phpwiki-talk

[Phpwiki-talk] phpwiki-1.3.13p1 released

[Reini U. <ru...@x-...>]

I released the first patchset for 1.3.13 today and updated
http://phpwiki.sf.net/phpwiki/ also.

1.3.13p1 June, 9 2007, Reini Urban

An immediate security fix for 1.3.13, plus some minor fixes.

fixes:
* LDAP Auth: Disallow empty passwords! Certain ldap implementations
   return true on empty passwords with ldap_bind().
* LDAP Auth: fix password quoting
* fix action=upgrade for dba, rename nosql to nodb
* fixes SpamBlockList config file locations (config/two-level-tlds,
   config/whitelist)
* enable $MailNotify->onChangePage
* fix display of pagenames containing ":" in certain lists
* fixed backend asArray access to iterators (DebugInfo with SQL)
* fix wrong PhpWikiCvs InterWikiMap entry
* fix syntax error in pgsrc/Help%2FActionPage
* fix case in pgsrc/Help%2FAsciiSVGPlugin
* fix links in pgsrc/Help%2FSemanticRelations
* fix pgsrc/Help%2FWikiPlugin

changes:
* allow \n and single letter pages in {{ }} template syntax.
   patch #1732793 by AlJeux and ReiniUrban
* with ENABLE_SPAMBLOCKLIST check only new external links:
   max 5, allow interwiki links, and improve failed output.

----
Besides Mediawiki import and Creole Markup I'm also working on making 
Theme class inheritance possible, by putting all globals from 
themeinfo.php into the class and initialize the theme with an additional 
->load method.
This needs a little bit of testing and requires all user-written themes 
to be checked and simplified.

You may also want to check back the monthly #wikiohana discussion the 
major wiki engine implementors hold now each first tuesday a month:
   http://wikiohana.net/cgi-bin/wiki.pl/IrcMeetingJune2007
   http://tools.splitbrain.org/irc/wikiohana/index.php?d=2007-06-05
   http://www.wikicreole.org/
    http://aboutus.org/UniversalWikiEditButton

And most likely I will not be able to make it to tommorrows barcamp 
vienna 07.

Re: [Phpwiki-talk] phpwiki-1.3.13 released

[Harold H. <ha...@ha...>]

THANKS!

Harold
> Sure.
> But I forgot to mentioned it in the ReleaseNotes
>
> We have new in UpLoad:
>
> ; Upload into seperate userdirs. If enabled (default since 1.3.13) the
> generated Upload: link
> ; will include the username plus "/". This will make all uploaded
> links longer, but we
> ; avoid nameclashes and you see who uploaded what file.
> ;UPLOAD_USERDIR = false
>
> ; By setting DISABLE_UPLOAD_ONLY_ALLOWED_EXTENSIONS to true, you get
> ; back the old behaviour to check only *bad* extensions of uploaded
> ; files. However a server may treat other files with certain handlers,
> ; like executable scripts, so we disable now everything and enable
> ; only some extension.  See lib/plugin/UpLoad.php.
> ; Default: false
> ;DISABLE_UPLOAD_ONLY_ALLOWED_EXTENSIONS = false
>
> ; Override the default uploads dir. We have to define the local file path,
> ; and the webpath (DATA_PATH). Ensure an ending slash on both.
> ;UPLOAD_FILE_PATH = /var/www/htdocs/uploads/
> ;UPLOAD_DATA_PATH = /uploads/
>
> ; The maximum file upload size, in bytes.
> ; The default, 16777216, is 16MB.
> MAX_UPLOAD_SIZE = 16777216
>
> 2007/6/8, Harold Hallikainen <ha...@ha...>:
>> Does the new release deal with the upload problem I found (or a hacker
>> found on my system? That is, they were able to upload and execute a
>> php3.
>> It'd be nice if we had a list of allowed file types instead of a list of
>> disallowed types.
> --
> Reini Urban
> http://phpwiki.org/              http://murbreak.at/
> http://spacemovie.mur.at/   http://helsinki.at/
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>


-- 
FCC Rules Updated Daily at http://www.hallikainen.com - Advertising
opportunities available!

