phpwiki-talk

[Phpwiki-talk] XMLRPC vulnerability security advise

[Reini U. <ru...@x-...>]

The phpxmlrpc library phpwiki-1.3.x from 2002/08/30 up to today is using 
is easily exploitable. The updated version xmlrpc-1.1 from the website 
even contains the exploit code, so it's very likely that you webserver 
will get "rooted" in the next week if your using phpwiki-1.3.4 or later.

See http://phpxmlrpc.sourceforge.net/
and http://www.gulftech.org/?node=research&article_id=00088-07022005

The updated xmlrpc-1.1 version doesn't work out of the box and will 
require one more day to be fixed.

If you are using phpwiki-1.3.11_rc1 or a newer or a CVS versions later 
than 2005-01-05 AND you are using the native PECL xmlrpc extension by 
Dan Libby you are on the safe side and forget this issue. Check your 
phpinfo() if the xmlrpc extension is loaded.
phpwiki from 2005-01-05 on checks the existance and does not use the 
exploitable phpxmlrpc library which ships with phpwiki/lib/XMLRPC.

If you are affected please remove lib/XMLRPC/xmlrpc.inc ASAP or rename it.

Note:
It's extremely unfair from the phpxmlrpc maintainers to add the exploit 
code to the fixed library without any grace period! Usual it is one 
week, but one ot two days would have been enough also.
I'm stronlgy considering removing this horribly written library from 
phpwiki and just rely on the stable and fast PECL extension by Dan 
Libby, which also supports SOAP.
-- 
Reini Urban
http://phpwiki.org/

Re: [Phpwiki-talk] phpWiki Vulnerable to the XML-RPC vulnerability

[Reini U. <ru...@x-...>]

GulfTech Security Research schrieb:
> http://www.gulftech.org/?node=research&article_id=00088-07022005
> 
> An updated version can be obtained from
> 
> http://phpxmlrpc.sourceforge.net/

how stupid one must be to use eval in external xmlrpc code!!
thanks for notification.

folks, please configure the PECL xmlrpc extension (php.ini: 
extension=xmlrpc) , and only use the php wrapper if absoletely necessary.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/
http://phpwiki.org/

[Phpwiki-talk] You too can convert underscores to spaces in titles and links.

[Garrett B. <bau...@ho...>]

Well, no one deigned to reply to my earlier request for help, so I figured 
it out on my own.  The answer is in "stdlib.php" in the wiki's "lib" 
directory and in "themeinfo.php" in the desired theme(s) in your "themes" 
directory.


1. In themeinfo.php, make sure "AutosplitWikiWords" is set to "True" (minus 
quotes).


2. In stdlib.php, do a search for "function split_pagename" (minus quotes).  
In version 1.3.10, which is what I'm using, this function starts on line 764 
(assuming you don't have Word Wrap enabled).


3. Add the following two lines after the other three regular expressions.

// Obliterate underscores in your wiki titles and links.
$RE[] = '/(.)[_](.)/';


Now, whenever you have a page with an underscore in its name - such as 
"Foo_Bar" - it will be displayed as a space instead - "Foo Bar" - which 
makes your URLs a lot cleaner than having that stupid "%20" space escape 
code in them.  Moreover, the underscores will also be converted to spaces in 
your displayed WikiLinks.

Note also that this doesn't care in the least what comes before and after 
the underscore.  A link or title encoded as "Spell_-_Really_Magic_Missiles" 
will be displayed as "Spell - Really Magic Missiles" despite the fact that 
the hyphen "-" isn't a capital letter.  This makes it more versatile.


Garrett Baumgartner

[Phpwiki-talk] phpWiki Vulnerable to the XML-RPC vulnerability

[GulfTech S. R. <sec...@gu...>]

http://www.gulftech.org/?node=research&article_id=00088-07022005

An updated version can be obtained from

http://phpxmlrpc.sourceforge.net/

-- 
GulfTech Research And Development
P.O. Box 691 Gulfport, MS 39501
http://www.gulftech.org/?node=webappsec

Re: [Phpwiki-talk] PhpWikiAdministration/Remove makes System hang

[Reini U. <ru...@x-...>]

Stefan schrieb:
> PhpWikiAdministration/Remove makes System hang and the other Admin Pages 
> also
> 
> How can i hide the Administration pages for the users. Spiders makes the 
> server unaccessible when spidering the admin pages. We have 14500 pages 
> in our wiki and the time to load them all is to much for one page.

