Re: [Qgis-developer] error building qgis debian package for 2.2

2014-03-06 Thread Jürgen E . Fischer
Hi Etienne,

On Wed, 05. Mar 2014 at 22:05:49 -0300, Etienne Tourigny wrote:
 I am trying to build debian packages for 2.2 in Ubuntu Raring (12.04) but
 there seems to be a problem with libspatialindex, although I do have
 libspatialindex1 and libspatialindex-dev installed
 
 The build process complains about missing /libspatialindex.so which is in
 /usr/lib/

You didn't add the changelog entry for raring (INSTALL 3.8), right?


Jürgen

-- 
Jürgen E. Fischer norBIT GmbH   Tel. +49-4931-918175-31
Dipl.-Inf. (FH)   Rheinstraße 13Fax. +49-4931-918175-50
Software Engineer D-26506 Norden   http://www.norbit.de
QGIS PSC member (RM)  Germany  IRC: jef on FreeNode 


-- 
norBIT Gesellschaft fuer Unternehmensberatung und Informationssysteme mbH
Rheinstrasse 13, 26506 Norden
GF: Jelto Buurman, HR: Amtsgericht Emden, HRB 5502

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


[Qgis-developer] Panels and plugins

2014-03-06 Thread Jorge Tornero - Listas

Hello everybody,

Well, I'm trying to put my plugin (transectizer) beyond the 
'experimental box' of plugins and thus improving it a little and, of 
course, fix its many problems.


One of this problems concerns the visibility of the plugin itself. I've 
decide to make it a dockable widget rather than a floating dialog, 
mainly because the plugin needs canvas interaction and the dialog goes 
to the back of the main QGIS dialog when clicking the canvas. Also, 
because many transects can be defined one after the other, it looks more 
fancy to have the dialog docked and always visible. Forcing the user to 
click in the taskbar again and again doesn't look like a nice idea.


Anyway, I've detected two behaviors that I'm not sure that they are 
intended/desired:


1) Even when the user 'shuts down' the docked widget, it looks like the 
plugin is still loaded and working and it has just been hidden (when I 
used the single dialog approach, the plugin just get closed and destroyed).


2) I can't figure out how to add the panel to the panels menu (in linux 
it's under Settings-Panels, I think in windows it changes and don't 
know about Mac), and in fact I don't know if it is a desirable feature 
(maybe it is reserved to non-experimental plugins or featured ones)



In both cases... Are they the expected and desirable behaviors? Human 
Interface Guidelines don't say much about this. Regarding to this, HIG 
discourage the use of stacked widgets, but... What about toolboxes (like 
tab widgets but with a more 'vertical' design?


And one last question... I think I've read about 'proper' icons for 
plugins, etc. I think someone was 'in charge' of this and I would like 
to ask about this to someone, providing there aren't (AFAIK) 
documentation about this topic.


Thank you very much, have a nice day

Jorge Tornero


___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread G. Allegri
I don't know what's the ongoing progress on this topic but I think that a
system for the dependencies management should be embedded inside QGIS. I'm
not in favour for a plugin to do that.
Having an integrated pip would be more transparent to the user and the
plugin developers. The developer should only provide a requirements file
which should be transparently managed by the QGIS' Python system.
I heard that Nathan is working on something similar?

giovanni


2014-03-05 11:32 GMT+01:00 Luca Mandolesi mandol...@gmail.com:

 Hi to all,
 I'm trying to realize a little plugin to install python modules on windows
 via pip.

 In first, I would like make a simple thing:
 Run get-pip.py inside the plugin  but I encounter two different problem:

 What is the shell to call? (Please, don't mind If I point at dufour, is my
 qgis crushtest dummy )

 subprocess.call('C:\\PROGRA~2\\QGISDU~1\\Osgeo4W.bat python get-pip.py')

 or

 subprocess.call('C:\Program Files (x86)\QGIS Dufour\OSGeo4W.bat python
 get-pip.py')

 Apparently they are the same, but if I install something through  python
 inside one, I cannot import the module inside the other.

 So, what's the right way to call inside a python plugin the shell?

 I found also some problems in using subprocess on windows, and I'm
 developping using QProcess class.

 Second question:
 If I run
 subprocess.call('C:\Program Files (x86)\QGIS Dufour\OSGeo4W.bat python
 get-pip.py')

 I receive: Nothing distributions at all found fo install...

 So the solution are easy: distribute qgis with pip and easy_install
 inside, or install pip and easy_intall from shell as I did, then we can use
 the plugin as you check out in my screenshots:
 [0]

 So, if you have suggestions plese let me know.

 Best regards
 Luca


 [0]

 https://lh5.googleusercontent.com/-Z6xJHji33E8/UxURKBr1NpI/Drg/2XWnxf7q6fA/w1075-h604-no/testpipinstaller.PNG




 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer




-- 
Giovanni Allegri
http://about.me/giovanniallegri
Twitter: https://twitter.com/_giohappy_
blog: http://blog.spaziogis.it
GEO+ geomatica in Italia http://bit.ly/GEOplus
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread Mauro Alberti
In my opinion, a much simpler and cleaner approach (at least from the point
of view of a normal user), would be to allow, in QGis Windows (standalone
installer), the user not to point to (or not install) an internal Python,
but to refer to an external installation. For instance, to point to a
Python installed via Python(x,y), where there is already a plenty of
modules installed and it is very easy to install/update via
pip/easy_install and so on.

But I'm not sure if some Python modules are customized to be compatible
with QGIS Windows interface: for instance, some months ago, I tried
unsuccessfully to update, via copy-and-paste from the Python(xy) site
packages, numpy to a more recent version than the one available in Qgis
(don't remember if 1.8 or 2.0).


mauro




On Thu, Mar 6, 2014 at 10:48 AM, G. Allegri gioha...@gmail.com wrote:

 I don't know what's the ongoing progress on this topic but I think that a
 system for the dependencies management should be embedded inside QGIS. I'm
 not in favour for a plugin to do that.
 Having an integrated pip would be more transparent to the user and the
 plugin developers. The developer should only provide a requirements file
 which should be transparently managed by the QGIS' Python system.
 I heard that Nathan is working on something similar?

 giovanni


 2014-03-05 11:32 GMT+01:00 Luca Mandolesi mandol...@gmail.com:

 Hi to all,
 I'm trying to realize a little plugin to install python modules on
 windows via pip.

 In first, I would like make a simple thing:
 Run get-pip.py inside the plugin  but I encounter two different problem:

 What is the shell to call? (Please, don't mind If I point at dufour, is
 my qgis crushtest dummy )

 subprocess.call('C:\\PROGRA~2\\QGISDU~1\\Osgeo4W.bat python get-pip.py')

 or

 subprocess.call('C:\Program Files (x86)\QGIS Dufour\OSGeo4W.bat python
 get-pip.py')

 Apparently they are the same, but if I install something through  python
 inside one, I cannot import the module inside the other.

 So, what's the right way to call inside a python plugin the shell?

 I found also some problems in using subprocess on windows, and I'm
 developping using QProcess class.

 Second question:
 If I run
 subprocess.call('C:\Program Files (x86)\QGIS Dufour\OSGeo4W.bat python
 get-pip.py')

 I receive: Nothing distributions at all found fo install...

