phpwiki-talk

RE: [Phpwiki-talk] Custom forms -- Appending to existing page

[Pascal G. (QC/EMC) <Pas...@er...>]

Morning guys,

  i was looking thru main.php and WikiFormRich.php and noticed that it's
possible to edit OR create a page via forms, but not to append text (well
not directly).

I simply want a form that will append Text to a Page.
Should i modify main.php to support a new kind of action, namely "append" or
something like it ?

I'd simlpy make it do something like:
	$current = $pagehandle->getCurrentRevision();
	$version = $current->getVersion();
	$text = $current->getPackedContent();
	$newtext = $text . "\n A processed version of the stuff contained in
my form.";
	$meta = $current->_data;
	$meta['summary'] = sprintf(_("Updated %s"),$page);
	$pagehandle->save($newtext, $version + 1, $meta);

Or should i be calling another plugin ?

Where can i find more Documentation on the tips and [magic] tricks with
WikiForm[Rich] ?

-Pascal

Re: [Phpwiki-talk] some fixes for WantedPages plugin does not work

[Reini U. <ru...@x-...>]

Charles Corrigan schrieb:
> Hi, me again...
> 
> The lib/plugin/WantedPages.php plugin does not work correctly. There are
> three separate problems, I only know how to fix two of them.
> 
> 1 - in lib/plugin/WantedPages.php, function _iterateLinks, the line
> $links_iter = $page_handle->getLinks($reversed = false);
> Must be changed to
> $links_iter = $page_handle->getLinks($reversed = false,
> $include_empty=true);

Oh god. Who wrote this? It's completely wrong. Thanks for detecting 
this! But your fixes are wrong. :)

$arg = false declares an optional arguemnt with the default argument 
false. but you may not use it in function calls, just declarations!
if used in a call it's a temporary assignment.
   getLinks($reversed = false) sets $reversed to false, and calls it 
with false. No error in this case, but nevertheless wrong.

> I have just started php - it looks to me like this syntax is actually
> declaring additional variables - adding to the memory load. Maybe it should
> be
> $links_iter = $page_handle->getLinks(false, true);

yes, like this. but we have now more descriptive names for the reverse part.
   $page_handle->getPageLinks(true)

> 2 - in lib/WikiDB.php, function getLinks, the line
> $result =  $backend->get_links($this->_pagename, $reversed,
> $include_empty=false);
> Must be changed to
> $result =  $backend->get_links($this->_pagename, $reversed, $include_empty);

Oh God! Cut&Paste programming! This was my fault.
Good catches!

> 3 - the limit parameter, I think, is meant to be the number of missing pages
> to find.  However, as actually used, it is the number of pages to search for
> the links to missing pages. I do not know how to fix this - as a work
> around, I edited WantedPages and added limit=10000

Well, limit'ing getAllPages() was needed for sf.net 8MB memory problems.
But you are right that only the output should be limit'ed, not an 
internal list.
I'll think about this how it can be enhanced better. Here and esp. in 
the sql backends to reduce the number queries.

The number of SQL queries are our major time bottleneck.
But caching queries clashes with memory problems on 8MB systems ...
-- 
There is nobody so irritating as somebody with less intelligence and 
more sense than we have. (Don Herold)

[Phpwiki-talk] some fixes for WantedPages plugin does not work

[Charles C. <ch...@ru...>]

Hi, me again...

The lib/plugin/WantedPages.php plugin does not work correctly. There are
three separate problems, I only know how to fix two of them.

1 - in lib/plugin/WantedPages.php, function _iterateLinks, the line
$links_iter = $page_handle->getLinks($reversed = false);
Must be changed to
$links_iter = $page_handle->getLinks($reversed = false,
$include_empty=true);
I have just started php - it looks to me like this syntax is actually
declaring additional variables - adding to the memory load. Maybe it should
be
$links_iter = $page_handle->getLinks(false, true);

2 - in lib/WikiDB.php, function getLinks, the line
$result =  $backend->get_links($this->_pagename, $reversed,
$include_empty=false);
Must be changed to
$result =  $backend->get_links($this->_pagename, $reversed, $include_empty);

3 - the limit parameter, I think, is meant to be the number of missing pages
to find.  However, as actually used, it is the number of pages to search for
the links to missing pages. I do not know how to fix this - as a work
around, I edited WantedPages and added limit=10000

Regards,
Charles

[Phpwiki-talk] Strange ACL behaviour

[Manuel V. <man...@st...>]

Hi all,

I got a strange behaviour with acls:
* the only page where I can show acl's is ... SetAcl page:

Some explainations:
I put lot's of hooks to print page's acl but I alway get the default array.
In fact, the '$page = $request->getPage($pagename)' give to different 
results with the same $pagename on the same page.