Spiders will not see the Admin link in the navbar. Spiders should not 
have admin rights.

> is it possible to make these pages only visible for the admin

I'll make paging the default for the admin pages also.
Makes sense for > 500 pages.

You'll have multiple pages then.
Recommended is to filter the pages to be displayed beforehand. 
(WikiAdminSelect)
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/
http://phpwiki.org/

[Phpwiki-talk] PhpWikiAdministration/Remove makes System hang

[Stefan <son...@ba...>]

PhpWikiAdministration/Remove makes System hang and the other Admin Pages 
also

How can i hide the Administration pages for the users. Spiders makes the 
server unaccessible when spidering the admin pages. We have 14500 pages 
in our wiki and the time to load them all is to much for one page.

is it possible to make these pages only visible for the admin

Regards Stefan

[Phpwiki-talk] database corruption, accesslog and session table

[Stefan <son...@ba...>]

hello,

once a week my phpwiki database gets corrupted. i'am using the newest 
mysql backend and about 5 databases on the server. only the phpwiki 
database once a week gets an error. most the time the index is 
corrupted. sometimes it's the session table other time the page table 
next time the version table. i can't figure out why this happens. i 
think it mus be a mysql problem but only phpwiki is affected with this 
problem.

now i want to minimize my sql traffic, how can i stop logging to 
accesslog table in the mysql database. i allready tried
access_log_sql = 0
access_log_sql = 1
;access_log_sql = 0
but it logs and logs to the table. how to stop it?

I also want to stop the endless entries of sessions in the session 
table. there are hundredthousend sessions in there and from time to time 
i delete them. why they are not automatic deleted when they are 1 day old?

Regards Stefan

Re: [Phpwiki-talk] Re: WLUG Wiki <-> phpWiki

[Reini U. <ru...@x-...>]

Reini Urban schrieb:
>>* Using precached HTML (WIKIDB_NOCACHE_MARKUP) results in errors of the
>>following type when I try and view any page in the wiki
>>
>>Fatal Error:
>>lib/WikiDB/backend/PearDB.php:1014: Error: wikidb_backend_peardb_pgsql:
>>fatal database error
>>
>>      * DB Error: unknown error
>>      * (UPDATE page SET cached_html='xÚÂâ€ÃnÛ0Æï}
>>      * A°ZοVÉ2d†¶5H·ö(6µ%CRÅ¡EÞ}â€lg;Ú
>>$€-šüñã''ÞI1‘Ü[¥Ó±äNžË‘|s’¶þµ>¿“b&y­öž·G|Æ&.‘og''o)p§
>>
>>To make the wiki work I have to set WIKIDB_NOCACHE_MARKUP = true in
>>config.ini. This looks like phpwiki is trying to insert bogus values
>>into the HTML cache.

I've found the PEAR pgsql problem. PEAR DB does not escape binary data 
with pg_escape_string(). I've checked in a fix.

I believe ADODB does that right - at least it uses pg_escape_string(), 
but haven't tested that yet.

> cached_html is gzipped.
> So postgresql has problems with binary data. I'll fix that.

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/
http://phpwiki.org/

[Phpwiki-talk] sf.net wiki updated

[Reini U. <ru...@x-...>]

I've updated the sf.net wiki (also at phpwiki.org) to the latest version 
and added a php 16MB memory limit instead of 8MB as before.
PHPWIKI_VERSION = 1.3.11_20050610

http://phpwiki.sf.net/demo/ still runs with the old WikiUser library, 
http://phpwiki.sf.net/phpwiki/ the new one.
USECACHE (and WIKIDB_NOCACHE_MARKUP) is enabled again.

The nightly snapshot was moved to 
http://phpwiki.sf.net/nightly/phpwiki-nightly.tar.bz2 (still not updated 
regularly, just via a ssh cronjob from my windows box)

ENABLE_MARKUP_COLOR = true
   %color=red% red %% %color=#0000aa% blue %% and black again
http://phpwiki.org/TextFormattingRules/Colors

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/
http://phpwiki.org/

Re: [Phpwiki-talk] Locked out of wiki

[Reini U. <ru...@x-...>]

Leonard mckinley schrieb:
> I swear if you help me get back to the default theme, I'll never change
> the theme again! ;-)

As intermediate fix I suggest to disable theme switching from the 
userpreferences template. Out-commenting it, so that admins can enable 
it when they think it works.