 So the solution are easy: distribute qgis with pip and easy_install
 inside, or install pip and easy_intall from shell as I did, then we can use
 the plugin as you check out in my screenshots:
 [0]

 So, if you have suggestions plese let me know.

 Best regards
 Luca


 [0]

 https://lh5.googleusercontent.com/-Z6xJHji33E8/UxURKBr1NpI/Drg/2XWnxf7q6fA/w1075-h604-no/testpipinstaller.PNG




 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer




 --
 Giovanni Allegri
 http://about.me/giovanniallegri
 Twitter: https://twitter.com/_giohappy_
 blog: http://blog.spaziogis.it
 GEO+ geomatica in Italia http://bit.ly/GEOplus

 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread Nathan Woodrow
On Thu, Mar 6, 2014 at 8:11 PM, Mauro Alberti alberti@gmail.com wrote:

 In my opinion, a much simpler and cleaner approach (at least from the
 point of view of a normal user), would be to allow, in QGis Windows
 (standalone installer), the user not to point to (or not install) an
 internal Python, but to refer to an external installation. For instance, to
 point to a Python installed via Python(x,y), where there is already a
 plenty of modules installed and it is very easy to install/update via
 pip/easy_install and so on.


Windows doesn't ship with any version of Python. Yay Windows!  So we bundle
our own.  I personally don't mind this so much because it's easier to
control the setup if we bundle it.

The main thing here is just including pip and easy_install in all the
windows installs, standalone and osgeo4w.  Jurgen has told me that
easy_install is included in the 64 bit versions but not 32 bit versions. Is
that correct Jurgen?

If pip is included we can easily have plugins tell us what they need and we
can install them.

- Nathan
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

[Qgis-developer] RealCentroid plugin error

2014-03-06 Thread Geo DrinX
Hello all,


as in object, I had an error from  RealCentroid plugin  in  QGis 2.2  on
Windows 7  64 bit.

This is the error:

Traceback (most recent call last):
  File C:/Users/rrr/.qgis2/python/plugins\realcentroid\realcentroid.py,
line 124, in run
self.centroids()
  File C:/Users/rrr/.qgis2/python/plugins\realcentroid\realcentroid.py,
line 93, in centroids
x2 = part[1][0]
IndexError: list index out of range


Of course, the resulting centroid layer is empty   :(


Somebody can help me to understand what happens ?


Thanks a lot and Regards

Roberto
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread G. Allegri

 Windows doesn't ship with any version of Python. Yay Windows!  So we
 bundle our own.  I personally don't mind this so much because it's easier
 to control the setup if we bundle it.

 The main thing here is just including pip and easy_install in all the
 windows installs, standalone and osgeo4w.  Jurgen has told me that
 easy_install is included in the 64 bit versions but not 32 bit versions. Is
 that correct Jurgen?

 If pip is included we can easily have plugins tell us what they need and
 we can install them.



+1, this is exactly what I was imaging.
A requirements.txt for pip would be all that a dev should write.

giovanni



 - Nathan




-- 
Giovanni Allegri
http://about.me/giovanniallegri
Twitter: https://twitter.com/_giohappy_
blog: http://blog.spaziogis.it
GEO+ geomatica in Italia http://bit.ly/GEOplus
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread Jürgen E . Fischer
Hi Mauro,

On Thu, 06. Mar 2014 at 11:11:14 +0100, Mauro Alberti wrote:
 In my opinion, a much simpler and cleaner approach (at least from the point
 of view of a normal user), would be to allow, in QGis Windows (standalone
 installer), the user not to point to (or not install) an internal Python, but
 to refer to an external installation.

That would require it to contain a PyQt4 build against a compatible Qt.

 Python installed via Python(x,y), where there is already a plenty of
 modules installed and it is very easy to install/update via
 pip/easy_install and so on.

http://trac.osgeo.org/osgeo4w/wiki/ExternalPythonPackages


Jürgen

-- 
Jürgen E. Fischer norBIT GmbH   Tel. +49-4931-918175-31
Dipl.-Inf. (FH)   Rheinstraße 13Fax. +49-4931-918175-50
Software Engineer D-26506 Norden   http://www.norbit.de
QGIS PSC member (RM)  Germany  IRC: jef on FreeNode 


-- 
norBIT Gesellschaft fuer Unternehmensberatung und Informationssysteme mbH
Rheinstrasse 13, 26506 Norden
GF: Jelto Buurman, HR: Amtsgericht Emden, HRB 5502

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread Mauro Alberti
Hi Jurgen,

On Thu, Mar 6, 2014 at 11:32 AM, Jürgen E. j...@norbit.de wrote:


  Python installed via Python(x,y), where there is already a plenty of
  modules installed and it is very easy to install/update via
  pip/easy_install and so on.

 http://trac.osgeo.org/osgeo4w/wiki/ExternalPythonPackages


thanks, I will give it a try.

mauro
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread Tim Sutton
Hi

The only gotcha to this is that different plugins might require different
versions of dependencies. We also toyed around in the past with the idea of
each plugin having its own virtualenv for deps and then linking in the QGIS
provided site_packages dir into that virtualenv too.

Regards

Tim


On Thu, Mar 6, 2014 at 1:56 PM, Tom Kralidis tomkrali...@gmail.com wrote:



 On Thu, 6 Mar 2014, G. Allegri wrote:

  Date: Thu, 6 Mar 2014 02:31:41 -0800
 From: G. Allegri gioha...@gmail.com
 To: Nathan Woodrow madman...@gmail.com
 Cc: qgis-developer List qgis-developer@lists.osgeo.org
 Subject: Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First:
 What's the difference between the the Osgeo4w Shell?



 Windows doesn't ship with any version of Python. Yay Windows!  So we
 bundle our own.  I personally don't mind this so much because it's easier
 to control the setup if we bundle it.

 The main thing here is just including pip and easy_install in all the
 windows installs, standalone and osgeo4w.  Jurgen has told me that
 easy_install is included in the 64 bit versions but not 32 bit versions.
 Is
 that correct Jurgen?

 If pip is included we can easily have plugins tell us what they need and
 we can install them.



 +1, this is exactly what I was imaging.
 A requirements.txt for pip would be all that a dev should write.


 +1, this would be great (we currently manage and bundle deps in MetaSearch
 as a workaround).

 - we would have to make sure the requirements file is standardized
   (others may have different / additional ones, like requirements-dev.txt,
   pip-requirements.txt, etc.).

 - for MetaSearch, the requirements.txt file never makes it to the QGIS
   runtime, so plugin providers would need to make sure it does


 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer




-- 
Tim Sutton - QGIS Project Steering Committee Member
==
Please do not email me off-list with technical
support questions. Using the lists will gain
more exposure for your issues and the knowledge
surrounding your issue will be shared with all.

Irc: timlinux on #qgis at freenode.net
==
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] Incosistencies in QGIS Mapserver's GetFeatureInfo WMS responses

2014-03-06 Thread Marcel Dancak
Hello,

I have created a pull request that should fix all inconsistencies/bugs in
WMS GetFeatureInfo response, one for master and one for relese-2_2 branch.
I wasn't able to test mapserver from current master cause it is probably
broken, but the same changes in release2_2 branch works as expected.

