MediaWiki-l December 2019

mediawiki-l@lists.wikimedia.org

23 participants
19 discussions

Lis tes messages avant qu'ils ne soient effacés!
by Badoo 31 Dec '23

31 Dec '23

Lis ton message de Nganguem Victor avant qu'il ne soit effacé! Pour lire ton message, suis simplement ce lien: http://eu1.badoo.com/chatnoirxx/in/p4hxwt052ok/?lang_id=6 D'autres personnes sont aussi présentes: Oded (Tel Aviv, Israël) Priya (Udaipur, Inde) RajaYogi BK (Udaipur, Inde) Karuna (Udaipur, Inde) Chika Reginald Onyia (Pnompen', Cambodge) ...Qui d'autre? http://eu1.badoo.com/chatnoirxx/in/p4hxwt052ok/?lang_id=6 Les liens ne fonctionnent pas dans ce message? Copie les dans la barre d'adresse de ton navigateur. Tu as reçu cet email suite à un message envoyé par Nganguem Victor de notre système. S'il s'agit d'une erreur, ignore simplement cet email. La requête sera alors effacée du système. Amuse-toi bien ! L'équipe Badoo Courrier automatique de Badoo suite à l'envoi d'un message à ton attention sur Badoo. Les réponses ne sont ni stockées, ni traitées. Si tu ne veux plus recevoir de message de Badoo, fais-le nous savoir: http://eu1.badoo.com/impersonation.phtml?lang_id=6&mail_code=65&email=media…

3 2

EMWCon Spring 2020 Announcement + Call for Presentations
by Evans, Richard K. (GRC-H000) 31 Dec '19

31 Dec '19

ATTENTION MEDIAWIKI ADMINS, DEVELOPERS, AND USERS! APRIL 1-3, 2020 --- SANDUSKY, OHIO USA We are excited to announce EMWCon Spring 2020, the Enterprise MediaWiki Conference [0], happening from April 1-3 in Sandusky, Ohio USA. The conference will have two days of talks followed by a one day Create Camp. There will be many opportunities to interact with others using and developing MediaWiki. Quick Link: https://www.mediawiki.org/wiki/EMWCon_Spring_2020 == WHAT TO DO RIGHT NOW == If you know you're going to attend: 1. Please add your name to the unofficial attendance list [4] and watch that page for more detail on registration. 2. Book your room today [3] 3. Registration for EMWCon is coming soon, so WATCH the EMWCon Spring 2020 page to get notifications of updates in advance of future announcements. == IF YOU'D LIKE TO PROPOSE A TALK == Please propose your talk on the event page [1] as soon as possible, including a title, a brief description, and your name. * If your presentation is accepted, we'll contact you to get a short abstract of your talk * Check out the "CALL FOR PRESENTATIONS" section below for more information TO LEARN MORE ABOUT PREVIOUS EMW CONFERENCES, PLEASE SEE [2] If you have any questions please feel free to email me at: * richard.k.evans(a)nasa.gov Thank you for your interest and I hope to see you in April 2020!!! Sincerely, The EMWCon 2020 organizing committee * Richard Evans (General Chair) * Yaron Koren (Registration Chair and Principal Sponsor) * Cindy Cicalese (Program Chair) * Others to be announced (let us know if you want to be part of the organizing team) == CALL FOR PRESENTATIONS == If you are using MediaWiki + some important combination of extensions, we would love to have you as a speaker. We are looking for speakers to provide 20 minute talks that address any combination of the following questions: * Tell us about your enterprise wiki application -- What version are you running? Which extensions matter most to you? * Tell us what business domain it serves -- Private Industry? Non-Profit? Government? * Tell us what you use it for and how - Content Management? Documentation? Resource Planning? Compliance? * Tell us what technical and implementation successes and challenges can you tell us about? - Availability? Confidentiality? Integrity? * Tell us what cultural successes and challenges can you tell us about? - Reach? Engagement? Training? * Tell us what administration and lifecycle successes and challenges can you tell us about? * Tell us how MediaWiki fits in to your organization's mission and vision and what your plans are for your MediaWiki site going forward All presentations will be recorded and made available after the conference. == FUN FACTS ABOUT EMWCon 2020 == * This is the 5th meeting of this group, however it is the 1st time we will be meeting in an actual large-scale conference venue * "The Kalahari" in Sandusky is an all-in-one, family-friendly hotel-resort-conference venue. * Conference attendees will get family sized rooms at discounted rate of ~ $105 US per night (versus the normal > $200 advertised resort rates) * Conference attendees and their families will get full-run of the world's largest indoor water park included with their room bookings * Sandusky is known as "The vacation capital of the north" ** ref: https://www.shoresandislands.com/local/central-shores ** The conference venue is located across the street from NASA's Plum Brook Station, where NASA Orion Spacecraft is presently being tested for the Artemis-1 mission to the moon. == NASA TOUR == A tour of NASA's Plum Brook Station is being organized and will be included with the general registration at no extra charge. * ref 1: https://www.youtube.com/watch?v=s39Kl0ruj1Y&t=1m26s * ref 2: https://www.nasa.gov/feature/glenn/2019/orion-to-face-simulated-rigors-of-s… == References == * [0] https://www.mediawiki.org/wiki/EMWCon_Spring_2020 * [1] https://www.mediawiki.org/wiki/EMWCon_Spring_2020#Talks * [2] https://www.mediawiki.org/wiki/EMWCon * [3] https://www.mediawiki.org/wiki/EMWCon_Spring_2020#Accommodations * [4] https://www.mediawiki.org/wiki/EMWCon_Spring_2020#Unofficial_conference_sig… /Rich Evans https://riot.im/app/#/user/@revansx:matrix.org