Re: [Phpwiki-talk] Locked out of wiki

[Leonard m. <spa...@ya...>]

Leonard mckinley:
> I recently tried some of the themes available in my wiki user login,
> and one of them PHPWiki was not happy with.  ... Effectively this 
> wiki user login is useless.
> 
> How do I reset the active theme for my wiki user back to the default.

For the archives, I found a solution.  To my latest problem with the
Sidebar theme.  Go to the server's themes subdirectory, mv the
directory for the hosed profile aside, symlink default to that name,
log into wiki and change your profile away from the buggy one, and then
restore the themes directory to its original state.  E.g.:

    cd themes
    mv Sidebar Sidebar.old
    ln -sf default Sidebar
    <log in and change your theme to default>
    rm Sidebar
    mv Sidebar.old Sidebar

Leonard


		
__________________________________ 
Yahoo! Mail 
Stay connected, organized, and protected. Take the tour: 
http://tour.mail.yahoo.com/mailtour.html 

Re: [Phpwiki-talk] Locked out of wiki

[Leonard m. <spa...@ya...>]

Dan Frankowski:
> I'm afraid I don't know what theme that is, what that error in the
> code is, or what version of PhpWiki you're running, or what your 
> configuration is (e.g., what back-end you're using for pages).

Well, thanks for your first tip anyway.  That got me out of the
wikilens brokenness.

As to the rest, for you or anyone else that can help me reset my wiki
user's theme to the default again, here's our setup:

   Broken Theme: Sidebar
   Desired Theme: default
   phpwiki-1.3.10
   apache-2.0.52-r1
   Gentoo Base System 1.4.16

Thanks,

Leonard





		
__________________________________ 
Yahoo! Mail 
Stay connected, organized, and protected. Take the tour: 
http://tour.mail.yahoo.com/mailtour.html 

Re: [Phpwiki-talk] Locked out of wiki

[Dan F. <dfr...@cs...>]

Leonard mckinley wrote:

>Dan Frankowski:
>  
>
>>>I recently tried some of the themes available in my wiki user login,
>>>and one of them PHPWiki was not happy with.  How do I reset the 
>>>active theme for my wiki user back to the default.
>>>      
>>>
>>I think one way to dodge this would be to put
>>
>>return "";
>>
>>right at the top of the run() method in lib/plugin/RateIt.php. 
>>    
>>
>
>Thanks!  Oddly there was no Preferences button with the wikilens theme
>(the one causing problems), but I found the right URL to surf to and
>was able to change my theme back to the default.
>
>However, silly me, I tried one of the other profiles (the one right
>below wikilens, whichever that is), and now I'm locked out with:
>
> Fatal PhpWiki Error
>
> lib/DbaDatabase.php (In template 'body') (In template 'html'):54: 
>Fatal[256]:
>dba_open(/var/www/sggl/htdocs/sgglwiki/pages/wiki_session.gdbm,w):
>Driver initialization failed for handler: gdbm: Can't be writer
>
>    * file: /var/www/sggl/htdocs/sgglwiki/pages/wiki_session.gdbm
>    * mode: w
>    * handler: gdbm:
>    * ?>
>
>I did chmod this file to 666 just to try and get past it, but it still
>fatals with this same error.
>
>I swear if you help me get back to the default theme, I'll never change
>the theme again! ;-)
>  
>

I'm afraid I don't know what theme that is, what that error in the code 
is, or what version of PhpWiki you're running, or what your 
configuration is (e.g., what back-end you're using for pages). Thus, I'm 
afraid I don't have time to look into it now. I just answered before 
because I had a quick suggestion.

Dan

Re: [Phpwiki-talk] Locked out of wiki

[Leonard m. <spa...@ya...>]

Dan Frankowski:
> >I recently tried some of the themes available in my wiki user login,
> >and one of them PHPWiki was not happy with.  How do I reset the 
> >active theme for my wiki user back to the default.
>
> I think one way to dodge this would be to put
> 
> return "";
> 
> right at the top of the run() method in lib/plugin/RateIt.php. 

Thanks!  Oddly there was no Preferences button with the wikilens theme
(the one causing problems), but I found the right URL to surf to and
was able to change my theme back to the default.

