gmane.comp.web.wiki.dokuwiki.general

git changes 2013-06-20

DokuWiki Devel Tools — 2013-06-20T01:00:04

Good Morning!

This are the git changes for DokuWiki committed
yesterday. Please test them and report bugs.

---------------------------------------------------------------------

http://github.com/splitbrain/dokuwiki/commit/8ff58cbbee0b684c609d5a559e51e9f4ba41dad4
Merge: 06f8cfb 603a638
Author: Andreas Gohr <andi[at]splitbrain.org>
Date:   Tue Jun 18 23:58:21 2013 -0700

    Merge pull request #231 from splitbrain/infopluginnewplugins
    
    add newest plugin types to info plugin


http://github.com/splitbrain/dokuwiki/commit/603a638180749a2925e589bc0c13f19899b6c732
Author: Klap-in <klapinklapin[at]gmail.com>
Date:   Tue Jun 18 21:18:20 2013 +0200

    add newest plugin types to info plugin

---------------------------------------------------------------------

You can download individual diffs or patches by appending .diff or
.patch to the given commit URLs above.

Bye,
your git changelog mailer

git changes 2013-06-17

DokuWiki Devel Tools — 2013-06-17T01:00:08

Good Morning!

This are the git changes for DokuWiki committed
yesterday. Please test them and report bugs.

---------------------------------------------------------------------

http://github.com/splitbrain/dokuwiki/commit/06f8cfbed961eb9394fa29558dd29c79f87fc9ad
Merge: d6b7a2d b9ee6a4
Author: Andreas Gohr <andi[at]splitbrain.org>
Date:   Sun Jun 16 12:36:58 2013 -0700

    Merge pull request #225 from splitbrain/fetchftp
    
    Add media_isexternal


http://github.com/splitbrain/dokuwiki/commit/d6b7a2dd189b692f9a754f4f1a330abe6449669a
Merge: ea2272c bfd197d
Author: Andreas Gohr <andi[at]splitbrain.org>
Date:   Sun Jun 16 12:26:55 2013 -0700

    Merge pull request #222 from hArpanet/patch-1
    
    Added comment to DiffFormatter _escape() method


http://github.com/splitbrain/dokuwiki/commit/ea2272c40a77ba38305773f8f3e3172bb71e9f49
Author: Andreas Gohr <andi[at]splitbrain.org>
Date:   Sun Jun 16 21:57:42 2013 +0200

    removed tabs


http://github.com/splitbrain/dokuwiki/commit/c594dd1e99b18f3c73464d

Re: HTTP caching confusion

Andreas Gohr — 2013-06-16T15:23:46

correct. Once a page is session dependent it can no longer be cached.


This probably breaks your wiki and might even be a security risk.
Other people might now be served content that was generated for your
session. Easiest to see example: the breadcrump trace.

Re: how to use linkwizard in my own code

Andreas Gohr — 2013-06-16T15:21:52

I think the linkwizard is currently built in a way which makes it
possible to use it only once on a page. It might actually be a good
idea to change that to provide a link picker dialogue for other
plugins. If you have the needed JavaScript skills, a pull request
would be welcome.

Andi


--
splitbrain.org

how to use linkwizard in my own code

qingxianhao — 2013-06-16T12:27:46

hi all,

i don't know am i sending to the wrong place. if i did wrong please
point me to the right place. i had asked about this in the forum[1]. but
not one gives a guideline to do this for about 1 week.


i noticed that the built-in "Internal link" has a linkwizard 
that popup dynamically list all the pages and namespaces for choosing. 
i want to use it in my own plugin code.

i have read the wiki pages about writing a toolbar button. 
but the built-in "Internal link" used a undocumented action button
type : type =>linkwiz
i did the same, make my action type to linkwiz, 
the popup is shown but content not updated, 
the worse thing is the built-in "Internal link" 's popup not updated
either.

i made the changes[2] based on the pageredirect plugin[3].

can any one tell me why is it broken? or how can i make use of the
linkwizard?

[1] forum post, https://forum.dokuwiki.org/thread/9988 
[2] my changes http://pastebin.com/ZDzT5u0J
[3] pageredirect plugin code:
https://github.com/glensc/dokuwiki-plugin-pageredi

Re: HTTP caching confusion

Colin McKinnon — 2013-06-15T15:37:47

Whoops - no wonder I couldn't find it in Dokuwiki - it's set by PHP when
the code contains session_start().

I've added session_cache_limiter('public_no_expire'); in inc/init.php

Should the Cache-control not be in line with the serverside caching?

C.


On 15 June 2013 15:35, Colin McKinnon <colin.mckinnon< at >gmail.com> wrote:

HTTP caching confusion

Colin McKinnon — 2013-06-15T14:35:43

Hi,

I'm getting some unexpected HTTP caching headers. My /doku.php page returns:

HTTP/1.1 200 OK
Server: nginx/1.0.9
Date: Fri, 14 Jun 2013 23:41:53 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0,
pre-check=0
Pragma: no-cache
Set-Cookie: DW55f8acd5bf5af99290a100a69fd0c30b=deleted; expires=Thu,
14-Jun-2012 23:41:52 GMT; path=/src/; httponly
Content-Encoding: gzip
Vary: Accept-Encoding

Above is using nginx+php-fpm. I get the same results using Apache +mod_php.
The 'Expires' header is not returned when I access a 'hello world' php
page. Hence the cache-control and Expires headers are being added by the
Dokuwiki code.

