCS file: /cvsroot/phpwiki/phpwiki/lib/Request.php,v
>> retrieving revision 1.35
>> diff -U2 -r1.35 Request.php
>> --- Request.php 6 Nov 2003 19:39:55 -0000       1.35
>> +++ Request.php 13 Nov 2003 18:09:20 -0000
>> @@ -610,4 +610,5 @@
>>              $time = time();
>>          $offset = date("Z", $time);
>> +        $negoffset = "";
>>          if ($offset < 0) {
>>              $negoffset = "-";
>>
>>
>>
>> On Thursday, November 13, 2003, at 09:49  am, Bernd Porr wrote:
>>
>>> Hi!
>>>
>>>
>>>
>>> One of my students did a ASCII art in the wiki and crashed it.
>>>
>>>
>>>
>>> http://www.cn.stir.ac.uk/teaching/phpwiki-1.3.5/index.php/  
>>> The%20Experiment
>>>
>>>
>>>
>>> I get an error message:
>>>
>>>
>>>
>>> lib/BlockParser.php:465: Fatal[0]: <br
>>>
>>> />/usr/local/httpd/html/teaching/phpwiki-1.3.5/lib/ 
>>> BlockParser.php:465:
>>>
>>> : Assertion failed <br />
>>>
>>>
>>>
>>> I'll try to fix it but I would appreciate some hints.
>>>
>>>
>>>
>>> Thanks
>>>
>>>
>>>
>>> /Bernd
>>>
>
> -- 
> Contact information:
> http://www.cn.stir.ac.uk/~bp1/
>
>
> Date: Thu, 13 Nov 2003 12:54:36 +0000
> Mime-Version: 1.0 (Produced by PhpWiki 1.3.5pre)
> Content-Type: application/x-phpwiki;
>   pagename=The%20Experiment;
>   flags="";
>   author=cjc08;
>   version=8;
>   lastmodified=1068728076;
>   author_id=cjc08;
>   markup=2;
>   hits=23;
>   charset=iso-8859-1
> Content-Transfer-Encoding: binary
>
> In a separate room to the Playground, the Human Player was faced with  
> a computer screen with the following layout:
>
>                                           0 - - - - - - - 0
>
>                                           0 - - - - - - - 0
>
>                                                   0
>
> This is exactly eqivalent to the Bruce the Robot's desired state goal:  
> all sensors are silent (shown as 0).

[Phpwiki-talk] Re: phpwiki

[Carsten K. <car...@us...>]

Try this one-line patch, it should fix the second error in Request.php  
that shows up right after the error in BlockParser.php ("Error while  
handling error").

Carsten

RCS file: /cvsroot/phpwiki/phpwiki/lib/Request.php,v
retrieving revision 1.35
diff -U2 -r1.35 Request.php
--- Request.php 6 Nov 2003 19:39:55 -0000       1.35
+++ Request.php 13 Nov 2003 18:09:20 -0000
@@ -610,4 +610,5 @@
              $time = time();
          $offset = date("Z", $time);
+        $negoffset = "";
          if ($offset < 0) {
              $negoffset = "-";



On Thursday, November 13, 2003, at 09:49  am, Bernd Porr wrote:

> Hi!
>
>
>
> One of my students did a ASCII art in the wiki and crashed it.
>
>
>
> http://www.cn.stir.ac.uk/teaching/phpwiki-1.3.5/index.php/ 
> The%20Experiment
>
>
>
> I get an error message:
>
>
>
> lib/BlockParser.php:465: Fatal[0]: <br
>
> />/usr/local/httpd/html/teaching/phpwiki-1.3.5/lib/BlockParser.php:465:
>
> : Assertion failed <br />
>
>
>
> I'll try to fix it but I would appreciate some hints.
>
>
>
> Thanks
>
>
>
> /Bernd
>

RE: [work] RE: [Phpwiki-talk] PhpWiki markup engine bug

[Frank S. <fra...@rn...>]

> >>> "sb...@po..." 11/13/03 17:42 >>>
> 
> You're right.  And they don't show in the wiki on SourceForge site, 
> either.  Is it the difference btwn. 1.3.4 and 1.3.5pre?  
> Actually, where 
> can I check which version a phpwiki is running, I mean, as a 
> user not as 
> an admin?

If you have it you can use the SystemInfo plugin:

    <?plugin SystemInfo all ?>

Failing that, you'd have to be able to inspect the php files, I suspect.

> Also, in our installation of 1.3.4, I haven't applied any 
> patches.  Can 
> this be the reason?

I don't know. Could be, I suppose. Since I've always run off the CVS
version, I've not seen the behaviour before.

frank

RE: [Phpwiki-talk] PhpWiki markup engine bug

[Frank S. <fra...@rn...>]

<snip>
> I'm running 1.3.4pre, and I don't see a blank line before it, 
> unless I'm
> missing something. Look at 
> http://roke.angband.za.org/frank/SandBox. Is
> this the layout you were expecting?

Arg. I mean 1.3.5pre.

frank