[Mahara-contributors] [Bug 1190788] Re: Can cause arbitrary SWF files to execute in the browser
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1190788 Title: Can cause arbitrary SWF files to execute in the browser Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: Subject:Found Critical XSS Vulnerability on Your System Hello, I found a really critical XSS (Cross Site Scripting) vulnerability on mahara.org. The vulnerability works as follows: 1) I opened the demo account on Mahara and logged in the admin account by using the link "http://demo.mahara.org/";. 2) Then I clicked admin avatar picture to go to user details page. 3) After that I clicked "edit this page" button. 4) Then I dragged "File(s) to Download image to About me section of the page. 5) I created a .swf file that contains ActionScript codes. I also attached that file to this email. 6) I uploaded that XSS.swf file. 7) When I open XSS.swf file on browser, I saw the alert message showing SOLVER (my nickname) 8) Example script: http://demo.mahara.org/artefact/file/download.php?file=247 By using this XSS vulnerability, an attacker can steal Mahara users' cookies, and their accounts. Furthermore, the attacker can redirect users to a harmful website that contains trojan horse, malware or a JavaScript downloader to get full access on the users' computers. This issue can get bigger by using a XSS Worm, and influence even some other Mahara product users. As a simple solution, the content of the file that is about to be uploaded should be checked against harmful scripts and codes. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1190788/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1286935] Re: Allowed iframe check doesn't handle URLs with a question mark immediately after the domain name
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1286935 Title: Allowed iframe check doesn't handle URLs with a question mark immediately after the domain name Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: See https://mahara.org/interaction/forum/topic.php?id=6124 In the Mahara forums, a user reported this issue with an embed code for hapyak.com. The full embed code: Note that the URL starts with "//hapyak.com?embed=true...". If you change that to "//hapyak.com/?embed=true..." then it works. It looks like the problem is that the regular expression we use to identify iframes with a valid URL, doesn't handle the scenario of a URL where there's a query component but no path component. In other words, a "?" immediately after the domain name. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1286935/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1415709] Re: "Deprecated" warning coming from BBCode parser
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1415709 Title: "Deprecated" warning coming from BBCode parser Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: Each time I make a wall post, I see this warning message in my logs: [Thu Jan 29 15:44:50.155838 2015] [:error] [pid 15222] [client 127.0.0.1:44464] PHP Deprecated: Assigning the return value of new by reference is deprecated in /home/aaronw/www/mahara/htdocs/lib/stringparser_bbcode/stringparser.class.php on line 285, referer: http://vegas.wgtn.cat-it.co.nz/mahara/htdocs/user/view.php?id=1 To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1415709/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1399246] Re: PDF embeds fail in sites with subdomains for user pages
** Changed in: mahara/1.8 Milestone: 1.8.7 => None -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1399246 Title: PDF embeds fail in sites with subdomains for user pages Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Committed Status in Mahara 1.8 series: Won't Fix Status in Mahara 1.9 series: Won't Fix Bug description: The PDF content block fails to render the PDF iframe in a user's View if Mahara is set up to have subdomain urls for users, e.g. http://mikekelly.mymahara.org/mikes-page This is due to the X-Frame SAMEORIGIN rule enforced for Mahara pages. The PDF is served from the main domain, while the View page is served from the subdomain. This does not affect group Views, or the editing interface for Views, where the user identifier subdomain part is not used in the url. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1399246/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1399311] Re: SQL syntax error in cron_event_log_expire on key word SECONDS
** Changed in: mahara/1.8
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1399311
Title:
SQL syntax error in cron_event_log_expire on key word SECONDS
Status in Mahara ePortfolio:
Fix Released
Status in Mahara 1.10 series:
Fix Released
Status in Mahara 1.8 series:
Fix Released
Status in Mahara 1.9 series:
Fix Committed
Status in Mahara 15.04 series:
Fix Released
Bug description:
Mahara v1.10.0, Linux, MySQL.
We run Mahara on MySQL, and we get this error with our Cron :
{code}
[INF] b8 (lib/cron.php:137) Running core cron cron_event_log_expire
[WAR] b8 (lib/errors.php:745) Failed to get a recordset: mysqli error: [1064:
You have an error in your SQL syntax; check the manual that corresponds to
your MySQL server version for the right syntax to use near 'SECONDS' at line
1] in EXECUTE("DELETE FROM "mhr_event_log" WHERE time < CURRENT_DATE - INTERVAL
31536000 SECONDS")
[WAR] b8 (lib/errors.php:745) Command was: DELETE FROM "mhr_event_log" WHERE
time < CURRENT_DATE - INTERVAL 31536000 SECONDS
Call stack (most recent first):
* log_message("Failed to get a recordset: mysqli error: [1064: Yo...", 8,
true, true) at /app/apache2/htdocs/portfolio/lib/errors.php:95
* log_warn("Failed to get a recordset: mysqli error: [1064: Yo...") at
/app/apache2/htdocs/portfolio/lib/errors.php:745
* SQLException->__construct("Failed to get a recordset: mysqli error:
[1064: Yo...") at /app/apache2/htdocs/portfolio/lib/dml.php:959
* delete_records_sql("DELETE FROM "mhr_event_log" WHERE time <
CURRENT_D...", null) at /app/apache2/htdocs/portfolio/lib/dml.php:936
* delete_records_select("event_log", "time < CURRENT_DATE - INTERVAL
31536000 SECONDS") at /app/apache2/htdocs/portfolio/lib/mahara.php:3746
* cron_event_log_expire() at /app/apache2/htdocs/portfolio/lib/cron.php:142
In the cron_event_log_expire() method of /lib/mahara.php, the key word
"SECONDS" is used; it should be "SECOND", shouldn't it?
