MediaWiki-l December 2018

mediawiki-l@lists.wikimedia.org

24 participants
23 discussions

Special:Version leaks info on open_basedir
by Jeffrey Walton 24 Dec '18

24 Dec '18

Hi Everyone, A while back we applied hardening per http://www.cyberciti.biz/tips/php-security-best-practices-tutorial.html . Our php.ini includes the following: ;; #15 Limit PHP Access To File System ;; Allows recursive descent open_basedir="/var/www/html/:/var/lib/php/" When (1) the cache is stale, and (2) we run Special:Version, then part of our security configuration is provided: https://cryptopp.com/special-version.png Is there any way to close that hole? I'm OK with allowing Git to run, but I don't know how to do it short of opening up /usr/bin to the web server. Thanks in advance.

3 3

What is this database error relating to ipb_id?
by Jeffrey Walton 23 Dec '18

23 Dec '18

I'm trying to perform another 1.30 -> 1.31 upgrade. MariaDB version 5.5.60. I've tried to run upgrade.php with our standard user (mwuser) and db administrator (root). upgrade.php has always worked in the past using our standard user (mwuser). I've run "mysql_upgrade --user=root ..." again just in case because of the hint below. Everything is OK. What is the error and how do I fix it? ################################### # php maintenance/update.php MediaWiki 1.31.1 Updater Your composer.lock file is up to date with current dependencies! Going to run database updates for my_wiki-wikicryptopp_ Depending on the size of your database this may take a while! Abort with control-c in the next five seconds (skip this countdown with --quick) ... 0 Turning off Content Handler DB fields for this part of upgrade. Adding ipb_id field to table ipblocks ...[33b892a93ece4b42600cbd2b] [no req] W ikimedia\Rdbms\DBQueryError from line 1457 of /var/www/html/w/includes/libs/rdbm s/database/Database.php: A database query error has occurred. Did you forget to run your application's database schema updater after upgrading? Query: ALTER TABLE `mediawiki`.`wikicryptopp_ipblocks` ADD ipb_auto tinyint NOT NULL default '0', ADD ipb_id int NOT NULL auto_increment, ADD PRIMARY KEY (ipb_id) Function: Wikimedia\Rdbms\Database::sourceFile( /var/www/html/w/maintenance/arch ives/patch-ipblocks.sql ) Error: 1142 ALTER command denied to user 'mwuser'@'localhost' for table 'wikicry ptopp_ipblocks' (localhost) Backtrace: #0 /var/www/html/w/includes/libs/rdbms/database/Database.php(1427): Wikimedia\Rd bms\Database->makeQueryException(string, integer, string, string) #1 /var/www/html/w/includes/libs/rdbms/database/Database.php(1200): Wikimedia\Rd bms\Database->reportQueryError(string, integer, string, string, boolean) #2 /var/www/html/w/includes/libs/rdbms/database/Database.php(4194): Wikimedia\Rd bms\Database->query(string, string) #3 /var/www/html/w/includes/libs/rdbms/database/Database.php(4129): Wikimedia\Rd bms\Database->sourceStream(unknown type, NULL, NULL, string, NULL) #4 /var/www/html/w/includes/installer/DatabaseUpdater.php(683): Wikimedia\Rdbms\ Database->sourceFile(string) #5 /var/www/html/w/includes/installer/DatabaseUpdater.php(751): DatabaseUpdater- >applyPatch(string, boolean, string) #6 /var/www/html/w/includes/installer/DatabaseUpdater.php(482): DatabaseUpdater- >addField(string, string, string) #7 /var/www/html/w/includes/installer/DatabaseUpdater.php(446): DatabaseUpdater- >runUpdates(array, boolean) #8 /var/www/html/w/maintenance/update.php(200): DatabaseUpdater->doUpdates(array ) #9 /var/www/html/w/maintenance/doMaintenance.php(94): UpdateMediaWiki->execute() #10 /var/www/html/w/maintenance/update.php(245): require_once(string) #11 {main}