However, silly me, I tried one of the other profiles (the one right
below wikilens, whichever that is), and now I'm locked out with:

 Fatal PhpWiki Error

 lib/DbaDatabase.php (In template 'body') (In template 'html'):54: 
Fatal[256]:
dba_open(/var/www/sggl/htdocs/sgglwiki/pages/wiki_session.gdbm,w):
Driver initialization failed for handler: gdbm: Can't be writer

    * file: /var/www/sggl/htdocs/sgglwiki/pages/wiki_session.gdbm
    * mode: w
    * handler: gdbm:
    * ?>

I did chmod this file to 666 just to try and get past it, but it still
fatals with this same error.

I swear if you help me get back to the default theme, I'll never change
the theme again! ;-)

Thanks,

Leonard



		
____________________________________________________ 
Yahoo! Sports 
Rekindle the Rivalries. Sign up for Fantasy Football 
http://football.fantasysports.yahoo.com

[Phpwiki-talk] How to fix Errors like unserialize(): Error, no '_supplanted' timestamp

[Stefan <son...@ba...>]

Hello,

how to fix these Errors? We do get a lot of them and i don't know to fix =
it.

lib/WikiDB/backend/PearDB.php:1007: Notice: unserialize(): Error at=20
offset 0 of 3513 bytes (...repeated 2 times)
lib/ArchiveCleaner.php:109: Notice: Warning: Page 'Neueste=C4nderungen',=20
version '1' has no '_supplanted' timestamp

Regards Stefan

Re: [Phpwiki-talk] Locked out of wiki

[Dan F. <dfr...@cs...>]

Leonard mckinley wrote:

>I recently tried some of the themes available in my wiki user login,
>and one of them PHPWiki was not happy with.  I immediately started
>getting these errors, and get them every time I log into wiki with my
>user login:
>
>  lib/plugin/RateIt.php (In template 'navbar') (In template 'top') (In
>template 'body') (In template 'html'):230: Warning[2]: extract(): First
>argument should be an array
>
>  Fatal error: Call to undefined function: _get_pageid() in
>/var/www/sggl/htdocs/sgglwiki/lib/plugin/RateIt.php on line 544
>
>Effectively this wiki user login is useless.
>
>How do I reset the active theme for my wiki user back to the default. I
>do have wiki admin priviledge by the way, but I don't see how that
>helps me.
>  
>

Do you have access to the source code?

I think one way to dodge this would be to put

return "";

right at the top of the run() method in lib/plugin/RateIt.php. This 
would skip the ratings plugin altogether, and allow the user to change 
the theme back.

Not sure. You might try it.

Dan

[Phpwiki-talk] Locked out of wiki

[Leonard m. <spa...@ya...>]

I recently tried some of the themes available in my wiki user login,
and one of them PHPWiki was not happy with.  I immediately started
getting these errors, and get them every time I log into wiki with my
user login:

  lib/plugin/RateIt.php (In template 'navbar') (In template 'top') (In
template 'body') (In template 'html'):230: Warning[2]: extract(): First
argument should be an array

  Fatal error: Call to undefined function: _get_pageid() in
/var/www/sggl/htdocs/sgglwiki/lib/plugin/RateIt.php on line 544

Effectively this wiki user login is useless.

How do I reset the active theme for my wiki user back to the default. I
do have wiki admin priviledge by the way, but I don't see how that
helps me.

Thanks,

Leonard



		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - Find what you need with new enhanced search. 
http://info.mail.yahoo.com/mail_250

Re: [Phpwiki-talk] Long Time Azureus User

[Reini U. <ru...@x-...>]

[azureus is using phpwiki at the sf.net site]

Please contact one of the azureus lists. This is the list discussing the 
phpwiki software.

BTW: If you talk to a wiki you edit and do not email.

Bilal Khan schrieb:
> Dear Wiki, I want to get to the point , this is a bit hard because I
> have to explain the situation and point out the reason behind my
> request, i currently have to stick with 2.302 because of this.
> 
> i hope i am talking to the right person for this if not please forward
> my email to the proper people
> 
> i use azureus to archive my downloads and always have around 100
> torrents in queue (upload) and usually only downloading 1 torrent
> (active)
> 
> mainly i just want to upload and download as efficiently as possible
> 
> My connection only allows for Max
> 
> 200KB down 
> 60KB up or i get unstable connection on both up and down
> so i limit my up bandwidth to 60 KB
> 
> ======Main Problem======
> i try to seed my torrents the best way possible always geting at least
> 1 :1 share ratio and keep them for years to seed.
<snip>
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/
http://phpwiki.org/