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1399311/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1435750] Re: Google URLs changes
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1435750 Title: Google URLs changes Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Bug description: Google URLs changed again. I've only tested with a spreadsheet tonight, but others might be affected as well: This spreadsheet is shared through "Publish to the web" as the Google Apps block requires, but it only says "Unable to parse embedded code or URL" https://docs.google.com/spreadsheets/d/17YzSbbHd4kISimF9OLp6apbE_YHB-3QdG_V5VGPTn2Y/pubhtml To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1435750/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1422232] Re: elasticsearch - reset and indexing
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1422232 Title: elasticsearch - reset and indexing Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: When one resets the index via extensions -> elasticsearch configuration form part of the process is to index the elasticsearch If the site is large the 'Cron record limit' value should be set so that not too much of the queue is slurped up to be handled at one time. One thing I noticed from doing some tests was that when I hit reset index button it goes off and does it's thing which calls the index_queued_items() to index some items but then the cron rolls around and calls it too. When we hit reset index we should set the cron flag to stop cron from doing the indexing at same time and unset the flag once the reindex step is done by the form. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1422232/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1429647] Re: Watchlist lets you watch and receive notifications about pages you don't have view access to
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1429647 Title: Watchlist lets you watch and receive notifications about pages you don't have view access to Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: In analyzing watchlist bug 1429505 (pages stay on your watchlist even if you lose access to them) I noticed a couple of things in the code: 1. You apparently still can receive watchlist notifications about pages on your watchlist which you don't have access to. 2. There are no access control checks in togglewatchlist.json.php, so it is apparently possible to add a page to your watchlist even if you don't have access to it. Together, these bugs mean that a user could watch private pages, and receive notifications about changes to those pages. While these notifications would not contain the actual page content, they would contain the title of the page and the names of blocks and/or artefacts changed in the page. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1429647/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1397068] Re: Flickr API now requires use of https for endpoint
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1397068 Title: Flickr API now requires use of https for endpoint Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: The Flickr API now requires the use of https to access api.flickr.com for all new application keys (see http://code.flickr.net/2014/04/30 /flickr-api-going-ssl-only-on-june-27th-2014/). This is causing an issue with the external gallery, where a Flickr set is not displayed, because the cURL request reports back an invalid API key. Replacing the http:// call with an https:// call in artefact/file/blocktype/gallery/lib.php:163 resolves the issue. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1397068/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1414474] Re: Sub navigation background color not used for sub navigation
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1414474 Title: Sub navigation background color not used for sub navigation Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Bug description: In Mahara 1.8 a change was introduced to the configurable theme that does not show the second level navigation in the "sub navigation background" color anymore. I attach a screenshot to illustrate it. This change needs to be reverted back for 15.04 so that users of the configurable theme have the optimal theming possibilities available until we switch the CSS framework. If they cannot theme the second level navigation (except for the item in the top level navigation), they cannot implement their preferred colors correctly. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1414474/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1348024] Re: users can stay logged into suspended institution
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1348024 Title: users can stay logged into suspended institution Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: If a user does not use their own institution's auth method then user only belonging to a suspended institution can still log in. Scenario: - Create an institution called 'testone' with the auth method internal mahara - Add a user to it (so that the user is only in this institution and no others) - Update the user auth method to be another internal one - suspend the institution - log out and then in as user - can get in because the auth method is paired to 'mahara' institution Another problem: Same as above but have the user using the institutions auth method - this time one gets a warning about the institution being suspended, which is good but also gets the top menu and is actually logged in/can navigate about. What needs to be done: 1) when an institution is suspended make sure all users that only belong to this institution have a valid usr.authinstance value and if they don't give them one. 2) when they are trying to log in to their suspended institution actually deny them properly. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1348024/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1392700] Re: Images not displayed - blog post by tag
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1392700 Title: Images not displayed - blog post by tag Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: Reported by a user who couldn't see anonymously images on a new public view. I made a simulation and the problem is related to the block blog post by tag. You can see the exact same blog post on http://mahara.ticfga.ca/user/smlavoie/tests-pour-images . ON the left side, each post is displayed using ONE post, on the right, post by tag. The problem seems to be related to the absence of the view parameter in the display of images. Mahara 1.9.1 on linux with MySQL, tested on IE, FF and Chrome (on Win8) To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1392700/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1428266] Re: Missing page description when export/import via Leap2a
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1428266 Title: Missing page description when export/import via Leap2a Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: Version: master(15.04) When exporting a page via leap2a, the description is only exported in the summary entry. However, this description is not extracted from the entry. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1428266/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1387858] Re: Draft journal entries are visible to others
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1387858 Title: Draft journal entries are visible to others Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Bug description: confirmed for master (15.04), 1.10, 1.9 and 1.8 When a user creates a journal entry as draft and puts that into a page, it is also visible to other users when they have access to the page. When the user puts the entire journal into a page (or tagged journal entries), the draft entry is not visible because it is in draft status. There are two possibilities as far as I can see right now: 1. Do not allow users to include journal entries that are in draft status into a page (and mention that in the block pop-up so they don't wonder why draft entries do not show up). 2. The block "Journal entry" needs to be changed so that draft entries are only visible to the author at most but not other users on the page. This should also include some visual indicator as we have in the journal itself for the draft. "Draft" could also be mentioned next to the title of the journal entry when selecting it in the block pop-up. I tend towards option 1 as that is cleaner and more in line with the behavior of the other blocks. We should then also mention on the other blocks that draft entries are not displayed. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1387858/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1390833] Re: File attachments aren't copied when note is copied
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1390833 Title: File attachments aren't copied when note is copied Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Bug description: reported by Stephen Bright on MyPortfolio: When you have a note (text box up to 1.10), file attachments are not copied when somebody else copies the page that contains the note. When you yourself copy it, the attachment is retained, but not when somebody else copies it. To reproduce: 1. Add a note to your page. 2. Add an attachment to the note. 3. Share the page with someone else and make it copyable. 4. Log in as that other person and copy the page. 5. The attachment is not on the page anymore. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1390833/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1045138] Re: Image disappears from Page Description when page shared to other users
