Re: [xwiki-users] [ANN] XWiki Enterprise 4.1 Release Candidate 1 is now available.

2012-06-12 Thread Thomas Mortagne
On Mon, Jun 11, 2012 at 11:11 PM, Arnaud bourree
arnaud.bour...@gmail.com wrote:
 2012/6/11 Caleb James DeLisle calebdeli...@lavabit.com:
 XWiki core development team is proud to announce the availability of XWiki 
 Enterprise 4.1 Release Candidate 1
 This is the first and hopefully final release candidate of the 4.1 release 
 cycle. Being a release candidate, this release is sparse on new features 
 concentrating instead on stabilization of the features brought in Milestone 
 1 and Milestone 2. The 4.1 cycle brings new 3D graphs made with pure XWiki 
 syntax, safer Groovy scripting, and new localization through timezone 
 settings.

 Go grab it at http://enterprise.xwiki.org/xwiki/bin/view/Main/Download and 
 let us know what you think.

 For more information about the 4.1-rc-1 release, See the Release Notes 
 http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWikiEnterprise41RC1

 Thanks to everyone who helped out to make this release great.

 Caleb

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

 Hello,

 http://maven.xwiki.org/releases/Packages.gz doesn't reference 4.1-rc-1
 debs but there exist

There is a cron updating it automatically, you probably looked at it a
bit too quickly. Seems to be ok now.


 Regards,

 Arnaud.
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users



-- 
Thomas Mortagne
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] how to escape quote in velocity for javascript ?

2012-06-12 Thread mathieu.canzerini
Thank you for your response.
I have already used the escapetool but he doesn't seem work : this tool
adds one backslash before the quote but the script looks wrong.
(onclick=function(\param\,callback); doesn't work)
I've read this page :
http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIescapeOutQuotationMarksFromAStringWithVelocity
But whithout success ...

On Mon, 11 Jun 2012 16:42:43 +0200, Paul Libbrecht p...@hoplahup.net
wrote:
 Le 11 juin 2012 à 16:31, Sergiu Dumitriu a écrit :
 var userInput = $!escapetool.javascript($request.userInput);
 
 Actually... is there a list of such predefined variables?
 Or... what's the way to list them? With their class.
 
 paul
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] how to escape quote in velocity for javascript ?

2012-06-12 Thread Sergiu Dumitriu

On 06/12/2012 02:51 AM, mathieu.canzer...@intech.lu wrote:

Thank you for your response.
I have already used the escapetool but he doesn't seem work : this tool
adds one backslash before the quote but the script looks wrong.
(onclick=function(\param\,callback); doesn't work)


What's that supposed to do? It doesn't look like semantically correct 
Javascript in the first place, regardless of quote escaping.


Is function here a placeholder for a real function name, or is it 
really used like this in your code?


You shouldn't use onclick, try this instead:

http://www.prototypejs.org/api/element/observe


I've read this page :
http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIescapeOutQuotationMarksFromAStringWithVelocity
But whithout success ...

On Mon, 11 Jun 2012 16:42:43 +0200, Paul Libbrecht p...@hoplahup.net
wrote:

Le 11 juin 2012 à 16:31, Sergiu Dumitriu a écrit :

var userInput = $!escapetool.javascript($request.userInput);


Actually... is there a list of such predefined variables?
Or... what's the way to list them? With their class.

paul



--
Sergiu Dumitriu
http://purl.org/net/sergiu/


___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] how to escape quote in velocity for javascript ?

2012-06-12 Thread mathieu.canzerini
Okay i'm going to try your suggestion.

Thank you for your help.

Mathieu

On Tue, 12 Jun 2012 03:13:22 -0400, Sergiu Dumitriu ser...@xwiki.com
wrote:
 On 06/12/2012 02:51 AM, mathieu.canzer...@intech.lu wrote:
 Thank you for your response.
 I have already used the escapetool but he doesn't seem work : this tool
 adds one backslash before the quote but the script looks wrong.
 (onclick=function(\param\,callback); doesn't work)
 
 What's that supposed to do? It doesn't look like semantically correct
 Javascript in the first place, regardless of quote escaping.
 