[Phpwiki-talk] The quirky Admin settings

[HJ M. <rh...@ya...>]

Hi,

Yes, I checked if there was anything on this problem.
Several times the same problem, but for some reason no
answer.

Here once more:

// Set these to your preferences. 
// For heaven's sake pick a good password!
   $wikiadmin   = "xxxxxxx";
   $adminpasswd = "xxxxxxx";

admin added, password added. Then uploaded HOWEVER I
still get the persistent message.

You entered an invalid login or password.

Where oh where is the solution to this problem??

TIA

HJ

Hans-Joerg Mueller
Coldstream, BC Canada
http://www.rhb-grischun.ca

Interested in the Rhaetian Railways? http://www.rhb-grischun.ca/phpBB2/  The competent RhB Forum!

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

Re: [Phpwiki-talk] phpwiki-1.3.13 released

[Reini U. <ru...@x-...>]

Sure.
But I forgot to mentioned it in the ReleaseNotes

We have new in UpLoad:

; Upload into seperate userdirs. If enabled (default since 1.3.13) the
generated Upload: link
; will include the username plus "/". This will make all uploaded
links longer, but we
; avoid nameclashes and you see who uploaded what file.
;UPLOAD_USERDIR = false

; By setting DISABLE_UPLOAD_ONLY_ALLOWED_EXTENSIONS to true, you get
; back the old behaviour to check only *bad* extensions of uploaded
; files. However a server may treat other files with certain handlers,
; like executable scripts, so we disable now everything and enable
; only some extension.  See lib/plugin/UpLoad.php.
; Default: false
;DISABLE_UPLOAD_ONLY_ALLOWED_EXTENSIONS = false

; Override the default uploads dir. We have to define the local file path,
; and the webpath (DATA_PATH). Ensure an ending slash on both.
;UPLOAD_FILE_PATH = /var/www/htdocs/uploads/
;UPLOAD_DATA_PATH = /uploads/

; The maximum file upload size, in bytes.
; The default, 16777216, is 16MB.
MAX_UPLOAD_SIZE = 16777216

2007/6/8, Harold Hallikainen <ha...@ha...>:
> Does the new release deal with the upload problem I found (or a hacker
> found on my system? That is, they were able to upload and execute a php3.
> It'd be nice if we had a list of allowed file types instead of a list of
> disallowed types.
-- 
Reini Urban
http://phpwiki.org/              http://murbreak.at/
http://spacemovie.mur.at/   http://helsinki.at/

Re: [Phpwiki-talk] phpwiki-1.3.13 released

[Harold H. <ha...@ha...>]

Does the new release deal with the upload problem I found (or a hacker
found on my system? That is, they were able to upload and execute a php3.
It'd be nice if we had a list of allowed file types instead of a list of
disallowed types.

THANKS!

Harold


-- 
FCC Rules Updated Daily at http://www.hallikainen.com - Advertising
opportunities available!



-- 
FCC Rules Updated Daily at http://www.hallikainen.com - Advertising
opportunities available!

Re: [Phpwiki-talk] phpwiki-1.3.13 released

[Harold H. <ha...@ha...>]

Does the new release deal with the upload problem I found (or a hacker
found on my system? That is, they were able to upload and execute a php3.
It'd be nice if we had a list of allowed file types instead of a list of
disallowed types.

THANKS!

Harold


-- 
FCC Rules Updated Daily at http://www.hallikainen.com - Advertising
opportunities available!

Re: [Phpwiki-talk] phpwiki-1.3.13 released

[Reini U. <ru...@x-...>]

John Stevens schrieb:
> Hi Reini,
> All the links I try to download the latest release from are broken.  Are 
> you sure this has gone out?
> Cheers

Yes, we had hundreds of downloads so far.
Interestingly I did a first zip release and it had 2.5x more downloads 
than the traditional tar.bz2 so far.
 
https://sourceforge.net/project/showfiles.php?group_id=6121&package_id=31289&release_id=511850

But I'll have to add a immediate patchfix release today or tommorrow.
Someone found some important ldap security problem, and I found some 
annoying little bugs.

