webcollab-users — Mailing list for WebCollab users

[Webcollab-users] WebCollab 1.60a - Neptune

[Andrew S. <and...@pa...>]

I am pleased to announce the release of WebCollab 1.60a (Neptune)
available immediately.  This is the first stable release in six months
and is the result of some intensive development work.

Also available is Unicode add-ons to enable the use of UTF-8 character
sets.  This is being provided as an add-on, since MySQL does fully not
support Unicode in a stable release.  MySQL 4.1, presently in alpha
release, will support Unicode.  PostgreSQL does support Unicode and is
recommended.

An annotated changelog of changes since 1.51 (Hebe) follows:
 
 - added clone function to replicate projects (admin only)
 
 - added email notification for forum posts and file uploads
 
 - added private users and private usergroups
 
 - added 'view only active' toggle to project list page
 
 - added 'printer friendly' toggle to project/task listing pages
 
 - added javascript date checking and missing field validation
 
 - added Bulgarian and Danish languages 
 
 - review and upgrade security to a better implemented
model-view-controller approach
 
 - add login timeouts to enhance dictionary attack protection
 
 - add optional prefix to database table names (Feature Request 975181)
 
 - sub-directories now protected with .htaccess for better security 
 
 - input text validation procedures improved (again!)
 
 - usability improvements
 
 - upgrade to valid XHTML
 
 - change CSS to give more readable links 
 
 - major code speed-ups by reducing database calls and refactoring
 
 - bugfixes!
     

 

[Webcollab-users] FASD project: Online survey launched

[<ben...@id...>]

Dear Open Source developer

I am doing a research project on "Fun and Software Development" in which I kindly invite you to participate.
You will find the online survey under http://fasd.ethz.ch/qsf/. The questionnaire consists of 53 questions and you will need about 15 minutes to complete it.

With the FASD project (Fun and Software Development) we want to define the motivational significance of fun when software developers decide to engage in Open Source projects. What is special about our research project is that a similar survey is planned with software developers in commercial firms. This procedure allows the immediate comparison between the involved individuals and the conditions of production of these two development models. Thus we hope to obtain substantial new insights to the phenomenon of Open Source Development.


With many thanks for your participation,
Benno Luthiger


PS:
The results of the survey will be published under http://www.isu.unizh.ch/fuehrung/blprojects/FASD/.
We have set up the mailing list fa...@we... for this study. Please see http://fasd.ethz.ch/qsf/mailinglist_en.html for registration to this mailing list.

_______________________________________________________________________

Benno Luthiger
Swiss Federal Institute of Technology Zurich
8092 Zurich

Mail: benno.luthiger(at)id.ethz.ch
_______________________________________________________________________

[Webcollab-users] WebCollab-1.59 (Development Version)

[Andrew S. <and...@pa...>]

Hi all,

Pleased to announce a development version of WebCollab is available for
download.

This version includes the much requested private usergroups and private
users to allow isolation between groups/users.  There are also other
improvements from the Features Request lists at Sourceforge (task
cloning, printable pages and show active projects only).

Web-based database back-up, another Feature Request, is partially coded
in the CVS.  I could never get it work effectively over the wide range
of platforms, so it's stayed in CVS.  

The development release is essentially complete (for a full release) but
the translations for non-English languages have not yet been done.  Help
welcomed :)

Also released is an experimental add-on for Unicode (UTF-8) characters. 
This allows the text entry of characters in virtually any written
language. It is experimental because there are probably a few bugs to
sort out - and it does not work well with MySQL - yet.  MySQL will
apparently not have good support for for Unicode until version 4.1
(presently in Alpha).

Regards

Andrew  

[Webcollab-users] WebCollab 1.51 (Hebe) Released

[Andrew S. <and...@pa...>]

Hi all,

Pleased to announce new release of WebCollab.  This is a maintenance and
bugfix release.  
Some usability improvements have been made, and names of private
usergroup items are now better removed from public viewing.  Setting a
project to a private usergroup prevents the tasks below being publicly
viewed as well (except by usergroup members).

After numerous comments the session timeout is now adjustable in
config.php, and email addresses and links are clickable in forum posts
and uploaded file descriptions.