** Changed in: mahara/1.9 Milestone: 1.8.7 => None -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1045138 Title: Image disappears from Page Description when page shared to other users Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Won't Fix Status in Mahara 1.8 series: Won't Fix Status in Mahara 1.9 series: Won't Fix Bug description: - exact version of Mahara: 1.4.2 & 1.5 (demo.mahara.org) - operating system: Windows for the 1.4.2 version (I think) - database: MySQL (I think) - Chrome 20, IE8 & 9, FireFox 13, Safari 5 If an image is inserted into a Page Description (for example, as a decorative heading or title) and then that page is shared by Secret URL, the image disappears. Any other images, such as those inserted as an image block and those inserted inline within a text box, appear without issue. I have tested this in our installation of Mahara (1.4.2) and the demo.mahara.org version. The screen capture is taken from when I tested the demo.mahara.org version. In our version we get identical results, where the Page Description image disappears. Addendum: if the images are hosted externally, e.g. at Flickr, they actually do appear in the Page Description area! It might take a few seconds for the image to load, though. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1045138/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1436841] Re: Add External Media - YouTube Video
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1436841 Title: Add External Media - YouTube Video Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: Version: 15.04rc1 When adding a new External Media block to a page using the embed code from YouTube, if the option 'Enable privacy-enhanced mode' in YouTube is selected the video is not displayed in the block on Mahara. I think this is related to the URL changing if this option is selected: Option selected in YouTube: https://www.youtube-nocookie.com/embed Option not selected in YouTube: https://www.youtube.com/embed/ To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1436841/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1400511] Re: Cannot cancel comment form after validation fails
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1400511 Title: Cannot cancel comment form after validation fails Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: To reproduce: 1. Go to any page 2. Submit an empty comment 3. See the form validation fail. 4. Now try to cancel the form. What should happen: form should be cancelled What happens: JS error, "Cannot read property 'tablerows' of undefined"... To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1400511/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1364170] Re: Parent auth fails due to mixed case checking
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1364170 Title: Parent auth fails due to mixed case checking Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: Currently in the auth/user.php [around line 187] there is a query that is matching lower(username) against username At the very least it should be lower(u.username) against us.username however the whole sql query could be tidied up to function better. Normally, usernames are email addresses and are stored as lowecase strings - but sometimes you need a username that is not lowercase and so this check fails. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1364170/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1439194] Re: Notes and attached files
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1439194 Title: Notes and attached files Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: When I attach a file to a note on a page and then delete the file using the "content > files" panel, I can't edit the note via the "portfolio > pages" panel anymore. When I try to do it, I get : "Artefact with id XXX not found" (where XXX is the id of the recently deleted file). I can still however edit the note directly from "content > notes". The problem only occurs via "portfolio > pages > edit content and layout". Mahara version : 1.10.3testing (2014092315) Operating system : Linux Database : MariaDB To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1439194/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1429871] Re: Link underlining in skins doesn't work
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1429871 Title: Link underlining in skins doesn't work Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: If the user edits a skin (Edit skin > Fonts and colours) and checks the Underline link -option, the link doesn't get underlined on a page with the skin applied. There seems to be a bug in skin/style.php#38 with the comparison if ($option == 'transparent') because when a checkbox is selected, the $option value is a boolean TRUE and when using PHP's loose comparison operator, (true == 'transparent') = true. Therefore for example $skin->viewskin['view_link_normal_underline'] (and a few others) value changes to an empty string and the value assigned to template is 'none' instead of 'underline'. A simple fix is to use strict comparison: if ($option === 'transparent') --- Mahara version: 1.9.1 Browser: Chrome (Linux) 40.0.2214.115 (64-bit) To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1429871/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1425306] Re: Users can delete submitted page through URL
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1425306 Title: Users can delete submitted page through URL Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Bug description: To reproduce: - Create a page - Submit it to a group - Check that there is no 'Delete' button on 'Pages' web-page for this page - Find out page ID (through page view URL) - Go to YOURSITE/view/delete.php?id=XXX where XXX is page ID - See that you can easily delete a page To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1425306/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1404117] Re: XSS via uploaded XML
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1404117 Title: XSS via uploaded XML Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: Reported by Roman Mironov Dear Sir/Madam, I have found a security vulnerability and would like to disclose it to you. An attacker can use this vulnerability to initiate stored Cross-Site scripting attacks on authenticated users. Bug Description: It is possible to upload .xml files with malicious code and then share them with users. As proof of concept it was possible to share a file between accounts that redirects the user to google.com. In order to reproduce this proof of concept please follow these steps: Preconditions: 1) Ensure you have 2 accounts (user A and user B) that have access to each others Journal entries. 2) Create an .xml file that has the following line of code: http://www.w3.org/1999/xhtml";>document.location='http://google.com'; Steps to Reproduce: 1) Log-in as user A. 2) Navigate to /artefact/internal/index.php and select Journal on the Navigation block. 3) Press the 'New Entry' button. 4) Enter any Title and Entry text. 5) Add the previously created .xml file as an attachment and press 'Save Entry'. 6) Log-in as user B. 7) Navigate to user A profile page. 8) Find the previously created Journal entry and press the 'Download' button next to the .xml file name. 9) Observe that you are redirected to google. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1404117/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1440908] Re: Clicking 'more' in friend request is not working
** Changed in: mahara/1.8 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1440908 Title: Clicking 'more' in friend request is not working Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: After a friend request has been accepted, the notification is send and appears in my inbox. Clicking on 'More...' at the bottom of that message produces an 'Not found' error while it redirects using the following URL structure: http://mymahara.com/http://mymahara.com/user/view.php?id=2 To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1440908/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1446036] Re: Session changes in Mahara 15.04 can cause excessively large response headers
As a workaround, reverting the changes to htdocs/auth/session.php corrects the problem: git checkout 55a8deb8cb~ -- htdocs/auth/session.php This will cause the ajax status bar to not load properly, and it will cause the ajax block loader to load blocks in serial instead of in parallel, but otherwise it causes no problems. You can disable the ajax block loader by adding "$cfg->ajaxifyblocks = false;" to your config.php file, which will turn off the ajax block loader and prevent that problem. So far I have only noticed this problem popping up while doing an mnet connection, and only on our proxied hosting cluster (not on my local machine). It's possible that MNet sets a lot of session values, thus causing the problem to be worse than normal. It's also possible that our hosting cluster has tighter response header limitations than my local machine. However, the potential exists for this to cause problems in other areas and other hosting setups as well, so I've marked it "Critical". -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1446036 Title: Session changes in Mahara 15.04 can cause excessively large response headers Status in Mahara ePortfolio: Confirmed Status in Mahara 15.04 series: Confirmed Status in Mahara 15.10 series: Confirmed Bug description: For the new Ajax progress bar, Bug 1352028, we changed htdocs/auth/session.php so that it closes the PHP session when not in use. This was necessary in order to allow multiple requests to the same session to process simultaneously; PHP by default locks the session between the time you call session_start() and session_write_close(). The downside to this approach, though, is that every time you call session_start(), PHP adds a new (duplicate) PHP_SESS_ID cookie to the request header. Since we open and close the session every time we call $SESSION->set() now, this can lead to a very large cookie header. On our hosting environment, these headers got too large and started causing our Nginx proxy server to throw errors while trying to initiate an MNet connection. This causes the proxy server to throw a 500 error, and to log an error like this: 2015/04/20 14:59:03 [error] 14845#0: *137093286 upstream sent too big header while reading response header from upstream, client: 2404:130:0:1000:61f4:7e47:8a26:821, server: master- mahara.catalystdemo.net.nz, request: "GET /auth/xmlrpc/land.php?token=3acfeeb7cad9814471ec5932fc293b30bbc7e387&idp=http ://mnet-moodle.testing.elearning.catalyst.net.nz&wantsurl= HTTP/1.1", upstream: "http://202.78.243.12:9226/auth/xmlrpc/land.php?token=3acfeeb7cad9814471ec5932fc293b30bbc7e387&idp=http ://mnet-moodle.testing.elearning.catalyst.net.nz&wantsurl=", host: "master-mahara.catalystdemo.net.nz" To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1446036/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1446036] [NEW] Session changes in Mahara 15.04 can cause excessively large response headers