The current plan is:
1.3.13p1 June, 7 2007, Reini Urban

fixes:
* LDAP Auth: Disallow empty passwords! Certain ldap implementations 
return true on empty
   passwords with ldap_bind().
* LDAP Auth: fix password quoting
* enable $MailNotify->onChangePage
* fixes SpamBlockList config file locations (config/two-level-tlds, 
config/whitelist)
* check SpamBlocklist only if > 5 new external links were added
* fix display of pagenames containing ":" in certain lists
* fix wrong PhpWikiCvs InterWikiMap entry
* fix syntax error in pgsrc/Help%2FActionPage
* fix case in pgsrc/Help%2FAsciiSVGPlugin
* fix links in pgsrc/Help%2FSemanticRelations
* fix pgsrc/Help%2FWikiPlugin

Maybe the recent {{ \n }} patch by aljeux also, but this looks bad so far.
blog looks also bad with gecko.
And mediawiki and creole syntax parsers are not ready yet.

-- 
Reini Urban
http://phpwiki.org/  http://murbreak.at/
http://helsinki.at/  http://spacemovie.mur.at/

Re: [Phpwiki-talk] phpwiki-1.3.13 released

[AlJeux <al...@fr...>]

John Stevens a écrit :
> Hi Reini,
> All the links I try to download the latest release from are broken.  Are 
> you sure this has gone out?

Hi,

I have just downloaded the file without problems.

Alain.

> Cheers
> 
> 
> ------------------------------------------------------------------------
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk

Re: [Phpwiki-talk] phpwiki-1.3.13 released

[John S. <jst...@gm...>]

Hi Reini,
All the links I try to download the latest release from are broken.  Are you
sure this has gone out?
Cheers

Re: [Phpwiki-talk] Change background color for preformatted text

[Reini U. <ru...@x-...>]

ENABLE_MARKUP_COLOR = true (default)
something like:
<pre>
 %color=red%red test%%
 black
 %color=yellow%yellow test%%
 black
</pre>
------

2007/6/4, Sabri LABBENE <sab...@st...>:
> Hi all,
> I want to make prefomatted text (inside pre or verbatim tags) display in a colored area (light yellow for example). This will make wiki pages look nicer.
> I've been trying to do it for too long without results. Phpwiki parsers seems complex to me and I can't figure out how to add something like 'style="backgroud-color:#FDFDF7"' to transformed pre tags.
>
> Can someone help me to figure out how this could be done.
>
> Thanks,
> -- Sabri.
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>


-- 
Reini Urban
http://phpwiki.org/              http://murbreak.at/
http://spacemovie.mur.at/   http://helsinki.at/

[Phpwiki-talk] Change background color for preformatted text

[Sabri L. <sab...@st...>]

Hi all,
I want to make prefomatted text (inside pre or verbatim tags) display in =
a colored area (light yellow for example). This will make wiki pages =
look nicer.
I've been trying to do it for too long without results. Phpwiki parsers =
seems complex to me and I can't figure out how to add something like =
'style=3D"backgroud-color:#FDFDF7"' to transformed pre tags.

Can someone help me to figure out how this could be done.=20

Thanks,
-- Sabri.

