-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MediaWiki 1.4.6 is a bug fix and security update release.
Incorrect escaping of a parameter in the page move template could
be used to inject JavaScript code by getting a victim to visit a
maliciously constructed URL. Users of vulnerable releases are
recommended to upgrade to this release.
Vulnerable versions:
* 1.5 preview series: n <= 1.5beta2 vulnerable, fixed in 1.5beta3
* 1.4 stable series: 1.4beta6 <= n <= 1.4.5 vulnerable, fixed in 1.4.6
* 1.3 legacy series: not vulnerable
This release also includes fixes for some rare bug annoying HTTP errors,
a PHP 4.1.2 breakage bug, and works around some template limitations
introduced in 1.4.5. See the changelog in the release notes for a
detailed list of bugs fixed.
Release notes:
http://sourceforge.net/project/shownotes.php?release_id=340290
Download:
http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.4.6.tar.gz?download
MD5 checksum: f4f82bd486756c279f0c1977b290ce3b
Before asking for help, try the FAQ:
http://meta.wikimedia.org/wiki/MediaWiki_FAQ
Low-traffic release announcements mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce
Wiki admin help mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system:
http://bugzilla.wikimedia.org/
Play "stump the developers" live on IRC:
#mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCzNsWwRnhpk1wk44RAk3LAJ4/DBDT4Vu6YPIYwYntImUJ/AXBRACfWCsm
PCtY9QynW6h4RnSSShcCSvQ=
=u2ZE
-----END PGP SIGNATURE-----
Hello,
I made an extension which basically lists all the user pages. Put a
<listofusers> tag on any page, and it'll link to all the user pages of
the registered users. I stuck this on my front page for people to see.
However, the list doesn't get updated unless I change the age. When a
new user signs up, he doesn't show up on my front page until I edit the
page and resubmit it. Why is that, and can I somehow get it to refresh
every time someone visits the page?
Regarding this question... In one day our wiki has crashed again due to
hitting the 80K connections/hour limit. If anyone has any suggestions
on how to debug this I would really appreciate it.
Michelle
> Our ISP-served wiki (running MediaWiki 1.3.11) went down due to this
> error:
>
> SQL error: User 'our_wiki' has exceeded the 'max_questions' resource
> (current value: 50000)
>
> The ISP support assured me we did indeed exceed 50K
> questions/connections in one hour, and that this went on for over 12
> hours until they increased our limit to 80K questions/hour.
>
> Is this an expected level of database connections for a wiki with 1500
> articles and about 400 visitors/day?
>
> Would the number of connection requests be any lower using release
> 1.4.x?
>
> The ISP suggested we create a second db user and change the code to
> switch between them for accesses so that we avoid hitting the limit.
> I guess this would mean changing Database.php but it seems very
> kludgy. Any thoughts on that would be appreciated.
>
> Michelle
I'm trying to locate the PHP code in source for bullet/number lists to
change the symbols used when people post, perhaps slide in alternative
methods.
Does anyone know documentation that shows where the code for this lives?
Also, once I change things, do I have to post the full source for the
project since I altered it?
~PatHaugen
Aerik Sylvan (aerik(a)thesylvans.com) [050706 07:14]:
> I've only looked into it enough to get a basic understanding, and I
> honestly only have a rough understand of the issues with it, but love
> the concept and agree that this could be used in a variety of ways on
> many wikis. I'm going to use it for ratings on my wiki.
> I'd be happy to help "fix" it (write code) but unfortunately need some
> more detailed guidance on what exactly needs to be done.
See discussion at http://meta.wikimedia.org/wiki/Article_validation_feature
and linked pages.
Brion's post of problems with it (incomplete) is at:
http://mail.wikimedia.org/pipermail/wikitech-l/2005-June/030325.html
- d.
I've just installed MediaWiki 1.4.4 under Suse and have a newbie question.
I want to set up an administrative user and went to the documantation at http://meta.wikimedia.org/wiki/Documentation:Administration#Getting_adminis… and tried to follow the listed steps, but came up with an "ERROR 1054: Unkown column 'user_rights' in 'field list'.
Using phpMyAdmin to look at the user table in fact shows that there isn't a user_rights field, but that there is a user_rights table, with a ur_rights binary field. Manually changing the ur_rights from 0 to 1 did not seem to enhance the user's access.
Any pointers would be appreciated.
Thanks
--Ira
I ran into similar problems when I set up Media Wiki on one of my win 2k
machines
http://ahynes1.homeip.net:8180/mw/index.php?title=Main_Page
In my case, I was setting up a 1.3.8 site. It gave me all kinds of weird
errors, and when I hit install, nothing seemed to happen. However, I did
find that a properly configured LocalSettings.php file had been created in
my config subdirectory. I moved the LocalSettings.php file to the main
directory and everything started working fine.