2 2

Please lower MySQL requirements in next release
by Jeffrey Walton 23 Dec '18

23 Dec '18

We use CentOS 7. Red Hat supplies antique software. It offers Media wiki 1.21, if I recall correctly. It is what it is. We had to take on maintenance of Mediawiki because we wanted to offer newer features users. Skins and extensions sometimes need something newer than what the platform provides. We've managed to update Apache, Python and PHP using SCL (https://wiki.centos.org/AdditionalResources/Repositories/SCL). However, we cannot get the MySQL update to work. We are stuck at MySQL 5.5.60. MySQL 5.5.60 was released April 2018. We can't upgrade to to MW 1.31 due to CentOS's MySQL. We tried to install MW 1.31 but maintenance/update.sh died when trying to update the database. We had to go to backup and restore the installation. It is not just CentOS. Other OSes, like Ubuntu 14 LTS, are boxing users. For example Ubuntu 14 provides MySQL 5.5.62 (https://packages.ubuntu.com/search?keywords=mysql-server). MySQL 5.5.62 was released October 2018. Earlier I said "We've managed to update Apache, Python and PHP...". SCL does not offer Composer. Composer is an entirely new set of hardships. SCL probably does not offer Composer because dev tools have no business being on a production server. While you may think 'composer update' is easy, it took us a day and a half to work around all the problems and exceptions. Please consider lowering the MySQL requirements. Most helpful would be to lower and freeze all requirements for the next 3 or 5 years. A requirements freeze would allow us (and other users) to upgrade Mediawiki without the hassles and aggravations. Thanks in advance.

6 6

CACHE_ACCEL and "You may want to install APC"
by Jeffrey Walton 22 Dec '18

22 Dec '18

Hi Everyone, I'm in a very unusual state. I had to perform a restore of our html/ directory because I accidentally blew away /var/www/html . We also lacked a current backup, and our backup was exactly 1 year old. So the upgrade.php file below is from MW 1.28, IIRC. I had a current backup of LocalSettings.php from MW 1.30, so I used it when the restored LocalSettings.php 1.28 caused problems. However, the 1.30 LocalSettings had all the wfLoadExtension and wfLoadSkin commented because they are not present (yet). So I have 1.28 Mediawiki, 1.30 LocalSettings, and a missing APC. Caching and APC is discussed here, but I did not see what needs to be installed: https://www.mediawiki.org/wiki/Manual:Performance_tuning . What is APC, and how do I install it? ----- # yum install apc Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: centos.mirror.netelligent.ca * epel: ewr.edge.kernel.org * extras: centos.mirror.netelligent.ca * updates: centos.mirror.netelligent.ca No package apc available. Error: Nothing to do ----- # php maintenance/update.php [f6724eba] [no req] MWException from line 150 of /var/www/html/w/includes/obje ctcache/ObjectCache.php: CACHE_ACCEL requested but no suitable object cache is p resent. You may want to install APC. Backtrace: #0 /var/www/html/w/includes/objectcache/ObjectCache.php(94): ObjectCache::newAcc elerator(array) #1 /var/www/html/w/includes/objectcache/ObjectCache.php(74): ObjectCache::newFro mParams(array) #2 /var/www/html/w/includes/objectcache/ObjectCache.php(46): ObjectCache::newFro mId(integer) #3 /var/www/html/w/includes/GlobalFunctions.php(3935): ObjectCache::getInstance( integer) #4 /var/www/html/w/includes/Setup.php(581): wfGetMainCache() #5 /var/www/html/w/maintenance/doMaintenance.php(97): require_once(string) #6 /var/www/html/w/maintenance/update.php(216): require_once(string) #7 {main}

1 1

PageForms input field created subcategory
by Alex Zanutto 21 Dec '18

21 Dec '18

Hi everyone, I looked for a solution but I haven't found it either online or on the mailinglist. I have got this wiki http://cemp.altervista.org Every page created with the form Paradox http://cemp.altervista.org/index.php?title=Form:Paradox will have a Keywords section. I would like: - for every word that is input in that field to belong to the Keywords category - for every word that is input to be a subcategory of the Keywords category - that every subcategory created this way to be assigned to the page that is created trhough the form For example take this page http://cemp.altervista.org/index.php?title=In_the_praise_of_Nothing In the form to create it I would input 'Nothing' and 'Test' in the Keywords field. Once the page is created the links in the Keywords section will respectively send the user to the Nothing or Test category page (both subcategories of Keywords). The page will have the Nothing and Test Category. Is it possible? Thank you very much