Public bug reported: For the new Ajax progress bar, Bug 1352028, we changed htdocs/auth/session.php so that it closes the PHP session when not in use. This was necessary in order to allow multiple requests to the same session to process simultaneously; PHP by default locks the session between the time you call session_start() and session_write_close(). The downside to this approach, though, is that every time you call session_start(), PHP adds a new (duplicate) PHP_SESS_ID cookie to the request header. Since we open and close the session every time we call $SESSION->set() now, this can lead to a very large cookie header. On our hosting environment, these headers got too large and started causing our Nginx proxy server to throw errors while trying to initiate an MNet connection. This causes the proxy server to throw a 500 error, and to log an error like this: 2015/04/20 14:59:03 [error] 14845#0: *137093286 upstream sent too big header while reading response header from upstream, client: 2404:130:0:1000:61f4:7e47:8a26:821, server: master- mahara.catalystdemo.net.nz, request: "GET /auth/xmlrpc/land.php?token=3acfeeb7cad9814471ec5932fc293b30bbc7e387&idp=http ://mnet-moodle.testing.elearning.catalyst.net.nz&wantsurl= HTTP/1.1", upstream: "http://202.78.243.12:9226/auth/xmlrpc/land.php?token=3acfeeb7cad9814471ec5932fc293b30bbc7e387&idp=http ://mnet-moodle.testing.elearning.catalyst.net.nz&wantsurl=", host: "master-mahara.catalystdemo.net.nz" ** Affects: mahara Importance: Critical Assignee: Aaron Wells (u-aaronw) Status: Confirmed ** Affects: mahara/15.04 Importance: Critical Assignee: Aaron Wells (u-aaronw) Status: Confirmed ** Affects: mahara/15.10 Importance: Critical Assignee: Aaron Wells (u-aaronw) Status: Confirmed ** Tags: mnet session ** Also affects: mahara/15.04 Importance: High Assignee: Aaron Wells (u-aaronw) Status: Confirmed ** Also affects: mahara/15.10 Importance: Undecided Status: New ** Changed in: mahara/15.04 Importance: High => Critical ** Changed in: mahara/15.10 Importance: Undecided => Critical ** Changed in: mahara/15.10 Milestone: None => 15.10.0 ** Changed in: mahara/15.10 Assignee: (unassigned) => Aaron Wells (u-aaronw) ** Changed in: mahara/15.10 Status: New => Confirmed -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1446036 Title: Session changes in Mahara 15.04 can cause excessively large response headers Status in Mahara ePortfolio: Confirmed Status in Mahara 15.04 series: Confirmed Status in Mahara 15.10 series: Confirmed Bug description: For the new Ajax progress bar, Bug 1352028, we changed htdocs/auth/session.php so that it closes the PHP session when not in use. This was necessary in order to allow multiple requests to the same session to process simultaneously; PHP by default locks the session between the time you call session_start() and session_write_close(). The downside to this approach, though, is that every time you call session_start(), PHP adds a new (duplicate) PHP_SESS_ID cookie to the request header. Since we open and close the session every time we call $SESSION->set() now, this can lead to a very large cookie header. On our hosting environment, these headers got too large and started causing our Nginx proxy server to throw errors while trying to initiate an MNet connection. This causes the proxy server to throw a 500 error, and to log an error like this: 2015/04/20 14:59:03 [error] 14845#0: *137093286 upstream sent too big header while reading response header from upstream, client: 2404:130:0:1000:61f4:7e47:8a26:821, server: master- mahara.catalystdemo.net.nz, request: "GET /auth/xmlrpc/land.php?token=3acfeeb7cad9814471ec5932fc293b30bbc7e387&idp=http ://mnet-moodle.testing.elearning.catalyst.net.nz&wantsurl= HTTP/1.1", upstream: "http://202.78.243.12:9226/auth/xmlrpc/land.php?token=3acfeeb7cad9814471ec5932fc293b30bbc7e387&idp=http ://mnet-moodle.testing.elearning.catalyst.net.nz&wantsurl=", host: "master-mahara.catalystdemo.net.nz" To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1446036/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1440916] Re: File attachments to forum posts is important
Hm, the best thing, for generating that list of all attached files, is if we could make that flow organically from the forum file attachment feature. You could do that by encouraging people to upload the files into the group's file area instead of into their own file area, perhaps by opening the filepicker to the "group" tab by default. Or maybe even have a "quick file attachment" button that automatically uploads the file into a folder (named after that particular forum) in the group file area. Then you could use the "Files to download..." block to generate that report. -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1440916 Title: File attachments to forum posts is important Status in Mahara ePortfolio: Confirmed Bug description: Currently, a user is able to add files to feedback on a page and comments on an artifact but not in a forum post. It seems to be a valuable feature for enhancing discussion. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1440916/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1443239] Re: Warning in Mahara logs when a MaharaDroid user has no tags in their Mahara account
** Changed in: mahara/1.8
Status: Confirmed => Won't Fix
** Changed in: mahara/1.8
Milestone: 1.8.7 => None
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1443239
Title:
Warning in Mahara logs when a MaharaDroid user has no tags in their
Mahara account
Status in Mahara ePortfolio:
Confirmed
Status in Mahara 1.10 series:
Confirmed
Status in Mahara 1.8 series:
Won't Fix
Status in Mahara 1.9 series:
Confirmed
Status in Mahara 15.04 series:
Confirmed
Status in Mahara 15.10 series:
Confirmed
Bug description:
This is a bug in the Mahara PHP code which interfaces with the
MaharaDroid android app. See
https://github.com/MaharaProject/maharadroid/issues/6 for the
MaharaDroid side of this bug.
To replicate:
1. Create a new Mahara account
2. Connect it to MaharaDroid
3. Try to upload a file via MaharaDroid
Result: You see this warning in the Apache logs:
[Tue Jan 14 11:07:18 2014] [error] [client 10.22.33.88] [WAR] 88
(api/mobile/sync.php:77) Invalid argument supplied for foreach()
[Tue Jan 14 11:07:18 2014] [error] [client 10.22.33.88] Call stack (most
recent first):
[Tue Jan 14 11:07:18 2014] [error] [client 10.22.33.88] *
log_message("Invalid argument supplied for foreach()", 8, true, true,
"/home/demo/code/mahara/htdocs/api/mobile/sync.php", 77) at
/home/demo/code/mahara/htdocs/lib/errors.php:430
[Tue Jan 14 11:07:18 2014] [error] [client 10.22.33.88] * error(2, "Invalid
argument supplied for foreach()",
"/home/demo/code/mahara/htdocs/api/mobile/sync.php", 77, array(size 59)) at
/home/demo/code/mahara/htdocs/api/mobile/sync.php:77
[Tue Jan 14 11:07:18 2014] [error] [client 10.22.33.88]
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1443239/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1394082] Re: Can create a URL that takes you to a different page depending on whether you're logged in to MNet or not.
** Changed in: mahara/1.8 Status: Confirmed => Won't Fix ** Changed in: mahara/1.8 Milestone: 1.8.7 => None -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1394082 Title: Can create a URL that takes you to a different page depending on whether you're logged in to MNet or not. Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 1.8 series: Won't Fix Status in Mahara 1.9 series: Confirmed Status in Mahara 15.04 series: Confirmed Bug description: As reported on the mahara.org forum: https://mahara.org/interaction/forum/topic.php?id=6549 To replicate: 1. Set up a Moodle instance with the Mahara assignment submission plugin and connect it up to your Mahara instance. 2. Create a view with ID 1000. 3. Create another view with ID 1001. 4. Make both these pages accessible to the public. 5. Set up an Mahara assignment in Moodle. 6. Submit the view with ID 1000 to Moodle as an assignment submission. 7. Note the access URL that gets generated, which will contain an MNet access token, i.e. /view/view.php?mt=abcd1234 8. Add the ID of page 1001 to this URL: /view/view.php?id=1001&mt=abcd1234 Expected Result: This URL should either display page 1000 every time, or an "access denied" message Actual Result: If you're logged in to Mahara via MNet, you see page 1000. If you're not, you see page 1001. The cause of this problem, is that /view/view.php completely ignores the "mt=" tag if you're not logged in via MNet. In which case, if an ID is also supplied, it falls back to that. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1394082/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1422837] Re: XML RPC simpleXML limits payload size
** Changed in: mahara/1.8
Status: Confirmed => Won't Fix
** Changed in: mahara/1.8
Milestone: 1.8.7 => None
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1422837
Title:
XML RPC simpleXML limits payload size
Status in Mahara ePortfolio:
Confirmed
Status in Mahara 1.10 series:
Confirmed
Status in Mahara 1.8 series:
Won't Fix
Status in Mahara 1.9 series:
Confirmed
Status in Mahara 15.04 series:
Confirmed
Bug description:
Operating System: Ubuntu 14.04.1 LTS
Mahara version: 1.9.3
Database: mysql
Browser: chrome 40.0.2214.111
--
Steps to reproduce - you need a system capable of XMLRPC communication
with Mahara (e.g. Moodle)
1) With Moodle - set up mahara networking / portfolios.
2) Open a course with a forum
3) Add 2 entries. One with an attachment under 5 MB. One with an attachment
over 5 MB. On Each click "Export to portfolio" in the bottom. 4) Go through the
screens to start export - ask it to do it now (i.e. not wait for cron).
5) Check the Mahara site to see what made it through successfully.
--
simpleXML may not be the best parser for XMLRPC payloads
in api/xmlrpc/lib.php
function parse_payload($payload) {
try {
$xml = new SimpleXMLElement($payload);
return $xml;
} catch (Exception $e) {
throw new MaharaException('Encrypted payload is not a valid XML
document', 6002);
}
}
This means if you send a large file (in our tests greater than approx 7mb)
base 64 encoded over XMLRPC it will fail to parse.
It didn't seem to make any difference if we increased the memory limit to
800M in php.ini or even by setting the php memory limit to 800M via PHP ini_set
in function parse_payload - this suggests that there is a limit to what
SimpleXML can handle regardless of the PHP memory limit.