[Phpwiki-talk] Long Time Azureus User

[Bilal K. <vgt...@gm...>]

Dear Wiki, I want to get to the point , this is a bit hard because I
have to explain the situation and point out the reason behind my
request, i currently have to stick with 2.302 because of this.

i hope i am talking to the right person for this if not please forward
my email to the proper people

i use azureus to archive my downloads and always have around 100
torrents in queue (upload) and usually only downloading 1 torrent
(active)

mainly i just want to upload and download as efficiently as possible

My connection only allows for Max

200KB down=20
60KB up or i get unstable connection on both up and down
so i limit my up bandwidth to 60 KB

=3D=3D=3D=3D=3D=3DMain Problem=3D=3D=3D=3D=3D=3D
i try to seed my torrents the best way possible always geting at least
1 :1 share ratio and keep them for years to seed.

******(The problem is I share 1 torrent at a time because it gives out
60 - 30 KB up for a single torrent) this is as good as i can upload
and seems to be good for my ratios instead of that 60 KB divided into
100 torrents going up at the same time

i don't want each torrent to end up only uploading 2KB/s and slowing
the world down
=3D=3D=3D=3D=3D=3DMain Problem=3D=3D=3D=3D=3D=3D

=3D=3D=3D=3D=3D=3D Cause of Problem/Sub-Problem=3D=3D=3D=3D=3D=3D

(The new update between 2.302 and 2.304 has max sim down and max
active torrent locked)

(2.304)setting them both to 2 does not allow me to download 1 active
torrent i don't know the logic behind it ****(BIG PROBLEM.....can't
download and upload same time)****

&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&but in version
2.302 i used before with max simultaneous download set unlimited(to
download the 1 torrent@200KB max) and max active torrent to 2
so i can download the 1 torrent and upload 1 seed@60KBmax
at the same time

******** this helps me download 1 torrent@max speeddown, be a peer for it
and use Max my up bandwidth on the 2 torrents

this is starting to get long BEAR WITH ME LIL MORE

setting both to unlimited will let me upload max 60 KB /100 torrents
and download
200KB /1 torrent    (just so i can seed and download same time)

I can't share :((( even thou i download so little and want to seed


(TRYING TO GRAB ATTENTION OLD WAY WAS BETTER HOPE I SHOWED YOU WHAT MY
PROBLEM IS)
=3D=3D=3D=3D=3D=3D Cause of Problem/Sub-Problem=3D=3D=3D=3D=3D=3D

=3D=3D=3D=3D=3D=3DPossible Solutions=3D=3D=3D=3D=3D
Don't lock the Max simultaneous downloads and Max active torrents(down+uplo=
ad)

Suggestions appreiciated,

I just want to seed at 60 KB 1  torrent while the other 100 are in
queue. Then when this torrent has more seeds ME or AZUREUS will change
PRIORITY of seeds and give the next torrent 60 KB for a turn then
REPEAT. (SOUNDS VERY GOOD TO ME SO I USE MY AZUREUS LIKE THIS)

.Please I hope future azureus versions let me do this or explain to me
why this was changed. I don't understand why they are locked?
if for anti-leech then explain i will understand and accept that you
can't do anymore.

=3D=3D=3D=3D=3D=3DPossible Solutions=3D=3D=3D=3D=3D

If you made it up to here you are truely a nice person to listen to my
request thank you, have a nice day and reply to my email please

[Phpwiki-talk] Re: Patch to detect bad windows setup

[Reini U. <ru...@x-...>]

thanks for your work.
please send it to me or to the list or file a bugreport st the sf.net page
with the patch attached.

> Message body follows:
>
>
> After another evening reading the PHP manuals I've found the
> problem.  If you follow the readme from php and use the
> php.ini-recommended that comes in a windows php tar
> distribution, then you get this nasty combination of settings
>
> register_globals = Off
> register_long_arrays = Off
> display_errors = Off
>
> What this does is that it thwarts the code in
> phpwiki/lib/config.php AND does not put out an error.
>
>       if (!ini_get('register_globals') or
> (ini_get('register_globals') == 'off')) {
>           extract($HTTP_SERVER_VARS);
>       }
>
>
> with long arrarys off, and display errors off, that code
> will fail, all the wiki links are bad, and you get no feedback.
>
> I have created a patch to address this.  The idea of the
> patch would be to cut down on the amount of emails you
> should have to address when people follow the mswindows
> setups and end up with bad php.ini's.  This patch will
> detect that condition and inform the user.
>
> I can't see in this sourceforge program how to attach my
> patch so I'll look around on your project page.
>
> Joel
>
>
>
> --
> This message has been sent to you, a registered SourceForge.net user, by
> another site user, through the SourceForge.net site.  This message has
> been delivered to your SourceForge.net mail alias.  You may reply to
> this message using the "Reply" feature of your email client, or using
> the messaging facility of SourceForge.net at:
> https://sourceforge.net/sendmessage.php?touser=1303624