I would check to see if your database is created and populated and if the
LocalSettings.php file has been created. If they are, you can probably
safely move the LocalSettings.php file and you may be on your way.
Aldon
-----Original Message-----
Date: Sun, 3 Jul 2005 19:41:06 +1000
From: tim marshall <timmarshall.australia(a)gmail.com>
Subject: [Mediawiki-l] Desperate for help installing MediaWiki on win
2k
To: mediawiki-l(a)Wikimedia.org
Message-ID: <b459caa905070302413ff3e269(a)mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Hi folks,
I really want to install wikimedia on my computer so I can use it as a
simple way of creating content for a website.
I only need to install it on my own machine - not on a website (ie.
remote server), because I just want to use it as an easier way to
create the text and links for a website (and transfer them to a proper
web-creation tool later).
(It's for a good cause - it's a website about spirituality and
psychology).
I'm using Windows 2000 and I was wondering if anyone was willing to
volunteer to help me install it!
I've followed the instructions on the site
(http://meta.wikimedia.org/wiki/Wiki_on_a_stick), but I've run into a
problem.
When I get to the section called "Initial wiki configuration", section
2.1, where it says "Fill out the form..." I find that there is no
proper form on the page - just alot of gobbledygook.
When I click "INSTALL" it's supposed to "write" a file, but it does
nothing. Also I don't think i'm doing the earlier section about the
batch file properly either.
I really need a little help on this. Or - perhaps someone might even
be so kind as to create a readymade folder with all the stuff in it
for me...?! (Alot to ask, I know!)
But I'm really stumped.
If any brave soul was willing to volunteer for this Arthurian task I'd
really appreciate it!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MediaWiki 1.5 beta 2 is a preview release of the new 1.5 release series.
While most exciting new bugs should have been ironed out at this point,
third-party wiki operators should probably not run this beta release
on a public site without closely following additional development.
Anyone who _has_ been running beta 1 is very very strongly advised to
upgrade to beta 2, as it fixes many bugs from the previous beta
including a couple of HTML and SQL injections.
This release should be followed by one or two release candidates and
a 1.5.0 final within the next few weeks.
Beta upgraders, note there are some minor database changes. For upgrades
from 1.4, see the file UPGRADE for details on significant database and
configuration file changes.
Beta 2 includes a preliminary command-line XML wiki dump importer tool,
maintenance/importDump.php, paired with maintenance/dumpBackup.php.
These use the same format as Special:Export and Special:Import, able
to package a wiki's entire page set independent of the backend database
and compression format.
Release notes:
http://sourceforge.net/project/shownotes.php?release_id=339820
Download:
http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5beta2.tar.gz?down…
MD5 checksum: 00b867fce68f0549ecb9a4938191dd19
Before asking for help, try the FAQ:
http://meta.wikimedia.org/wiki/MediaWiki_FAQ
Low-traffic release announcements mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce
Wiki admin help mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system:
http://bugzilla.wikimedia.org/
Play "stump the developers" live on IRC:
#mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCylIewRnhpk1wk44RAkYcAKCXIXwwEww0BWYkfwd23W44ZqjV2ACgli/R
aUg/ZaK2CwI6uASuTav+Iag=
=L57c
-----END PGP SIGNATURE-----
Thanks Rowan I appreciate the feedback.
Regards
ed
-----Original Message-----
From: mediawiki-l-bounces(a)Wikimedia.org
[mailto:mediawiki-l-bounces@Wikimedia.org] On Behalf Of Lloyd Mason
Sent: Monday, July 04, 2005 10:38 PM
To: MediaWiki announcements and site admin list
Subject: Fw: [Mediawiki-l] RHES* to Debian Sarge migration
----- Original Message -----
From: "Rowan Collins" <rowan.collins(a)gmail.com>
To: "MediaWiki announcements and site admin list"
<mediawiki-l(a)wikimedia.org>
Sent: Tuesday, July 05, 2005 4:10 AM
Subject: Re: [Mediawiki-l] RHES* to Debian Sarge migration
On 01/07/05, Edward De Jongh <Edwardd(a)discovery.co.za> wrote:
> No where would I?
By clicking the "history" tab, just like with any other article.
> It has been sorted though. I simply clicked on edit
> and there was all the info, once I saved it, it was fine. I would
still
> love to know how/why.
Probably a caching issue: you probably viewed the main page just after
you installed the new wiki, and the rendered version got cached; then,
when you imported the other version directly into the database, the
software didn't know to clear this cache. Consequently, the old
version was loaded from the cache until you forced it to be purged
[the simplest way of doing this, by the way, is to use the parameter
"action=purge" in the URL].
--
Rowan Collins BSc
[IMSoP]
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l(a)Wikimedia.org
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
.
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l(a)Wikimedia.org
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l