MediaWiki-l January 2011

mediawiki-l@lists.wikimedia.org

69 participants
84 discussions

MediaWiki security release 1.16.1
by Tim Starling 04 Jan '11

04 Jan '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I would like to announce the release of MediaWiki 1.16.1, which is a security and maintenance release. Wikipedia user PleaseStand pointed out that MediaWiki has no protection against "clickjacking". With user or site JavaScript or CSS enabled, clickjacking can lead to cross-site scripting (XSS), and thus full compromise of the wiki account of any user who visits a malicious external site. Clickjacking affects all previous versions of MediaWiki. Our fix involves denying framing on all pages except normal page views and a few selected special pages. To be protected, all users need to use a browser which supports X-Frame-Options. For information about supported browsers, see: <https://developer.mozilla.org/en/the_x-frame-options_response_header> For more information about this vulnerability and the related patch, see: <https://bugzilla.wikimedia.org/show_bug.cgi?id=26561> Other changes in MediaWiki 1.16.1: * (bug 24981) Allow extensions to access SpecialUpload variables again * (bug 24724) list=allusers was out by 1 (shows total users - 1) * (bug 24166) Fixed API error when using rvprop=tags * For wikis using French as a content language, Special:Téléchargement works again as an alias for Special:Upload. * (bug 25167) Correctly load JS fixes for IE6 (fixing a regression in 1.16.0) * (bug 25248) Fixed paraminfo errors in certain API modules. * The installer now has improved handling for situations where safe_mode is active or exec() and similar functions are disabled. * (bug 19593) Specifying --server in now works for all maintenance scripts. * Fixed $wgLicenseTerms register globals. Full release notes: http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_16_1/phase3/RELEASE-NO… ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.1.tar.gz Patch to previous version (1.16.0), without interface text: http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.1.patch.gz Interface text changes: http://download.wikimedia.org/mediawiki/1.16/mediawiki-i18n-1.16.1.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.1.tar.gz.sig http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.1.patch.gz.sig http://download.wikimedia.org/mediawiki/1.16/mediawiki-i18n-1.16.1.patch.gz… Public keys: https://secure.wikimedia.org/keys.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk0ixHAACgkQgkA+Wfn4zXmOcgCePqvDrlaw1FZLbtOfx/3tEIID GQkAn3eSSdTbBCOqXLvXNiG4Vm0kXl7r =haR1 -----END PGP SIGNATURE-----

3 5

PHP error Autoloader.php line 654
by Cathie Sherwood 03 Jan '11

03 Jan '11

Further to my last post, I¹ve been able to upload the HTMLCacheUpdate.php file and now get the following error. I¹ve checked the file (which hasn¹t been changed from the original installation downloaded from Mediawiki) and there doesn¹t appear to be an unterminated comment. Warning: Unterminated comment starting line 215 in /home/mackay/public_html/w/includes/HTMLCacheUpdate.php on line 215 Parse error: syntax error, unexpected $end, expecting T_FUNCTION in /home/mackay/public_html/w/includes/HTMLCacheUpdate.php on line 215 Thanks

3 4

PHP error Autoloader.php line 654
by Cathie Sherwood 03 Jan '11

03 Jan '11

Hi I installed Mediawiki a couple of days ago no errors came up and I¹ve been able to log in and start creating pages etc. Whenever I modify an article and save the changes, a blank page appears with Done in the bottom left corner. When I go back to the Main Page of the wiki the changes I¹ve made are there. I¹m using the following in my installation of MediaWiki: Mediawiki version 1.16 Apache version 2.2.8 PHP version 5.2.5 MySQL version 4.1.22-standard Using a Macintosh with the latest OS and modifying articles using both Safari and Firefox. I am logged in as sysop. This is the error message I get: Warning: AutoLoader::require(/home/mackay/public_html/w/includes/HTMLCacheUpdate.php) [function.AutoLoader-require <http://www.mackayfamilyhistory.org.au/w/function.AutoLoader-require> ]: failed to open stream: No such file or directory in /home/mackay/public_html/w/includes/AutoLoader.php on line 654 Fatal error: AutoLoader::require() [function.require <http://www.mackayfamilyhistory.org.au/w/function.require> ]: Failed opening required '/home/mackay/public_html/w/includes/HTMLCacheUpdate.php' (include_path='/home/mackay/public_html/w:/home/mackay/public_html/w/include s:/home/mackay/public_html/w/languages:.:/usr/lib/php:/usr/local/lib/php') in /home/mackay/public_html/w/includes/AutoLoader.php on line 654 I¹ve read virtually everything I can on this issue and have tried as many of the solutions as I can. I¹ve upped the memory limit to 50mb. I¹ve checked for missing files and the only file that is not in the /includes directory is HTMLCacheUpdate.php. When I try to upload that file to the server, it can¹t be done and the file transfer just hangs. If I could be pointed to a solution that works, I would appreciate it. Thanks in advance.

2 1

How to modify the Page Tags sequence ?
by Francois Colonna 01 Jan '11

01 Jan '11

Hello Could somebody tell me how can I modify the "page tags" sequence order ? For example instead of having : "page" "discussion" "edit" etc... How to get : "page" "edit" "discussion" etc... Which module is determining the "page tags" sequence order ? Thanks Francois Colonna

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l January 2011