 Is function here a placeholder for a real function name, or is it
 really used like this in your code?
 
 You shouldn't use onclick, try this instead:
 
 http://www.prototypejs.org/api/element/observe
 
 I've read this page :
 http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIescapeOutQuotationMarksFromAStringWithVelocity
 But whithout success ...

 On Mon, 11 Jun 2012 16:42:43 +0200, Paul Libbrecht p...@hoplahup.net
 wrote:
 Le 11 juin 2012 à 16:31, Sergiu Dumitriu a écrit :
 var userInput = $!escapetool.javascript($request.userInput);

 Actually... is there a list of such predefined variables?
 Or... what's the way to list them? With their class.

 paul

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] [ANN] XWiki Enterprise 4.1 Release Candidate 1 is now available.

2012-06-12 Thread Arnaud bourree
2012/6/12 Thomas Mortagne thomas.morta...@xwiki.com:
 On Mon, Jun 11, 2012 at 11:11 PM, Arnaud bourree
 arnaud.bour...@gmail.com wrote:
 2012/6/11 Caleb James DeLisle calebdeli...@lavabit.com:
 XWiki core development team is proud to announce the availability of XWiki 
 Enterprise 4.1 Release Candidate 1
 This is the first and hopefully final release candidate of the 4.1 release 
 cycle. Being a release candidate, this release is sparse on new features 
 concentrating instead on stabilization of the features brought in Milestone 
 1 and Milestone 2. The 4.1 cycle brings new 3D graphs made with pure XWiki 
 syntax, safer Groovy scripting, and new localization through timezone 
 settings.

 Go grab it at http://enterprise.xwiki.org/xwiki/bin/view/Main/Download and 
 let us know what you think.

 For more information about the 4.1-rc-1 release, See the Release Notes 
 http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWikiEnterprise41RC1

 Thanks to everyone who helped out to make this release great.

 Caleb

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

 Hello,

 http://maven.xwiki.org/releases/Packages.gz doesn't reference 4.1-rc-1
 debs but there exist

 There is a cron updating it automatically, you probably looked at it a
 bit too quickly. Seems to be ok now.


OK, good, I find it now.

I created issue XWIKI-7904 - xwiki-enterprise-tomcat7-mysql create
symlink into /etc/tomcat6/ and not and not in /etc/tomcat7

Arnaud.


 Regards,

 Arnaud.
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users



 --
 Thomas Mortagne
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] [ANN] XWiki Enterprise 4.1 Release Candidate 1 is now available.

2012-06-12 Thread Thomas Mortagne
On Tue, Jun 12, 2012 at 10:40 AM, Arnaud bourree
arnaud.bour...@gmail.com wrote:
 2012/6/12 Thomas Mortagne thomas.morta...@xwiki.com:
 On Mon, Jun 11, 2012 at 11:11 PM, Arnaud bourree
 arnaud.bour...@gmail.com wrote:
 2012/6/11 Caleb James DeLisle calebdeli...@lavabit.com:
 XWiki core development team is proud to announce the availability of XWiki 
 Enterprise 4.1 Release Candidate 1
 This is the first and hopefully final release candidate of the 4.1 release 
 cycle. Being a release candidate, this release is sparse on new features 
 concentrating instead on stabilization of the features brought in 
 Milestone 1 and Milestone 2. The 4.1 cycle brings new 3D graphs made with 
 pure XWiki syntax, safer Groovy scripting, and new localization through 
 timezone settings.

 Go grab it at http://enterprise.xwiki.org/xwiki/bin/view/Main/Download and 
 let us know what you think.

 For more information about the 4.1-rc-1 release, See the Release Notes 
 http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWikiEnterprise41RC1

 Thanks to everyone who helped out to make this release great.

 Caleb

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

 Hello,

 http://maven.xwiki.org/releases/Packages.gz doesn't reference 4.1-rc-1
 debs but there exist

 There is a cron updating it automatically, you probably looked at it a
 bit too quickly. Seems to be ok now.