Is this normal ?

Manuel

Re: [Phpwiki-talk] Nightly build location?

[Mitch A. <ma...@ma...>]

I told you it was silly!

<embarrassment> I was looking all over the sourceforge site as that is 
where i find all the other files and stuff... i never thought to look 
on the home page - tho now that you send me back there it is real 
obvious and stupid.

my apologies to all!
</embarrassment>

Mitch
Show Me Scents, Inc.
"The World's Finest" Scented Candles
http://showmescents.com
Independent Distributor for Gold Canyon Candles

On Nov 19, 2004, at 6:53 AM, Reini Urban wrote:

> Mitch Aunger schrieb:
>> I know that i'm asking a silly question, but i can't seem to find it
>> any more - somewhere on the sourceforge site is the nightly build
>> link, can someone please give me the link again... i searched for 1/2
>> hour this morning and just couldn't find it again :(
>
> You searched for 1/2 hr and didn't see our homepage at 
> http://phpwiki.org/ ?
>
> http://cvs.sourceforge.net/cvstarballs/phpwiki-cvsroot.tar.bz2
>
> -- 
> Reini Urban
> http://xarch.tu-graz.ac.at/home/rurban/
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: InterSystems CACHE
> FREE OODBMS DOWNLOAD - A multidimensional database that combines
> robust object and relational technologies, making it a perfect match
> for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk

Re: [Phpwiki-talk] Hashcash and phpwiki

[Reini U. <ru...@x-...>]

Alexandre Dulaunoy schrieb:
> I  was  wondering if  there  is any  plan  (or  existing patches)  for
> supporting  'hashcash'[1]  for  phpwiki.  This  could be  one  of  the
> solution to solve part of the spamming issue on wikis. 
> 
  > [1] http://www-106.ibm.com/developerworks/linux/library/l-hashcash.html
>     http://www.hashcash.org/

I've look into this a few years ago for an e-commerce app, and it looked 
interesting but every complicated, so I came up with my own simplier 
scheme then. 
http://xarch.tu-graz.ac.at/home/rurban/software/tep/extras/coupons

phpwiki editing already is very slow, and I don't think we want it to 
make another 2-5 secs slower.

For wiki's I believe PageChangeNotification, and maybe PageModeration 
suits better.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

Re: [Phpwiki-talk] Fix for AllUsers plugin does not work on mysql database

[Reini U. <ru...@x-...>]

Charles Corrigan schrieb:
> I found that the AllUsers plugin/page did not list anything on my mysql
> based implementation of phpwiki (CVS version from a few days ago).
> 
> After some time hunting around I found a fix for me that is probably
> incomplete for the wider world...
> 
> In lib/WikiGroup.php - class WikiGroup, function _allUsers(), I found that
> no data was retrieved from the database and tracked it to the line:
> } elseif (isa($dbi, 'WikiDB_backend_PearDB')) {
> 
> Note that there are two occurrances of this particular line, one to query
> the users and another to query the user preferences.
> 
> I changed both to:
> } elseif (isa($dbi, 'WikiDB_backend_PearDB') or isa($dbi, 'DB_mysql')) {
> and it worked for me.
> 
> I suspect that:
> } elseif (isa($dbi, 'WikiDB_backend_PearDB') or isa($dbi, 'DB_common')) {
> would be more appropriate.

Good catch! This looks wrong.

> However, I suspect that this patch is wrong/incomplete, because:
> 1 - I am not certain that $dbi can ever be a 'WikiDB_backend_PearDB', so
> the code perhaps the change should be:
> } elseif (isa($dbi, 'DB_common')) {

We have 2 different SQL methods to list our SQL-only users, and only 
these. Not dba and file. We should either check dbi->_backend or
better against 'WikiDB_SQL' and 'WikiDB_ADODB'.