Note - 932 in my source code is the 'throw new exception' following
$xml = new SimpleXMLElement($payload);
called at [/vagrant/www/maharadev/mahara/lib/errors.php:465] #1
exception(MaharaException Object ([] => 1,[] => Encrypted payload is not a
valid XML document,[] => ,[] => 6002,[] =>
/vagrant/www/maharadev/mahara/api/xmlrpc/lib.php,[] => 932,[] => Array ([0] =>
Array ([file] => /vagrant/www/maharadev/mahara/api/xmlrpc/lib.php,[line] =>
921,[function] => parse_payload,[args] => Array ([0] =>ERROR 4:
4: remote server error: code: , message: A nonrecoverable error occurred.
This probably means you have encountered a bug in the system #0
MaharaException->handle_exception() called at
[/vagrant/www/maharadev/mahara/lib/errors.php:465] #1 exception(MaharaException
Object ([] => 1,[] => Encrypted payload is not a valid XML document,[] => ,[]
=> 6002,[] => /vagrant/www/maharadev/mahara/api/xmlrpc/lib.php,[] => 932,[] =>
Array ([0] => Array ([file] =>
/vagrant/www/maharadev/mahara/api/xmlrpc/lib.php,[line] => 921,[function] =>
parse_payload,[args] => Array ([0] =>
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1422837/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1374163] Re: List of shared pages to a group not taking account of access date
** Changed in: mahara/1.8 Status: Confirmed => Won't Fix ** Changed in: mahara/1.8 Milestone: 1.8.7 => None -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1374163 Title: List of shared pages to a group not taking account of access date Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 1.8 series: Won't Fix Status in Mahara 1.9 series: Confirmed Status in Mahara 15.04 series: Confirmed Bug description: Version: master(1.10) and previous version Browser, platform: any When I clicked a shared page in the list of shared pages in the group homepage (htdocs/group/view.php), I got "Access denied" message. Steps 1. Login as user A, create a page, share the page to a group Z 2. Set the 'Overriding start date' to a future date 3. Login as a member of group Z 4. In the group Z homepage, click the page shared by the user A You will see the "Access denied" message. Expected result: The page shared by the user A to the group Z should not be displayed in the list until the date set by 'Overriding start date' To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1374163/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1397736] Re: Use SafeCURL in external RSS block
** Changed in: mahara/1.8 Status: Confirmed => Won't Fix ** Changed in: mahara/1.8 Milestone: 1.8.7 => None -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1397736 Title: Use SafeCURL in external RSS block Status in Mahara ePortfolio: In Progress Status in Mahara 1.10 series: Confirmed Status in Mahara 1.8 series: Won't Fix Status in Mahara 1.9 series: Confirmed Status in Mahara 15.04 series: In Progress Bug description: For better security in the external RSS feed block, we should be using a library like SafeCURL to help guard against attacks.: https://github.com/fin1te/safecurl See also bug 1394820 To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1397736/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1356638] Re: Can not see the image in the static page "Home" for logged-in users
** Changed in: mahara/1.8 Status: New => Won't Fix ** Changed in: mahara/1.8 Milestone: 1.8.7 => None -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1356638 Title: Can not see the image in the static page "Home" for logged-in users Status in Mahara ePortfolio: New Status in Mahara 1.10 series: New Status in Mahara 1.8 series: Won't Fix Status in Mahara 1.9 series: New Status in Mahara 15.04 series: In Progress Bug description: Version: master(1.10), 1.9, 1.8 Platform: any Browser: any Steps to reproduce the issue 1. Login as a site admin, add a site image file out of the 'public' folder 2. Add the image into the static page Home (Dashboard) 3. Logout and login as a normal user Expected result: the image should display in my dashboard Actual result: the image is not accessible To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1356638/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1340151] Re: Consider a different approach to libxml_disable_entity_loader(true) in init.php
** Changed in: mahara/1.8
Status: Confirmed => Won't Fix
** Changed in: mahara/1.8
Milestone: 1.8.7 => None
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1340151
Title:
Consider a different approach to libxml_disable_entity_loader(true) in
init.php
Status in Mahara ePortfolio:
Confirmed
Status in Mahara 1.10 series:
Confirmed
Status in Mahara 1.8 series:
Won't Fix
Status in Mahara 1.9 series:
Confirmed
Status in Mahara 15.04 series:
Confirmed
Bug description:
Unfortunately it seems like using libxml_disable_entity_loader(true)
in init.php is unkind to other applications living on the same system.
PHP Bug https://bugs.php.net/bug.php?id=64938 is the heart of the
problem - the use of this setting leaks between different threads and
by setting it for the duration of every single Mahara request this bug
comes into play much more easily.
The other problem is https://bugs.php.net/bug.php?id=62577 which means
that simplexml_load_file() will not even load *local* files off disk.
For example, this would break in Mahara even though no entities come
into play:
$xml = simplexml_load_file(get_config('libroot').'/db/install.xml');
In Moodle we've been warned on one of our issues that users have seen
this problem in the wild with Mahara, I didn't find an issue reported
to you about it, so i'll copy and paste the report from our tracker
here:
"We had experience with this problem on an upgrade to Mahara 1.7, when
https://bugs.launchpad.net/mahara/+bug/1047111 was fixed. The approach
was the same as is suggested in this ticket. This caused seemingly
random failures in Moodle (which is run on the same webserver)
whenever there was usage of Mahara. The root cause was not obvious,
nor well advertised with the Mahara fix, so it took awhile to finally
implement a fix. In the meantime, significant functionality is broken.
Unfortunately, there's really no way around this unless you switch
from using mod_php."
Yesterday whilst debugging some code with Yuliya we realised she also
was encountering this horrible combination of bugs affecting her
Moodle install so it seems this is not a theoretical problem.