 OK, good, I find it now.

 I created issue XWIKI-7904 - xwiki-enterprise-tomcat7-mysql create
 symlink into /etc/tomcat6/ and not and not in /etc/tomcat7

Fixed, will be OK in 4.1 final. Thanks.


 Arnaud.


 Regards,

 Arnaud.
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users



 --
 Thomas Mortagne
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users



-- 
Thomas Mortagne
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] javascript App Within Minutes

2012-06-12 Thread Vereniging CdLS
HI,

This works very well, thanks and actually is better like you said to manage 
more from velocity.

Gerritjan

Op 11 jun. 2012, om 16:14 heeft Marius Dumitru Florea het volgende geschreven:

 Here's what I did:
 
 (1) In the sheet (you probably customized
 AppWithinMinutes.LiveTableViewSheet) I added another hidden input
 besides the one holding the URL template
 
 {{html}}
 input type=hidden value=$xwiki.getURL($entryDoc, 'edit',
 editor=inlinetemplate=$!templateNameparent=WebHome) /
 input type=hidden name=entryName value=put here what you want
 #if($condition)readonly=readonly#end /
 {{/html}}
 
 (2) In the JSX I replaced
 
 this.input = new Element('input', {type: 'text'});
 
 with
 
 this.input = trigger.up().next('input[name=entryName]');
 this.input.type = 'text';
 this.input.defaultValue = this.input.value;
 
 and then
 
 this.input.clear().focus();
 
 with
 
 this.input.value = this.input.defaultValue;
 this.input.focus();
 
 This way you control the entry name text input from the Velocity.
 
 Hope this helps,
 Marius
 
 On Mon, Jun 11, 2012 at 3:28 PM, Gerritjan Koekkoek
 gerritjankoekk...@gmail.com wrote:
 App Within Minutes creates a nice Add record button.
 After clicking the button a dialog is presented asking for input that is
 used to create a new documentname.
 
 This is (more or less, since i modified it slightly) the Java script that
 is added to the sheet by the app-within-minutes generator.
 My question is due to fact that i'm not a javascript expert, so solution
 might be very simple:
 I would like to generate the documentname based on user that is clicking
 the button
 If user in group X then input will be pre populated with 'Full Name of
 that user and popup will not allow user to change this value;
 Confirmation would be like New Question will be made for: [[Gerritjan
 Koekkoek]] and user can only proceed or cancel
 If user in group y the same behaviour; but now the inputbox would need to
 be open for change
 Confirmation would be like New Question will be made for: [[Gerritjan
 Koekkoek]] but now user can change the input to 'Andree Benz' meaning that
 new question is posted by
 Gerritjan Koekkoek on behalf of Andree Benz.
 How would you suggest to change below script to get the desired effect?
 (see lineindicator == of what I thought would be a solution?
 
 var XWiki = (function (XWiki) {
 
 XWiki.EntryNamePopup = Class.create(XWiki.widgets.ModalPopup, {
  initialize : function($super, trigger) {
trigger.observe('click', this.showDialog.bindAsEventListener(this));
this.urlTemplate = trigger.up().next('input[type=hidden]').value;
 
this.input = new Element('input', {type: 'text'});
this.addButton = new Element('input', {type: 'image', src:
 '$xwiki.getSkinFile('icons/silk/add.png')', alt:
 '$escapetool.javascript($msg.get('cdlsateprivat.CreateNewQuestionAltText'))'});
 
var container = new Element('div', {id: 'entryNamePopup'});
container.insert(this.input);
container.insert(this.addButton);
 