> 2 - Just a couple of lines above, there is the start of the if statement:
> if (isa($dbi, 'WikiDB_backend_ADODB')) {
> My thoughts are if $dbi can not be a 'WikiDB_backend_PearDB' then it is
> possible that checking for 'WikiDB_backend_ADODB' is also incorrect.

Indeed. A backend is a backend :)

> Moving on to a more general issue, the documentation suggests that
> AllUsers shows users that have a login AND a homepage AND have saved their
> preferences.  

Docs are old. Code is right.
AllUsers should display all once-authenticated users, and not those 
which are stored in each and every backend.

Saving their prefs will lead to inclusion into AllUsers, but there exist 
other ways also to get listed.
The whole bunch of externally authenticated users, if such a method 
(list users via SQL or LDAP or File) exists.

> The actual code structure seems to be that it will show
> users that have a login OR a homepage OR have saved their preferences.
> 
> This means that the CategoryHomePages page lists users that have a login
> but no homepage are listed with the trailing "?". 

This is good. So external users (external prefs: db) can create their 
homepages to be accessible.

> Also, it seems that WikiDB->isUserPage is not returning true for any page.
> This may be an artefact of storing user preferences in a database rather
> than actually in a user page - I am not certain whether this is a real
> issue.

I will look into this.
I bleieve it should only return true for page-stored prefs, not for 
db-stored prefs.
-- 
Everyone ought to worship God according to his own inclinations, and not 
to be constrained by force. (Flavius Josephus, Life)

Re: [Phpwiki-talk] Nightly build location?

[Reini U. <ru...@x-...>]

Mitch Aunger schrieb:
> I know that i'm asking a silly question, but i can't seem to find it
> any more - somewhere on the sourceforge site is the nightly build
> link, can someone please give me the link again... i searched for 1/2
> hour this morning and just couldn't find it again :(

You searched for 1/2 hr and didn't see our homepage at http://phpwiki.org/ ?

http://cvs.sourceforge.net/cvstarballs/phpwiki-cvsroot.tar.bz2

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

[Phpwiki-talk] Hashcash and phpwiki

[Alexandre D. <ad...@fo...>]

Dear,

I  was  wondering if  there  is any  plan  (or  existing patches)  for
supporting  'hashcash'[1]  for  phpwiki.  This  could be  one  of  the
solution to solve part of the spamming issue on wikis. 

Thanks for any feedback,

adulau

[1] http://www-106.ibm.com/developerworks/linux/library/l-hashcash.html
    http://www.hashcash.org/

-- 
-- 	  	     Alexandre Dulaunoy (adulau) -- http://www.foo.be/
-- 	   http://pgp.ael.be:11371/pks/lookup?op=get&search=0x44E6CBCD
-- 	   "Knowledge can create problems, it is not through ignorance
-- 				  that we can solve them" Isaac Asimov

[Phpwiki-talk] Fix for AllUsers plugin does not work on mysql database

[Charles C. <ch...@ru...>]

Hi,

I found that the AllUsers plugin/page did not list anything on my mysql
based implementation of phpwiki (CVS version from a few days ago).

After some time hunting around I found a fix for me that is probably
incomplete for the wider world...

In lib/WikiGroup.php - class WikiGroup, function _allUsers(), I found that
no data was retrieved from the database and tracked it to the line:
} elseif (isa($dbi, 'WikiDB_backend_PearDB')) {

Note that there are two occurrances of this particular line, one to query
the users and another to query the user preferences.

I changed both to:
} elseif (isa($dbi, 'WikiDB_backend_PearDB') or isa($dbi, 'DB_mysql')) {
and it worked for me.

I suspect that:
} elseif (isa($dbi, 'WikiDB_backend_PearDB') or isa($dbi, 'DB_common')) {
would be more appropriate.

However, I suspect that this patch is wrong/incomplete, because:
1 - I am not certain that $dbi can ever be a 'WikiDB_backend_PearDB', so
the code perhaps the change should be:
} elseif (isa($dbi, 'DB_common')) {

2 - Just a couple of lines above, there is the start of the if statement:
if (isa($dbi, 'WikiDB_backend_ADODB')) {
My thoughts are if $dbi can not be a 'WikiDB_backend_PearDB' then it is
possible that checking for 'WikiDB_backend_ADODB' is also incorrect.