Text input validation has been improved, and line endings from browsers
on Mac, UNIX and Windows platforms are now all properly recognised.

Users with remaining forum posts can now be permanently deleted by an
admin.  The forum posts revert to '----' as the author, and can be
deleted by admin, or the task owner.


*Translations*
--------------

Added Italian translation (Thanks to Raffaele Franzese).


*SMTP AUTH*
-----------

In previous releases I was not able to test the functionality of SMTP
AUTH for emails - which is not desirable when writing software.  I have
now hacked together a mail server with full SMTP AUTH capabilities
(Postfix + CyrusSASL on Debian Woody) to test against. WebCollab now
reliably supports plain auth, login and CRAM-MD5 authentication.

*Bugfixes*
---------

All reported bugs are fixed.  I've also found a few minor bugs and
squashed them too. 

Regards

Andrew

Re: [Webcollab-users] deadlines and milestones

[Andrew S. <and...@pa...>]

On Thu, 11 Dec 2003 19:58:34 -0800
"Mark D. Anderson" <md...@di...> wrote:

> Reading the docs, it would appear that if a task is in the "Planned"
> state, it need not have a deadline.
> 
> But in the user interface, it seems that some fixed date deadline
> is required, regardless.
> Plus the db schema says that deadline is NOT NULL.
> 
> I'd like to have the option to not specify a deadline date
> sometimes.
> 

The deadline is there in the screen - yes - but it's ignored in all
computations.  Sometimes it is good to have a preset deadline on a
planned project for when do activate it.  That's basically the logic.

> Furthermore, for my uses, in most cases what i'd rather specify
> is a deadline *label*, which is in common across multiple tasks.
> I guess you could call this a "milestone".
> 
> I would then separately configure the deadline/milestone date
> for that label, and it would apply to all those tasks.
> 
> Perhaps this goal could be achieved through subtask inheritance,
> except that it appears that inheritance from the parent is
> a one time thing at only task creation time.
> Plus, subtasking is really different from grouping into
> a milestone -- the tasks need not have a dependency relationship
> or other connection just to have a common milestone.
> 
> It is also conceivable that this feature could be shoehorned
> into "task groups", by adding a deadline column to the taskgroups
> table. There would need to be related UI changes.
> The justification for "task groups" seems to have been UI issues
> with subtask hierarchy presentation -- an argument that doesn't
> convince me :) -- so I see no particular problem with using them
> in this way.
> 
> Any thoughts?
> 

Yes, well they are fairly major changes :)

Feel free to code them in, though I'm not convinced that I'd want to see
WebCollab go that way.

Regards

Andrew  

Re: [Webcollab-users] textarea dimensions

[Mark D. A. <md...@di...>]

oh, and a similar change in task_edit.php

-mda

[Webcollab-users] deadlines and milestones

[Mark D. A. <md...@di...>]

Reading the docs, it would appear that if a task is in the "Planned"
state, it need not have a deadline.

But in the user interface, it seems that some fixed date deadline
is required, regardless.
Plus the db schema says that deadline is NOT NULL.

I'd like to have the option to not specify a deadline date
sometimes.

Furthermore, for my uses, in most cases what i'd rather specify
is a deadline *label*, which is in common across multiple tasks.
I guess you could call this a "milestone".

I would then separately configure the deadline/milestone date
for that label, and it would apply to all those tasks.

Perhaps this goal could be achieved through subtask inheritance,
except that it appears that inheritance from the parent is
a one time thing at only task creation time.
Plus, subtasking is really different from grouping into
a milestone -- the tasks need not have a dependency relationship
or other connection just to have a common milestone.

It is also conceivable that this feature could be shoehorned
into "task groups", by adding a deadline column to the taskgroups
table. There would need to be related UI changes.
The justification for "task groups" seems to have been UI issues
with subtask hierarchy presentation -- an argument that doesn't
convince me :) -- so I see no particular problem with using them
in this way.

Any thoughts?