Re: [Phpwiki-talk] URL parameters not updated after saving a wiki

[Reini U. <ru...@x-...>]

Sabri LABBENE schrieb:
>  
> Sabri LABBENE wrote:
>> Reini Urban wrote:
>>> it's not easy.
>>> if so I would have done it years ago. (around 2003)
>>>
>>> you can search the archives how jeff tried to get rid of it, and/or i 
>>> introduced it again somehow.
>> Ok. Personally I tried to remove/unset it but I can't. 
>> Unfortunately this parameter causes problems for me... Anyway, 
>> I'll try to live with it until I'll get a solution to remove it.
> 
> In editpage.php (function savePage()) at line ~317 there is a :
>     //$request->setArg('action', false);
> When I uncommented that line, 'action=edit' parameter has gone but only
> once. I edit another time then save and the parameter stay there as before +
> a Notice:
> 
> In template 'head':51: Notice: Undefined index: action:
> 
>     * $action = $args['action'];

This is easy to fix :)

Ok, I just checked the logic.

Whenever you have the theme signature defined or a save warning,
the action=edit will be sticky, because then we do no redirect.

Without signature and no warning the request is redirected and the 
action=edit will be gone.

We need it to support more than one submit button.
We have Save, Preview and lateron maybe Changes and Upload.
For the later three we need "edit", unless we do some js tricks
to submit the form from the button, enabling edit only there. This is 
what we wanted to avoid.

But I'll test that idea.
-- 
Reini Urban
http://phpwiki.org/  http://murbreak.at/
http://helsinki.at/  http://spacemovie.mur.at/

[Phpwiki-talk] phpwiki-1.3.13 released

[Reini U. <ru...@x-...>]

I released 1.3.13 today and will install it tomorrow at the sf.net site. 
Under http://phpwiki.sf.net/phpwiki/ as usual.
I'll also import all the old pages.

You want to check the TODO.
Mediawiki import and Creole Markup is what I'm working on right now.
The next releases will come quicker.
-- 
Reini Urban
http://phpwiki.org/  http://murbreak.at/
http://helsinki.at/  http://spacemovie.mur.at/

Re: [Phpwiki-talk] URL parameters not updated after saving a wiki

[Sabri L. <sab...@st...>]

 
Sabri LABBENE wrote:
>Reini Urban wrote:
>>it's not easy.
>>if so I would have done it years ago. (around 2003)
>>
>>you can search the archives how jeff tried to get rid of it, and/or i 
>>introduced it again somehow.
>
>Ok. Personally I tried to remove/unset it but I can't. 
>Unfortunately this parameter causes problems for me... Anyway, 
>I'll try to live with it until I'll get a solution to remove it.

In editpage.php (function savePage()) at line ~317 there is a :
    //$request->setArg('action', false);
When I uncommented that line, 'action=edit' parameter has gone but only
once. I edit another time then save and the parameter stay there as before +
a Notice:

In template 'head':51: Notice: Undefined index: action:

    * $action = $args['action'];

>>2007/5/31, Sabri LABBENE <sab...@st...>:
>>> Hi all,
>>>
>>> If I edit a page in Phpwiki then save it. The 'action=edit' 
>>url parameter still there. Can some one tell how to remove/unset it?
>>--
>>Reini Urban
>>http://phpwiki.org/              http://murbreak.at/
>>http://spacemovie.mur.at/   http://helsinki.at/
>>
>>---------------------------------------------------------------
>>----------
>>This SF.net email is sponsored by DB2 Express Download DB2 
>Express C - 
>>the FREE version of DB2 express and take control of your XML. No 
>>limits. Just data. Click to get it now.
>>http://sourceforge.net/powerbar/db2/
>>_______________________________________________
>>Phpwiki-talk mailing list
>>Php...@li...
>>https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>>
>
>
>---------------------------------------------------------------
>----------
>This SF.net email is sponsored by DB2 Express Download DB2 
>Express C - the FREE version of DB2 express and take control 
>of your XML. No limits. Just data. Click to get it now.
>http://sourceforge.net/powerbar/db2/
>_______________________________________________
>Phpwiki-talk mailing list
>Php...@li...
>https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>

Re: [Phpwiki-talk] URL parameters not updated after saving a wiki

[Sabri L. <sab...@st...>]

Reini Urban wrote:
>it's not easy.
>if so I would have done it years ago. (around 2003)
>
>you can search the archives how jeff tried to get rid of it, 
>and/or i introduced it again somehow.