Master branch: https://github.com/qgis/QGIS/pull/1227
Release-2_2 branch: https://github.com/qgis/QGIS/pull/1226


Regards,
Marcel


2014-03-04 10:53 GMT+01:00 Marcel Dancak danc...@gmail.com:

 I made a mistake in summarization, global bounding box in point
 identification shouldn't be computed and returned


 2014-03-04 10:36 GMT+01:00 Marcel Dancak danc...@gmail.com:

 Hi Marco,

 It's more complicated to fix all issues and let server to return bounding
 boxes of matched features in proper CRS and without transforming features
 geometries. The best solution that I could find is to add
 QgsCoordinateTransform* transform parameter into QDomElement
 QgsWMSServer::createFeatureGML method. I will perform more tests on my
 version, but to be sure what should mapserver return for both text/xml and
 application/vnd.ogc.gml formats, here is quick summarization:

 * in point identification, return features geometries, bounding boxes and
 global bounding box in requested CRS only if 'Add geometry to feature
 response' is checked
 * in search with FILTER parameter, always return features bounding boxes
 and global bounding box in requested CRS, and return also features
 geometries in requested CRS if 'Add geometry to feature response' is checked

 Could you please confirm it?


 Marcel


 2014-02-28 8:17 GMT+01:00 Marco Hugentobler 
 marco.hugentob...@sourcepole.ch:

 Hi Marcel

 Thanks for spotting this issue, it will be good to have a consistent
 behaviour with / without filter and for all output formats.

 Adding geometry / bounding box has been done for showing rubberbands and
 for handling search results (zoom to features that match the filter).
 Therefore, the bounding boxes need to be included even if 'add geometry to
 feature response' is not checked. The added bounding box was meant for
 cases where the geometry data should be kept private, but searching should
 be possible.

 I agree with the other points, please prepare a pull request.

 Regards,
 Marco



 On 27.02.2014 14:11, Marcel Dancak wrote:

 Hello,

 I found some inconsistencies in QGIS Mapserver in GetFeatureInfo WMS
 responses in GML format:

 Identification by point coordinates (X/Y or I/J parameters):
 
  - returns geometry data of every feature in layer's CRS only if 'Add
 geometry to feature response' in project settings is checked
  - returns bounding box of every feature in layer's CRS only if 'Add
 geometry to feature response' in project settings is checked
  - doesn't returns global bounding box of all matched features
 collection

 Searching by attributes (FILTER parameter)
 --
  - always returns geometry data of every feature in layer's CRS
  - always returns bounding box of every feature in layer's CRS
  - always returns global bounding box of all matched features
 collection in requested CRS (SRS/CRS parameter), but this value (whole XML
 element) is correct only for text/xml format, because bounding box value is
 computed only for text/xml format, but it's XML element is included in
 server response regardless of concrete XML output format.


 I'm able to fix these issues and prepare pull request(s). This is my
 suggestion:
  - return geometry data of every feature in requested CRS only if 'Add
 geometry to feature response' is checked
  - return bounding box of every feature in requested CRS only if 'Add
 geometry to feature response' is checked
  - return global bounding box of all matched features collection in
 requested CRS only if 'Add geometry to feature response' is checked, and in
 proper XML element depending on output format - BoundingBox
 CRS=EPSG:4326 maxx=1 minx=-1 maxy=1 miny=-1/ for text/xml and
 gml:boundedBygml:Box srsName=EPSG:4326gml:coordinates cs=,
 ts= -1,-1 1,1/gml:coordinates/gml:boundedBy for GML format.


 Marcel Dancak



 --
 Dr. Marco Hugentobler
 Sourcepole -  Linux  Open Source Solutions
 Weberstrasse 5, CH-8004 Zürich, Switzerland
 marco.hugentob...@sourcepole.ch http://www.sourcepole.ch
 Technical Advisor QGIS Project Steering Committee




___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread G. Allegri


 The only gotcha to this is that different plugins might require different
 versions of dependencies. We also toyed around in the past with the idea of
 each plugin having its own virtualenv for deps and then linking in the QGIS
 provided site_packages dir into that virtualenv too.


This would be great because it would solve the problem of users not being
administrators.

giovanni


 Regards

 Tim


 On Thu, Mar 6, 2014 at 1:56 PM, Tom Kralidis tomkrali...@gmail.comwrote:



 On Thu, 6 Mar 2014, G. Allegri wrote:

  Date: Thu, 6 Mar 2014 02:31:41 -0800
 From: G. Allegri gioha...@gmail.com
 To: Nathan Woodrow madman...@gmail.com
 Cc: qgis-developer List qgis-developer@lists.osgeo.org
 Subject: Re: [Qgis-developer] Fwd: A pipinstall plugin is possible?
 First:
 What's the difference between the the Osgeo4w Shell?



 Windows doesn't ship with any version of Python. Yay Windows!  So we
 bundle our own.  I personally don't mind this so much because it's
 easier
 to control the setup if we bundle it.

 The main thing here is just including pip and easy_install in all the
 windows installs, standalone and osgeo4w.  Jurgen has told me that
 easy_install is included in the 64 bit versions but not 32 bit
 versions. Is
 that correct Jurgen?

 If pip is included we can easily have plugins tell us what they need and
 we can install them.



 +1, this is exactly what I was imaging.
 A requirements.txt for pip would be all that a dev should write.


 +1, this would be great (we currently manage and bundle deps in MetaSearch
 as a workaround).

 - we would have to make sure the requirements file is standardized
   (others may have different / additional ones, like requirements-dev.txt,
   pip-requirements.txt, etc.).

 - for MetaSearch, the requirements.txt file never makes it to the QGIS
   runtime, so plugin providers would need to make sure it does


 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer




 --
 Tim Sutton - QGIS Project Steering Committee Member
 ==
 Please do not email me off-list with technical
 support questions. Using the lists will gain
 more exposure for your issues and the knowledge
 surrounding your issue will be shared with all.

 Irc: timlinux on #qgis at freenode.net
 ==




-- 
Giovanni Allegri
http://about.me/giovanniallegri
Twitter: https://twitter.com/_giohappy_
blog: http://blog.spaziogis.it
GEO+ geomatica in Italia http://bit.ly/GEOplus
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

[Qgis-developer] [FeedBack] import a DB with QGIS styles table

2014-03-06 Thread Yves Jacolin (Free)
Hi,

I would like to share a feedback on an issue on layer style in DB. 

One user wanted to migrate his database from pgsql 8.4 to pgsql 9.x. (the 
postgresql release is not important). He get some issue when importing the 
dump:

ERREUR:  invalid XML content
LINE 1: ...ion', 'communaute_communes54', 'the_geom', 'v40', '!DOCTYPE...
 ^
DETAIL:  line 1: StartTag: invalid element name
!DOCTYPE qgis PUBLIC 'http://mrcc.com/qgis.dtd' 'SYSTEM'

Googling about this, it seems that we can't import a DB with qgis layer style 
easily when a column is of XML type with a doctype inside. Even if the xml is 
valid.

The correct way is to SET XML option to DOCUMENT this way:

SET XML OPTION DOCUMENT;

before the insert statement.

Hope it can help someone later!

