MediaWiki-l December 2004

mediawiki-l@lists.wikimedia.org

94 participants
155 discussions

1.4 beta: Two minor problems
by Plamen Gradinarov 22 Dec '04

22 Dec '04

I am testing 1.4 beta 3. So far so great! Seems very fast to me. :-) There are only two problems - one formal, and one very much perplexing. The formal is the type of upload for parserTests.txt - my FTP client wants it uploaded as binary file. The second is the stubborn reluctance of the system (it is not my browser or cache) to change some messages, like "*Missing image*" - in Language.php, I have changed it to "MI", but still the message says "Missing image". The same with the subtitle (I have extended it), with "The Free Encyclopedia" tag under the sitename, with the copyright text I want it to read "From Wikipedia, the free encyclopedia. All content is available under $1", and probably elsewhere. Thank you, Plamen

2 7

Using $_SERVER['REMOTE_USER'] for authorisation/log-in
by Damir Perisa 22 Dec '04

22 Dec '04

Hi MediaWiki Sysops/Admins/Devs, Hi readers of this ML, I'm working on a Portal for an NGO. The public Wiki (using MediaWiki) i already installed + configured and it works great - MediaWiki is a really great written piece of work! (i really like the xhtml template! this made the integration sooo easy!!!! thanx!!! ;-) (after making it public, i will announce the "CP-Wiki" here and everywhere else) Now i'm trying to find the best Wiki-Engine, that is able to work in the Member-Section of this NGO. All the advantages of the MediaWiki are suiting me well and i want to use it as well in the Member-Section as well as on the public area. The thing is: As Members are already identified/logged-in (folder access) in the Member Section, i don't want to have a second log-in for the Wiki to confuse the people ... and other people are per definition not accessing this closed WIKI ;-) My question is therefore: ########################################### Is it possible to make use of $_SERVER['REMOTE_USER'] for user-management in MediaWiki? ########################################### If it is not "out-of-the-box" possible, i would be happy hearing, that someone else is doing it this way. Sharing experiences would be nice ;-) This mainly, because i know, that if i would hack mediawiki to support something like this (i didn't yet had much time to have a look at the code in detail), and then mediawiki gets updated to a version that breaks my code, i would be needing again some hours to make it work again ... and this for each new version, that breaks my things :-( Every kind of feedback is welcome! If you know a wiki engine, that suits better for such a situation, feel free to let me know. Thank you for reading this and THANK YOU VERY MUCH in advance for any input on this subject, Best Regards, Damir Perisa -- He who fears the unknown may one day flee from his own backside. -- Sinbad

1 0

user block not working
by Saurav Pathak 22 Dec '04

22 Dec '04

i am trying to block a user, but i get a "Invalid IP address" I can block an IP address though. mediawiki: 1.3.1 What could be wrong? -- saurav

4 4

upgrading to 1.4 beta & convertLinks.inc
by Christof Damian 22 Dec '04

22 Dec '04

Hello, I tried to upgrade some mediawiki installations from 1.2 to 1.4 beta and run into trouble with convertLinks.inc . It seem that there are some functions used which are not defined (I tried the last tgz and HEAD from cvs): lines 71 & 90: $dbw->setBufferResults line 105: wfLimitResult I think I fixed these in my install, but after convertlinks finished all other stuff stopped working :-) I think the mysql connection was closed somewhere. So I skipped the whole convertlinks and my wiki lost all the "what links to here" bits. Are there any other problems which could show up later? christof -- Christof Damian christof(a)damian.net

2 2

Category pages pre-populated?
by Paul Fierro 21 Dec '04

21 Dec '04

Are the built-in category pages pre-populated? My install of MediaWiki using the latest Wikipedia database dump shows relatively sparse category pages compared to those on Wikipedia.org. For example, [[Category:Japanese_language]] on the en Wikipedia shows 2 subcategories and 58 of articles: http://en.wikipedia.org/wiki/Category:Japanese_language My install shows: Category:Japanese language Articles in category "Japanese language" There are 0 articles in this category. I'm not trying to create categories. I just want the category pages linked from, for example, [[Wikipedia:Browse]], to have some content. Is there a maintenance script that needs to be run? I couldn't find any help on meta or the list archives. I'm using: MediaWiki 1.3.9 2004-12-09 database dump Thanks, Paul

2 1

RE: [Mediawiki-l] LocalSettings.php - Security for MW on SourceForge
by gregwk 21 Dec '04