$super(container, {
  show: {method: this.showDialog, keys: []},
  add: {method: this._onAdd, keys: ['Enter']}
}, {
  title:
 '$escapetool.javascript($msg.get('cdlsateprivat.CreateNewQuestionTitle'))',
  verticalPosition: 'top'
});
  },
  createDialog : function($super, event) {
this.input.observe
this.addButton.observe('click', this._onAdd.bind(this));
$super(event);
  },
  showDialog : function($super, event) {
$super(event);
 ==$this.input.val() == 'Gerritjan Koekkoek' //this line did not work,
 how can I get it prepopulated (or suggested) with preferably XWiki variable
this.input.clear().focus();
  },
  _onAdd : function() {
if (this.input.value != '') {
  window.self.location = this.urlTemplate.replace('__entryName__',
 encodeURIComponent(this.input.value));
} else {
  this.input.focus();
}
  }
 });
 
 function init() {
  var actionBox = $('actionBox');
  if(actionBox) {
new XWiki.EntryNamePopup(actionBox.down('.add'));
return true;
  }
  return false;
 }
 (XWiki.domIsLoaded  init()) || document.observe('xwiki:dom:loaded', init);
 
 return XWiki;
 }(XWiki || {}));
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] features for dealing with known comment spammers in XWiki?

2012-06-12 Thread Caleb James DeLisle
Hi,

Here's a little proof of concept which should do the right general thing.
If you put the groovy script at the top of your registration page, you can
edit the content of the page to behave differently if the user fails an RBL 
check.
It would make sense to allow them in but lock the account and explain to them 
that
they will be checked by an admin.
Ofc I know the feeling of just wanting to use the big hammer myself.

Caleb


{{groovy}}
import java.net.InetAddress;
def rbls = ['.dnsbl.tornevall.org'];
String[] bytes = request.getRemoteAddr().split(\\.);
// Test
//String[] bytes = ['111','243','227','227'];
String reversed = bytes[3] + . + bytes[2] + . + bytes[1] + . + bytes[0];
def failedRbls = [];
for (String rbl : rbls) {
try {
InetAddress.getByName(reversed + rbl);
failedRbls.add(rbl);
} catch (UnknownHostException e) {
// expected
}
}
xcontext.get(vcontext).put(failedRbls, failedRbls);
{{/groovy}}

{{velocity}}
$failedRbls
{{/velocity}}



On 06/09/2012 05:16 PM, Niels Mayer wrote:
 This is  either a feature request or a request for discussing
 solutions to the issue of known comment spammers against XWiki
 installs.
 
 There's known spammers like davycrokk...@hotmail.com (see
 http://www.nielsmayer.com/bin/view/XWiki/DavyCrokkett ) which have to
 be managed and curtailed for any XWiki install enabling comments.
 
 During registration, it would it be nice to check sites like
 http://www.stopforumspam.com/ and prevent registration emails from
 going out to known comment spammers.
 
 For example, the aforementioned spammer is listed at
 http://www.stopforumspam.com/ipcheck/111.243.227.227
 suggesting Current country of origin:Taiwan, Province of China
 
 Date  IP Address  UsernameEmail   
 1-Jul-11 07:31111.243.227.227 coseteene   
 davycrokk...@hotmail.com
 30-Jun-11 18:29   111.243.227.227 Assusypesound   
 davycrokk...@hotmail.com
 30-Jun-11 13:43   111.243.227.227 Impuppota   
 davycrokk...@hotmail.com
 30-Jun-11 11:22   111.243.227.227 Biordaccoma 
 davycrokk...@hotmail.com
 30-Jun-11 07:01   111.243.227.227 rooviskitte 
 davycrokk...@hotmail.com
 29-Jun-11 23:59   109.230.222.175 Beethyemegree   
 davycrokk...@hotmail.com
 29-Jun-11 22:49   111.243.227.227 Kneefshes   
 davycrokk...@hotmail.com
 29-Jun-11 13:59   111.243.227.227 seltencarne 
 davycrokk...@hotmail.com
 29-Jun-11 13:31   111.243.227.227 inigneedync 
 davycrokk...@hotmail.com
 29-Jun-11 11:50   174.142.132.203 Beethyemegree   
 davycrokk...@hotmail.com
 29-Jun-11 11:50   174.142.132.203 phorilmiplism   
 davycrokk...@hotmail.com
 29-Jun-11 07:53   111.243.227.227 Agergeevame 
 davycrokk...@hotmail.com
 29-Jun-11 05:56   111.243.227.227 Atomnegmess 
 davycrokk...@hotmail.com
 29-Jun-11 05:50   111.243.227.227 Impuppota   
 davycrokk...@hotmail.com
 
 It would also be interesting for such flagged users to return a list
 of associated IP's (such as above) which could be blacklisted as well.
 
