Re: [pmwiki-users] PHP 5.3

[Petko Yotov]

The Ape recipe needs to have the line  in the skin 
template. Some skins don't have it, if yours doesn't have it, insert 
this line it right before the closing  tag, see also


  https://www.pmwiki.org/wiki/Cookbook/Ape#Notes

Petko

On 27/04/2019 21:08, David Bruce Murray wrote:

Sorry...I meant APE was the recipe I had tried for embedding YouTube
videos...not abe.


___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3

[Michael Lang]

Hi David,

I had the same problem in March this year - I wasn't familiar too with 
the PMwiki internals...


First make a backup of your working site under PHP5.3 to your pc's hdd!

This is what I did and what helped in my case:


Hi,
SiteAnalyzer didn't bring me foreward; only the advice to update 
counter.php...


I checked some other issues -> no result! Now I made the following: I 
made a backup of my broken site, deleted all pmwiki files on the server 
and installed the current pmwiki2.2.113 to the server - then I copied 
the upload and wiki.d archives from my backup to the new installation 
files on the server and after some file updates everything works fine 
now ;-)!


Thanks for your support - now I'm really familiar with pmwiki's entrails...

Regards, Michael

Am 21.03.2019 um 09:22 schrieb Michael Lang:
Thanks, Simon,
I will test that. Meanwhile, as a workaround, I moved with my site 
www.miclangschach.de/index.php to a different provider, where I had the 
choice to go back to PHP5.3.29 - and voilá, everything is working: 
www.michael-lang-schach.de (under PMWiki 2.2.14, but this will be 
changed ;-)) - Regards, Michael


Am 21.03.2019 um 08:46 schrieb Simon:
Making sure all software is up to date is a great idea if you have 
forewarning of any server or PHP updates.


See

 * https://www.pmwiki.org/wiki/PmWiki/SiteAnalyzer

or

 * https://www.pmwiki.org/wiki/Cookbook/RecipeCheck

which will help you out

cheers

-

Regards, Michael :-)


Am 26.04.2019 um 22:17 schrieb David Bruce Murray:


I received this from my web host today.

"We are reaching out to inform you that as of June 3, 2019, Media 
Temple will no longer support PHP 5.3. Any domains using PHP 5.3 in 
your GRID hosting will automatically be changed to PHP 5.6 on that 
date. You are strongly encouraged to update any existing PHP code to 
ensure it is at least compliant with PHP 5.6."


When I changed over to PHP to 5.6, it broke my site. I get strings of 
error messages like those posted below. I am not a PHP programmer, and 
have no idea how to fix any of this. My site is huge:


www.sghistory.com

For the moment, I can set it back to PHP 5.3, but it looks like I have 
a little more than one month to find a solution. Any suggestions are 
appreciated. I have tried updating to the latest version of pmwiki in 
the past, but that broke something else.


*Deprecated*: preg_replace(): The /e modifier is deprecated, use 
preg_replace_callback instead 
in*/nfs/c10/h10/mnt/141983/domains/sghistory.com/html/local/spacewikiwords.php*on 
line*98


**Deprecated*: preg_replace(): The /e modifier is deprecated, use 
preg_replace_callback instead 
in*/nfs/c10/h10/mnt/141983/domains/sghistory.com/html/pmwiki.php*on 
line*608*


*
*


___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3

[Peter Kay]

One of the cookbook recipes that has that filename is "Alternate Naming
Scheme" (https://www.pmwiki.org/wiki/Cookbook/AlternateNamingScheme), which
doesn't have an up-to-date version.

--Peter

On Fri, Apr 26, 2019 at 5:17 PM Simon  wrote:

> You need to ensure all your recipes are updated
>
> See
> https://www.pmwiki.org/wiki/Category/PHP72
>
>
> These may help you see which recipes are out of date
> https://www.pmwiki.org/wiki/PmWiki/AnalyzeResults
> https://www.pmwiki.org/wiki/Cookbook/RecipeCheck
>
>
> If you have written your own recipes see
> https://www.pmwiki.org/wiki/PmWiki/CustomMarkup
>
> cheers
>
> Simon
> 
> http://kiwiwiki.nz
>
>
> On Sat, 27 Apr 2019 at 08:19, David Bruce Murray 
> wrote:
>
>> I received this from my web host today.
>>
>> "We are reaching out to inform you that as of June 3, 2019, Media Temple
>> will no longer support PHP 5.3. Any domains using PHP 5.3 in your GRID
>> hosting will automatically be changed to PHP 5.6 on that date. You are
>> strongly encouraged to update any existing PHP code to ensure it is at
>> least compliant with PHP 5.6."
>>
>> When I changed over to PHP to 5.6, it broke my site. I get strings of
>> error messages like those posted below. I am not a PHP programmer, and have
>> no idea how to fix any of this. My site is huge:
>>
>> www.sghistory.com
>>
>> For the moment, I can set it back to PHP 5.3, but it looks like I have a
>> little more than one month to find a solution. Any suggestions are
>> appreciated. I have tried updating to the latest version of pmwiki in the
>> past, but that broke something else.
>>
>> *Deprecated*: preg_replace(): The /e modifier is deprecated, use
>> preg_replace_callback instead in 
>> */nfs/c10/h10/mnt/141983/domains/sghistory.com/html/local/spacewikiwords.php
>> * on line
>>
>> *98 **Deprecated*: preg_replace(): The /e modifier is deprecated, use
>> preg_replace_callback instead in 
>> */nfs/c10/h10/mnt/141983/domains/sghistory.com/html/pmwiki.php
>> * on line *608*
>>
>>
>> ___
>> pmwiki-users mailing list
>> pmwiki-users@pmichaud.com
>> http://www.pmichaud.com/mailman/listinfo/pmwiki-users
>>
> ___
> pmwiki-users mailing list
> pmwiki-users@pmichaud.com
> http://www.pmichaud.com/mailman/listinfo/pmwiki-users
>
___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3

[Simon]

You need to ensure all your recipes are updated

See
https://www.pmwiki.org/wiki/Category/PHP72


These may help you see which recipes are out of date
https://www.pmwiki.org/wiki/PmWiki/AnalyzeResults
https://www.pmwiki.org/wiki/Cookbook/RecipeCheck


If you have written your own recipes see
https://www.pmwiki.org/wiki/PmWiki/CustomMarkup

cheers

Simon

http://kiwiwiki.nz


On Sat, 27 Apr 2019 at 08:19, David Bruce Murray 
wrote:

> I received this from my web host today.
>
> "We are reaching out to inform you that as of June 3, 2019, Media Temple
> will no longer support PHP 5.3. Any domains using PHP 5.3 in your GRID
> hosting will automatically be changed to PHP 5.6 on that date. You are
> strongly encouraged to update any existing PHP code to ensure it is at
> least compliant with PHP 5.6."
>
> When I changed over to PHP to 5.6, it broke my site. I get strings of
> error messages like those posted below. I am not a PHP programmer, and have
> no idea how to fix any of this. My site is huge:
>
> www.sghistory.com
>
> For the moment, I can set it back to PHP 5.3, but it looks like I have a
> little more than one month to find a solution. Any suggestions are
> appreciated. I have tried updating to the latest version of pmwiki in the
> past, but that broke something else.
>
> *Deprecated*: preg_replace(): The /e modifier is deprecated, use
> preg_replace_callback instead in 
> */nfs/c10/h10/mnt/141983/domains/sghistory.com/html/local/spacewikiwords.php
> * on line
>
> *98 **Deprecated*: preg_replace(): The /e modifier is deprecated, use
> preg_replace_callback instead in 
> */nfs/c10/h10/mnt/141983/domains/sghistory.com/html/pmwiki.php
> * on line *608*
>
>
> ___
> pmwiki-users mailing list
> pmwiki-users@pmichaud.com
> http://www.pmichaud.com/mailman/listinfo/pmwiki-users
>
___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 woes.

[rogutes]

Vince Admin Account (2009-10-23 16:01):
 
 On Oct 19, 2009, at 5:13 PM, rogu...@googlemail.com wrote:
 
 
 The problem with pagelists lies in GlobToPCRE() function in pmwiki.php
 and is tracked at http://pmwiki.org/wiki/PITS/01149 . It concerns
 exclusion patterns (name=-Page) only.
 