21 Dec '04

Thanks for everyone's help on this. Looks like I'm better off putting the wiki somewhere other than SourceForge. G. Kulczycki >===== Original Message From Brion Vibber <brion(a)pobox.com> ===== >--Apple-Mail-9-750934581 >Content-Transfer-Encoding: 7bit >Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed > >On Dec 20, 2004, at 8:45 PM, gregwk wrote: >[snip] >> Is SourceForge somehow fundamentally different from the Mozilla and >> DreamHost servers? > >That's correct. > >Mozilla runs their own server, so doesn't have to worry about malicious >local users. (By the way, the page you were looking at is just a copy >of the documentation on meta.wikimedia.org.) > >DreamHost runs PHP scripts through a CGI handler, so the effective user >ID of the script process can be that of the particular virtual host's >own account. Thus your own script can read files that other local users >and their scripts cannot read. > >SourceForge runs PHP as an Apache module, with all users' scripts >running under a single user ID which is different from the user and >group IDs of the individual projects. It is impossible for your script >to read a file unless all scripts are given permission to read the >file. > >For more information please see: >http://sourceforge.net/docman/display_doc.php? >docid=4297&group_id=1#security > >http://sourceforge.net/docman/display_doc.php? >docid=14267&group_id=1#websharedreason > >-- brion vibber (brion @ pobox.com) > >--Apple-Mail-9-750934581 >content-type: application/pgp-signature; x-mac-type=70674453; > name=PGP.sig >content-description: This is a digitally signed message part >content-disposition: inline; filename=PGP.sig >content-transfer-encoding: 7bit > >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.2.6 (Darwin) > >iD8DBQFBx8kcwRnhpk1wk44RAvUHAJ9xk1050Dde5xmsDkWFxS7K3uFNXgCgrqbG >TIFIDwSP8j2qg+jO6hf0FqA= >=MD3m >-----END PGP SIGNATURE----- > >--Apple-Mail-9-750934581-- > > >_______________________________________________ >MediaWiki-l mailing list >MediaWiki-l(a)Wikimedia.org >http://mail.wikipedia.org/mailman/listinfo/mediawiki-l

1 0

RE: [Mediawiki-l] LocalSettings.php - Security for MW on SourceForge
by gregwk 21 Dec '04

21 Dec '04

That certainly sounds reasonable, but some web pages seem to indicate that some people have at least had success in restricting access to the LocalSettings.php file. For example, Mozilla's wiki (at http://wiki.mozilla.org/index.php/LocalSettings.php) states: "The wgDBuser and wgDBpassword variables contain the login name and password to be used by MediaWiki to access the database. Make sure the specified user has the proper access rights to be able to manipulate the wiki's table on the database server. Also keep in mind that the LocalSettings.php permissions should not allow other users to view this file as it contains security-related data." And a page that explains how to set up MediaWiki at DreamHost (http://wiki.schubart.net/How_to_Install_MediaWiki_at_DreamHost) contains the following section: "Increase Security The PHP files contain passwords, so let's restrict access: chmod 600 /home/bob/wiki.bobsdomain.com/wiki/*.php" Is SourceForge somehow fundamentally different from the Mozilla and DreamHost servers? If not, I'm inclined to think that someone has had success in this. However, when I try to change the permissions of my *.php files to 600, I am unable to log into the wiki. Has anyone had any experience setting up a MediaWiki and setting their *.php file permissions to 600? G. Kulczycki >===== Original Message From Brion Vibber <brion(a)pobox.com> ===== >--Apple-Mail-7-726728748 >Content-Transfer-Encoding: 7bit >Content-Type: text/plain; charset=US-ASCII; format=flowed > >On Dec 20, 2004, at 1:49 PM, gregwk wrote: >> I set up a MediaWiki on SourceForge. >> It seems that anyone with an account on SourceForge has read access to >> my LocalSettings.php file, which contains my database password. >[snip] >> I am using MediaWiki 1.3.9. Any suggestions on how to prevent people >> from reading my database password? > > From what I can tell, you can't reliably do this on SourceForge. > >The file must be readable by the web server; because of the way file >permissions work this generally means it's readable by any local user: >I can log into the SF servers as my own account and read your files, or >I can write a web script on my SF site to read your SF site's files. > >If the file is owned by you (instead of by the web server) then you can >at least keep other people from changing its permissions, but you can't >stop them reading it. > >If SF used PHP's "Safe Mode" (which is problematic for many reasons, >but sometimes useful for multiuser systems) this might be able to stop >other peoples' PHP scripts from reading your file, but would probably >not stop them from logging in and looking at your file or writing CGI >scripts and looking at your file. > >Any database-driven application running on SF will have a similar >problem, as far as I can see. In order to connect to the database, the >scripts _must_ have access to the plaintext password to open a >connection. Since the scripts are run under a common user ID, they all >have access. > >-- brion vibber (brion @ pobox.com) > >--Apple-Mail-7-726728748 >content-type: application/pgp-signature; x-mac-type=70674453; > name=PGP.sig >content-description: This is a digitally signed message part >content-disposition: inline; filename=PGP.sig >content-transfer-encoding: 7bit > >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.2.6 (Darwin) > >iD8DBQFBx2qOwRnhpk1wk44RAhzvAJ93lOzG21ybrSrCW2SeSyJOZqsVIwCgzADk >lIyKBcCFcDMLREyOGvV7RGI= >=KKq6 >-----END PGP SIGNATURE----- > >--Apple-Mail-7-726728748-- > > >_______________________________________________ >MediaWiki-l mailing list >MediaWiki-l(a)Wikimedia.org >http://mail.wikipedia.org/mailman/listinfo/mediawiki-l