-mda

[Webcollab-users] textarea dimensions

[Mark D. A. <md...@di...>]

FYI, i was getting frustrated with the "typing through a keyhole" effect.
So I just made these small changes...

in config.php:

$TASK_COLS = 80;
$TASK_ROWS = 20;

and in tasks/task_add.php:
            "<tr> <td>".$lang["task_description"]."</td> <td><textarea
            name=\"text\" rows=\"$TASK_ROWS\"
            cols=\"$TASK_COLS\"></textarea></td> </tr>\n".
...
              "<tr> <td>".$lang["project_description"]."</td>
              <td><textarea name=\"text\" rows=\"$TASK_ROWS\"
              cols=\"$TASK_COLS\"></textarea></td> </tr>\n".

-mda

Re: [Webcollab-users] WebCollab sessions and other questions

[Mark D. A. <md...@di...>]

> Yes, I've had a few comments about that previously. I should move the
> /includes/security.php timeouts into config.php.  The other two aren't
> so critical.  /setup/includes/security.php is only used during setup,
> when a short timeout is good since you're playing with system setup. 
> The other one isn't timeout, it just shows recent logins, and older
> logins.   

FYI in addition to /includes/security.php there is this code in index.php
that would have to be made consistent:
  if(db_result(@db_query("SELECT COUNT(*) FROM logins
                                WHERE
                                session_key='".safe_data($_COOKIE["webcollab_session"])."'
                                AND lastaccess > (now()-INTERVAL
                                ".$delim."1 WEEK".$delim.")" ) ) == 1 ) {

(I changed the original 1 HOUR to 1 WEEK above, as i was getting
too annoyed with the timeout).

-mda

Re: [Webcollab-users] WebCollab sessions and other questions

[Andrew S. <and...@pa...>]

On Wed, 10 Dec 2003 00:08:20 -0800
"Mark D. Anderson" <md...@di...> wrote:

> Hi - I just installed WebCollab 1.50, and had some questions.
> 
> It seems that session timeout is currently hardcoded constants in
> the code, not in config.php.
> In particular:
> 
> setup/security_setup.php has a 10-minute inactivity timeout.
> users/user_online.php has a hard-coded 1 hour for a user being
> "online". includes/security.php has a hard-coded 1 hour for inactity
> timeout.
> 

Yes, I've had a few comments about that previously. I should move the
/includes/security.php timeouts into config.php.  The other two aren't
so critical.  /setup/includes/security.php is only used during setup,
when a short timeout is good since you're playing with system setup. 
The other one isn't timeout, it just shows recent logins, and older
logins.   

> Also, I don't see any where to configure whether I want to get
> notified of application errors/warnings, or of which ones.
> I certainly don't want to get an email every time a user's session
> times out, and that is what it is currently doing.
> This seems to be because timeout test in security.php purges the
> session, so that the next time through the code, instead the
> user gets the "no_session" error, a copy of which is then
> sent to my email box.
> 

Remove your email address from the config file section on error messages
:)

The timeout test needs a bit of revamping (see above), and probably
should fall through to a login screen, rather than an error message.

> Lastly, I should mention that you do now have a user reliant on smtp
> auth:).
> I can understant why, if installed in an intranet setting,
> smtp auth is not often useful. 
> But i'm installing in an outside hosted web server, and i
> want to be able to use a particular smtp server from the 
> outside, and that requires smtp auth.
> Thankfully, it is working for me.
> 

You've read the comments about SMTP_AUTH :)  Basically, I have no way of
testing SMTP AUTH (or, no desire to setup a dummy SMTP_AUTH test
server); the code was broken for a long time; I got no bug reports... 
When I looked at the RFC's, I saw a _number_ of differing forms of SMTP
AUTH, some of them heavily encrypted and complex.  Is it worthwhile
coding for complicated protocols that no one seems interested in? 

I'll leave the existing 'plain text' SMTP AUTH in the code (obviously I
know it works now :) ).  Hopefully that will work for most...

Regards

Andrew Simpson

[Webcollab-users] WebCollab sessions and other questions

[Mark D. A. <md...@di...>]

Hi - I just installed WebCollab 1.50, and had some questions.

It seems that session timeout is currently hardcoded constants in
the code, not in config.php.
In particular:

setup/security_setup.php has a 10-minute inactivity timeout.
users/user_online.php has a hard-coded 1 hour for a user being "online".
includes/security.php has a hard-coded 1 hour for inactity timeout.

