https://bugzilla.wikimedia.org/show_bug.cgi?id=28810

--- Comment #2 from Neil Kandalgaonkar <[email protected]> 2011-08-18 
21:52:14 UTC ---
Since Ian is taking this over, I figured I should brain-dump everything I know.

So this is what we know about thumbnails for video

- ogg thumbnails do work in Special:Upload, and after the file has been
uploaded.
- ogg thumbnails work on commons.prototype.wikimedia.org (and properly
configured local machines) for everything, even Special:UploadWizard

So, what are the differences?

- different ffmpeg config on the cluster? (unsure)
- files are mounted in NFS on the cluster (definitely a big difference)

And what's different between what UploadWizard does and what everything else
does:

- we are doing something slightly unusual in that we are attempting to get a
thumbnail for a file that is in the "temp" zone. This goes back to the
definition of zones I told you about. Basically, a zone defines a mapping
between a filesystem directory and a base URL. Also, there are some security
characteristics associated with zones -- deleted and temp files are not
normally served to most users.

the standard zones are
- 'public' -- the usual thing
- 'temp' -- files in the stash are here
- 'deleted' -- files that have been "archived"
- 'thumb' -- thumbnails

Note: the temp zone, is, if I recall correctly, not the same as the temporary
directory that files are written into as PHP receives the upload. The 'temp'
zone exists in NFS.

I had to do a lot of trickery to make thumbnails work for files in the "temp"
zone and also be secure. We don't want people to be able to see thumbnails
unless the file is published (which is the moment when presumably it has a good
license). So, all thumbnails are public, but I hid the actual thumbnail URL
from the user by streaming it through PHP. This is the real purpose of
Special:UploadStash -- to stream files while hiding their scaler URL. Listing
files is just a bit of functionality I threw in there for fun and debugging.

(I discovered later that img_auth.php (in the root of MediaWiki) does almost
*EXACTLY* the same thing, for wikis which define some forms of security.)

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to