1 0

What is <admin> in install.php
by Jeffrey Walton 21 Dec '18

21 Dec '18

I'm having trouble with a fresh install using the 1.31 tarball. We are using MySQL, and I created the database and user per the instructions at https://www.mediawiki.org/wiki/Manual:Installing_MediaWiki: CREATE DATABASE wikidb; CREATE USER 'wikiuser'@'localhost' IDENTIFIED BY 'XXXXX'; GRANT ALL PRIVILEGES ON wikidb.* TO 'wikiuser'@'localhost' WITH GRANT OPTION; The next step is to run "php maintenance/install.php" but no directions are provided. Running with information from "install.php --help" is failing: # php maintenance/install.php --dbname:wikidb --dbuser:wikiuser --dbpass:XXXX root Argument <admin> required! What is the argument <admin>? Thanks in advance ---------- # php maintenance/install.php --help CLI-based MediaWiki installation and configuration. Default options are indicated in parentheses. Usage: php install.php [--conf|--confpath|--dbname|--dbpass|--dbpassfile|--dbpat h|--dbport|--dbprefix|--dbschema|--dbserver|--dbtype|--dbuser|--env-checks|--glo bals|--help|--installdbpass|--installdbuser|--lang|--memory-limit|--mwdebug|--pa ss|--passfile|--profiler|--quiet|--scriptpath|--server|--wiki|--with-extensions] [name] Generic maintenance parameters: --help (-h): Display this help message --quiet (-q): Whether to supress non-error output --conf: Location of LocalSettings.php, if not default --wiki: For specifying the wiki ID --globals: Output globals at the end of processing for debugging --memory-limit: Set a specific memory limit for the script, "max" for no limit or "default" to avoid changing it --server: The protocol and server name to use in URLs, e.g. http://en.wikipedia.org. This is sometimes necessary because server name detection may fail in command line scripts. --profiler: Profiler output format (usually "text") --mwdebug: Enable built-in MediaWiki development settings Script dependant parameters: --dbuser: The DB user to use for this script --dbpass: The password to use for this script Script specific parameters: --confpath: Path to write LocalSettings.php to (/var/www/html/wiki) --dbname: The database name (my_wiki) --dbpassfile: An alternative way to provide dbpass option, as the contents of this file --dbpath: The path for the SQLite DB ($IP/data) --dbport: The database port; only for PostgreSQL (5432) --dbprefix: Optional database table name prefix --dbschema: The schema for the MediaWiki DB in PostgreSQL/Microsoft SQL Server (mediawiki) --dbserver: The database host (localhost) --dbtype: The type of database (mysql) --env-checks: Run environment checks only, don't change anything --installdbpass: The password for the DB user to install as. --installdbuser: The user to use for installing (root) --lang: The language to use (en) --pass: The password for the wiki administrator. --passfile: An alternative way to provide pass option, as the contents of this file --scriptpath: The relative path of the wiki in the web server (/wiki) --with-extensions: Detect and include extensions Arguments: [name]: The name of the wiki (MediaWiki) <admin>: The username of the wiki administrator.

3 5

About deleting the content
by Miikun 20 Dec '18

20 Dec '18

Hello, I don't know if you will reply or not, but I have to say, one of the website has infringed my reputation. The link is https://weiki.esu.zone/%E9%99%88%E6%B1%89%E8%BE%BE . Please help me to delete the link and close the site forever. I'll be so appreciate if you would like to help me. Kind Regards, Terence

2 1

Visual Editor give error message "apierror-visualeditor-docserver-http" when trying to save
by Osterlund, Magnus 12 Dec '18

12 Dec '18

When I edit a page with Visual Editor and try to save, I get a "HTTP 404 apierror-visualeditor-docserver-http". I have try to follow the documentation how to set up it, but I do not understand everything. For my configuration, see https://github.com/magol/sag-wiki (links to config files in README.md) Please, look at my configuration and give me some clues what I have done wrong. //Magnus ________________________________ Capgemini is a trading name used by the Capgemini Group of companies which includes Capgemini Sverige AB, a company registered in Sweden (number 556092-3053) whose registered office is at Gustavslundsv?gen 131 Box 825 - S-161 24 Bromma. This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.

1 0

Improving the mediawiki.org frontpage: Part 2 (Content)
by Andre Klapper 12 Dec '18

12 Dec '18

Hi, this is a follow-up to Part 1 (Audiences) in https://lists.wikimedia.org/pipermail/mediawiki-l/2018-September/047631.html when I asked for help and comments to define which audiences to cover. While there has not been a lot of feedback, most of it was pretty helpful. You can find the results under https://www.mediawiki.org/wiki/MediaWiki/Homepage_improvements_2018#Audienc… The next step for the next three weeks is to decide on the content. An initial proposal (and explanations of challenges) can be found under https://www.mediawiki.org/wiki/MediaWiki/Homepage_improvements_2018#Content The proposal is not too different from the current content and tries to use clearer phrasing, avoids some of the current content duplication, removes a smaller number of some currently unhelpful pages and adds better information mostly for sysadmins and people who heard about MediaWiki for the very first time. If this sounds interesting, please take a look at the link above and let's discuss on the corresponding discussion page! Thanks in advance for your thoughts and input! andre -- Andre Klapper | Bugwrangler / Developer Advocate https://blogs.gnome.org/aklapper/

1 0

New episode of "Between the Brackets": Daniel Robbins
by Yaron Koren 12 Dec '18

12 Dec '18

Hi, A new episode of the MediaWiki podcast "Between the Brackets" is up - this one is a talk with Daniel Robbins, best known as the creator of Gentoo Linux and Funtoo Linux, but also a longtime MediaWiki enthusiast and consultant. You can hear the episode here: http://betweenthebrackets.libsyn.com/episode-23-daniel-robbins -Yaron -- WikiWorks · MediaWiki Consulting · http://wikiworks.com

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l December 2018