Also, I don't see any where to configure whether I want to get notified
of application errors/warnings, or of which ones.
I certainly don't want to get an email every time a user's session
times out, and that is what it is currently doing.
This seems to be because timeout test in security.php purges the
session, so that the next time through the code, instead the
user gets the "no_session" error, a copy of which is then
sent to my email box.

Lastly, I should mention that you do now have a user reliant on smtp auth
:).
I can understant why, if installed in an intranet setting,
smtp auth is not often useful. 
But i'm installing in an outside hosted web server, and i
want to be able to use a particular smtp server from the 
outside, and that requires smtp auth.
Thankfully, it is working for me.

Thanks....

-mda

[Webcollab-users] WebCollab Version 1.5 released

[Andrew S. <and...@pa...>]

Hi all,

We are pleased to announce the release of WebCollab 1.50.

News release: http://sourceforge.net/forum/forum.php?forum_id=328645

Enjoy!

Andrew Simpson

Re: [Webcollab-users] Manually constructed todo list link

[Andrew S. <and...@pa...>]

On Wed, 29 Oct 2003 09:33:47 -0500 (EST)
Andy Harrison <ah...@ml...> wrote:
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> On 28-Oct-2003, Andrew Simpson wrote message "Re: [Webcollab-users]
> Manually constructed todo list link"
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > I cut and pasted it into my machine (changed the domain) and the
> > page popped up.  Dunno... something strange your end?
> > 
> > I think Apache will return '200' response code if it finds a page
> > '/webcollab/users.php'.  Everything past the '?' would be ignored
> > and just piped to PHP.
> 
> 
> Yes, but did it pop up the correct page?
> 
> It simply pops up the default todo list page for me, it does not pop
> up the page of the corresponding group I'm selecting.

No - default page for me too.

The reason for that is that the group info is passed to the code by a
HTTP 'POST' operation.  What you are doing with link is passing group
info with a HTTP 'GET' operation.

A possible workaround is to 'search and replace' in the code for $_POST
and change it to $_REQUEST.  The $_POST superglobal only checks for
POST-ed data, whereas $_REQUEST checks for GET, POST and COOKIE data (in
that order). This way both methods would work.

Hope that helps.

Andrew  

Re: [Webcollab-users] Manually constructed todo list link

[Andy H. <ah...@ml...>]

-----BEGIN PGP SIGNED MESSAGE-----


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
On 28-Oct-2003, Andrew Simpson wrote message "Re: [Webcollab-users] Manually
constructed todo list link"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> I cut and pasted it into my machine (changed the domain) and the page
> popped up.  Dunno... something strange your end?
> 
> I think Apache will return '200' response code if it finds a page
> '/webcollab/users.php'.  Everything past the '?' would be ignored and
> just piped to PHP.


Yes, but did it pop up the correct page?

It simply pops up the default todo list page for me, it does not pop up the
page of the corresponding group I'm selecting.



~~ 
Andy Harrison
Great Works Internet
System Operations
(full headers for details)

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQCVAwUBP5/PylPEkLgodAWVAQGjqQP+NgBekvH0uGXnMPR/evHrvHurR10KeWsz
JJry+NA/bP+XDgQN0hKr+FHmToU3+/C+ko7+ZWiw6S0Pvl1AlBWu8kvH7ewqLjOe
ohVlBnjfhDZKsGcMibmDhPAfQe6bNiDfpOHlR2LXXWWfd0RG8WoSyWQV5ZLaAfZ4
ABGKMF25hGo=
=Mp8E
-----END PGP SIGNATURE-----

Re: [Webcollab-users] Manually constructed todo list link

[Andrew S. <and...@pa...>]

On Mon, 27 Oct 2003 15:45:49 -0500 (EST)
Andy Harrison <ah...@ml...> wrote:

> I'd like to make a link like:
> 
> 
> http://example.com/webcollab/users.php?x=0&action=todo&selection=group&groupid=3
> 
> Could anyone tell me why this doesn't work?  I've inspected the html
> source for the form values and I can find nothing to explain why it
> doesn't work.  
> 
> I can see the requestion hitting the access log with nothing in the
> error log:
> 
> 
> xxx.xxx.xxx.xxx - ajharrison [27/Oct/2003:15:38:44 -0500] "GET
> /webcollab/css.css HTTP/1.1" 304 -
> xxx.xxx.xxx.xxx - ajharrison [27/Oct/2003:15:38:44 -0500] "GET
> /webcollab/users.php?x=0&action=todo&selection=group&groupid=3
> HTTP/1.1" 200 41457
> 

I cut and pasted it into my machine (changed the domain) and the page
popped up.  Dunno... something strange your end?

I think Apache will return '200' response code if it finds a page
'/webcollab/users.php'.  Everything past the '?' would be ignored and
just piped to PHP.

Andrew

[Webcollab-users] Manually constructed todo list link

[Andy H. <ah...@ml...>]

-----BEGIN PGP SIGNED MESSAGE-----

I'd like to make a link like:


http://example.com/webcollab/users.php?x=0&action=todo&selection=group&groupid=3

Could anyone tell me why this doesn't work?  I've inspected the html source for
the form values and I can find nothing to explain why it doesn't work.  

I can see the requestion hitting the access log with nothing in the error log:


xxx.xxx.xxx.xxx - ajharrison [27/Oct/2003:15:38:44 -0500] "GET
/webcollab/css.css HTTP/1.1" 304 -
xxx.xxx.xxx.xxx - ajharrison [27/Oct/2003:15:38:44 -0500] "GET
/webcollab/users.php?x=0&action=todo&selection=group&groupid=3 HTTP/1.1" 200
41457


~~ 
Andy Harrison
Great Works Internet
System Operations
(full headers for details)

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQCVAwUBP52D/FPEkLgodAWVAQHP+AP/XGyN8MUjNzXT0QH1bEe5ATbV8FlGDLpu
9c7qAtV75XSXayCUieIuHhceDFSbe/4qBDHhDdbU+nqtEx+ULdRmbzFAo4Wg7qBD
5x87jvPpNKIDzdW1LL5ffpi0V1on23D8QVkmVN/PvsiwWqclPgJ4YWqouGV0Ue/S
Pdo0a6r4u2o=
=6Edh
-----END PGP SIGNATURE-----

[Webcollab-users] Development version released

[Andrew S. <and...@pa...>]

Hi all,

We have released a development version of WebCollab (version 1.49).  The
rationale behind the development version is that there are few changes
that might not be reliable on all platforms and web browsers.

Main change is more emphasis on CSS stylesheets.  This makes it much
easier to control the style and format of WebCollab, and overall makes
it much more presentable.  The downside has been making sure it is
compatible with as many browsers as practicable.  An added bonus is that
WebCollab is now easily 'theme-able' if you want to change the
appearance.

The other major change is the addition of an automated setup program. 
This has been well tested, but needs more widespread use before it can
be considered stable.

Remaining changes include removing the PHP mail() function which was
buggy, removing IP address checking (buggy on some servers), add admin
email (user request), usergroup sorting for calendar/todo, improved
document section and a Catalan translation.

Andrew Simpson    

Re: [Webcollab-users] Index.php coming up blank after admin login

[Andrew S. <and...@pa...>]

On Thu, 21 Aug 2003 15:36:05 -0700
Dave Fancella <dav...@co...> wrote:

> All,
> 
> I have just installed WebCollab on an Apache2 (latest version, sorry I
> 
> don't have the version number) with php4 (also latest version) on a 
> Windows 2000 system (patched and current on service packs, which I 
> believe is SP 4 right now).  Postgres 7.3.4 running on the same
> machine.
>

I haven't actually tested with Postgres 7.3.4.  I think my version is
7.3.3.  That shouldn't be an issue though.  Apache 2.0 is fine, as is
PHP 4.3.x. 
 