Moving on to a more general issue, the documentation suggests that
AllUsers shows users that have a login AND a homepage AND have saved their
preferences.  The actual code structure seems to be that it will show
users that have a login OR a homepage OR have saved their preferences.

This means that the CategoryHomePages page lists users that have a login
but no homepage are listed with the trailing "?". Previously,
CategoryHomePages did not list anything.

Also, it seems that WikiDB->isUserPage is not returning true for any page.
This may be an artefact of storing user preferences in a database rather
than actually in a user page - I am not certain whether this is a real
issue.

regards,
Charles

[Phpwiki-talk] Nightly build location?

[Mitch A. <ma...@gm...>]

I know that i'm asking a silly question, but i can't seem to find it
any more - somewhere on the sourceforge site is the nightly build
link, can someone please give me the link again... i searched for 1/2
hour this morning and just couldn't find it again :(

Thanks
Mitch

The "World's Finest" Candles!
Strongest scent on the market
http://www.showmescents.com/

Independent Distributor for Gold Canyon Candles

[Phpwiki-talk] How to set up a project FAQ via phpwiki

[Chris S. <Chr...@sa...>]

Hi,

I have installed phpwiki, and when I go to my project index.php, =
http://safsdev.sourceforge.net/doc/wiki/index.php, I see a list of =
things that were created.  What I really want is to set up a FAQ for our =
sourceforge project; something like =
http://lejos.sourceforge.net/faq/index.php/General%20leJOS%20FAQ.  Can =
someone help me understand what files I need to change, and what changes =
I need to make to these files, to create the project FAQ?

Thanks,
Chris

Re: [Phpwiki-talk] Group management status

[Manuel V. <man...@st...>]

Reini Urban wrote:
> That's an artefact of page and maybe request caching.
> We should touch the db after a ownership change, so that the bottom line 
> tells the new owner.
> shift-reload should also work.
No it doesn't :(

For MyPage, bottom line display a different owner that 'DebugInfo' action.

I tried to give more details but I have beeing lost myself in WikiDB
sources :)


-- 
# VACELET Manuel     manuel.vacelet-abecedaire(at)st(dot)com #
# Tel:  042 6089                          +33 (0)476 92 6089 #
# STMicroelectronics  - Central R&D DAIS - Flexware          #
# 850, rue Jean Monet - 38926 CROLLES CEDEX - FRANCE         #

Re: [Phpwiki-talk] Group management status

[Reini U. <ru...@x-...>]

Manuel VACELET schrieb:
> Reini Urban wrote:
>> I feel with you. The docs were not quite complete on WIKIPAGE.
>>
>> You need a "CategoryGroup" master page, with a "*" list of all groups.
>> In each of these group page(s) must be a "*" list of usernames.
>>
>> eg: CategoryGroup (locked)
> 
> Ok well, I got last cvs snapshot and it seems to work:
> I can change page owner to set a group name and only group members are 
> allowed to admin this page.
> 
> But I found an issue:
> -> I create ThePage with MyLogA
> -> I chown ThePage to MyGroup
> -> back to ThePage in 'browse' action, MyLogA is always mark as page 
> owner. It's just a lack of display beacause MyLogA don't have admin 
> right on this page and all others actions display the good owner.
> -> After one edition the 'browse' view is Ok.

That's an artefact of page and maybe request caching.
We should touch the db after a ownership change, so that the bottom line 
tells the new owner.
shift-reload should also work.

Thanks for confirmation.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

[Phpwiki-talk] PageModeration specs

[Reini U. <ru...@x-...>]

I came up with better PageModeration specs.
   http://phpwiki.org/PageModeration

Please review and comment.

Possible arguments for such an action page:

* moderators: comma seperated list of registered usernames.
   The user should have his email defined in his prefs.