4 4

CoC: New Amendment proposal: Explicitly banning legal threats
by Amir Sarabadani 29 Dec '19

29 Dec '19

Hello, There is a new amendment proposed for CoC to add legal threats to list of unacceptable behavior section of CoC. Please take a look and leave a comment on the page: https://www.mediawiki.org/wiki/Topic:Vdhvekfpz6nh64f3 The committee soon will review this proposal and if there is a community consensus (unless majority of the committee opposes it) we will add it to the CoC (based on the amendment section of CoC [1]) [1]: https://www.mediawiki.org/wiki/Code_of_Conduct/Amendments Thank you -- Amir (he/him)

1 0

Gadget-ReferenceTooltips.css
by Peter Presland 28 Dec '19

28 Dec '19

Running MW 1.32.2 with Bureaucrat privilages The edit tab does not appear in Mediawiki:Gadget-ReferenceTooltips.css although it does appear in Mediawiki:Gadget-ReferenceTooltips.js I want to edit these pages to contain the latest code because, although the gadget is turned on in preferences and browser has js turned on, only the basic tooltips appear throughout the wiki. Any suggestions appreciated Peter Presland

3 3

New episode of Between the Brackets: Holiday special!
by Yaron Koren 24 Dec '19

24 Dec '19

Hi everyone, A new episode of the MediaWiki podcast Between the Brackets has been released. This one was fun to put together: it's a 30-minute "holiday special", with some music and surprise guests. You can listen to the episode here: http://betweenthebrackets.libsyn.com/episode-50-between-the-brackets-2019-h… -Yaron

1 0

Page Forms - Edit with form placement
by Billy Sims 22 Dec '19

22 Dec '19

Hello, Does anyone know of a way to have Page Forms automatically insert the edit to the END of the page rather than the beginning? This would be helpful to maintain some desired page ordering. Best, Billy

1 2

User name "TammieDeLittle4" is usable, cannot create an anonymous actor for it.
by Jeffrey Walton 20 Dec '19