In Moodle we have decided to use the same approach of many other projects and
enable/disable the loader around vulnerable code to reduce the chance of this
combination of bugs affecting other applications or uses of the the
simplexml_load_file:
http://cgit.drupalcode.org/drupal/commit/?id=b912710
https://github.com/symfony/symfony/blob/8ef8a1d289a6ce454b7c79baeddbfb45e4af6191/src/Symfony/Component/Config/Util/XmlUtils.php#L41
http://www.mediawiki.org/wiki/XML_External_Entity_Processing
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1340151/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1262040] Re: Problems with group artefact permissions due to misuse of $USER->can_view_artefact and $USER->can_edit_artefact
** Changed in: mahara/1.8 Status: Confirmed => Won't Fix ** Changed in: mahara/1.8 Milestone: 1.8.7 => None -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1262040 Title: Problems with group artefact permissions due to misuse of $USER->can_view_artefact and $USER->can_edit_artefact Status in Mahara ePortfolio: In Progress Status in Mahara 1.10 series: Confirmed Status in Mahara 1.8 series: Won't Fix Status in Mahara 1.9 series: Confirmed Status in Mahara 15.04 series: In Progress Bug description: While discussing the export to ZIP bug ( Bug 1013022 ) I realized that $USER->can_view_artefact() does not do what I thought it did. I thought that it was like can_view_view(), i.e. it was an easy way to tell whether a particular user is allowed to see the contents of a particular artefact. But it does not mean that, as evidenced by the fact that it's not accessed at all on the artefact detail page, view/artefact.php. Instead, this function refers to whether or not the user should be able to see the artefact in their own or a group's Content area. The reason it exists and has this name, is because of the group files permissions system (see http://manual.mahara.org/en/1.8/groups/inside_group.html#index-16 ). This defines three permission levels for a file: "View" lets you see the page in Contents and use it in Group pages, "Edit" lets you change the file's metadata, and "Publish" lets you use the file in your own Portfolio pages. Anyway, I misunderstood it as doing the same thing as can_view_view(), which checks whether a particular user can see a particular Page in display-mode. The similar functionality for artefacts, as seen on view/artefact.php, is to provide an artefact ID & a page ID, and to check whether the artefact is in the page and the user can view the page. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1262040/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1445653] Re: Internet Explorer and video files
Thanks for the detailed bug report, Marc! We aim to support the three latest versions of Internet Explorer in Mahara, so this is indeed a problem. Note to devs: I've tagged this one against 1.10, 15.04, and 15.10, assuming that the problem probably applies to them as well, but I haven't actually replicated it yet. If it turns out to be a 1.10-only thing, feel free to remove the other branches. ** Also affects: mahara/15.04 Importance: Undecided Status: New ** Also affects: mahara/1.10 Importance: Undecided Status: New ** Also affects: mahara/15.10 Importance: Undecided Status: New ** Changed in: mahara/1.10 Milestone: None => 1.10.4 ** Changed in: mahara/15.04 Milestone: None => 15.04.1 ** Changed in: mahara/15.10 Milestone: None => 15.10.0 ** Changed in: mahara/1.10 Status: New => Triaged ** Changed in: mahara/15.04 Status: New => Triaged ** Changed in: mahara/15.10 Status: New => Triaged ** Changed in: mahara/1.10 Importance: Undecided => High ** Changed in: mahara/15.04 Importance: Undecided => High ** Changed in: mahara/15.10 Importance: Undecided => High ** Tags added: ie11 internetexplorer ** Tags added: regression -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1445653 Title: Internet Explorer and video files Status in Mahara ePortfolio: Triaged Status in Mahara 1.10 series: Triaged Status in Mahara 15.04 series: Triaged Status in Mahara 15.10 series: Triaged Bug description: In "Content > Files", if I upload a video file (mp4), the file will upload correctly. But the link to view the video won't work in IE. In every other browser, the video plays in the browser but IE trie to open Windows Media Player which gives the error : Windows Media Player cannot play the file. The Player might not support the file type or might not support the codec that was used to compress the file. If I save the file to my desktop and play it from there, it works fine. Mahara version 1.10.3testing (2014092315) Operating system Linux Database MariaDB Browser IE11 To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1445653/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1445396] Re: Adapt the version of the langpack in the Launchpad
Hi Dajan, Son's working on that right now. :) Cheers, Aaron ** Changed in: mahara Assignee: (unassigned) => Son Nguyen (ngson2000) ** Changed in: mahara Status: New => In Progress ** Summary changed: - Adapt the version of the langpack in the Launchpad + Set up Mahara 15.04 language packs ** Changed in: mahara Importance: Undecided => High ** Tags added: translations -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1445396 Title: Set up Mahara 15.04 language packs Status in Mahara ePortfolio: In Progress Bug description: Hello, Since Mahara 15.04 is now out, could you adapt the launchpad for the translated packs as well. We presently have "trunck" and "1.10" series. We should have "1.10", "15.04" and "trunck" This also impact the packages present in "http://langpacks.mahara.org/"; -dajan To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1445396/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1084351] Re: get_config('cacertinfo') will be null in default installs unless overridden, a default should be used
** Changed in: mahara/1.10
Milestone: 1.10.3 => 1.10.4
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1084351
Title:
get_config('cacertinfo') will be null in default installs unless
overridden, a default should be used
Status in Mahara ePortfolio:
In Progress
Status in Mahara 1.10 series:
In Progress
Bug description:
htdocs/lib/web.php line 3532
This config variable is both undocumented, and no default is given. I
think that we should try and detect some reasonable default and give
up if none possible. Documentation could also be good ;)
It appears to be only used in that one place, as a flag to set up more
checks.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1084351/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1203924] Re: Bruteforce username/email enumeration vuln in password reset screen
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1203924 Title: Bruteforce username/email enumeration vuln in password reset screen Status in Mahara ePortfolio: In Progress Status in Mahara 1.10 series: In Progress Bug description: A user enumeration vulnerability means that an attacker can get a list of legal usernames and/or email addresses from the site. A "bruteforce" user enumeration vulnerability means that if they have a list of potential usernames and/or email addresses, they can verify whether or not each of them is registered with an account in the site. The Mahara password reset page is vulnerable to this. You can simply go in to https://mahara.org/forgotpass.php and enter username or email after username or email, and get a friendly response indicating whether each one is registered with a user in the site or not. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1203924/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1333424] Re: Leap2A import does not update the collection id in navigation block
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1333424 Title: Leap2A import does not update the collection id in navigation block Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: In Progress Status in Mahara 15.04 series: Confirmed Bug description: Version: master (1.10), 1.9, 1.8, 1.7 After importing the attached leap2a file which has a collection and a navigation block pointed to this collection, I found the navigation block now pointed to the old collection id. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1333424/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1360025] Re: Responsive theme bugs on mobile devices
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1360025 Title: Responsive theme bugs on mobile devices Status in Mahara ePortfolio: In Progress Status in Mahara 1.10 series: In Progress Status in Mahara 15.04 series: In Progress Bug description: Mahara 1.9.1 Hi Everyone, In the process of testing our Mahara 1.9 upgrade we came across a number of bugs with the responsive theme on popular smartphone platforms. These bugs (10 in all) are all related to responsiveness, and some seem to occur in the essentials theme as well. Please see attached for our report. Thanks, Shane/Wangchen. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1360025/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1316917] Re: Update jquery.rating.js to 4.11
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1316917 Title: Update jquery.rating.js to 4.11 Status in Mahara ePortfolio: In Progress Status in Mahara 1.10 series: In Progress Status in Mahara 15.04 series: In Progress Bug description: We're currently on version 3.14. The latest is 4.11. https://code.google.com/p/jquery-star-rating-plugin/ To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1316917/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1434927] Re: Objectionable content inbox notification doesn't name reporter
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1434927 Title: Objectionable content inbox notification doesn't name reporter Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: In Progress Bug description: 15.04RC1 (but also goes for older versions) When an objectionable material notification is viewed in the inbox in Mahara, it only contains the text of the complaint and the link to the page or artefact, but it doesn't mention the person who reported the complaint. The latter though is visible in the email notification. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1434927/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1264098] Re: Whitelist more CSS3 options in skins
** Changed in: mahara/1.10
Milestone: 1.10.3 => 1.10.4
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1264098
Title:
Whitelist more CSS3 options in skins
Status in Mahara ePortfolio:
In Progress
Status in Mahara 1.10 series:
In Progress
Status in Mahara 15.04 series:
In Progress
Bug description:
I tried to create a new skin with custom CSS code added to the
"Advanced" tab.
collection-nav ul {
columns: 2;
-webkit-columns: 2;
-moz-columns: 2;
}
When I save it, and then try to edit the skin, everything is deleted
except:
ul {
}
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1264098/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1444905] Re: Elasticsearch doesn't search achievements
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1444905 Title: Elasticsearch doesn't search achievements Status in Mahara ePortfolio: Triaged Status in Mahara 1.10 series: Triaged Status in Mahara 1.9 series: Triaged Status in Mahara 15.04 series: Triaged Status in Mahara 15.10 series: Triaged Bug description: We are testing Elasticsearch and we can see that it doesn't search for any field in achievements (certification, book, membership). I can see it's indexed in Elasticsearch but it doesn't give any records in Mahara. We are using: Mahara 1.10.2 Postgres 9.1 Debian Elasticsearch 1.5.0 To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1444905/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1201174] Re: allow and moderate comments not saving correctly for groups
** Changed in: mahara Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1201174 Title: allow and moderate comments not saving correctly for groups Status in Mahara ePortfolio: Triaged Bug description: When you do not allow commenting for all access groups, but only for a specific one and click "Save", the commenting permissions are not written to the DB. You have to go back in to the "Edit access" screen and tick the checkboxes for "Allow comments" and "Moderate" for that particular access group again and click "Save". Only then are the permissions saved. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1201174/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1443239] Re: Warning in Mahara logs when a MaharaDroid user has no tags in their Mahara account
** Changed in: mahara/1.10
Milestone: 1.10.3 => 1.10.4
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1443239
Title:
Warning in Mahara logs when a MaharaDroid user has no tags in their
Mahara account
Status in Mahara ePortfolio:
Confirmed
Status in Mahara 1.10 series:
Confirmed
Status in Mahara 1.8 series:
Confirmed
Status in Mahara 1.9 series:
Confirmed
Status in Mahara 15.04 series:
Confirmed
Status in Mahara 15.10 series:
Confirmed
Bug description:
This is a bug in the Mahara PHP code which interfaces with the
MaharaDroid android app. See
https://github.com/MaharaProject/maharadroid/issues/6 for the
MaharaDroid side of this bug.