> I set my config file according to the directions and ran the schema,
> the schema is created (verified with PGAdmin).  When I point a browser
> at webcollab, I get the login screen.  I proceed to type in default
> admin login information, and I get a blank page.  The source for
> Mozilla says its "<html><body></body></html>", which usually indicates
> that Mozilla didn't retrieve a page, although it connected to the
> server.  This is a completely fresh installation of Apache2 and php4,
> and of course, webcollab.
> 

Yes, this I have seen before.  The question is:  Does you version of PHP
have support compiled in for Postgres, and is it enabled in php.ini?  If
it is not compiled in (or enabled) you _will_ get a blank screen at
login submission.

Check that PHP has your database extensions compiled in.  From the
command line type 'php -m':

# php -m
Running PHP 4.2.2
Zend Engine v1.2.0, Copyright (c) 1998-2002 Zend Technologies

[PHP Modules]
mysql
pgsql

[Zend Modules]

#

I've snipped out the excess stuff.  You are looking for 'pgsql' under
modules.

Check that postgres was compiled in.  And more likely - check php.ini -
in the default file (near the bottom) the pgsql module is commented out.
 Restart Apache after making changes to php.ini.


> Any help would be greatly appreciated!  I intend to replace MS Project
> 
> with Webcollab.  :)
> 

Good plan!

Andrew

[Webcollab-users] Index.php coming up blank after admin login

[Dave F. <dav...@co...>]

All,

I have just installed WebCollab on an Apache2 (latest version, sorry I 
don't have the version number) with php4 (also latest version) on a 
Windows 2000 system (patched and current on service packs, which I 
believe is SP 4 right now).  Postgres 7.3.4 running on the same machine.

I set my config file according to the directions and ran the schema, the 
schema is created (verified with PGAdmin).  When I point a browser at 
webcollab, I get the login screen.  I proceed to type in default admin 
login information, and I get a blank page.  The source for Mozilla says 
its "<html><body></body></html>", which usually indicates that Mozilla 
didn't retrieve a page, although it connected to the server.  This is a 
completely fresh installation of Apache2 and php4, and of course, webcollab.

Any help would be greatly appreciated!  I intend to replace MS Project 
with Webcollab.  :)

Dave

[Webcollab-users] Re: Session problems

[Andrew S. <and...@pa...>]

On Mon, 11 Aug 2003 08:37:21 -0400 (EDT)
 Andy Harrison <ah23@ml...> wrote:
 
 > > The question is:  Does it work!!  There's a Bug Report open that
 > > looks like a cookie problem.  I'd really like to know if it's a
 > > one-off or a big problem.
 > 
 > 
 > No, it doesn't.  External authorization appears to be completely
 > broken now.  
 > 
 > Have you tested with apache 1.3.28 yet?  I did upgrade to that not
 > long ago, but I don't know if that's what broke it because I haven't
 > been running it on my desktop machine.
 > 
 
O.K. I found a (small) cookie bug that is probably the root of all this
problem!!

I've just done a new release - 1.42 to fix it.  Hopefully that fixes
that.

Andrew

Re: [Webcollab-users] session problems

[Andrew S. <and...@pa...>]

On Mon, 11 Aug 2003 08:37:21 -0400 (EDT)
Andy Harrison <ah...@ml...> wrote:

> 
> No, it doesn't.  External authorization appears to be completely
> broken now.  
> 

Bit of a stab in the dark:  You did see the $WEB_AUTH parameter in the
very bottom of the config.php file?  It defaults to 'No', so external
auth wouldn't work.

Andrew 

Re: [Webcollab-users] session problems

[Andrew S. <and...@pa...>]

On Mon, 11 Aug 2003 08:37:21 -0400 (EDT)
Andy Harrison <ah...@ml...> wrote:

> > The question is:  Does it work!!  There's a Bug Report open that
> > looks like a cookie problem.  I'd really like to know if it's a
> > one-off or a big problem.
> 
> 
> No, it doesn't.  External authorization appears to be completely
> broken now.  
> 
> Have you tested with apache 1.3.28 yet?  I did upgrade to that not
> long ago, but I don't know if that's what broke it because I haven't
> been running it on my desktop machine.
> 

No, I've tested on apache 1.3.27 and 2.0.x series.  Both worked fine for
me.

I'm getting very strongly tempted to rip out the cookie code and go back
to what worked!!!  Only thing is I'm not sure that it is the cookie code
at fault.  

