MediaWiki-l October 2015

mediawiki-l@lists.wikimedia.org

47 participants
43 discussions

Updating a 2007 MediaWiki?

by Dorem - Jérémie Bouillon

Hi, I'm finding myself in the position of updating a very old installation of MediaWiki, even if I'm far from a specialist in that sort of things. It's a 2007's 1.9.2 MediaWiki, on a MySQL 4.0 version. The only serious extension was Semantic, but not overly used. The content is mostly French, with a sprinkle of Polish. I need to update it to the last MediaWiki and a somewhat recent MySQL & PHP version. I was wondering if the list experts had any tips, traps to look for, well any advices on how to approach such a task?

8 years, 5 months

Advancing Release Branches in Extension Repositories (i.e. REL1_25)

by Kevin Ji

Hi everyone, We would like the release branches which are automatically created (such as REL1_25) for our extensions to point to the most recent stable version of our code available. Would it cause problems if we were to simply update (likely a fast forward merge) those branches ourselves as desired? Thank you very much, Kevin

8 years, 5 months

Piwik Extension

by Legault, Phillip [ITSUS]

Does anyone know if the Piwik Integration extension supported in MediaWiki 1.25.3 PHP 5.4.40 (apache2handler) MySQL 5.6.19-log Piwik Integration 2.4.2 I have in my configuration require_once "$IP/extensions/Piwik/Piwik.php"; $wgPiwikURL = "server.com/"; $wgPiwikIDSite = 1; $wgPiwikIgnoreSysops = false; $wgUseSiteJS = true; view page source I see  Thanks you for your help! Phil

8 years, 5 months

Template calls

by John Foster

Can someone tell me what the difference is here: {{TemplateData}} versus {{/TemplateData}} My system does not recognize the second call as a subpage. Per anothers suggestions ZI tried to see if I have something set up wrong & I looked at Special:ExpandPages & I can not figure this out. john

8 years, 6 months

Errors with 1.25.3 patch - when patching a previously patched release

by Dr. Michael Bonert

Hello: I am getting errors when applying the patch for 1.25.3. I am upgrading from 1.25.2. My upgrade path was 1.25.1 (fresh install) and patch to 1.25.2. Below is the dry-run of the patch: ----- root@euler:/var/www/wiki# patch -p1 --dry-run < mediawiki-1.25.3.patch checking file RELEASE-NOTES-1.25 checking file composer.json checking file composer.lock checking file docs/extension.schema.json checking file includes/DefaultSettings.php checking file includes/GlobalFunctions.php checking file includes/HtmlFormatter.php checking file includes/HttpFunctions.php checking file includes/MWNamespace.php checking file includes/Setup.php checking file includes/User.php checking file includes/api/ApiQuerySiteinfo.php checking file includes/api/ApiStashEdit.php checking file includes/api/ApiUpload.php checking file includes/filerepo/FileRepo.php checking file includes/filerepo/ForeignAPIRepo.php checking file includes/media/Bitmap.php checking file includes/registration/ExtensionProcessor.php checking file includes/registration/ExtensionRegistry.php checking file includes/revisiondelete/RevDelList.php checking file includes/specials/SpecialConfirmemail.php checking file includes/specials/SpecialRevisiondelete.php checking file includes/specials/SpecialUpload.php checking file includes/upload/UploadBase.php checking file maintenance/refreshLinks.php checking file tests/phpunit/includes/registration/ExtensionProcessorTest.php checking file tests/phpunit/includes/registration/ExtensionRegistryTest.php checking file vendor/autoload.php Hunk #1 FAILED at 4. 1 out of 1 hunk FAILED checking file vendor/composer/autoload_real.php Hunk #1 FAILED at 2. Hunk #2 FAILED at 19. Hunk #3 FAILED at 44. 3 out of 3 hunks FAILED ----- Things I have looked at: - I looked for documentation on 'autoload_real.php' The closest I could find is: https://www.mediawiki.org/wiki/Manual:AutoLoader.php The documentation is sparse. What "autoload_real.php" does isn't immediately clear to me. - I downloaded the mediawiki-1.25.3 tarball and compared it with the mediawiki-1.25.1 tarball (result below) ======================== $ diff ./mediawiki-1.25.1/vendor/composer/autoload_real.php ./mediawiki-1.25.3/vendor/composer/autoload_real.php 5c5 < class ComposerAutoloaderInit9b10cc5cf6896d6e4a31983fc3498786 --- class ComposerAutoloaderInite2ef576e4023c6f0949f5e8e1cdf8649 22c22 < spl_autoload_register(array('ComposerAutoloaderInit9b10cc5cf6896d6e4a31983fc3498786', 'loadClassLoader'), true, false); --- spl_autoload_register(array('ComposerAutoloaderInite2ef576e4023c6f0949f5e8e1cdf8649', 'loadClassLoader'), true, false); 24c24 < spl_autoload_unregister(array('ComposerAutoloaderInit9b10cc5cf6896d6e4a31983fc3498786', 'loadClassLoader')); --- spl_autoload_unregister(array('ComposerAutoloaderInite2ef576e4023c6f0949f5e8e1cdf8649', 'loadClassLoader')); 47c47 < function composerRequire9b10cc5cf6896d6e4a31983fc3498786($file) --- function composerRequiree2ef576e4023c6f0949f5e8e1cdf8649($file) ======================== It looks like it is changes in some key. The 1.25.3 patch changes the key... and I suspect it was different in version 1.25-2. I see two possibilities here: 1. The key change is _inconsequential_ and _included_ in error in the 1.25.3.patch. 2. The key change is _consequential_ and was _missing- in error in the 1.25.2.patch. My sense is it is #1. Which is it? In any case, I think this is the third time the patches weren't applying cleanly. I wish the patches were a bit cleaner. A suggestion for the release process: Have a script that checks whether the series of patches within a series of releases (e.g. 1.25.x) give you the same result as patching the last release. In other words, if you patch a fresh install of 1.25.2 (to 1.25.3) you should get to the same place as patching a fresh install of 1.25.1 that was previously patched to 1.25.2. Thanks, Michael