 The suggested workaround for exclusion patterns (at least in my
 case)  allows the pagelist to work, but does not
 exclude anything.  A workaround for  this is to use $SearchPatterns
 in the config.php file.  This worked well for me.
 For example, to exclude all groups having a - in their name:
 $SearchPatterns['default'][] = '!^[A-Za-z]*-[A-Za-z]\.!;
 I know this will not work if the group names have special or
 international characters in their name, but it should be easy to
 adapt.
 Thanks for pointing out the PITS entry.
Vince

(:pagelist group=-PmWiki*,-Site*:) works fine here. Doesn't it work for
you? Are you sure you've made the right changes to GlobToPCRE()? The
line with str_replace call looks like this after changing:

$pat = str_replace(array('\\*', '\\?', '\\[', '\\]', '\\^', '\\-'),
   array('.*',  '.',   '[',   ']',   '^', '-'), $pat);

-- 
--  Rogutės Sparnuotos

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 woes.

[Vince Administration]

On Oct 24, 2009, at 5:34 AM, rogu...@googlemail.com wrote:


Vince Admin Account (2009-10-23 16:01):


On Oct 19, 2009, at 5:13 PM, rogu...@googlemail.com wrote:



The problem with pagelists lies in GlobToPCRE() function in  
pmwiki.php

and is tracked at http://pmwiki.org/wiki/PITS/01149 . It concerns
exclusion patterns (name=-Page) only.





(:pagelist group=-PmWiki*,-Site*:) works fine here. Doesn't it work  
for

you? Are you sure you've made the right changes to GlobToPCRE()? The
line with str_replace call looks like this after changing:

$pat = str_replace(array('\\*', '\\?', '\\[', '\\]', '\\^', '\\-'),
  array('.*',  '.',   '[',   ']',   '^', '-'), $pat);

Well, I think I am sure. I can cut and paste, in case my eyes are too  
tired. Here is the entire function.

function GlobToPCRE($pat) {
  $pat = preg_quote($pat, '/');
  $pat = str_replace(array('\\*', '\\?', '\\[', '\\]', '\\^', '\\-'),
 array('.*',  '.',   '[',   ']',   '^', '-'),  
$pat);

  $excl = array(); $incl = array();
  foreach(preg_split('/,+\s?/', $pat, -1, PREG_SPLIT_NO_EMPTY) as $p) {
if ($p{0} == '-'  ) $excl[] = '^'.substr($p, 0).'$';
else $incl[] = ^$p$;
  }
  return array(implode('|', $incl), implode('|', $excl));
}

Some other interesting things I found here.  We are running Apple Snow  
Leopard, PHP 5.3.0 and Apache 2.2.11.

When I tried to test pieces of this code on my web page,  the line
$pat = preg_quote($pat,'\');
gave a syntax error.  It worked as in the manual with a few other  
characters instead of \. I did get it to work as advertised with

$pat = preg_quote($pat,'\\');
I tried that in GlobToPCRE, but it didn't help. So I am confused.   
But at least I do have the workaround.

 Vince
 ___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 woes.

[rogutes]

Vince Administration (2009-10-24 10:42):
 
 On Oct 24, 2009, at 5:34 AM, rogu...@googlemail.com wrote:
 
 Vince Admin Account (2009-10-23 16:01):
 
 On Oct 19, 2009, at 5:13 PM, rogu...@googlemail.com wrote:
 
 
 The problem with pagelists lies in GlobToPCRE() function in
 pmwiki.php
 and is tracked at http://pmwiki.org/wiki/PITS/01149 . It concerns
 exclusion patterns (name=-Page) only.
 
 
 
 (:pagelist group=-PmWiki*,-Site*:) works fine here. Doesn't it
 work for
 you? Are you sure you've made the right changes to GlobToPCRE()? The
 line with str_replace call looks like this after changing:
 
 $pat = str_replace(array('\\*', '\\?', '\\[', '\\]', '\\^', '\\-'),
   array('.*',  '.',   '[',   ']',   '^', '-'), $pat);
 
 Well, I think I am sure. I can cut and paste, in case my eyes are
 too tired. Here is the entire function.
 function GlobToPCRE($pat) {
   $pat = preg_quote($pat, '/');
   $pat = str_replace(array('\\*', '\\?', '\\[', '\\]', '\\^', '\\-'),
  array('.*',  '.',   '[',   ']',   '^', '-'),
 $pat);
   $excl = array(); $incl = array();
   foreach(preg_split('/,+\s?/', $pat, -1, PREG_SPLIT_NO_EMPTY) as $p) {
 if ($p{0} == '-'  ) $excl[] = '^'.substr($p, 0).'$';
 else $incl[] = ^$p$;
   }
   return array(implode('|', $incl), implode('|', $excl));
 }

You didn't answer my first question. Does the following work for you?
(:pagelist group=-PmWiki*,-Site*:)

There's no point pasting the entire function, because you should've
changed only the two lines beginning with $pat = str_replace (which look
good above)... If you did more, I you've changed more than those, I'd
suggest starting with a new pmwiki.php.