And then either:
* actions: comma seperated list of moderated actions.
     Default: all actions which require WIKIAUTH_BOGO.
* allowactions: comma seperated list of allowed actions
     without moderation.
     Default: all actions which which require WIKIAUTH_ANON.
Or:
* requirelevel: one of 0, 1, 2 or 10 on which moderation is used.
   Default: 1 (bogo)
* requireaccess: comma separated list of access perms, on
   which the moderation is used:
     "view,edit,create,list,remove,change"
   Default: edit,remove,change

-- 
Fear not those who argue but those who dodge. (Marie Ebner von 
Eschenbach, Aphorisms, 1905)

Re: [Phpwiki-talk] Group management status

[Manuel V. <man...@st...>]

Reini Urban wrote:
> I feel with you. The docs were not quite complete on WIKIPAGE.
> 
> You need a "CategoryGroup" master page, with a "*" list of all groups.
> In each of these group page(s) must be a "*" list of usernames.
> 
> eg: CategoryGroup (locked)

Ok well, I got last cvs snapshot and it seems to work:
I can change page owner to set a group name and only group members are 
allowed to admin this page.

But I found an issue:
-> I create ThePage with MyLogA
-> I chown ThePage to MyGroup
-> back to ThePage in 'browse' action, MyLogA is always mark as page 
owner. It's just a lack of display beacause MyLogA don't have admin 
right on this page and all others actions display the good owner.
-> After one edition the 'browse' view is Ok.

-- 
# VACELET Manuel     manuel.vacelet-abecedaire(at)st(dot)com #
# Tel:  042 6089                          +33 (0)476 92 6089 #
# STMicroelectronics  - Central R&D DAIS - Flexware          #
# 850, rue Jean Monet - 38926 CROLLES CEDEX - FRANCE         #

RE: [Phpwiki-talk] Issue with groups - config.ini: GROUP_METHOD = 'DB'

[Charles C. <ch...@ru...>]

On Thu, November 18, 2004 8:35, Charles Corrigan said:
> Reini Urban wrote:
>> > Looking at the code in WikiGroup and in WikiUserNew, I think that
>> > the user level should be tested before accessing the prepare
>> > function. Something like
>> >
>> > if $user->_level >= WIKIAUTH_USER {
>> >     $this->_is_member = $user->prepare($DBAuthParams['is_member'],
>> >                                            array('userid','groupname'));
>> >     $this->_group_members =
>> > $user->prepare($DBAuthParams['group_members'],'groupname');
>> >     $this->_user_groups =
>> > $user->prepare($DBAuthParams['user_groups'],'userid');
>> >     $this->dbh = $user->_auth_dbi;
>> > } else {
>> >     $this->_is_member = false;
>> > // I don't yet understand enough to do the rest of the else path
>> > }
>> >
>> > I hope that this helps...
>>
>> Nope. This is not the problem.
>> ->prepare is done on first user initialization which is also needed
>> for yet unauthorized users, just to get the group or prefs settings
>> e.g.
>>
>> The authlevel is raised later, after trying several methods.
>
> I put a debug line in just before the call to prepare
>
> echo get_class($user), " name:", $user->username, " level:",
> $user->_level;
>
> and in the output, I got
>
> _anonuser name: level:0
> Fatal error: Call to undefined function: prepare() in
> /home/runega2/public_html/whitewall/lib/WikiGroup.php on line 627
>
> This output appears to be reasonable as, from looking at the lines of code
> immediately before, only if there is no existing user object is an empty
> _PassUser object created in $user.  If there is an exiting user object
> then
> its class does not have to be _PassUser and prepare is only defined for
> _PassUser.  I will spend some more time looking at this to see if I can
> work
> out how to patch

OK, in WikiGroup.php, I just added

if (isa($user,"_PassUser)) {

before the section that included the calls to prepare (and obviously a
closing } too).  It all worked for me.

I'm at work so no access to tools to package this up as a diff

regards,
Charles

RE: [Phpwiki-talk] Issue with groups - config.ini: GROUP_METHOD = "DB"

[Charles C. <ch...@ru...>]

Reini Urban wrote:
> > Looking at the code in WikiGroup and in WikiUserNew, I think that
> > the user level should be tested before accessing the prepare
> > function. Something like
> > 
> > if $user->_level >= WIKIAUTH_USER {
> >     $this->_is_member = $user->prepare($DBAuthParams['is_member'],
> >                                            array('userid','groupname'));
> >     $this->_group_members =
> > $user->prepare($DBAuthParams['group_members'],'groupname');
> >     $this->_user_groups =
> > $user->prepare($DBAuthParams['user_groups'],'userid');
> >     $this->dbh = $user->_auth_dbi;
> > } else {
> >     $this->_is_member = false;
> > // I don't yet understand enough to do the rest of the else path
> > }
> > 
> > I hope that this helps...
>
> Nope. This is not the problem.
> ->prepare is done on first user initialization which is also needed
> for yet unauthorized users, just to get the group or prefs settings
> e.g.
>
> The authlevel is raised later, after trying several methods.