Y.
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread Gino Pirelli
or we can manage a
- light way (light in the plugin point of view) with simple requirement.txt
(or whatever)
or a
- robust and idependent way managing virtualenv
or a
- kaos way mixing :)

Luigi Pirelli


On 6 March 2014 13:18, Tim Sutton li...@linfiniti.com wrote:

 Hi

 The only gotcha to this is that different plugins might require different
 versions of dependencies. We also toyed around in the past with the idea of
 each plugin having its own virtualenv for deps and then linking in the QGIS
 provided site_packages dir into that virtualenv too.

 Regards

 Tim


 On Thu, Mar 6, 2014 at 1:56 PM, Tom Kralidis tomkrali...@gmail.comwrote:



 On Thu, 6 Mar 2014, G. Allegri wrote:

  Date: Thu, 6 Mar 2014 02:31:41 -0800
 From: G. Allegri gioha...@gmail.com
 To: Nathan Woodrow madman...@gmail.com
 Cc: qgis-developer List qgis-developer@lists.osgeo.org
 Subject: Re: [Qgis-developer] Fwd: A pipinstall plugin is possible?
 First:
 What's the difference between the the Osgeo4w Shell?



 Windows doesn't ship with any version of Python. Yay Windows!  So we
 bundle our own.  I personally don't mind this so much because it's
 easier
 to control the setup if we bundle it.

 The main thing here is just including pip and easy_install in all the
 windows installs, standalone and osgeo4w.  Jurgen has told me that
 easy_install is included in the 64 bit versions but not 32 bit
 versions. Is
 that correct Jurgen?

 If pip is included we can easily have plugins tell us what they need and
 we can install them.



 +1, this is exactly what I was imaging.
 A requirements.txt for pip would be all that a dev should write.


 +1, this would be great (we currently manage and bundle deps in MetaSearch
 as a workaround).

 - we would have to make sure the requirements file is standardized
   (others may have different / additional ones, like requirements-dev.txt,
   pip-requirements.txt, etc.).

 - for MetaSearch, the requirements.txt file never makes it to the QGIS
   runtime, so plugin providers would need to make sure it does


 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer




 --
 Tim Sutton - QGIS Project Steering Committee Member
 ==
 Please do not email me off-list with technical
 support questions. Using the lists will gain
 more exposure for your issues and the knowledge
 surrounding your issue will be shared with all.

 Irc: timlinux on #qgis at freenode.net
 ==

 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

[Qgis-developer] QGis Spline plugin

2014-03-06 Thread Geo DrinX
Hello All,


I am  trying  the Spline plugin with   QGis  2.2  on  Windows 7, but I
obtain this error:


Traceback (most recent call last):
  File C:/Users/rrr/.qgis2/python/plugins\spline\spline.py, line 96, in
canvasPressEvent
self.createFeature()
  File C:/Users/rrr/.qgis2/python/plugins\spline\spline.py, line 144, in
createFeature
if dlg.exec_():
AttributeError: 'NoneType' object has no attribute 'exec_'


Someone can help me ?


Thank you

Roberto
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

[Qgis-developer] bounding box of QgsLabel

2014-03-06 Thread Poltini Roberto
Hi all,
   how can i get the bounding box rectangle af a QgsLabel object ?
Thanks
Roberto

Per essere informati sulle novità del Gruppo Iren, vi invitiamo a registrarvi 
alla nostra mailing list, all’indirizzo 
http://www.gruppoiren.it/;http://www.gruppoiren.it/ .

L’area Sostenibilità è stata ampliata ed è disponibile all’indirizzo 
http://www.gruppoiren.it/sostenibilita.asp;http://www.gruppoiren.it/sostenibilita.asp.
 Lo sviluppo si inserisce in un percorso che ha visto Iren conseguire il 
riconoscimento “Best Improver” nell’ultima edizione del “CSR Online Awards”, 
per aver registrato la crescita più significativa tra le 100 società italiane 
oggetto del survey coordinato dalla società di consulenza Lundquist.

Le informazioni contenute nella presente comunicazione e i relativi allegati 
possono essere riservate e sono, comunque, destinate esclusivamente alle 
persone o alla Società sopraindicati. La diffusione, distribuzione e/o 
copiatura del documento trasmesso da parte di qualsiasi soggetto diverso dal 
destinatario è proibita, sia ai sensi dell’art. 616 c.p. , che ai sensi del 
D.Lgs. n. 196/2003. Se avete ricevuto questo messaggio per errore, vi preghiamo 
di distruggerlo e di informare immediatamente il mittente.


The information in this e-mail (which includes any files transmitted with it) 
is confidential and may also be legally privileged. It is intended for the 
addressee only. Access to this e-mail by anyone else is unauthorised. It is not 
to be relied upon by any person other than the addressee, except with our prior 
written approval. If no such approval is given, we will not accept any 
liability (in negligence or otherwise) arising from any third party acting. 
Unauthorised recipients are required to maintain confidentiality. If you have 
received this e-mail in error please notify us immediately, destroy any copies 
and delete it from your computer system. Any use, dissemination, forwarding, 
printing or copying of this e-mail is prohibited.

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] SQL Injection vulnerability

2014-03-06 Thread Jürgen E . Fischer
Hi Gino,

On Thu, 06. Mar 2014 at 12:10:02 +0100, Gino Pirelli wrote:
 but they quote only ' or \ so they are -not- enough to a complete sql
 injection protection [4]

Um, the link doesn't clearly point out what else to do.

 every DB have it's internal functions to manage this cases, but better
 use parametrized queries as in many parts of the provider... but not
 in all parts.

[1] looks similar.  It duplicates all backslashes not just those in front of a
double quote and prepends a E to strings with backslashes.  7829e7a now does it
the same way.



Jürgen

[1] 
http://doxygen.postgresql.org/fe-exec_8c.html#a01c75d019597e76bc041716f27caf564

-- 
Jürgen E. Fischer norBIT GmbH   Tel. +49-4931-918175-31
Dipl.-Inf. (FH)   Rheinstraße 13Fax. +49-4931-918175-50
Software Engineer D-26506 Norden   http://www.norbit.de
QGIS PSC member (RM)  Germany  IRC: jef on FreeNode 


-- 
norBIT Gesellschaft fuer Unternehmensberatung und Informationssysteme mbH
Rheinstrasse 13, 26506 Norden
GF: Jelto Buurman, HR: Amtsgericht Emden, HRB 5502

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


[Qgis-developer] Plugin [51] Hotlink approval notification.