20 Dec '19

Hi Everyone, We are getting about 11,000 of these due to a spammer getting in a couple of years ago: ... log_id=4200 ... log_id=4300 ... log_id=4400 User name "Awpgkcm9ly0hjqagqrpl" is usable, cannot create an anonymous actor for it. Run maintenance/cleanupUsersWithNoId.php to fix this situation. ... $ grep -c 'anon' mw.txt 11748 I've tried manually cleaning them, but cleanupUsersWithNoId.php seems to be missing them: Error: ========== # php maintenance/cleanupUsersWithNoId.php --dbuser=<user> --dbpass=<passwd> --force --conf=LocalSettings.php Notice: Undefined index: SERVER_NAME in /var/www/html/w/includes/GlobalFunctions.php on line 1388 Notice: Undefined index: SERVER_NAME in /var/www/html/w/includes/GlobalFunctions.php on line 1388 Param prefix required! Cleans up tables that have valid usernames with no user ID Usage: php cleanupUsersWithNoId.php [--assign|--batch-size|--conf|--dbgroupdefault|--dbpass|--dbuser|--force|--globals|--help|--memory-limit|--mwdebug|--prefix|--profiler|--quiet|--server|--table|--wiki] ... Try again: ========== # php maintenance/cleanupUsersWithNoId.php --dbuser=<user> --dbpass=<passwd> --prefix=* --force --conf=LocalSettings.php Notice: Undefined index: SERVER_NAME in /var/www/html/w/includes/GlobalFunctions.php on line 1388 Notice: Undefined index: SERVER_NAME in /var/www/html/w/includes/GlobalFunctions.php on line 1388 But the entries persist. I think I am not getting the options right. Here are the docs, but they have not been helpful: https://www.mediawiki.org/wiki/Manual:CleanupUsersWithNoId.php . Does anyone know what switches I should be using to clean the unwanted users? Jeff

2 4

Next Mediawiki upgrade given CentOS 7 with PHP 7.1.30?
by Jeffrey Walton 20 Dec '19

20 Dec '19

Hi Everyone, We upgraded to 1.32.6 today. Everything looks OK. The 1.32.6 release announcement said this is the last upgrade, and we should switch to 1.33 or 1.34. We rent a CentOS 7 VM. It is fully patched. We enabled Software Collections (SCL) to get something more modern for Apache and PHP. SCL provides: * Apache 2.4.34 * PHP 7.1.30 * MariaDB 5.5.64 Also see https://www.cryptopp.com/wiki/Special:Version. When we try the next upgrade to 1.34.0, we get the following when trying to update the Vendor gear: # php -d extension=phar.so composer.phar update Do not run Composer as root/super user! See https://getcomposer.org/root for details > ComposerHookHandler::onPreUpdate Loading composer repositories with package information Updating dependencies (including require-dev) Your requirements could not be resolved to an installable set of packages. Problem 1 - This package requires php >=7.2.9 but your PHP version (7.1.30) does not satisfy that requirement. Problem 2 - Installation request for mediawiki/mediawiki-codesniffer 28.0.0 -> satisfiable by mediawiki/mediawiki-codesniffer[v28.0.0]. - mediawiki/mediawiki-codesniffer v28.0.0 requires php >= 7.2.0 -> your PHP version (7.1.30) does not satisfy that requirement. What is the highest version of Mediawiki we can upgrade to? Thanks in advance.

3 2

Latest Debian version (Buster 10.2) new mediawiki install unable to connect to database
by Keith Christian 19 Dec '19