 Some other interesting things I found here.  We are running Apple
 Snow Leopard, PHP 5.3.0 and Apache 2.2.11.
 When I tried to test pieces of this code on my web page,  the line
 $pat = preg_quote($pat,'\');
 gave a syntax error.  It worked as in the manual with a few other
 characters instead of \. I did get it to work as advertised with
 $pat = preg_quote($pat,'\\');
 I tried that in GlobToPCRE, but it didn't help. So I am
 confused.  But at least I do have the workaround.
  Vince

Compare
$pat = preg_quote($pat, '/');
to
$pat = preg_quote($pat, '\');

-- 
--  Rogutės Sparnuotos

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 woes. Finally fixed

[Vince Administration]

On Oct 24, 2009, at 1:04 PM, rogu...@googlemail.com wrote:

 Vince Administration (2009-10-24 10:42):

 On Oct 24, 2009, at 5:34 AM, rogu...@googlemail.com wrote:

 Vince Admin Account (2009-10-23 16:01):

 On Oct 19, 2009, at 5:13 PM, rogu...@googlemail.com wrote:


 The problem with pagelists lies in GlobToPCRE() function in
 pmwiki.php
 and is tracked at http://pmwiki.org/wiki/PITS/01149 . It concerns
 exclusion patterns (name=-Page) only.



 (:pagelist group=-PmWiki*,-Site*:) works fine here. Doesn't it
 work for
 you? Are you sure you've made the right changes to GlobToPCRE()? The
 line with str_replace call looks like this after changing:

 $pat = str_replace(array('\\*', '\\?', '\\[', '\\]', '\\^', '\\-'),
 array('.*',  '.',   '[',   ']',   '^', '-'), $pat);


 }

 You didn't answer my first question. Does the following work for you?
 (:pagelist group=-PmWiki*,-Site*:)

 There's no point pasting the entire function, because you should've
 changed only the two lines beginning with $pat = str_replace (which  
 look
 good above)... If you did more, I you've changed more than those, I'd
 suggest starting with a new pmwiki.php.
Well, first, it didn't work then. I had made two changes to the  
GlobToPCRE function,
the two lines i the str_replace function, and the change to the !   
entry as described in the PITS entry.
When I undid the second change, things started working.
Thanks again for all your help.  I will be more careful with my tests  
in the future.
   Vince





___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 woes.

[Vince Admin Account]

On Oct 19, 2009, at 5:13 PM, rogu...@googlemail.com wrote:


 The problem with pagelists lies in GlobToPCRE() function in pmwiki.php
 and is tracked at http://pmwiki.org/wiki/PITS/01149 . It concerns
 exclusion patterns (name=-Page) only.

The suggested workaround for exclusion patterns (at least in my case)   
allows the pagelist to work, but does not
exclude anything.  A workaround for  this is to use $SearchPatterns in  
the config.php file.  This worked well for me.
For example, to exclude all groups having a - in their name:
$SearchPatterns['default'][] = '!^[A-Za-z]*-[A-Za-z]\.!;
I know this will not work if the group names have special or  
international characters in their name, but it should be easy to adapt.
Thanks for pointing out the PITS entry.
Vince


___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 auth issues [was: Reinstall]

[Sandy]

paul badger wrote:
 Now it's really getting ugly. It was Firefox (and not PMwiki) and its 
 saved passwords that was defeating me.
 type in paul lowercase - and it's replaced by Paul uppercase - 
 just as one exits the field.
 
 arggg
 
 
 
 I think I may have spoken too soon on this - It
 seems that I was using two numerals for a login,
 which appear to be dissallowed.

 Paul

Did you get this sorted out? Somewhere in Firefox you can turn off those 
helpful suggestions.