2014-03-06 Thread noreply

Plugin Hotlink approval by geum.
The plugin version [51] Hotlink 0.7 is now approved
Link: http://plugins.qgis.org/plugins/Hotlink/
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


[Qgis-developer] qgis 2.2 crash

2014-03-06 Thread Enzo Cocca
hi all,

I have one problem with pyarchinit plugin and qgis 2.2 on win7. when I try
to make one action with this plugin qgis go in crash. I have an error that
win transform in a dump file.
I have debugged this file with wdk and below I put the debugging:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File
[C:\Users\user\AppData\Local\Temp\qgis-20140306-094727-5224-6084-c3a2817.dmp]
User Mini Dump File: Only registers, stack and portions of memory are
available

Symbol search path is: *** Invalid ***

* Symbol loading may be unreliable without a symbol search path.   *
* Use .symfix to have the debugger choose a symbol path.   *
* After setting your symbol path, use .reload to refresh symbol locations. *

Executable search path is:
Windows 7 Version 7601 (Service Pack 1) MP (8 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Thu Mar  6 09:47:28.000 2014 (UTC + 1:00)
System Uptime: not available
Process Uptime: 0 days 0:00:36.000





This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(1468.17c4): Access violation - code c005 (first/second chance not
available)
*** WARNING: Unable to verify timestamp for ntdll.dll
*** ERROR: Module load completed but symbols could not be loaded for
ntdll.dll
*** WARNING: Unable to verify timestamp for kernel32.dll
*** ERROR: Module load completed but symbols could not be loaded for
kernel32.dll
eax= ebx=0d980d78 ecx=0ee7a1d0 edx=0265 esi=0d980d38
edi=0043b8cc
eip=77c30c32 esp=0043b58c ebp=0043b59c iopl=0 nv up ei pl zr na pe
nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b
efl=0246
ntdll+0x20c32:
77c30c32 83c404  add esp,4
0:000 The stored exception information can be accessed via .ecxr.
   ^ No runnable debuggees error in 'The stored exception information
can be accessed via .ecxr.'
0:000 (1468.17c4): Access violation - code c005 (first/second chance
not available)
   ^ Syntax error in '(1468.17c4): Access violation - code c005
(first/second chance not available)'
0:000 !analayze -v
No export analayze found
0:000 !analyze -v
***
*
  *
*Exception Analysis
  *
*
  *
***

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for
spatialiteprovider.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for
core.pyd -
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for
qgis_gui.dll -
* OS symbols are WRONG. Please fix symbols to do analysis.

* OS (WOW64 kernel32) symbols are WRONG. Please fix symbols to do
analysis.

*
***   ***
***   ***
***Your debugger is not using the correct symbols ***
***   ***
***In order for this command to work properly, your symbol path   ***
***must point to .pdb files that have full type information.  ***
***   ***
***Certain .pdb files (such as the public OS symbols) do not  ***
***contain the required information.  Contact the group that  ***
***provided you with these symbols if you need this command to***
***work.  ***
***   ***
***Type referenced: nt!IMAGE_NT_HEADERS32 ***
***   ***
*
*
* Symbols can not be loaded because symbol path is not initialized. *
*   *
* The Symbol Path can be set by:*
*   using the _NT_SYMBOL_PATH environment variable. *
*   using the -y symbol_path argument when starting the debugger. *
*   using .sympath and .sympath

Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread Larry Shaffer
Hi,

On Thu, Mar 6, 2014 at 5:18 AM, Tim Sutton li...@linfiniti.com wrote:

 Hi

 The only gotcha to this is that different plugins might require different
 versions of dependencies. We also toyed around in the past with the idea of
 each plugin having its own virtualenv for deps and then linking in the QGIS
 provided site_packages dir into that virtualenv too.


+1 for a virtualenv approach. -1 if virtualenv is *not* the basis of the
implementation.

The last thing users need is to download/install a plugin just to test it
out, then have it automatically muck about with their global or user Python
installation.

I think starting with a single app-wide virtualenv backend and pip-based
GUI installer/manager for all plugins and console, first, would be prudent.
Then, implement per-plugin virtualenv if that goes well.

Wouldn't per-plugin virtualenv reek havoc in the console, where global
access to plugins is often very useful?

I think, as a starting point, reviewing PyCharm's simple module manager and
virtualenv creator would be good for including something similar in Plugin
Manager, or as an independent dialog [0].

[0 ] http://drive.dakotacarto.com/qgis/pycharm_pymod-manager.png

Regards,

Larry



 Regards

 Tim


 On Thu, Mar 6, 2014 at 1:56 PM, Tom Kralidis tomkrali...@gmail.comwrote:



 On Thu, 6 Mar 2014, G. Allegri wrote:

  Date: Thu, 6 Mar 2014 02:31:41 -0800
 From: G. Allegri gioha...@gmail.com
 To: Nathan Woodrow madman...@gmail.com
 Cc: qgis-developer List qgis-developer@lists.osgeo.org
 Subject: Re: [Qgis-developer] Fwd: A pipinstall plugin is possible?
 First:
 What's the difference between the the Osgeo4w Shell?



 Windows doesn't ship with any version of Python. Yay Windows!  So we
 bundle our own.  I personally don't mind this so much because it's
 easier
 to control the setup if we bundle it.

 The main thing here is just including pip and easy_install in all the
 windows installs, standalone and osgeo4w.  Jurgen has told me that
 easy_install is included in the 64 bit versions but not 32 bit
 versions. Is
 that correct Jurgen?

 If pip is included we can easily have plugins tell us what they need and
 we can install them.



 +1, this is exactly what I was imaging.
 A requirements.txt for pip would be all that a dev should write.


 +1, this would be great (we currently manage and bundle deps in MetaSearch
 as a workaround).

 - we would have to make sure the requirements file is standardized
   (others may have different / additional ones, like requirements-dev.txt,
   pip-requirements.txt, etc.).

 - for MetaSearch, the requirements.txt file never makes it to the QGIS
   runtime, so plugin providers would need to make sure it does


 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer




 --
 Tim Sutton - QGIS Project Steering Committee Member
 ==
 Please do not email me off-list with technical
 support questions. Using the lists will gain
 more exposure for your issues and the knowledge
 surrounding your issue will be shared with all.

 Irc: timlinux on #qgis at freenode.net
 ==

 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

[Qgis-developer] Loading on Samsung Galaxy Note 8 - success

2014-03-06 Thread newbury
I saw a post about unmounting the SD card and was able to download and install. 
 Finally.
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


Re: [Qgis-developer] A pipinstall plugin is possible? First: What's the difference between the Osgeo4w Shell?

2014-03-06 Thread mando
I would like also suggest that the installation of python modules it is not
necessary linked to a plugin, but also for every experiment we want make
through the python console. Ut is usefull keep it on mind for the futures
development.

Regards
Luca



--
View this message in context: 
http://osgeo-org.1560.x6.nabble.com/A-pipinstall-plugin-is-possible-First-What-s-the-difference-between-the-Osgeo4w-Shell-tp5107633p5107977.html
Sent from the Quantum GIS - Developer mailing list archive at Nabble.com.
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


Re: [Qgis-developer] SQL Injection vulnerability

2014-03-06 Thread Gino Pirelli
Thank you Jürgen, I feel safer ;) but... I can't figure out how postgres
quote_* methods manage -- Comments or String without Quotes that can
break SQL statement or introduce elements that can't be escaped...

I would appreciate opinions by DB experts because looking around all says
that escaping it's not enough.

Luigi Pirelli (luigi.pire...@faunalia.it - lui...@gmail.com)



On 6 March 2014 16:35, Jürgen E. j...@norbit.de wrote:

 Hi Gino,

 On Thu, 06. Mar 2014 at 12:10:02 +0100, Gino Pirelli wrote:
  but they quote only ' or \ so they are -not- enough to a complete sql
  injection protection [4]

 Um, the link doesn't clearly point out what else to do.

  every DB have it's internal functions to manage this cases, but better
  use parametrized queries as in many parts of the provider... but not
  in all parts.