-- 
Reini Urban
http://phpwiki.org/   http://xarch.tu-graz.ac.at/home/rurban/

Re: [Phpwiki-talk] WantedPages plugin

[Rob C. <ro...@ar...>]

On 25 Jun 2005 at 9:24, Reini Urban wrote:

> Robert Croson, Jr schrieb:
> > What do I have to do to get my WantedPages plugin to work? Since the day I 
> > installed PHPWiki 1.3.10, this plugin never shows any new wanted pages. It 
> > only shows the wanted pages that were present in the virgin load.
> > 
> > If I create a page that is listed, it is remvoed from the listing. And new wanted 
> > pages are never added to the listing.
> > 
> > Any ideas?
> 
> Please file a bugreport, because I almost forgot to fix that.
> And add the summary from the discussion here from January.
> 
> extract_links apparently is buggy.

I just filed a bug report of SourceForge. Hope I did it OK. That's my 
first SF bug report.

http://sourceforge.net/tracker/index.php?func=detail&atid=106121&aid=1228703&group_id=6121


--
Rob
Burnout - Attitudes are contagious. Mine might kill you.

Re: [Phpwiki-talk] New WikiLens release!

[Dan F. <dfr...@cs...>]

Reini Urban wrote:

>>P.S. I still await a stable release of PhpWiki to attempt merging with.
>>I have to admit I'm nervous now, since we've been drifting apart for so
>>long (over a year?).
>>    
>>
>
>sorry, but there are still a few important problems remaining.
>And I don't work fulltime for phpwiki anymore. just before work and after
>work.
>But surfing season is almost over, so the weekends will be free again.
>  
>

:) I understand. Of course we all appreciate all your efforts to date. 
It takes a lot of work, and I haven't helped much. I do wish, though, 
that a) release-stabilizing code went in before more features (release 
is top priority!), b) back-ends were narrowed to lower support costs 
(especially eliminating some troublesome flat-file or dbm backends which 
seem to get a lot of list traffic). That's just my opinion, tho.

>>Also, we have become pretty invasive. For example,
>>the notion of category is pushing deep into lots of places (e.g.,
>>RecentChanges in this latest release), which I think is right for
>>WikiLens, not sure about PhpWiki.
>>    
>>
>
>For PhpWiki it's ok to override with a custom theme/lib/RecentChanges.php
>  
>

I don't understand what this means. There is no "theme" dir. Do you mean 
I could make a "themes/wikilens/lib/plugin/RecentChanges.php"?

Dan

Re: [Phpwiki-talk] New WikiLens release!

[Reini U. <ru...@x-...>]

> P.S. I still await a stable release of PhpWiki to attempt merging with.
> I have to admit I'm nervous now, since we've been drifting apart for so
> long (over a year?).

sorry, but there are still a few important problems remaining.
And I don't work fulltime for phpwiki anymore. just before work and after
work.
But surfing season is almost over, so the weekends will be free again.

> Also, we have become pretty invasive. For example,
> the notion of category is pushing deep into lots of places (e.g.,
> RecentChanges in this latest release), which I think is right for
> WikiLens, not sure about PhpWiki.

For PhpWiki it's ok to override with a custom theme/lib/RecentChanges.php
-- 
Reini Urban
http://phpwiki.org/   http://xarch.tu-graz.ac.at/home/rurban/

[Phpwiki-talk] New WikiLens release!

[Dan F. <dfr...@cs...>]

We've just released "R20050626" (a.k.a. 1.3.9.GL9). I include below 
release notes for our last two versions, since I didn't announce the 
previous (20050512). I also include a brief description of what WikiLens 
is. Come check us out!

Dan

P.S. I still await a stable release of PhpWiki to attempt merging with. 
I have to admit I'm nervous now, since we've been drifting apart for so 
long (over a year?). Also, we have become pretty invasive. For example, 
the notion of category is pushing deep into lots of places (e.g., 
RecentChanges in this latest release), which I think is right for 
WikiLens, not sure about PhpWiki.