To replicate:
1. Create a new Mahara account
2. Connect it to MaharaDroid
3. Try to upload a file via MaharaDroid
Result: You see this warning in the Apache logs:
[Tue Jan 14 11:07:18 2014] [error] [client 10.22.33.88] [WAR] 88
(api/mobile/sync.php:77) Invalid argument supplied for foreach()
[Tue Jan 14 11:07:18 2014] [error] [client 10.22.33.88] Call stack (most
recent first):
[Tue Jan 14 11:07:18 2014] [error] [client 10.22.33.88] *
log_message("Invalid argument supplied for foreach()", 8, true, true,
"/home/demo/code/mahara/htdocs/api/mobile/sync.php", 77) at
/home/demo/code/mahara/htdocs/lib/errors.php:430
[Tue Jan 14 11:07:18 2014] [error] [client 10.22.33.88] * error(2, "Invalid
argument supplied for foreach()",
"/home/demo/code/mahara/htdocs/api/mobile/sync.php", 77, array(size 59)) at
/home/demo/code/mahara/htdocs/api/mobile/sync.php:77
[Tue Jan 14 11:07:18 2014] [error] [client 10.22.33.88]
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1443239/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1383543] Re: The js script 'artefact/multirecipientnotification/js/sendmessage.js' is not neccessary
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1383543 Title: The js script 'artefact/multirecipientnotification/js/sendmessage.js' is not neccessary Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 15.04 series: Confirmed Bug description: Version: master, 1.10 It looks like the js script 'artefact/multirecipientnotification/js/sendmessage.js' is redundant. When I remove it from the code, the feature still works To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1383543/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1437083] Re: Files - Download folder content as a zip file
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1437083 Title: Files - Download folder content as a zip file Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 15.04 series: Confirmed Status in Mahara 15.10 series: Confirmed Bug description: Version: 15.04rc1 OS: Windows 7 Browser: Firefox 36.0.4 If download zip file of home (parent) folder, error message displayed when try to extract zipped folder. Try this with sub folders (child folders) seems to work fine. 1. In Mahara, click Content > Files 2. Click 'Download folder content as a zip file' 3. On downloaded zipped folder right-click and select 'Extract All...' then click the 'Extract' button 4. Error message displayed (attached) To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1437083/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1394082] Re: Can create a URL that takes you to a different page depending on whether you're logged in to MNet or not.
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1394082 Title: Can create a URL that takes you to a different page depending on whether you're logged in to MNet or not. Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 1.8 series: Confirmed Status in Mahara 1.9 series: Confirmed Status in Mahara 15.04 series: Confirmed Bug description: As reported on the mahara.org forum: https://mahara.org/interaction/forum/topic.php?id=6549 To replicate: 1. Set up a Moodle instance with the Mahara assignment submission plugin and connect it up to your Mahara instance. 2. Create a view with ID 1000. 3. Create another view with ID 1001. 4. Make both these pages accessible to the public. 5. Set up an Mahara assignment in Moodle. 6. Submit the view with ID 1000 to Moodle as an assignment submission. 7. Note the access URL that gets generated, which will contain an MNet access token, i.e. /view/view.php?mt=abcd1234 8. Add the ID of page 1001 to this URL: /view/view.php?id=1001&mt=abcd1234 Expected Result: This URL should either display page 1000 every time, or an "access denied" message Actual Result: If you're logged in to Mahara via MNet, you see page 1000. If you're not, you see page 1001. The cause of this problem, is that /view/view.php completely ignores the "mt=" tag if you're not logged in via MNet. In which case, if an ID is also supplied, it falls back to that. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1394082/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1417120] Re: Non-English lang strings distributed with Themes & Plugins aren't loaded.
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1417120 Title: Non-English lang strings distributed with Themes & Plugins aren't loaded. Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 15.04 series: Confirmed Bug description: Based on the doc here: https://wiki.mahara.org/index.php/Customising/Themes/1.10#Theme_lang_strings Theme language strings work in English, but non-English theme language strings are not loaded. To reproduce: 1. On a custom theme add a French lang string like explained here: https://wiki.mahara.org/index.php/Customising/Themes/1.10#Theme_lang_strings 2. Change your language to French Expected: The French lang string should be used Actual: The French lang string is not used To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1417120/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1412950] Re: Problem displaying page when two or more pages have the same clean url
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 ** No longer affects: mahara/1.8 ** No longer affects: mahara/1.9 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1412950 Title: Problem displaying page when two or more pages have the same clean url Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Bug description: This occurred for a site using clean urls A user had two pages containing the same cleanurl so that neither could be displayed. Got this error: [WAR] c9 (lib/errors.php:747) get_record_sql found more than one row. If you meant to retrieve more than one record, use get_records_*, otherwise check your code or database for inconsistencies I've been unable to replicate this problem via the system (only editing the db directly). I've tried: - copying a page - copying a page from a collection - exporting and then importing pages - editing page 'title & description' But none of these allow me to end up with a duplicate. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1412950/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1417828] Re: Malformed lang string in email digest notification emails
** Changed in: mahara/1.10
Milestone: 1.10.3 => 1.10.4
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1417828
Title:
Malformed lang string in email digest notification emails
Status in Mahara ePortfolio:
Confirmed
Status in Mahara 1.10 series:
Confirmed
Status in Mahara 15.04 series:
Confirmed
Bug description:
I noticed that when I get an email about a "Contact Us" via the email
digest notification, It includes a missing lang string [[type/]].
Because the email digest notification is a little unwieldy to test I
haven't pinned down the exact replication steps yet, but I have been
able to replicate the problem locally.
The email generated looks like this:
This is an auto-generated notification from Mahara. Following is the daily
digest of all your notifications
--
Activity type: [[type/]] at 12 February 2015, 2:39 AM
New contact us from sup : su
sup
To update your notification preferences, visit
http://vegas.wgtn.cat-it.co.nz/mahara/htdocs/account/activity/preferences/index.php
Please do not reply to this message.