Ok. Personally I tried to remove/unset it but I can't. Unfortunately this
parameter causes problems for me... Anyway, I'll try to live with it until
I'll get a solution to remove it.

Thanks,
-- Sabri.

>2007/5/31, Sabri LABBENE <sab...@st...>:
>> Hi all,
>>
>> If I edit a page in Phpwiki then save it. The 'action=edit' 
>url parameter still there. Can some one tell how to remove/unset it?
>--
>Reini Urban
>http://phpwiki.org/              http://murbreak.at/
>http://spacemovie.mur.at/   http://helsinki.at/
>
>---------------------------------------------------------------
>----------
>This SF.net email is sponsored by DB2 Express Download DB2 
>Express C - the FREE version of DB2 express and take control 
>of your XML. No limits. Just data. Click to get it now.
>http://sourceforge.net/powerbar/db2/
>_______________________________________________
>Phpwiki-talk mailing list
>Php...@li...
>https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>

Re: [Phpwiki-talk] URL parameters not updated after saving a wiki

[Reini U. <ru...@x-...>]

it's not easy.
if so I would have done it years ago. (around 2003)

you can search the archives how jeff tried to get rid of it, and/or i
introduced it again somehow.

2007/5/31, Sabri LABBENE <sab...@st...>:
> Hi all,
>
> If I edit a page in Phpwiki then save it. The 'action=edit' url parameter still there. Can some one tell how to remove/unset it?
-- 
Reini Urban
http://phpwiki.org/              http://murbreak.at/
http://spacemovie.mur.at/   http://helsinki.at/

[Phpwiki-talk] URL parameters not updated after saving a wiki

[Sabri L. <sab...@st...>]

Hi all,

If I edit a page in Phpwiki then save it. The 'action=3Dedit' url =
parameter still there. Can some one tell how to remove/unset it?

Thanks,
-- Sabri.

[Phpwiki-talk] URL parameters not updated after saving a wiki

[Sabri L. <sab...@st...>]

Sabri LABBENE wrote:
>Hi all,
>
>If I edit a page in Phpwiki then save it. The 'action=edit' 
>url parameter still there. Can some one tell how to remove/unset it?

Any comments on the subject ?

Regards,
Sabri.

Re: [Phpwiki-talk] phpwiki rename page clarification.

[Reini U. <ru...@x-...>]

AlJeux schrieb:
> Hi Reini,
> 
> Thank you for answering so quickly to my question.
> 
> My question was only related to the second part of the code, not all the 
> code.
> 
> If I comment the following code (the one working with $newpage), the
> renaming bug is fixed.
> 
> (code in WikiDB.php in the rename_page func)
> === begin ===
>  $links = $newpage->getBackLinks();
>  while ($linked_page = $links->next()) {
>     WikiPlugin_WikiAdminSearchReplace::replaceHelper($this,
>                                      $linked_page->getName(),
>                                      $from, $to);
> }
> === end ===
> 
> Is it safe to comment these lines ?
> 
> As I said, I don't understand so I'm afraid of making a mistake.

Yes, it's save to comment out, because the 
WikiAdminSearchReplace::replaceHelper call is broken anyway.
You might end with too many renamed pages.

I'll try to fix it before the release.

BTW: I already uploaded the release but found another bug yesterday. 
php-5.2.x sessions still don't work.
-- 
Reini Urban
http://phpwiki.org/  http://murbreak.at/
http://helsinki.at/  http://spacemovie.mur.at/

Re: [Phpwiki-talk] phpwiki rename page clarification.

[AlJeux <al...@fr...>]

Hi Reini,

Thank you for answering so quickly to my question.

My question was only related to the second part of the code, not all the 
code.

If I comment the following code (the one working with $newpage), the
renaming bug is fixed.