I put a debug line in just before the call to prepare

echo get_class($user), " name:", $user->username, " level:", $user->_level;

and in the output, I got

_anonuser name: level:0
Fatal error: Call to undefined function: prepare() in
/home/runega2/public_html/whitewall/lib/WikiGroup.php on line 627

This output appears to be reasonable as, from looking at the lines of code
immediately before, only if there is no existing user object is an empty
_PassUser object created in $user.  If there is an exiting user object then
its class does not have to be _PassUser and prepare is only defined for
_PassUser.  I will spend some more time looking at this to see if I can work
out how to patch

Regards,
Charles

[Phpwiki-talk] PhpWikiDemo:demo/dba/

[Reini U. <ru...@x-...>]

The dba version with current CVS is working again. (sigh)
http://phpwiki.sourceforge.net/demo/dba/HomePage

So there's still the pending mysql error with the others.
-- 
They say that God is everywhere, and yet we always think of Him as 
somewhat of a recluse. (Emily Dickinson)

RE: [Phpwiki-talk] phpwiki and RHes3/FC3

[Pascal G. (QC/EMC) <Pas...@er...>]

it's a parameter you have to look for in your php.ini ...
you may want to put it into a .htaccess tho...

-Pascal

> -----Original Message-----
> From: php...@li...
> [mailto:php...@li...]On Behalf Of Scott
> Taylor
> Sent: November 17, 2004 10:46 AM
> To: php...@li...
> Subject: Re: [Phpwiki-talk] phpwiki and RHes3/FC3
> 
> 
> 
> Reini Urban said:
> > register_globals on
> 
> What does this mean?  I don't see any variables or anything 
> close to that
> name anywhere in the phpwiki-1.2.4 directory and as I said earlier, I
> don't grok PHP, much.
> 
> Thanks for your reply.
> 
> --
> Scott
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: InterSystems CACHE
> FREE OODBMS DOWNLOAD - A multidimensional database that combines
> robust object and relational technologies, making it a perfect match
> for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
> 

Re: [Phpwiki-talk] Issue with groups - config.ini: GROUP_METHOD = "DB"

[Reini U. <ru...@x-...>]

Charles Corrigan schrieb:
> Reini Urban wrote:
>>Charles Corrigan schrieb:
>>
>>>I turned on groups in config.ini, and selected the multiple
>>>groups per user SQL statements.
>>>
>>>When using IE 6, I always get the following message when
>>>trying to access any page in the wiki. When using Mozilla
>>>1.7.3, I occasionally get the same message.
>>>
>>>Fatal error: Call to undefined function: prepare() in
>>>/home/runega2/public_html/whitewall/lib/WikiGroup.php on
>>>line 626
> 
> 
> I thought about it more and I now think that I mischaracterized the
> symptoms.  With Mozilla, before I enabled the groups settings, I had logged
> into the wiki. With IE, I did not log in prior to enabling groups.  At least
> one of the times when I had the problem in Mozilla was when I tried to log
> out.
> 
> Looking at the code in WikiGroup and in WikiUserNew, I think that the user
> level should be tested before accessing the prepare function. Something like
> 
> if $user->_level >= WIKIAUTH_USER {
>     $this->_is_member = $user->prepare($DBAuthParams['is_member'],
>                                            array('userid','groupname'));
>     $this->_group_members =
> $user->prepare($DBAuthParams['group_members'],'groupname');
>     $this->_user_groups =
> $user->prepare($DBAuthParams['user_groups'],'userid');
>     $this->dbh = $user->_auth_dbi;
> } else {
>     $this->_is_member = false;
> // I don't yet understand enough to do the rest of the else path
> }
> 
> I hope that this helps...
> 
> 
>>Thanks for your report. I see the problem.
>>I'll check why this happens. It shouldn't.