Grepping the source code, the only place I could find 'Expires' was in
inc/fetch.functions.php and a bit of fiddling showed it wasn't these pages
generating the headers for /doku.php. I could find neither the date string
no

git changes 2013-06-15

DokuWiki Devel Tools — 2013-06-15T01:00:08

Good Morning!

This are the git changes for DokuWiki committed
yesterday. Please test them and report bugs.

---------------------------------------------------------------------

http://github.com/splitbrain/dokuwiki/commit/9d24536dd8ad865dfad2c0259d6b00273e826c12
Author: Andreas Gohr <andi[at]splitbrain.org>
Date:   Fri Jun 14 17:11:37 2013 +0200

    correctly count deleted users in plain auth FS#2800
    
    reloading the user list after the delete action will make sure the count
    is always correct.

---------------------------------------------------------------------

You can download individual diffs or patches by appending .diff or
.patch to the given commit URLs above.

Bye,
your git changelog mailer

This week's new issues 2013-06-14

DokuWiki Devel Tools — 2013-06-14T13:00:01

Hello,

during the last week, the following bugs and feature requests where
opened at the DokuWiki bug tracker:

FS#2800  Deletion of authplain-usernames containing preg special chars handled incorrect  [Bug Report]
         http://bugs.dokuwiki.org/?do=details&task_id=2800

FS#2802  Broken tar tests for some branches..  [Bug Report]
         http://bugs.dokuwiki.org/?do=details&task_id=2802

FS#2804  update jquery.cookie.js  [Bug Report]
         http://bugs.dokuwiki.org/?do=details&task_id=2804

Please help to resolve them by reviewing, adding comments and sending
patches.

Thanks for your help,
your bug mailer

git changes 2013-06-13

DokuWiki Devel Tools — 2013-06-13T01:00:05

Good Morning!

This are the git changes for DokuWiki committed
yesterday. Please test them and report bugs.

---------------------------------------------------------------------

http://github.com/splitbrain/dokuwiki/commit/e0086ca277bafe4f068079a4655a5601914a6f03
Author: Andreas Gohr <andi[at]splitbrain.org>
Date:   Wed Jun 12 21:45:37 2013 +0200

    check for spam in summary as well, added common spam summary

---------------------------------------------------------------------

You can download individual diffs or patches by appending .diff or
.patch to the given commit URLs above.

Bye,
your git changelog mailer

RENDERER_CONTENT_POSTPROCESS event and the data-plugin

lebowski42 — 2013-06-11T19:20:52

Hi,

i'm using the RENDERER_CONTENT_POSTPROCESS event and the data-plugin. If 
I add some text to '$event->data[1]' using RENDERER_CONTENT_POSTPROCESS 
this text will also add to the output of the data-plugin (only if i use 
_wiki-tags like 'description_wiki:'). Is there a way to find out from an 
action plugin, if the event is emit while rendering data-plugin entries?

Thanks

Re: password generator weaknesses

Andreas Gohr — 2013-06-11T14:02:52

That's why https://github.com/splitbrain/dokuwiki-plugin-passpolicy
has a pass phrase mode.




--
splitbrain.org

Re: password generator weaknesses

Michiel Dethmers — 2013-06-11T13:48:46

Discussions about passwords always make me remember this XKCD cartoon
http://xkcd.com/936/

After 20 years of effort, we've successfully trained everyone to use
passwords that are hard for humans to remember, but easy for computers
to guess.

So, their conclusion is:

1. longer passwords
2. made up from at least 4 random words (a generator could take them
from the wiki itself)
3. no need for special chars, or even digits

I have no data to support whether this is more secure though.

On 11/06/13 10:25, Andreas Gohr wrote:

password generator weaknesses

Andreas Gohr — 2013-06-11T13:25:01

Hi,

as < at >solardiz and < at >mik235 pointed out on twitter recently our password
generator creates rather weak passwords. Which is fine for many cases
and the passwords are easy to remember.

However this means that, if the hashed passwords are exposed, it might
be rather easy to bruteforce the hashes. Eg. using this John the
Ripper extension [1].

Users can of course disable auto generated passwords using the
autopasswd[2] option. But suggesting stronger passwords automatically
might still be a good idea.

We have a hotfix for some other auth stuff coming up and I have two questions:

a) should we improve the number of possible generated passwords by
simply making them a bit longer and maybe add a special char by
default?
b) should we apply PR#230 [3] to make it possible for users to
exchange the generator with a plugin like this [4]

I think both should be done anyway. My question is just if we want
them to be integrated into the hotfix. The changes should be trivial
enough to not cause any problems but maybe I

IntelliJ Idea License Update

Andreas Gohr — 2013-06-11T08:37:11

Hi developers,

those of you already using Idea[1] will probably have noticed that our
community license expires soon. If you like to have the updated
license (or those of you who want to start with Idea), please send me
a mail to andi< at >splitbrain.org.