(code in WikiDB.php in the rename_page func)
=== begin ===
  $links = $newpage->getBackLinks();
  while ($linked_page = $links->next()) {
     WikiPlugin_WikiAdminSearchReplace::replaceHelper($this,
                                      $linked_page->getName(),
                                      $from, $to);
}
=== end ===

Is it safe to comment these lines ?

As I said, I don't understand so I'm afraid of making a mistake.

Best Regards,
Alain.

Re: [Phpwiki-talk] phpwiki rename page clarification.

[Reini U. <ru...@x-...>]

aljeux schrieb:
> Message body follows:
> 
> Hello,
> 
> Please, excuse me to contact directly, but as you seems the
> author of the lines, I think it's better to ask you directly.
> 
> I am a gforge developer running a gforge with phpwiki 1.3
> inside for projects.
> 
> When renaming a page, I've found a strange thing.
> 
> How to reproduce:
> 
> Create a link: PageAlain
> Create the page with the default text.
> Rename the page (with links) to: PageAlainTwo
> 
> => The page is renamed but now the links are named
> 'PageAlainTwoTwo'.
> 
> I have noticied that the code responsible for this is in
> lib/WikiDB.php
> In this code, there is a section:
> 
> if ($updateWikiLinks) {
>    require_once('lib/plugin/WikiAdminSearchReplace.php');
>    $links = $oldpage->getBackLinks();
>    while ($linked_page = $links->next()) {
>       WikiPlugin_WikiAdminSearchReplace::replaceHelper($this,
>                                                      
> $linked_page->getName(),
>                                                       $from,
> $to);
>    }
>    $links = $newpage->getBackLinks();
>    while ($linked_page = $links->next()) {
>       WikiPlugin_WikiAdminSearchReplace::replaceHelper($this,
>                                                       
> $linked_page->getName(),
>                                                       
> $from, $to);
>    }
> }
> 
> To solve the problem, I am tempted to comment the second
> part of the code (the one renaming link to the new page) but
> as I don't understand what is it for, I am quite reserved.
> 
> Can you help me to understand it's goal ?
> 
> Many thanks for for time,
> Alain Peyrat.

Hi Alain, better use the phpwiki-talk mailinglist.

this code does renaming all pagenames in all backlinked pages,
and is only executed if $updateWikiLinks is true.

Generally it is not good to do that automatically also,
because the old pagename detection is not strict enough.

-- 
Reini Urban
http://phpwiki.org/  http://murbreak.at/
http://helsinki.at/  http://spacemovie.mur.at/

[Phpwiki-talk] (no subject)

[Sabri L. <sab...@st...>]

Hi all,

If I edit a page in Phpwiki then save it. The 'action=3Dedit' url =
parameter still there. Can some one tell how to remove/unset it?

Thanks,
-- Sabri.=20

Re: [Phpwiki-talk] Montreal 07 Outcome

[Mark M. <ma...@ic...>]

Please stop sending emails to jef...@ic...






-----Original Message-----
From: php...@li...
[mailto:php...@li...] On Behalf Of Reini Urban
Sent: Saturday, May 19, 2007 7:34 PM
To: Discussion on PhpWiki features, bugs, development.
Subject: [Phpwiki-talk] Montreal 07 Outcome

http://www.rocococamp.info/FutureWikiProjectsCollaboration

-- 
Reini Urban
http://phpwiki.org/              http://murbreak.at/
http://spacemovie.mur.at/   http://helsinki.at/

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Phpwiki-talk mailing list
Php...@li...
https://lists.sourceforge.net/lists/listinfo/phpwiki-talk

[Phpwiki-talk] Montreal 07 Outcome

[Reini U. <ru...@x-...>]

http://www.rocococamp.info/FutureWikiProjectsCollaboration

-- 
Reini Urban
http://phpwiki.org/              http://murbreak.at/
http://spacemovie.mur.at/   http://helsinki.at/

[Phpwiki-talk] rocococamp montreal

[Reini U. <ru...@x-...>]

So see some of there. This Friday to Sunday in Montreal.

   http://www.rocococamp.info/InvitationList

Hi Crao people!