phpwiki-talk

[Phpwiki-talk] CVS, mysql: order by rand()

[Reini U. <ru...@x-...>]

I'll start now to merge my AcadWiki enhancements into CVS.
I need the latest improvements on VersionControl and UserAuth. Good work!

I'll try:
BetterIndex, RandomPage, OrphanPages, WantedPages, improved BackLink, 
SeparateListOutput, MagicPages, SplitWordsInTitle, BetterRecentChanges,
HowToBlockRobots, 
optional PageChangeNotification to the admin only, ImageLinks
(see
http://phpwiki.sourceforge.net/phpwiki/index.php?full=CategoryNextWikiSuggestions)

maybe: locale stuff (this is awful, I just broke my german wiki db after
having recompiled to php-4.0.6)
maybe: localized WikiNameRegexp with TrailingNumbers (optionally)
maybe: multiline code, my ugly hacks for <code> .. </code>, <verbatim> ..
</verbatim>, and <nowiki> .. </nowiki>

RandomPage:
-----------
how to workaround this mysql 3.23 feature which doesn't work in 3.22?

  select pagename from wiki order by rand() limit 1;

the rand() function is defined in 3.22 also, but I wanted to avoid subselects.
attempt 1:
  $res = mysql_query("select pagename from $WikiPageStore", $dbi["dbc"]);
  srand((double)microtime()*1000000);
  $rows = mysql_num_rows($res);
  $page = mysql_result($res,rand(0,$rows-1));

how can one avoid to checkout all pages by using mysql the rand() function?
LIMIT doesn't accept ROUND($pagecount*rand()),1 as argument.
mysql v3.22.25 doesn't accept this syntax neither: 
  set @i:=round(200*rand());

oh bad. at least attempt 1 is cross-db compatible.


CharCount:
----------
A new user requested feature: display the number of chars in pageinfo, maybe
words also.
we need this to produce a community text for a local internet handbook, which
must have 
10,000 chars. is this okay to put it into the pageinfo field. I know that
currently there 
are only static db fields, but the user doesn't care. some convenience figures
wouldn't hurt 
imho on the info page.

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

[Phpwiki-talk] security: register_globals off

[Reini U. <ru...@x-...>]

how about a switch to register_globals off?
seems to be a major hack, but for security reasons very advisable.

details: 
  all implicitly passed args/vars must be changed to
HTTP_[POST/GET]_VARS['varname']
  most of it can be fixed in lib/main.php though, because we have only one
main event loop.
sample:
  $searchterm=HTTP_GET_VARS['searchterm'];

see http://www.securereality.com.au/studyinscarlet.txt

best would be:
* register_globals off
* safe_mode on (but then there's no file upload anymore)
* allow_url_fopen off
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

Re: [Phpwiki-talk] CVS, mysql: order by rand()

[Steve W. <sw...@pa...>]

On Sat, 4 Aug 2001, Reini Urban wrote:

> I'll start now to merge my AcadWiki enhancements into CVS.
> I need the latest improvements on VersionControl and UserAuth. Good work!

Absolutely! One thing I'd like to do with VersionControl though is move
the form to the diff page, not the info page. The info page was intended
to show the internal stucture of the page as it lives in the data
structure in PhpWiki. This should be a simple cosmetic change.

> maybe: multiline code, my ugly hacks for <code> .. </code>, <verbatim> ..
> </verbatim>, and <nowiki> .. </nowiki>

Hmm. I know we've discussed this on the list in the past. The 1.3 branch
has a new rendering engine Arno wrote which is really slick. I don't
recall if there was a hook for doing multiline processing or not. The
regexp to change the pattern match shouldn't be hard, but then, users can
use [square brackets] if they need to go beyond WikiWords.

> RandomPage:
> -----------
> how to workaround this mysql 3.23 feature which doesn't work in 3.22?

We are definitely moving to DB and PEAR, so you might want to think about
it in that context. We need the SQL to work with the major databases now
(MySQL, Oracle, MSSQL, Postgresql and so on).

> CharCount:
> ----------
> A new user requested feature: display the number of chars in pageinfo, maybe
> words also.
> we need this to produce a community text for a local internet handbook, which
> must have
> 10,000 chars. is this okay to put it into the pageinfo field. I know that
> currently there
> are only static db fields, but the user doesn't care. some convenience figures
> wouldn't hurt
> imho on the info page.

A nice feature!

~swain


---
                  http://www.panix.com/~swain/
"Without music to decorate it, time is just a bunch of boring
production deadlines or dates by which bills must be paid."
                     -- Frank Zappa
http://pgp.document_type.org:11371/pks/lookup?op=get&search=0xF7323BAC