 [1] looks similar.  It duplicates all backslashes not just those in front
 of a
 double quote and prepends a E to strings with backslashes.  7829e7a now
 does it
 the same way.



 Jürgen

 [1]
 http://doxygen.postgresql.org/fe-exec_8c.html#a01c75d019597e76bc041716f27caf564

 --
 Jürgen E. Fischer norBIT GmbH   Tel. +49-4931-918175-31
 Dipl.-Inf. (FH)   Rheinstraße 13Fax. +49-4931-918175-50
 Software Engineer D-26506 Norden
 http://www.norbit.de
 QGIS PSC member (RM)  Germany  IRC: jef on FreeNode

 --
 norBIT Gesellschaft fuer Unternehmensberatung und Informationssysteme mbH
 Rheinstrasse 13, 26506 Norden
 GF: Jelto Buurman, HR: Amtsgericht Emden, HRB 5502

 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] Fwd: A pipinstall plugin is possible? First: What's the difference between the the Osgeo4w Shell?

2014-03-06 Thread Tim Sutton
Hi


On Thu, Mar 6, 2014 at 6:46 PM, Larry Shaffer lar...@dakotacarto.comwrote:

 Hi,

 On Thu, Mar 6, 2014 at 5:18 AM, Tim Sutton li...@linfiniti.com wrote:

 Hi

 The only gotcha to this is that different plugins might require different
 versions of dependencies. We also toyed around in the past with the idea of
 each plugin having its own virtualenv for deps and then linking in the QGIS
 provided site_packages dir into that virtualenv too.


 +1 for a virtualenv approach. -1 if virtualenv is *not* the basis of the
 implementation.

 The last thing users need is to download/install a plugin just to test it
 out, then have it automatically muck about with their global or user Python
 installation.

 I think starting with a single app-wide virtualenv backend and pip-based
 GUI installer/manager for all plugins and console, first, would be prudent.
 Then, implement per-plugin virtualenv if that goes well.

 Wouldn't per-plugin virtualenv reek havoc in the console, where global
 access to plugins is often very useful?


Yes, this was the main downside we (Martin Dobias and myself) thought of
when considering this idea some time ago. But with the current situation it
is also possible to have interference between plugins (e.g. if more than
one plugins has a top level package called 'utils' the package which will
actually get loaded may be not the expected one). One simple work around
with the virtual env approach would be that we have a global plugins
virtual env (as you suggested above) and a per plugin virtual env which is
optional. In metadata.txt, a plugin could nominate itself to be part of the
global plugins venv (and thus have access to and be accessible by other
plugins, but also vulnerable to changes to package versions made by other
plugins) or in a private venv (in which case it would have access only to
the app site-packages). I would include core plugins in the global QGIS
site-packages so that e.g. processing is always available no matter what.



 I think, as a starting point, reviewing PyCharm's simple module manager
 and virtualenv creator would be good for including something similar in
 Plugin Manager, or as an independent dialog [0].


Yeah they have a neat implementation (though it is probably all done in
java so no cut   paste coding for us :-( ).

Regards

Tim



 [0 ] http://drive.dakotacarto.com/qgis/pycharm_pymod-manager.png






 Regards,

 Larry



 Regards

 Tim


 On Thu, Mar 6, 2014 at 1:56 PM, Tom Kralidis tomkrali...@gmail.comwrote:



 On Thu, 6 Mar 2014, G. Allegri wrote:

  Date: Thu, 6 Mar 2014 02:31:41 -0800
 From: G. Allegri gioha...@gmail.com
 To: Nathan Woodrow madman...@gmail.com
 Cc: qgis-developer List qgis-developer@lists.osgeo.org
 Subject: Re: [Qgis-developer] Fwd: A pipinstall plugin is possible?
 First:
 What's the difference between the the Osgeo4w Shell?



 Windows doesn't ship with any version of Python. Yay Windows!  So we
 bundle our own.  I personally don't mind this so much because it's
 easier
 to control the setup if we bundle it.

 The main thing here is just including pip and easy_install in all the
 windows installs, standalone and osgeo4w.  Jurgen has told me that
 easy_install is included in the 64 bit versions but not 32 bit
 versions. Is
 that correct Jurgen?

 If pip is included we can easily have plugins tell us what they need
 and
 we can install them.



 +1, this is exactly what I was imaging.
 A requirements.txt for pip would be all that a dev should write.


 +1, this would be great (we currently manage and bundle deps in
 MetaSearch
 as a workaround).

 - we would have to make sure the requirements file is standardized
   (others may have different / additional ones, like
 requirements-dev.txt,
   pip-requirements.txt, etc.).

 - for MetaSearch, the requirements.txt file never makes it to the QGIS
   runtime, so plugin providers would need to make sure it does


 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer




 --
 Tim Sutton - QGIS Project Steering Committee Member
 ==
 Please do not email me off-list with technical
 support questions. Using the lists will gain
 more exposure for your issues and the knowledge
 surrounding your issue will be shared with all.

 Irc: timlinux on #qgis at freenode.net
 ==

 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer





-- 
Tim Sutton - QGIS Project Steering Committee Member
==
Please do not email me off-list with technical
support questions. Using the lists will gain
more exposure for your issues and the knowledge
surrounding your issue will be shared with all.

Irc: timlinux on #qgis at freenode.net

Re: [Qgis-developer] SQL Injection vulnerability

2014-03-06 Thread G. Allegri
QGIS Server does it's own escaping and filters allowed characters and words
in filters.

giovanni


2014-03-06 18:59 GMT+01:00 Alessandro Pasotti apaso...@gmail.com:

 2014-03-06 18:51 GMT+01:00 Gino Pirelli lui...@gmail.com:

 Thank you Jürgen, I feel safer ;) but... I can't figure out how postgres
 quote_* methods manage -- Comments or String without Quotes that can
 break SQL statement or introduce elements that can't be escaped...

 I would appreciate opinions by DB experts because looking around all says
 that escaping it's not enough.

 Luigi Pirelli (luigi.pire...@faunalia.it - lui...@gmail.com)



 On 6 March 2014 16:35, Jürgen E. j...@norbit.de wrote:

 Hi Gino,

 On Thu, 06. Mar 2014 at 12:10:02 +0100, Gino Pirelli wrote:
  but they quote only ' or \ so they are -not- enough to a complete sql
  injection protection [4]

 Um, the link doesn't clearly point out what else to do.

  every DB have it's internal functions to manage this cases, but better
  use parametrized queries as in many parts of the provider... but not
  in all parts.

 [1] looks similar.  It duplicates all backslashes not just those in
 front of a
 double quote and prepends a E to strings with backslashes.  7829e7a now
 does it
 the same way.



 Hi Gino,

 are you worried about functions exposed by QGIS Mapserver or by the
 desktop?

 --
 Alessandro Pasotti
 w3:   www.itopen.it

 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer




-- 
Giovanni Allegri
http://about.me/giovanniallegri
Twitter: https://twitter.com/_giohappy_
blog: http://blog.spaziogis.it
GEO+ geomatica in Italia http://bit.ly/GEOplus
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] SQL Injection vulnerability

2014-03-06 Thread Alessandro Pasotti
2014-03-06 18:51 GMT+01:00 Gino Pirelli lui...@gmail.com:

 Thank you Jürgen, I feel safer ;) but... I can't figure out how postgres
 quote_* methods manage -- Comments or String without Quotes that can
 break SQL statement or introduce elements that can't be escaped...