Using enter or tab to exit the field sometimes triggers it. Try using 
the mouse to move to the next field.

Sandy


___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 auth issues [was: Reinstall]

[Sandy]

paul badger wrote:
 Rogutòs
 
 
 No joy for clean install.
 I did use my config.php file from other, but edited it. There are no 
 cookbook lines in it, but it doesn't mean I didn't screw something else 
 up. I can send you the file if you want.
 
 I've been over security docs and suggestions for last hour or so - don't 
 know if I really understand it yet but getting there
 
 On authuser  it says:
 
 This site appears to have the authuser extensions enabled. 
 So that part is not broken.
 
 After I set a name and password there, such as
 
 paul: (:encrypt myPassword:)
 
 should I be able to edit the homepage with this login?
 Or do I have to set group permissions or somewhere?
 
 Thanks for your help,
 
 paul
 
 

You need give the user Paul permission to do things. The easiest way to 
give him a lot of permissions at once is through config.php. You replace 
the encrypted passwords in the file with id:Paul. (Fine print: haven't 
done it in a while, best check the AuthUser documentation to be sure.)

Search config.php for the word pass to make sure you got everything. 
Not all the passwords are together.

Sandy


___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 woes.

[rogutes]

Vince Administration (2009-10-19 14:17):
 On our system, Initially the pages more or less display, but not the
 pagelists, with the default time zone warning either nicely
 displayed near the end of the page, or one or several copies at the
 top.
 When I added the
 date_default_timezone_set() = 'America/New_York';
 to config.php, all the pages come up blank.
 The session name line seems to have no effect.
 We are running AuthUser.  Before I start deleting recipes, has
 anyone got it to work yet?
 
 Thanks, Vince

The line you are adding has syntax errors and error reporting is turned
off in your PHP config. It should read:
  date_default_timezone_set('America/New_York');

AuthUser seems to works here, but I didn't do much testing and didn't
investigate beyond the workaround yet.

The problem with pagelists lies in GlobToPCRE() function in pmwiki.php
and is tracked at http://pmwiki.org/wiki/PITS/01149 . It concerns
exclusion patterns (name=-Page) only.

These two problems with PHP-5.3 are the only ones I've encountered so
far.

-- 
--  Rogutės Sparnuotos

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 woes.

[Vince Administration]

On Oct 19, 2009, at 5:13 PM, rogu...@googlemail.com wrote:

 Vince Administration (2009-10-19 14:17):
 On our system, Initially the pages more or less display, but not the
 pagelists, with the default time zone warning either nicely
 displayed near the end of the page, or one or several copies at the
 top.
 When I added the
 date_default_timezone_set() = 'America/New_York';
 to config.php, all the pages come up blank.
 The session name line seems to have no effect.
 We are running AuthUser.  Before I start deleting recipes, has
 anyone got it to work yet?

 Thanks, Vince

 The line you are adding has syntax errors and error reporting is  
 turned
 off in your PHP config. It should read:
  date_default_timezone_set('America/New_York');

 AuthUser seems to works here, but I didn't do much testing and didn't
 investigate beyond the workaround yet.

 The problem with pagelists lies in GlobToPCRE() function in pmwiki.php
 and is tracked at http://pmwiki.org/wiki/PITS/01149 . It concerns
 exclusion patterns (name=-Page) only.

 These two problems with PHP-5.3 are the only ones I've encountered so
 far.

 -- 
 --  Rogutės Sparnuotos
Thanks. I'll work out the error messages, but the fix to the date  
fixed most of the problems.
Thanks again for your help.
  Vince


___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 auth issues [was: Reinstall]

[Rogutės Sparnuotos]

Paul Badger (2009-10-04 22:46):
 These lines below seem to have fixed the upload problem with php 5.3.0.
 
 # temprorary workaround for PHP 5.3 login issues
 # pmwiki.org/wiki/PITS/01141
 $_REQUEST[session_name()]=1;
 
 I did have to set permissions on the upload folders at 777 though.
 
 Any opinions on whether this represents a security issue?

The workaround line shouldn't have any security implications. At least
not more than running PHP 5.3.0 before the bugs are explained and fixed
(remember that using workarounds is far from fixing).

Making uploads/ world-writable is what most people do with PmWiki (and
other webapps that need to write files). Security of this depends
on your server's configuration.