3 2

LocalSettings.php - Security for MW on SourceForge
by gregwk 20 Dec '04

20 Dec '04

I set up a MediaWiki on SourceForge. It seems that anyone with an account on SourceForge has read access to my LocalSettings.php file, which contains my database password. >From what I have read on the web, it seems that some people have successfully been able to change the permissions of LocalSettings.php to 600. However, when I try this I get the following warning and error when I try to visit my site. Warning: main(./LocalSettings.php): failed to open stream: Permission denied in /home/ groups/t/ta/takocompiler/htdocs/wikitako/index.php on line 19 Fatal error: main(): Failed opening required './LocalSettings.php' (include_path='.:/usr/ local/share/pear') in /home/groups/t/ta/takocompiler/htdocs/wikitako/index.php on line 19 I am using MediaWiki 1.3.9. Any suggestions on how to prevent people from reading my database password? Thanks, Greg Kulczycki

2 1

RE: [Mediawiki-l] Java Script
by Alistair Johnson 20 Dec '04

20 Dec '04

Giovanni, I had a similar problem a couple of weeks ago & Jamie was kind enough to provide the following advice: > -----Original Message----- > From: Jamie Bliss [mailto:astronouth7303@gmail.com] > Sent: Wednesday, 8 December 2004 8:54 a.m. > To: MediaWiki announcements and site admin list > Subject: Re: [Mediawiki-l] custom extension including <script> tags > > Try placing the code in a seperate file and referencing it in a single > line. This works for me: > > function renderRandomQuote( $input ) > { > $output = '<script type="text/javascript" > src="http://www.chiefdelphi.com/forums/xml/spotlight_js.php"></script> > <a href="http://www.chiefdelphi.com/" > title="http://www.chiefdelphi.com/"><img > src="http://furc.zapto.org/wiki/stylesheets/monobook/external.png"></a><span > class="urlexpansion"> (<i>http://www.chiefdelphi.com/</i>)</span>'; > return $output; > } > > (This is actually in use on "http://furc.zapto.org/wiki/", using the > tag <randomquote>) I think the code that handles the output doesn't > preserve things within <script> tags, but it will preserve attributes. So the way to work around this problem is to keep the javascript in an external file & call it via an extension. Note that the call *must* be on a single line to make this work. al. -----Original Message----- From: Giovanni [mailto:gputignano@tiscali.it] Sent: Monday, 20 December 2004 12:23 a.m. To: Jamie Bliss; MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] Java Script I want to use JavaScript in a wiki that I use to create eBay insertion so I'm the only that use that wiki. I would like to know how to unblock <script> tag for the purpose I said above. Thanks, Giovanni _______________________________________________ MediaWiki-l mailing list MediaWiki-l(a)Wikimedia.org http://mail.wikipedia.org/mailman/listinfo/mediawiki-l

2 1

Embedding Special pages?
by John Yu 19 Dec '04

19 Dec '04

In Mediawiki, we can use {{namespace:page}} or {{templatePage}} to embed a page. But {{Special:Newpages}} doesn't work that way. Is there any workaround? Thanks -- John

2 2

← Newer
1
2
3
4
5
6
7
8
9
...
16
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l December 2004