Andi

[1] https://www.dokuwiki.org/devel:intellij_idea

--
splitbrain.org

git changes 2013-06-10

DokuWiki Devel Tools — 2013-06-10T01:00:05

Good Morning!

This are the git changes for DokuWiki committed
yesterday. Please test them and report bugs.

---------------------------------------------------------------------

http://github.com/splitbrain/dokuwiki/commit/62765857f84626449d6c53b1a46c462a37e5083a
Author: Klap-in <klapinklapin[at]gmail.com>
Date:   Sun Jun 9 21:17:20 2013 +0200

    update common_ml test for hash change

---------------------------------------------------------------------

You can download individual diffs or patches by appending .diff or
.patch to the given commit URLs above.

Bye,
your git changelog mailer

read/write permission in js

lebowski42 — 2013-06-09T09:07:15

Hi,

is it possible to get the read and write permissions of a namespace in 
javascript?

Thanks

git changes 2013-06-09

DokuWiki Devel Tools — 2013-06-09T01:00:07

Good Morning!

This are the git changes for DokuWiki committed
yesterday. Please test them and report bugs.

---------------------------------------------------------------------

http://github.com/splitbrain/dokuwiki/commit/a0376fb908efe76fcdeca5132e5aab8b0412c84a
Merge: 04e4890 dcb2204
Author: Andreas Gohr <andi[at]splitbrain.org>
Date:   Sat Jun 8 12:36:08 2013 -0700

    Merge pull request #223 from splitbrain/rootids_in_ml
    
    Clean internal ids in ml(), that it matches with fetch.php


http://github.com/splitbrain/dokuwiki/commit/dcb2204bf0a8e3e25bf4ff8352a71160e846266b
Author: Klap-in <klapinklapin[at]gmail.com>
Date:   Tue May 21 12:24:40 2013 +0200

    Add some tests about handling of semicolons
    Informative as sample implementation too


http://github.com/splitbrain/dokuwiki/commit/826d276602b191ee09d3450f7a8f9476c0e787b1
Author: Klap-in <klapinklapin[at]gmail.com>
Date:   Tue May 21 12:06:16 2013 +0200

    Clean internal ids in ml(), that it matches with fetch.php
    The resize token w

git changes 2013-06-08

DokuWiki Devel Tools — 2013-06-08T01:00:10

Good Morning!

This are the git changes for DokuWiki committed
yesterday. Please test them and report bugs.

---------------------------------------------------------------------

http://github.com/splitbrain/dokuwiki/commit/04e4890db370bdb57201f76581fe3dc0a3adb614
Author: Andreas Gohr <andi[at]splitbrain.org>
Date:   Fri Jun 7 13:50:46 2013 +0200

    fix problem when ldap returns no groups FS#2788


http://github.com/splitbrain/dokuwiki/commit/e7fbe18945e8d94fd400fd66f36e67174951f290
Author: Andreas Gohr <andi[at]splitbrain.org>
Date:   Fri Jun 7 13:23:40 2013 +0200

    fix ldap deref option FS2798
    
    Do not pass timelimit and deref settings to ldap_search. These values
    should be set globally via ldap_set_option() instead (as we do for
    deref).


http://github.com/splitbrain/dokuwiki/commit/12d195ab7189878b41dc4d211befafc79ae402a6
Author: Andreas Gohr <andi[at]splitbrain.org>
Date:   Fri Jun 7 12:48:07 2013 +0200

    treat empty AD credentials as NULL values FS#2781


http://github.com/spli

This week's new issues 2013-06-07

DokuWiki Devel Tools — 2013-06-07T13:00:01

Hello,

during the last week, the following bugs and feature requests where
opened at the DokuWiki bug tracker:

FS#2795  Make CSRF tokens more random  [Feature Request]
         http://bugs.dokuwiki.org/?do=details&task_id=2795

FS#2796  Make sticky login cookies (automatically) expirable  [Feature Request]
         http://bugs.dokuwiki.org/?do=details&task_id=2796

FS#2797  mobile app (eg. for Android)  [Feature Request]
         http://bugs.dokuwiki.org/?do=details&task_id=2797

FS#2799  update language api of template to level of plugins  [Bug Report]
         http://bugs.dokuwiki.org/?do=details&task_id=2799

Please help to resolve them by reviewing, adding comments and sending
patches.

Thanks for your help,
your bug mailer

Re: Weatherwas - LDAP and Kerberos

Matthew Moore — 2013-06-06T14:57:43

Aha!  Excellent.  Well, in that case it seems like the dokuwiki site
might need an update to explain how you can setup Dokuwiki with LDAP and
Kerberos.  Would it need a new page?  Or would a new paragraph to the
authldap page be ok?

Fair enough.

Just wanted to say, I really like the dokuwiki software and many thanks
to everyone on the list and on IRC who's helped me over the past few
days.  Much appreciated.

Cheers,

Matt