 I would appreciate opinions by DB experts because looking around all says
 that escaping it's not enough.

 Luigi Pirelli (luigi.pire...@faunalia.it - lui...@gmail.com)



 On 6 March 2014 16:35, Jürgen E. j...@norbit.de wrote:

 Hi Gino,

 On Thu, 06. Mar 2014 at 12:10:02 +0100, Gino Pirelli wrote:
  but they quote only ' or \ so they are -not- enough to a complete sql
  injection protection [4]

 Um, the link doesn't clearly point out what else to do.

  every DB have it's internal functions to manage this cases, but better
  use parametrized queries as in many parts of the provider... but not
  in all parts.

 [1] looks similar.  It duplicates all backslashes not just those in front
 of a
 double quote and prepends a E to strings with backslashes.  7829e7a now
 does it
 the same way.



Hi Gino,

are you worried about functions exposed by QGIS Mapserver or by the
desktop?

-- 
Alessandro Pasotti
w3:   www.itopen.it
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] SQL Injection vulnerability

2014-03-06 Thread Gino Pirelli
Hi alessandro

this is inside provider... I suppose that qgis server uses provider as
Desktop

Luigi Pirelli (luigi.pire...@faunalia.it - lui...@gmail.com)


On 6 March 2014 18:59, Alessandro Pasotti apaso...@gmail.com wrote:

 2014-03-06 18:51 GMT+01:00 Gino Pirelli lui...@gmail.com:

 Thank you Jürgen, I feel safer ;) but... I can't figure out how postgres
 quote_* methods manage -- Comments or String without Quotes that can
 break SQL statement or introduce elements that can't be escaped...

 I would appreciate opinions by DB experts because looking around all says
 that escaping it's not enough.

 Luigi Pirelli (luigi.pire...@faunalia.it - lui...@gmail.com)



 On 6 March 2014 16:35, Jürgen E. j...@norbit.de wrote:

 Hi Gino,

 On Thu, 06. Mar 2014 at 12:10:02 +0100, Gino Pirelli wrote:
  but they quote only ' or \ so they are -not- enough to a complete sql
  injection protection [4]

 Um, the link doesn't clearly point out what else to do.

  every DB have it's internal functions to manage this cases, but better
  use parametrized queries as in many parts of the provider... but not
  in all parts.

 [1] looks similar.  It duplicates all backslashes not just those in
 front of a
 double quote and prepends a E to strings with backslashes.  7829e7a now
 does it
 the same way.



 Hi Gino,

 are you worried about functions exposed by QGIS Mapserver or by the
 desktop?

 --
 Alessandro Pasotti
 w3:   www.itopen.it

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] SQL Injection vulnerability

2014-03-06 Thread Alessandro Pasotti
2014-03-06 19:09 GMT+01:00 Gino Pirelli lui...@gmail.com:

 Hi alessandro

 this is inside provider... I suppose that qgis server uses provider as
 Desktop



Yes, but it does some sanity checks.

https://github.com/qgis/QGIS/blob/master/src/mapserver/qgswmsserver.cpp#L1975


-- 
Alessandro Pasotti
w3:   www.itopen.it
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] SQL Injection vulnerability

2014-03-06 Thread Jürgen E . Fischer
Hi Gino,

On Thu, 06. Mar 2014 at 18:51:58 +0100, Gino Pirelli wrote:
 Thank you Jürgen, I feel safer ;) but... I can't figure out how postgres
 quote_* methods manage -- Comments or String without Quotes that can
 break SQL statement or introduce elements that can't be escaped...

quotedValue puts ' around the value and duplicates all inner ' so that they are
not interpreted as quotes that end the string, but as quotes inside the string
and also duplicates backslashes so that they are interpreted as backslashes
instead of giving the following character a special meaning.

What else is there to handle?



Jürgen

-- 
Jürgen E. Fischer norBIT GmbH   Tel. +49-4931-918175-31
Dipl.-Inf. (FH)   Rheinstraße 13Fax. +49-4931-918175-50
Software Engineer D-26506 Norden   http://www.norbit.de
QGIS PSC member (RM)  Germany  IRC: jef on FreeNode 


-- 
norBIT Gesellschaft fuer Unternehmensberatung und Informationssysteme mbH
Rheinstrasse 13, 26506 Norden
GF: Jelto Buurman, HR: Amtsgericht Emden, HRB 5502

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


Re: [Qgis-developer] SQL Injection vulnerability

2014-03-06 Thread aperi2007

AFAIK in a SLD style should never be put a direct sql string.
The SQL is at datasource level for dataset filter and this is a question 
outside from the style.


In the style should be put only some filter for classifications.
This is more affordable with the CQL rather than SQL.

Apart from this,
in the SQL the more suitable character for sql injection is the ; char

The ; char is the break for every command and so
it allow some trick.

As example:

string= ;delete from name-table;
with the ; ias first char is capable usually to do work this string also 
in a system where it

is is a concatenation in

'select * from table-2 where (' || string || ');'

it became:

'select * from table-2 where ( ;delete from name-table; );'

a dbms that try to execute this will do an error of-course, because

select * from table-2 where ( ;

is an error, but after this it could execute the

delete from name-table;

and this is not an error.

my 2 ct.

Andrea.

On 06/03/2014 19:25, Jürgen E. Fischer wrote:

Hi Gino,

On Thu, 06. Mar 2014 at 18:51:58 +0100, Gino Pirelli wrote:

Thank you Jürgen, I feel safer ;) but... I can't figure out how postgres
quote_* methods manage -- Comments or String without Quotes that can
break SQL statement or introduce elements that can't be escaped...

quotedValue puts ' around the value and duplicates all inner ' so that they are
not interpreted as quotes that end the string, but as quotes inside the string
and also duplicates backslashes so that they are interpreted as backslashes
instead of giving the following character a special meaning.

What else is there to handle?



Jürgen



___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


[Qgis-developer] Plugin [278] NetCDF Browser approval notification.

2014-03-06 Thread noreply

Plugin NetCDF Browser approval by etourigny.
The plugin version [278] NetCDF Browser 0.3 Experimental is now approved
Link: http://plugins.qgis.org/plugins/netcdfbrowser/
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


Re: [Qgis-developer] error building qgis debian package for 2.2

2014-03-06 Thread Etienne Tourigny
You are right - so sorry! I got it to build ok following the steps

Just a remark:

dch requires the devscripts package but that is not explained in INSTALL.
 Is that required for ubuntu only? If not this dependency be added to
INSTALL

$ dch -l ~raring  --force-distribution --distribution raring raring build

The program 'dch' is currently not installed. You can install it by typing:
sudo apt-get install devscripts


regards,
Etienne

On Thu, Mar 6, 2014 at 5:04 AM, Jürgen E. j...@norbit.de wrote:

 Hi Etienne,

 On Wed, 05. Mar 2014 at 22:05:49 -0300, Etienne Tourigny wrote:
  I am trying to build debian packages for 2.2 in Ubuntu Raring (12.04) but
  there seems to be a problem with libspatialindex, although I do have
  libspatialindex1 and libspatialindex-dev installed
 
  The build process complains about missing /libspatialindex.so which is in
  /usr/lib/

 You didn't add the changelog entry for raring (INSTALL 3.8), right?


