phpwiki-talk

[Phpwiki-talk] Problem with security configuration

[Stan B. <sb...@po...>]

Hi,
I have installed a new PhpWiki on my family website.  First, I have 
installed the security as it was by default in the config-dist.ini.  The 
think worked fine.  Then, I tightened it as described below to have:
*  everyone can view,
*  everyone can register
*   users need to be authorized to edit/create
Unfortunately, I'm getting error message "Zero Sized Reply" when trying 
to sign-in, now.

Can anyone help?

My env: Linux (kernel 2.4.26), Apache 1.3.33 (Unix), Php 4.3.10, mySQL 
4.0.23-stand, PhpWiki 1.3.10

--- my security config:
ALLOW_ANON_USER = true
ALLOW_ANON_EDIT = false
ALLOW_BOGO_LOGIN = false
ALLOW_USER_PASSWORDS = true
PASSWORD_LENGTH_MINIMUM = 6
USER_AUTH_ORDER = "Db"
USER_AUTH_POLICY = first-only

DBAUTH_AUTH_DSN = "mysql://berka8f_admin:passwd9@localhost/berka8f_phpwiki"
DBAUTH_AUTH_USER_EXISTS = "SELECT userid FROM user WHERE userid='$userid'"
DBAUTH_AUTH_CHECK = "SELECT IF(passwd=PASSWORD('$password'),1,0) FROM 
user WHERE userid='$userid'"
DBAUTH_AUTH_CRYPT_METHOD = plain
DBAUTH_AUTH_UPDATE = "UPDATE user SET passwd=PASSWORD('$password') WHERE 
userid='$userid'"
DBAUTH_AUTH_CREATE = "INSERT INTO user SET 
passwd=PASSWORD('$password'),userid='$userid'"
DBAUTH_PREF_SELECT = SELECT prefs FROM pref WHERE userid='$userid'
DBAUTH_PREF_UPDATE = "REPLACE INTO pref SET 
prefs='$pref_blob',userid='$userid'"

Stan

RE: [Phpwiki-talk] Problem with security configuration

[Charles C. <ch...@ru...>]

Stan,

I noticed that you are running PhpWiki 1.3.10 - I understand that there were a lot of problems with that version and more
specifically, recently I have patched several bugs around security.

The current version in CVS is in the final rounds of stabilisation before being release as 1.3.11, hopefully in the next two weeks.
You might consider using that instead of 1.3.11.  If not, I suggest that you hold off until after the release.

Regards,
Charles

-----Original Message-----
From: Stan Berka [mailto:sb...@po...] 
Sent: 22 February 2005 06:32
To: php...@li...
Subject: [Phpwiki-talk] Problem with security configuration

Hi,
I have installed a new PhpWiki on my family website.  First, I have 
installed the security as it was by default in the config-dist.ini.  The 
think worked fine.  Then, I tightened it as described below to have:
*  everyone can view,
*  everyone can register
*   users need to be authorized to edit/create
Unfortunately, I'm getting error message "Zero Sized Reply" when trying 
to sign-in, now.

Can anyone help?

My env: Linux (kernel 2.4.26), Apache 1.3.33 (Unix), Php 4.3.10, mySQL 
4.0.23-stand, PhpWiki 1.3.10