 I guess the correct solution would be to use
 http://extensions.xwiki.org/xwiki/bin/view/Extension/Social+Login but
 then the spammers would just end up getting twitter, facebook or
 foursquare logins and use those instead of hotmail accounts.
 
 -- Niels
 http://www.nielsmayer.com
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users
 

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] features for dealing with known comment spammers in XWiki?

2012-06-12 Thread Sergiu Dumitriu
Using email activation might prevent some spam, since user have to 
manually activate their accounts, and if it's just a spam bot chances 
are that the bot isn't yet that well adapted for XWiki as to know how to 
verify their accounts.


Another trick that helped us fight spam on xwiki.org is to forbid 
registration of users that enter the same first and last name, since we 
noticed that all automatically created accounts followed this rule.


Another thing that helps us keep spam low is the IRC bot and the global 
notifications watchlist. Whenever someone modifies something, the IRC 
bot notifies that change, and at the end of the day the notification 
mail also mentions it. Most of the time one of the devs that are on IRC 
will immediately check that change and revert it if it's spam (and 
delete the user account as well). But I guess that won't work for a 
large active community wiki with lots of valid changes every day.


On 06/09/2012 05:16 PM, Niels Mayer wrote:

This is  either a feature request or a request for discussing
solutions to the issue of known comment spammers against XWiki
installs.

There's known spammers like davycrokk...@hotmail.com (see
http://www.nielsmayer.com/bin/view/XWiki/DavyCrokkett ) which have to
be managed and curtailed for any XWiki install enabling comments.

During registration, it would it be nice to check sites like
http://www.stopforumspam.com/ and prevent registration emails from
going out to known comment spammers.

For example, the aforementioned spammer is listed at
http://www.stopforumspam.com/ipcheck/111.243.227.227
suggesting Current country of origin:Taiwan, Province of China

DateIP Address  UsernameEmail   
1-Jul-11 07:31  111.243.227.227 coseteene   davycrokk...@hotmail.com

30-Jun-11 18:29 111.243.227.227 Assusypesound   davycrokk...@hotmail.com

30-Jun-11 13:43 111.243.227.227 Impuppota   davycrokk...@hotmail.com

30-Jun-11 11:22 111.243.227.227 Biordaccoma davycrokk...@hotmail.com

30-Jun-11 07:01 111.243.227.227 rooviskitte davycrokk...@hotmail.com

29-Jun-11 23:59 109.230.222.175 Beethyemegree   davycrokk...@hotmail.com

29-Jun-11 22:49 111.243.227.227 Kneefshes   davycrokk...@hotmail.com

29-Jun-11 13:59 111.243.227.227 seltencarne davycrokk...@hotmail.com

29-Jun-11 13:31 111.243.227.227 inigneedync davycrokk...@hotmail.com

29-Jun-11 11:50 174.142.132.203 Beethyemegree   davycrokk...@hotmail.com

29-Jun-11 11:50 174.142.132.203 phorilmiplism   davycrokk...@hotmail.com

29-Jun-11 07:53 111.243.227.227 Agergeevame davycrokk...@hotmail.com

29-Jun-11 05:56 111.243.227.227 Atomnegmess davycrokk...@hotmail.com

29-Jun-11 05:50 111.243.227.227 Impuppota   davycrokk...@hotmail.com


It would also be interesting for such flagged users to return a list
of associated IP's (such as above) which could be blacklisted as well.

I guess the correct solution would be to use
http://extensions.xwiki.org/xwiki/bin/view/Extension/Social+Login but
then the spammers would just end up getting twitter, facebook or
foursquare logins and use those instead of hotmail accounts.



--
Sergiu Dumitriu
http://purl.org/net/sergiu/


___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users