phpwiki-talk

[Phpwiki-talk] Not archiving in phpwiki 1.1.9

[Barlas, M. <mb...@kp...>]

Steve -

I have installed phpwiki 1.1.9 on a Linux 7.0 server.  Any new pages are not
added to the archive when they are updated.

1- Add a new page.

2- Edit the page.

3- Check for differences.

4- The resulting message (between the "*"):
**********
Current page: version 5 last modified on January 12, 2001 by 199.207.255.50
Archived page: None
**********

Why is the page not being archived?  All other functions seem to work fine
(i.e. edit, save, etc.).

Thank you, Morgan Barlas

*****************************************************************************
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. 

If you are not the intended recipient, any disclosure, copying, distribution
or any action taken or omitted to be taken in reliance on it, is prohibited
and may be unlawful. When addressed to our clients any opinions or advice
contained in this email are subject to the terms and conditions expressed in
the governing KPMG client engagement letter.         
*****************************************************************************

Re: [Phpwiki-talk] Not archiving in phpwiki 1.1.9

[Steve W. <sw...@wc...>]

Pages are archived only when the authors change; this is an algorithm
borrowed from the original Wiki. In fact the "author" is the IP address;
this is what's checked against.

You could hack the code to remove the check, so all edits cause the page
to go into the archive... but bear in mind only one copy ever exists in
the archive, so you can't get an audit trail like a lot of people wish
for. This is something I want to add to PhpWiki.

~swain

On Fri, 12 Jan 2001, Barlas, Morgan wrote:

> Steve -
> 
> I have installed phpwiki 1.1.9 on a Linux 7.0 server.  Any new pages are not
> added to the archive when they are updated.
> 
> 1- Add a new page.
> 
> 2- Edit the page.
> 
> 3- Check for differences.
> 
> 4- The resulting message (between the "*"):
> **********
> Current page: version 5 last modified on January 12, 2001 by 199.207.255.50
> Archived page: None
> **********
> 
> Why is the page not being archived?  All other functions seem to work fine
> (i.e. edit, save, etc.).
> 
> Thank you, Morgan Barlas
> 
> *****************************************************************************
> The information in this email is confidential and may be legally privileged.
> It is intended solely for the addressee. Access to this email by anyone else
> is unauthorized. 
> 
> If you are not the intended recipient, any disclosure, copying, distribution
> or any action taken or omitted to be taken in reliance on it, is prohibited
> and may be unlawful. When addressed to our clients any opinions or advice
> contained in this email are subject to the terms and conditions expressed in
> the governing KPMG client engagement letter.         
> *****************************************************************************
> 
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> http://lists.sourceforge.net/lists/listinfo/phpwiki-talk
> 

...............................ooo0000ooo.................................
   Hear FM quality freeform radio through the Internet: http://wcsb.org/
                     home page: www.wcsb.org/~swain 

[Phpwiki-talk] IP from posters

[Pablo R. R. <pr...@cl...>]

Someone told me that having the full URL in the RecentChanges is a thing he
wouldn't like.
He is very concerned in security and preferred not to have his own IP
published every time.

What can be done:

Store as you do now the IP in the database don't change this
But only show the first IP in the list like is done in:
http://fox.wikis.com/wc.dll?Wiki~RecentChanges

i.e: 192.168.77.245  ->  192.168.77.xxx

That's easy to do, but I ask your oppinion. Can this be good?

I checked the latest CVS and this can be done in savepage.php, I have done
some more changes there for seeing the time of add/change

lines 53-59

      // add the updated page's name to the array
      if($isnewpage) {
         $newpage[$k++] = "* [$pagename] (new) ..... $remoteuser\r";
      } else {
	 $diffurl = "phpwiki:?diff=" . rawurlencode($pagename);
         $newpage[$k++] = "* [$pagename] ([diff|$diffurl]) .....
$remoteuser\r";
      }

changed to:

      $showtime = strftime("%r",$now);
      $remoteusercut =
preg_replace("/(\d+)\.(\d+)\.(\d+)\.(\d+)/","\\1.\\2.\\3.xxx",$remoteuser);
      if($isnewpage) {
         $newpage[$k++] = "* [$pagename] ('''new''') ..... ($remoteusercut)
..... $showtime\r";
      } else {
	 $diffurl = "phpwiki:?diff=" . rawurlencode($pagename);
         $newpage[$k++] = "* [$pagename] ([diff|$diffurl]) .....
($remoteusercut) ..... $showtime\r";
      }


and in pageinfo.php

lines 49-50:

            }
	    elseif (($key == 'lastmodified') || ($key == 'created'))


changed to:

            }
	    elseif ($key == 'author')
	       $val =
preg_replace("/(\d+)\.(\d+)\.(\d+)\.(\d+)/","\\1.\\2.\\3.xxx",$val);
	    elseif (($key == 'lastmodified') || ($key == 'created'))


Pablo Roca (pr...@cl...)
La Coruna - Espana
myPHPortal Team
http://sourceforge.net/projects/myphportal

Re: [Phpwiki-talk] IP from posters

[Thomas K. <th...@co...>]

> Someone told me that having the full URL in the RecentChanges is a thing
he
> wouldn't like.
> He is very concerned in security and preferred not to have his own IP
> published every time.
>
> What can be done:
>
> Store as you do now the IP in the database don't change this
> But only show the first IP in the list like is done in:
> http://fox.wikis.com/wc.dll?Wiki~RecentChanges
>
> i.e: 192.168.77.245  ->  192.168.77.xxx
>
> That's easy to do, but I ask your oppinion. Can this be good?
>
Concerning this question it would be interesting to diskuss wether there are
other options to make real anonymous changes. Maybe one could add a
sign field to the edit-page, then it would be possible to sign changes with
any real (like ThomasKalka) or anonym (like AnonymUser) name.
Another Option would be to be able to supply a UserName by default (a kind
of login), which in some kind is propagated from page to page, but I don`t
know how to do this (but would be glad to know).