19 Dec '19

Hello Friendly Mediawiki People, Fresh format-disk-and-install Buster 64-bit. This is my third attempt, with the mediawiki installer having problems logging in to MariaDB every time. I've installed mediawiki (Jessie?) with zero problems. NOTE-----MariaDB was installed with a simple "sudo apt -y install mediawiki" as described below. Ran "sudo apt -y install mediawiki" without installing any other software. Rebooted. Opened browser to http://localhost/mediawiki/. Got this screen: MediaWiki 1.31.4 LocalSettings.php not found. Please set up the wiki first. Clicked the "set up the wiki" link. Got this status "The environment has been checked. You can install MediaWiki." Clicked Continue. Got this: Cannot access the database: No such file or directory (localhost). Check the host, username and password and try again. Started MariaDB with this command line: sudo mysqld_safe --skip-grant-tables & Able to log in as the MariaDB root user via mysql -u root. Attempted to set the root password since mediawiki setup didn't like the login info. Unable to reset the root password: MariaDB [(none)]> SET PASSWORD FOR 'root'@'localhost' = PASSWORD('secret_password'); ERROR 1131 (42000): You are using MariaDB as an anonymous user and anonymous users are not allowed to modify user settings MariaDB [(none)]> select user(); +--------+ | user() | +--------+ | root@ | +--------+ Exit mysql client. Ran "sudo apt -y purge mediawiki" hoping to destroy the MariaDB databases so I could get a fresh start solving mediawiki's db login problems. Rebooted. Ran "sudo apt -y install mediawiki" again, no MariaDB installation messages which meant the "purge mediawiki" did not also purge MariaDB (which it installed.) No success. Seems that the mediawiki installer has defaults for the 'root' database user with a blank password, doesn't work with that either. What is wrong? Thanks.

3 3

MediaWiki Extensions and Skins Security Release Supplement
by Scott Bassett 19 Dec '19

19 Dec '19

Greetings- With the security/maintenance release of MediaWiki 1.31.6/1.32.6/1.33.2 [0], we would also like to provide this supplementary announcement of MediaWiki extensions and skins with now-public Phabricator tasks, security patches and backports [1]: == CheckUser == + (T234862, CVE-2019-18611) - Do not show oversighted edit summaries in CheckUser API <https://gerrit.wikimedia.org/r/q/Ie0aa0df2b3f03d8b910733f1b5e600a0dc978765> == AbuseFilter == + (T104807, CVE-2019-18612) - Older hidden versions of a currently-public AbuseFilter are exposed via diffs <https://gerrit.wikimedia.org/r/q/Ie23e8234ae550273bf3f6f9c5ac45b7fc54eec2a> + (T237887, CVE-2019-18987) - Old public versions of private filters are publicly viewable <https://gerrit.wikimedia.org/r/q/Ic12790bd33982473f77551bde9599ed083a3e1f1> == VisualEditor == + (T239209, CVE-2019-19708) - XSS in Visual Editor via Copy&Paste <https://gerrit.wikimedia.org/r/q/I1f99458fd2c4f6b2460dfe7a93b330ddee4400b6> == MinervaNeue skin == + (T240487, CVE requested) - XSS in MinervaNeue skin <https://gerrit.wikimedia.org/r/q/Ida471291f1698387a26736931ab17e6899e05b51> == LDAPAuthentication2 == + (T240338, No CVE requested) - LDAPAuthentication2 allows login with invalid password <https://gerrit.wikimedia.org/r/q/I7b125ab468ebc914b8a1c67ed0c03e3c2a20c6cd> The Wikimedia Security Team recommends updating these extensions and skins to the current master branch or relevant, supported release branch [2] as soon as possible. Some of the referenced Phabricator tasks above _may_ still be private. Unfortunately, when security issues are reported, sometimes sensitive information is exposed and since Phabricator is historical, we cannot make these tasks public without exposing this sensitive information. If you have any additional questions or concerns regarding this update, please feel free to contact security(a)wikimedia.org or file a security task within Phabricator [3]. [0] https://lists.wikimedia.org/pipermail/wikitech-l/2019-December/092886.html [1] https://phabricator.wikimedia.org/T234983 [2] https://www.mediawiki.org/wiki/Version_lifecycle [3] https://www.mediawiki.org/wiki/Reporting_security_bugs -- Scott Bassett sbassett(a)wikimedia.org

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l December 2019