=========================================

http://www.wikilens.org/wiki.php/ReleaseNotes

# 2005 June 26 - The R20050626 release has:
    *  RecentChanges enhancements:
          o See new pages
          o See new and recently-changed pages in-category
          o Recent changes has category, and has ratings widgets if you 
are logged in
          o users who are not wikiwords still get linked
    * Fix page renaming to work (although the UI is still too 
complicated). Also fix page renaming to move the ratings along with the 
page.
    * Change action=upgrade to replace pages with newer pgsrc in the 
PhpWiki style. (For more instructions on upgrading, see 
UpgradeInstructions).
    * Fix DanFr's special invocations of UserRatings plugin to show 
book-only or restaurant-only ratings.

# 2005 May 12 - The R20050512 release has:
    *  Prediction enhancement:
          o If you have no buddies, give average predictions and 
recommendations
          o Mix in average with your buddies' ratings to give the whole 
community some say
    *  Bugfixes
          o Use TitleSearch instead of ?FuzzySearch for categories
          o TitleSearch can now search within category
          o Tweak ?FuzzySearch to give more weight to prefix matches
          o CreatePage after within-category TitleSearch creates the 
page within the category
          o Allow "/" and other special characters in user profiles
          o Have a message if you click "Add Buddy" without filling 
anything in
          o etc.

==========================================

WikiLens pitch:

    * Want to tell the world about your favorite beer?
    * Wouldn't it be handy to have a list of favorite books or 
restaurants you can refer people to?
    * Looking for a new video game to play or album to listen to?

WikiLens (http://www.wikilens.org) is a community-maintained repository 
of opinion. Right now, opinions are expressed as ratings, comments, or 
lists, which are digested to show people useful information. For 
example, ratings are turned into recommendations, lists are mentioned on 
each item page.

Think of Amazon, Epinions, MovieLens, or other web sites about things 
(books, video games, movies, beers, vacation spots, plants, etc.) and 
what people think of them, except WikiLens is non-commercial, editable 
by all, open content, open source. Users can create items and even whole 
categories! This is a wiki + recommender + social network (your buddies 
influence your recommendations).

We are where Wikipedia was in 2001: a glorious idea to take over the 
universe, not many opinions yet (a few thousand ratings). That's where 
you come in! There are still tons of features to add and bugs to squash. 
However, it's no fun without users, so create an account and try us out! 
Rate a few things, create some items, make some comments, invite some 
buddies. Remember, the most important thing is your opinions; helping 
with the facts are good, but ratings or reviews are even better. Most of 
all, have fun!

Re: [Phpwiki-talk] Re: My wiki has been corrupted by spammers

[Joel U. <uck...@no...>]

Thus spake Wookey:
> +++ Joel Uckelman [05-06-24 19:59 -0500]:
> > Thus spake Wookey:
> > > I used to have a nice wiki at http://balloonboard.org/wiki but it got fil
> led
> > > up with wikispam :-(
> > > 
> > > You can see the old wiki at http://balloonboard.org/wikitest (which now j
> ust
> > > produces:
> > > lib/DbaDatabase.php:32: Fatal[256]:
> > > dba_open(/var/lib/phpwiki/phpwiki_pagedb.db2,c-): No such handler: db2
> 
> Whilst I am here can someone give me clues on fixing this? I have upgraded
> the server from Debian 3.0 to 3.1 and I think the libdb default version has
> changed from 2 to 4. phpwiki seems to support db2 and 3 formats.
> 
> Do I need to db_dump and db_load my database file in order to convert it
> from v2 to 3. I don't see anything in the man pages saying how to specify
> the format when generating the file with db_load.

I don't know whether this is the case with Debian, but sometime ago the
build of PHP which ships with Fedora stopped being built with GDBM support.
This is the error message you'd get if your PHP wasn't compiled with
the right db support. ('php -m' should list 'dba' for you. If it doesn't,
then that might be your problem.) 
 
> 
> Nope - where is the admin page and how do I do that - I searched for some
> mechanism for dumping the contents but failed to find it - is there some doc
> I missed?

[Snip]

What version of phpwiki are you using?

 
> 
> OK - looking in /etc/phpwiki I see a number of things which look like
> authentication mechanisms. Again are there docs explaining these options, or
> do I just read the comment sin the config file and try and work it out?

The comments in the config explain it what the different methods are.