Nope. This is not the problem.
->prepare is done on first user initialization which is also needed for 
yet unauthorized users, just to get the group or prefs settings e.g.

The authlevel is raised later, after trying several methods.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

Re: [Phpwiki-talk] phpwiki and RHes3/FC3

[Reini U. <ru...@x-...>]

Scott Taylor schrieb:
> Charles Corrigan said:
> 
>>Scott Taylor wrote:
>>
>>>Reini Urban said:
>>>
>>>>register_globals on
>>>
>>>What does this mean?  I don't see any variables or anything
>>>close to that name anywhere in the phpwiki-1.2.4 directory
>>>and as I said earlier, I don't grok PHP, much.
>>
>>Google is your friend... Please hunt out the detail for yourself now you
>>have been pointed in the general direction.  IMO, Reini has a lot of other
>>things that he considers critical to do right now.
> 
> 
> Good point.
> 
> K, I turn register_globals on in the /etc/php.ini file, and restarted Apache.
> 
> A lot of stuff I've been reading, this morning, about this
> register_globals setting says it is not a secure way to write PHP pages. 
> Is that true for this project?

Yes. Entirely insecure and very easy to abuse. Just a simple small wiki.

We don't do any development anymore on the 1.2.x branch.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

RE: [Phpwiki-talk] Issue with groups - config.ini: GROUP_METHOD = "DB"

[Charles C. <ch...@ru...>]

Reini Urban wrote:
> Charles Corrigan schrieb:
> > I turned on groups in config.ini, and selected the multiple
> > groups per user SQL statements.
> > 
> > When using IE 6, I always get the following message when
> > trying to access any page in the wiki. When using Mozilla
> > 1.7.3, I occasionally get the same message.
> > 
> > Fatal error: Call to undefined function: prepare() in
> > /home/runega2/public_html/whitewall/lib/WikiGroup.php on
> > line 626

I thought about it more and I now think that I mischaracterized the
symptoms.  With Mozilla, before I enabled the groups settings, I had logged
into the wiki. With IE, I did not log in prior to enabling groups.  At least
one of the times when I had the problem in Mozilla was when I tried to log
out.

Looking at the code in WikiGroup and in WikiUserNew, I think that the user
level should be tested before accessing the prepare function. Something like

if $user->_level >= WIKIAUTH_USER {
    $this->_is_member = $user->prepare($DBAuthParams['is_member'],
                                           array('userid','groupname'));
    $this->_group_members =
$user->prepare($DBAuthParams['group_members'],'groupname');
    $this->_user_groups =
$user->prepare($DBAuthParams['user_groups'],'userid');
    $this->dbh = $user->_auth_dbi;
} else {
    $this->_is_member = false;
// I don't yet understand enough to do the rest of the else path
}

I hope that this helps...

> Thanks for your report. I see the problem.
> I'll check why this happens. It shouldn't.

Regards,
Charles

RE: [Phpwiki-talk] phpwiki and RHes3/FC3

[Scott T. <sc...@dc...>]

Charles Corrigan said:
> Scott Taylor wrote:
>> Reini Urban said:
>> > register_globals on
>>
>> What does this mean?  I don't see any variables or anything
>> close to that name anywhere in the phpwiki-1.2.4 directory
>> and as I said earlier, I don't grok PHP, much.
>
> Google is your friend... Please hunt out the detail for yourself now you
> have been pointed in the general direction.  IMO, Reini has a lot of other
> things that he considers critical to do right now.

Good point.

K, I turn register_globals on in the /etc/php.ini file, and restarted Apache.

A lot of stuff I've been reading, this morning, about this
register_globals setting says it is not a secure way to write PHP pages. 
Is that true for this project?

--
Scott

Re: [Phpwiki-talk] phpwiki and RHes3/FC3

[Reini U. <ru...@x-...>]

Scott Taylor schrieb:
> Reini Urban said:
> 
>>register_globals on
> 
> 
> What does this mean?  I don't see any variables or anything close to that
> name anywhere in the phpwiki-1.2.4 directory and as I said earlier, I
> don't grok PHP, much.

that's a required php setting for the old phpwiki-1.2.x.

e.g.:
.htaccess
php_admin_value register_globals 1

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/