 Also authuser functionality now seems to be broken now. ie defined 
 passwords no longer work.
 Would this have been expected?

No, it works here. Could you test whether AuthUser works with a fresh
install, without any recipes (you can simply unpack PmWiki into
a separate directory, make wiki.d/ world-writable, enable authuser in
config.php and copy your password from SiteAdmin.AuthUser)?

-- 
--  Rogutės Sparnuotos

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 auth issues [was: Reinstall]

[paul badger]

Rogutòs


No joy for clean install.
I did use my config.php file from other, but 
edited it. There are no cookbook lines in it, but 
it doesn't mean I didn't screw something else up. 
I can send you the file if you want.


I've been over security docs and suggestions for 
last hour or so - don't know if I really 
understand it yet but getting there


On authuser  it says:

This site appears to have the authuser extensions enabled. 
So that part is not broken.

After I set a name and password there, such as

paul: (:encrypt myPassword:)

should I be able to edit the homepage with this login?
Or do I have to set group permissions or somewhere?

Thanks for your help,

paul








Paul Badger (2009-10-04 22:46):

 These lines below seem to have fixed the upload problem with php 5.3.0.

 # temprorary workaround for PHP 5.3 login issues
 # pmwiki.org/wiki/PITS/01141
 $_REQUEST[session_name()]=1;

 I did have to set permissions on the upload folders at 777 though.

 Any opinions on whether this represents a security issue?


The workaround line shouldn't have any security implications. At least
not more than running PHP 5.3.0 before the bugs are explained and fixed
(remember that using workarounds is far from fixing).

Making uploads/ world-writable is what most people do with PmWiki (and
other webapps that need to write files). Security of this depends
on your server's configuration.


 Also authuser functionality now seems to be broken now. ie defined
 passwords no longer work.
 Would this have been expected?


No, it works here. Could you test whether AuthUser works with a fresh
install, without any recipes (you can simply unpack PmWiki into
a separate directory, make wiki.d/ world-writable, enable authuser in
config.php and copy your password from SiteAdmin.AuthUser)?

--
--  Rogutòs Sparnuotos

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users
___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 auth issues [was: Reinstall]

[paul badger]

I think I may have spoken too soon on this - It 
seems that I was using two numerals for a login, 
which appear to be dissallowed.

Paul








Rogutòs


No joy for clean install.
I did use my config.php file from other, but 
edited it. There are no cookbook lines in it, but 
it doesn't mean I didn't screw something else up. 
I can send you the file if you want.

I've been over security docs and suggestions for 
last hour or so - don't know if I really 
understand it yet but getting there

On authuser  it says:

This site appears to have the authuser extensions enabled. 
So that part is not broken.

After I set a name and password there, such as

paul: (:encrypt myPassword:)

should I be able to edit the homepage with this login?
Or do I have to set group permissions or somewhere?

Thanks for your help,

paul







Paul Badger (2009-10-04 22:46):
  These lines below seem to have fixed the upload problem with php 5.3.0.

  # temprorary workaround for PHP 5.3 login issues
  # pmwiki.org/wiki/PITS/01141
  $_REQUEST[session_name()]=1;

  I did have to set permissions on the upload folders at 777 though.

  Any opinions on whether this represents a security issue?

The workaround line shouldn't have any security implications. At least
not more than running PHP 5.3.0 before the bugs are explained and fixed
(remember that using workarounds is far from fixing).

Making uploads/ world-writable is what most people do with PmWiki (and
other webapps that need to write files). Security of this depends
on your server's configuration.

  Also authuser functionality now seems to be broken now. ie defined
  passwords no longer work.
  Would this have been expected?

No, it works here. Could you test whether AuthUser works with a fresh
install, without any recipes (you can simply unpack PmWiki into
a separate directory, make wiki.d/ world-writable, enable authuser in
config.php and copy your password from SiteAdmin.AuthUser)?

--
--  Rogutòs Sparnuotos

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] PHP 5.3 auth issues [was: Reinstall]

[paul badger]

Now it's really getting ugly. It was Firefox (and not PMwiki) and its 
saved passwords that was defeating me.
type in paul lowercase - and it's replaced by Paul uppercase - 
just as one exits the field.

arggg



I think I may have spoken too soon on this - It
seems that I was using two numerals for a login,
which appear to be dissallowed.

Paul

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users