 Jürgen

 --
 Jürgen E. Fischer norBIT GmbH   Tel. +49-4931-918175-31
 Dipl.-Inf. (FH)   Rheinstraße 13Fax. +49-4931-918175-50
 Software Engineer D-26506 Norden
 http://www.norbit.de
 QGIS PSC member (RM)  Germany  IRC: jef on FreeNode

 --
 norBIT Gesellschaft fuer Unternehmensberatung und Informationssysteme mbH
 Rheinstrasse 13, 26506 Norden
 GF: Jelto Buurman, HR: Amtsgericht Emden, HRB 5502

 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] uploading plugin files to hub.qgis.org

2014-03-06 Thread Alex Mandel
Are you trying to upload a release of your plugin or looking to host the
source code and bug tracker of the plugin?

Release of plugins is handled separately via plugins.qgis.org

What you've pointed out is a bug that the admins need to figure out why
something changed. I have a working repo key with hub as do many others,
so the interface was there at some point. I'm copying the person who
originally setup the site to see if they know what's going on.

Thanks,
Alex

On 03/05/2014 12:18 AM, Giuseppe De Marco wrote:
 Allright then what is the working procedure to upload a plugin
 other than having an external git repo.
 Besides given that you have to upload to an external
 server how can you modify your repository configuration
 inside hub.qgis.org to point to your external repo?
 
 thank you!
 
 2014-03-04 21:21 GMT+01:00 Alex Mandel tech_...@wildintellect.com:
 On 03/04/2014 04:33 AM, Giuseppe De Marco wrote:
 Hello,
 I have registered at hub.qgis.org and I have created 2 subprojects 
 activating
 the option repository in settings.
 I have some problems authenticating with git:
 1) I cannot upload my public key because it says that
 http://hub.qgis.org/my/public_keys page not found
 2) obviously when I try to git push origin it asks for a password..

 this is what I get
 joe@U36SD:~/.qgis2/python/plugins/SelectTools$ git remote -v
 origingito...@qgis.org:selecttools.git (fetch)
 origingito...@qgis.org:selecttools.git (push)

 can somebody help me out?

 Thank you


 You are right, something is amiss. I can't tell which Redmine plugin is
 supposed to handle that. I expected to see something like the Gitosis
 plugin but there's only a post-commit hook and a qgis customization
 plugin. Neither of which integrate with git keys on the back end.

 Did someone change the configuration of Redmine?

 Thanks,
 Alex
 
 
 

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


[Qgis-developer] IntraMaps Roam first release - Windows QGIS Data Collection

2014-03-06 Thread Nathan Woodrow
Hi everyone,

Just dropping a quick email out to let everyone know about a project I have
been working on the last couple of months.

Digital Mapping Solutions, and myself, would like to announce the first
version of IntraMaps Roam - a simple, but flexible, Windows based data
collection application built using Python and QGIS.

IntraMaps Roam (or Roam for short) is a standalone, fully bundled, Python
application that was created to do data collection with a QGIS backend.
 For those of you who have seen my QMap project I started a year or so ago
you can consider this a reincarnation of that project. Most of the code has
been reworked and using the QGIS libs gave me full flexibility in layout.

The release page can be found at
https://github.com/DMS-Aus/Roam/releases/tag/v2.0 and the wiki with all the
information to get started at: https://github.com/DMS-Aus/Roam/wiki You can
also take a look at the FAQ for the common questions:
https://github.com/DMS-Aus/Roam/wiki/FAQ

Roam has been a great exercise in using and bundling QGIS libs with a
Python application.

As Roam is based on PyQt and QGIS it is under the GPL2 license. Pull
requests are welcome.

Links:
- https://github.com/DMS-Aus/Roam/releases/tag/v2.0
- https://github.com/DMS-Aus/Roam/wiki
- https://github.com/DMS-Aus/Roam/wiki/FAQ

Happy mapping!

Regards,
Nathan
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] IntraMaps Roam first release - Windows QGIS Data Collection

2014-03-06 Thread Paolo Cavallini
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Il 07/03/2014 07:32, Nathan Woodrow ha scritto:

 Just dropping a quick email out to let everyone know about a project I have 
 been
 working on the last couple of months.  
 
 Digital Mapping Solutions, and myself, would like to announce the first 
 version of
 IntraMaps Roam - a simple, but flexible, Windows based data collection 
 application
 built using Python and QGIS.

Hi Nathan,
thanks for this. Why is this for Win only?
All the best.

- -- 
Paolo Cavallini - www.faunalia.eu
Corsi QGIS e PostGIS: http://www.faunalia.eu/training.html
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: Using GnuPG with Icedove - http://www.enigmail.net/

iEYEARECAAYFAlMZbt0ACgkQ/NedwLUzIr4j7wCghwboGx5JSS5BENteOVjcpfuG
r1kAnRey/RUn55fvfFbExUm4GvNloRxz
=Dmrf
-END PGP SIGNATURE-
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer


Re: [Qgis-developer] IntraMaps Roam first release - Windows QGIS Data Collection

2014-03-06 Thread Nathan Woodrow
On Fri, Mar 7, 2014 at 5:01 PM, Paolo Cavallini cavall...@faunalia.itwrote:

 thanks for this. Why is this for Win only?


There isn't really a lot of Windows only things in the code itself, well
nothing that can't be abstracted away, but I mainly dev on Windows and so
are most of our clients so that was our first priority.  The build scripts
should be flexible enough to use something something py2so or py2app for
Linux and OS X.  Happy for a pull request if people got it working on those
platforms, I just have more experience on Windows and little time :)  It
can also run from the src folder but might need some tweaks for a non
windows setup i.e I assume a OSGeo4W folder setup for paths, but that is
just a if statement to change.

- Nathan
___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [Qgis-developer] IntraMaps Roam first release - Windows QGIS Data Collection

2014-03-06 Thread Gino Pirelli
great Nathan... this can be a good platform where to insert a future mobile
use for Geosisma

can we plan to transform/fork/ it in a sort of framework? I'm going to test
it :)


On 7 March 2014 08:09, Nathan Woodrow madman...@gmail.com wrote:


 On Fri, Mar 7, 2014 at 5:01 PM, Paolo Cavallini cavall...@faunalia.itwrote:

 thanks for this. Why is this for Win only?


 There isn't really a lot of Windows only things in the code itself, well
 nothing that can't be abstracted away, but I mainly dev on Windows and so
 are most of our clients so that was our first priority.  The build scripts
 should be flexible enough to use something something py2so or py2app for
 Linux and OS X.  Happy for a pull request if people got it working on those
 platforms, I just have more experience on Windows and little time :)  It
 can also run from the src folder but might need some tweaks for a non
 windows setup i.e I assume a OSGeo4W folder setup for paths, but that is
 just a if statement to change.

 - Nathan

 ___
 Qgis-developer mailing list
 Qgis-developer@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/qgis-developer

___
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/qgis-developer