8 years, 6 months

SpecialAllmessages.php to SpecialAllMessages.php

by Legault, Phillip [ITSUS]

I noticed that there have been file name changes going into 1.25 SpecialAllmessages.php<https://stash.vpcx.jnj.com/projects/ITX-ACR/repos/mediawiki/browse/mw/inclu…> to SpecialAllMessages.php<https://stash.vpcx.jnj.com/projects/ITX-ACR/repos/mediawiki/browse/mw/inclu…> And SpecialAllpages.php to SpecialAllPages.php<https://stash.vpcx.jnj.com/projects/ITX-ACR/repos/mediawiki/browse/mw/inclu…>

8 years, 6 months

no external image displayed by adding $wgAllowExternalImages = true

by james.zhu

hello：all of guys: I use MediaWiki 1.25.2 and set $wgAllowExternalImages = true in LocalSettings.php. But my wiki still display the the linke in text, not the real image: http://www.hiastar.com/images/banners/Sangoma-Certified_Cards_Badge.jpg the source is: [[file:San.jpg|http://www.hiastar.com/images/banners/Sangoma-Certified_Cards_…]] Does Anyone know what is the problem?

8 years, 6 months

[MediaWiki-announce] Extension Security Release: OAuth, Echo, PageTriage

by Chad

Hi all, In addition to the security release for MediaWiki core earlier today, I'd like to announce security fixes available for the following 3 extensions: * Extension:PageTriage - MediaWiki user Grunny discovered a DOM-based XSS in the way the extension handled page titles. <https://phabricator.wikimedia.org/T111029> * Extension:Echo - Internal review discovered that Echo could display deleted or suppressed usernames when the username was previously used to Thank users. <https://phabricator.wikimedia.org/T110553> * Extension:OAuth - Wikipedia user Sitic discovered that the OAuth extension did not correctly enforce the IP restrictions of a Consumer when using previously negotiated credentials. <https://phabricator.wikimedia.org/T103022> * Extension:OAuth - Wikipedia user Sitic discovered that OAuth would accept a valid signature from any Consumer when checking the authorization signature. This allowed a registered Consumer who gained access to another Consumer's users access tokens and secrets to use those credentials. <https://phabricator.wikimedia.org/T103023> ********************************************************************** Extension:PageTriage ********************************************************************** Information and Download: https://www.mediawiki.org/wiki/Extension:PageTriage ********************************************************************** Extension:Echo ********************************************************************** Information and Download: https://www.mediawiki.org/wiki/Extension:Echo ********************************************************************** Extension:OAuth ********************************************************************** Information and Download: https://www.mediawiki.org/wiki/Extension:OAuth None of these extensions are bundled but they are in use on Wikimedia sites hence the announcement. Fixes are in all supported branches in Git and are thus available from ExtensionDistributor. -Chad _______________________________________________ MediaWiki announcements mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce

8 years, 6 months

[MediaWiki-announce] Security Release: 1.25.3, 1.24.4 and 1.23.11

by Chad

I would like to announce the release of MediaWiki 1.25.3, 1.24.4, and 1.23.11. These releases fix five security issues in core, in addition to other bug fixes. Download links are given at the end of this email == Security fixes == * Wikipedia user RobinHood70 reported two issues in the chunked upload API. The API failed to correctly stop adding new chunks to the upload when the reported size was exceeded (T91203), allowing a malicious users to upload add an infinite number of chunks for a single file upload. Additionally, a malicious user could upload chunks of 1 byte for very large files, potentially creating a very large number of files on the server's filesystem (T91205). <https://phabricator.wikimedia.org/T91203> <https://phabricator.wikimedia.org/T91205> * Internal review discovered that it is not possible to throttle file uploads. <https://phabricator.wikimedia.org/T91850> * Internal review discovered a missing authorization check when removing suppression from a revision. This allowed users with the 'viewsuppressed' user right but not the appropriate 'suppressrevision' user right to unsuppress revisions. <https://phabricator.wikimedia.org/T95589> * Richard Stanway from teamliquid.net reported that thumbnails of PNG files generated with ImageMagick contained the local file path in the image metadata. <https://phabricator.wikimedia.org/T108616> == Bug Fixes in 1.25.3 == * Fix having multiple callbacks for a single hook. <https://phabricator.wikimedia.org/T98975> * maintenance/refreshLinks.php did not always remove all links pointing to nonexistent pages. <https://phabricator.wikimedia.org/T107632> * $wgEmergencyContact and $wgPasswordSender now use their default value if set to an empty string. <https://phabricator.wikimedia.org/T104142> * Provide fallbacks for use of mb_convert_encoding() in HtmlFormatter. It was causing an error when accessing the api help page if the mbstring PHP extension was not installed. <https://phabricator.wikimedia.org/T62174> * Confirmation emails would sometimes contain invalid codes. <https://phabricator.wikimedia.org/T105896> * Fixed edit stash inclusion queries. <https://phabricator.wikimedia.org/T105597> == Bug Fixes in 1.24.4 == * Minimal PSR-3 debug logger to support backports from 1.25+. <https://phabricator.wikimedia.org/T91653> * Fix indexing of moved pages with PostgreSQL. Requires running update.php to fix. <https://phabricator.wikimedia.org/T68650> == Release notes == Full release notes for 1.25.3: <https://www.mediawiki.org/wiki/Release_notes/1.25> Full release notes for 1.24.4: <https://www.mediawiki.org/wiki/Release_notes/1.24> Full release notes for 1.23.11: <https://www.mediawiki.org/wiki/Release_notes/1.23> For information about how to upgrade, see <https://www.mediawiki.org/wiki/Manual:Upgrading> ********************************************************************** 1.25.3 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.25/mediawiki-1.25.3.tar.gz https://releases.wikimedia.org/mediawiki/1.25/mediawiki-core-1.25.3.tar.gz Patch to previous version: https://releases.wikimedia.org/mediawiki/1.25/mediawiki-1.25.3.patch.gz https://releases.wikimedia.org/mediawiki/1.25/mediawiki-i18n-1.25.3.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.25/mediawiki-1.25.3.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.25/mediawiki-1.25.3.patch.gz.sig https://releases.wikimedia.org/mediawiki/1.25/mediawiki-core-1.25.3.tar.gz.… https://releases.wikimedia.org/mediawiki/1.25/mediawiki-i18n-1.25.3.patch.g… Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** 1.24.4 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.24/mediawiki-1.24.4.tar.gz https://releases.wikimedia.org/mediawiki/1.24/mediawiki-core-1.24.4.tar.gz Patch to previous version: https://releases.wikimedia.org/mediawiki/1.24/mediawiki-1.24.4.patch.gz https://releases.wikimedia.org/mediawiki/1.24/mediawiki-i18n-1.24.4.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.24/mediawiki-1.24.4.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.24/mediawiki-1.24.4.patch.gz.sig https://releases.wikimedia.org/mediawiki/1.24/mediawiki-core-1.24.4.tar.gz.… https://releases.wikimedia.org/mediawiki/1.24/mediawiki-i18n-1.24.4.patch.g… Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** 1.23.11 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.11.tar.gz https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.11.tar.gz Patch to previous version: https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.11.patch.gz https://releases.wikimedia.org/mediawiki/1.23/mediawiki-i18n-1.23.11.patch.… GPG signatures: https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.11.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.11.patch.gz.sig https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.11.tar.gz… https://releases.wikimedia.org/mediawiki/1.23/mediawiki-i18n-1.23.11.patch.… Public keys: https://www.mediawiki.org/keys/keys.html -Chad _______________________________________________ MediaWiki announcements mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce

8 years, 6 months

how to make mediawiki make TOC with less than 4 sections ?

by shirish

Hi all, A temporary way to generate Table of Contents (TOC) is to write __FORCETOC__ or _TOC_ before starting the page but what if we don't want that. Let's say we want to have all and any pages that has more than 2 sections should have a TOC. Is there a way to do it ? By default in mediawiki installation it needs 4 sections. From https://en.wikipedia.org/wiki/Help:Section#Table_of_contents_.28TOC.29 -- Regards, Shirish Agarwal, Community Lead, Hamaralinux.org

8 years, 6 months

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l October 2015