External authorisation shouldn't have any affect on the cookie setting. 
Can you explain what kind of error and when it occurs?

There's a patch in one of the bug reports I did that rips out the cookie
code - so far I've had no feedback as to whether it improved things.  I
need some bug reports - or otherwise - to go forwards :-) 

Andrew

Re: [Webcollab-users] session problems

[Andy H. <ah...@ml...>]

-----BEGIN PGP SIGNED MESSAGE-----


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
On 08-Aug-2003, Andrew Simpson wrote message "Re: [Webcollab-users] session
problems"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> The question is:  Does it work!!  There's a Bug Report open that looks
> like a cookie problem.  I'd really like to know if it's a one-off or a
> big problem.


No, it doesn't.  External authorization appears to be completely broken now.  

Have you tested with apache 1.3.28 yet?  I did upgrade to that not long ago,
but I don't know if that's what broke it because I haven't been running it on
my desktop machine.

~~ 
Andy Harrison
(full headers for details)


-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQCVAwUBPzeN/1PEkLgodAWVAQFKmAQAp7DLCDVPkutfaD+he40DZCRSiG4BdCpD
Ji8V691xw9In6F4lEDmvVY+5cXDBvrmRjZYVZWfxM+u8WvuHr7aPqZA+ZnHjHeNO
P6fkywegYoiysbsewPp7O0oF6rSsPwVdeCkrQpVdvK+eKku+kp/zBCcL7irqrtPA
LkgL/1jVjd8=
=wc9s
-----END PGP SIGNATURE-----

Re: [Webcollab-users] session problems

[Andrew S. <and...@pa...>]

> 
> I login with admin and my url shows a valid session:
> [x=686883e1a3d5ed10b2f57e22442c2561], however, when I simply
> mouse-over any of the other links it shows right in the url [x=0] so
> it looks like /webcollab/tasks.php?x=0&action=add.  
> 

Yes, so far it sounds good.  

A recent user request was for WebCollab to use cookies instead of
session encoded URL's.  This was allow tabbed browsing without having to
paste in URL's.  However when I looked deeper into cookies, it gets
difficult - they usually work, but not always!  So, I made WebCollab
initially try a session cookie _and_ encoded URL.  If the cookie works
(i.e. the browser returns it with the next request), the encoded URL is
dropped.  Hopefully (!) this should get around cookie problems.

What you're seeing is then normal.  The cookie was accepted, so
WebCollab puts 'x=0' in the URL (I tried 'x= ', but it looked silly).

The question is:  Does it work!!  There's a Bug Report open that looks
like a cookie problem.  I'd really like to know if it's a one-off or a
big problem.

I've tested the cookie code in every browser I can get my hands on (they
all worked).  I'm confident it's stable, but...!!

Regards

Andrew      

[Webcollab-users] session problems

[Andy H. <ah...@ml...>]

-----BEGIN PGP SIGNED MESSAGE-----

Anyone else having session trouble?

I have 1.41 freshly installed and I notice constant session problems.  I have a
completely clean install, freshly installed schema and everything.  No external
auth turned on.  I have not imported my schema from the previous version.  I
completely dropped the database and let the db_create_pgsql.sh create the
database.  I didn't typo anything.  I'm using webcollab for everything,
database name, database user, etc.  

I login with admin and my url shows a valid session:
[x=686883e1a3d5ed10b2f57e22442c2561], however, when I simply mouse-over any of
the other links it shows right in the url [x=0] so it looks like 
/webcollab/tasks.php?x=0&action=add.  

Any clues?

~~ 
Andy Harrison
(full headers for details)


-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQCVAwUBPzK0V1PEkLgodAWVAQGM4AP+OzgJ15PRXte3OSRs2xOPowSuj17PHBsR
o0r5ltTHHj1yyOtDTdhrqP8wz+2eLXp7I+rUyKxB5sIjWwzP4+m8Dvmu+34h7C0J
vGkeD1Mm+y7O/2o5c3a3R2fS8G9YpOYXt3gbNT4kdiPOL/0S30A1k9vjjEK1IJOL
BTiuKo7iJ+w=
=4t2J
-----END PGP SIGNATURE-----