ThomasKalka

RE: [Phpwiki-talk] IP from posters

[Pablo R. R. <pr...@cl...>]

Hi Thomas this can be done with a user table and a cookie.

I have phpWiki integrated in a web portal software (myPHPortal)
you can see this in action at:

http://proca.nexen.net/phpwiki.php

It can be configured in three ways:

1. Allow create/modify to everyone
2. Disallow to anonymous and only allow to registered users
3. Allow only to some users

And you can see how foxwikis do this (a cookie)

http://fox.wikis.com/wc.dll?Wiki~WhoAmI~Wiki


Pablo Roca (pr...@cl...)
La Coruña - España
myPHPortal Team
http://sourceforge.net/projects/myphportal


> -----Mensaje original-----
> De: php...@li...
> [mailto:php...@li...]En nombre de Thomas
> Kalka
> Enviado el: sábado, 13 de enero de 2001 3:16
> Para: php...@li...
> Asunto: Re: [Phpwiki-talk] IP from posters
>
>
> > Someone told me that having the full URL in the RecentChanges is a thing
> he
> > wouldn't like.
> > He is very concerned in security and preferred not to have his own IP
> > published every time.
> >
> > What can be done:
> >
> > Store as you do now the IP in the database don't change this
> > But only show the first IP in the list like is done in:
> > http://fox.wikis.com/wc.dll?Wiki~RecentChanges
> >
> > i.e: 192.168.77.245  ->  192.168.77.xxx
> >
> > That's easy to do, but I ask your oppinion. Can this be good?
> >
> Concerning this question it would be interesting to diskuss
> wether there are
> other options to make real anonymous changes. Maybe one could add a
> sign field to the edit-page, then it would be possible to sign
> changes with
> any real (like ThomasKalka) or anonym (like AnonymUser) name.
> Another Option would be to be able to supply a UserName by default (a kind
> of login), which in some kind is propagated from page to page, but I don`t
> know how to do this (but would be glad to know).
>
> ThomasKalka
>
>
>
>
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> http://lists.sourceforge.net/lists/listinfo/phpwiki-talk

Re: [Phpwiki-talk] IP from posters

[Arno H. <aho...@xm...>]

Thomas,

> Concerning this question it would be interesting to diskuss wether ther=
e
> are other options to make real anonymous changes. Maybe one could add a
> sign field to the edit-page, then it would be possible to sign changes
> with any real (like ThomasKalka) or anonym (like AnonymUser) name.

I have made a small patch for GoWiki (http://senseis.xmp.net/) where the=20
user can set his name via a cookie. No password, so everyone can pretend =
to=20
be everyone else. But it's quite easy and effective.

Steve, I could add that patch to the main wiki, what do you think?

/Arno

RE: [Phpwiki-talk] IP from posters

[Pablo R. R. <pr...@cl...>]

>No password, so everyone can pretend to
> be everyone else.

Hum... this is no good Arno. But how is the code?

Pablo Roca (pr...@cl...)
La Coruña - España


> -----Mensaje original-----
> De: php...@li...
> [mailto:php...@li...]En nombre de Arno
> Hollosi
> Enviado el: lunes, 15 de enero de 2001 13:44
> Para: php...@li...
> Asunto: Re: [Phpwiki-talk] IP from posters
>
>
>
> Thomas,
>
> > Concerning this question it would be interesting to diskuss wether there
> > are other options to make real anonymous changes. Maybe one could add a
> > sign field to the edit-page, then it would be possible to sign changes
> > with any real (like ThomasKalka) or anonym (like AnonymUser) name.
>
> I have made a small patch for GoWiki (http://senseis.xmp.net/) where the
> user can set his name via a cookie. No password, so everyone can
> pretend to
> be everyone else. But it's quite easy and effective.
>
> Steve, I could add that patch to the main wiki, what do you think?
>
> /Arno
>
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> http://lists.sourceforge.net/lists/listinfo/phpwiki-talk

Re: [Phpwiki-talk] IP from posters

[Steve W. <sw...@wc...>]

On Mon, 15 Jan 2001, Arno Hollosi wrote:

> I have made a small patch for GoWiki (http://senseis.xmp.net/) where the 
> user can set his name via a cookie. No password, so everyone can pretend to 
> be everyone else. But it's quite easy and effective.
> 
> Steve, I could add that patch to the main wiki, what do you think?

By all means... it should be a simple config.php change to enable/disable
it.

~swain

...............................ooo0000ooo.................................
   Hear FM quality freeform radio through the Internet: http://wcsb.org/
                     home page: www.wcsb.org/~swain