There is also a warning stack in the email digest cron task:
[INF] 15 (lib/cron.php:75) Running PluginNotificationEmaildigest::send_digest
[WAR] 15 (notification/emaildigest/lib.php:83) Undefined offset: 5
Call stack (most recent first):
* log_message("Undefined offset: 5", 8, true, true,
"/home/aaronw/www/mahara/htdocs/notification/emaild...", 83) at
/home/aaronw/www/mahara/htdocs/lib/errors.php:439
* error(8, "Undefined offset: 5",
"/home/aaronw/www/mahara/htdocs/notification/emaild...", 83, array(size 7)) at
/home/aaronw/www/mahara/htdocs/notification/emaildigest/lib.php:83
* PluginNotificationEmaildigest::send_digest() at Unknown:0
* call_user_func_array(array(size 2), array(size 0)) at
/home/aaronw/www/mahara/htdocs/lib/mahara.php:1579
* call_static_method("PluginNotificationEmaildigest", "send_digest") at
/home/aaronw/www/mahara/htdocs/lib/cron.php:80
I haven't tested to see whether this problem is present in 1.9 & 1.8.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1417828/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1422837] Re: XML RPC simpleXML limits payload size
** Changed in: mahara/1.10
Milestone: 1.10.3 => 1.10.4
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1422837
Title:
XML RPC simpleXML limits payload size
Status in Mahara ePortfolio:
Confirmed
Status in Mahara 1.10 series:
Confirmed
Status in Mahara 1.8 series:
Confirmed
Status in Mahara 1.9 series:
Confirmed
Status in Mahara 15.04 series:
Confirmed
Bug description:
Operating System: Ubuntu 14.04.1 LTS
Mahara version: 1.9.3
Database: mysql
Browser: chrome 40.0.2214.111
--
Steps to reproduce - you need a system capable of XMLRPC communication
with Mahara (e.g. Moodle)
1) With Moodle - set up mahara networking / portfolios.
2) Open a course with a forum
3) Add 2 entries. One with an attachment under 5 MB. One with an attachment
over 5 MB. On Each click "Export to portfolio" in the bottom. 4) Go through the
screens to start export - ask it to do it now (i.e. not wait for cron).
5) Check the Mahara site to see what made it through successfully.
--
simpleXML may not be the best parser for XMLRPC payloads
in api/xmlrpc/lib.php
function parse_payload($payload) {
try {
$xml = new SimpleXMLElement($payload);
return $xml;
} catch (Exception $e) {
throw new MaharaException('Encrypted payload is not a valid XML
document', 6002);
}
}
This means if you send a large file (in our tests greater than approx 7mb)
base 64 encoded over XMLRPC it will fail to parse.
It didn't seem to make any difference if we increased the memory limit to
800M in php.ini or even by setting the php memory limit to 800M via PHP ini_set
in function parse_payload - this suggests that there is a limit to what
SimpleXML can handle regardless of the PHP memory limit.
Note - 932 in my source code is the 'throw new exception' following
$xml = new SimpleXMLElement($payload);
called at [/vagrant/www/maharadev/mahara/lib/errors.php:465] #1
exception(MaharaException Object ([] => 1,[] => Encrypted payload is not a
valid XML document,[] => ,[] => 6002,[] =>
/vagrant/www/maharadev/mahara/api/xmlrpc/lib.php,[] => 932,[] => Array ([0] =>
Array ([file] => /vagrant/www/maharadev/mahara/api/xmlrpc/lib.php,[line] =>
921,[function] => parse_payload,[args] => Array ([0] =>ERROR 4:
4: remote server error: code: , message: A nonrecoverable error occurred.
This probably means you have encountered a bug in the system #0
MaharaException->handle_exception() called at
[/vagrant/www/maharadev/mahara/lib/errors.php:465] #1 exception(MaharaException
Object ([] => 1,[] => Encrypted payload is not a valid XML document,[] => ,[]
=> 6002,[] => /vagrant/www/maharadev/mahara/api/xmlrpc/lib.php,[] => 932,[] =>
Array ([0] => Array ([file] =>
/vagrant/www/maharadev/mahara/api/xmlrpc/lib.php,[line] => 921,[function] =>
parse_payload,[args] => Array ([0] =>
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1422837/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1422264] Re: IPv6 Compliance
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 ** No longer affects: mahara/1.8 ** No longer affects: mahara/1.9 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1422264 Title: IPv6 Compliance Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Bug description: Mahara: 15.04 DB: any Browser: any OS: any Currently, Mahara is not compliant with the IPv6 protocol. Some places that need to change (where IP addresses are validated/checked): - SAML auth - validate URL Syntax (preg_match for IPv6 also). - DB: table - host.ipaddress needs to cater for 128 bit address. - Peer bootstrap: 1) preg-match should also include IPv6 format; 2) use of PHP function gethostbyname(). - Zend third part library - current version only supports IPv4. We currently use version 1.10.6. MNET heavily relise on Zend. The latest Zend is on version 3. But there is a release for 1.12.11 - which still doesn't support IPv6 (as far as I can tell). To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1422264/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1430114] Re: Wrong sortorder for socialprofile block on upgrade from 1.9 to 15.04
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1430114 Title: Wrong sortorder for socialprofile block on upgrade from 1.9 to 15.04 Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 15.04 series: Confirmed Bug description: To replicate: 1. Install Mahara 1.9 2. Upgrade to Mahara 15.04dev (using the web-based installer, NOT the CLI installer) 3. Edit your dashboard page (or any page) Expected result: The social profile block should be the first one in the "Personal info" category. Actual result: The social profile block is the last one in the "Personal Info" category. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1430114/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1397562] Re: Error display on the admin menus (tabs) of theme 'primaryschool'
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1397562 Title: Error display on the admin menus (tabs) of theme 'primaryschool' Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 15.04 series: Confirmed Bug description: Version of Mahara: 1.10.1 Database: MySQL Platform: any Browser: any Steps to replicate: 1. Select theme 'primaryschool' in the site settings 2. Click the menu (tab) 'Administration' Error display between menu (tab) 'Groups' and menu (tab) 'Institutions' Sorry for my limited english! To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1397562/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1393552] Re: Simple text box doesn't show cursor in Chromium and Chrome
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1393552 Title: Simple text box doesn't show cursor in Chromium and Chrome Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 15.04 series: Confirmed Bug description: Mahara 1.10 and master When having a simple text box, e.g. collection description, anonymous feedback, the cursor is not shown in Chrome and Chromium. I have it without problems in Firefox. You can still type in Chrome and Chromium, but just don't see the cursor. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1393552/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1171311] Re: No one can perform comment moderation for Group Pages
** Changed in: mahara Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1171311 Title: No one can perform comment moderation for Group Pages Status in Mahara ePortfolio: Confirmed Bug description: While testing a solution for https://bugs.launchpad.net/mahara/+bug/1088609 , I discovered that no user is given the option of approving comments that are queued for moderation on Group Pages. So, we should probably do that. But who would it make sense to add for comment moderation on Group Pages? 1. The group administrators? 2. Any group member? 3. Add a control to the Group's "Share" tab that lets you specify whether admins, tutors, and/or members can moderate? (or would that be overkill?) Alternately, we could simply eliminate the comment moderation feature for Group Pages. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1171311/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1408577] Re: Elasticsearch not working properly with Chinese characters
** Changed in: mahara
Milestone: 1.10.3 => 1.10.4
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1408577
Title:
Elasticsearch not working properly with Chinese characters
Status in Mahara ePortfolio:
Confirmed
Bug description:
1. Search box in the top-right corner (the search box below the Settings)
return no result.
2. Search box in the Pages can only locate the name of the pages (not
searching content of the page).
Detail Information of server:
===
Elasticsearch server is running:
{
"cluster_name" : "elasticsearch",
"status" : "green",
"timed_out" : false,
"number_of_nodes" : 1,
"number_of_data_nodes" : 1,
"active_primary_shards" : 1,
"active_shards" : 1,
"relocating_shards" : 0,
"initializing_shards" : 0,
"unassigned_shards" : 0
}
The Elasticsearch plugin is currently active.
Host: 127.0.0.1
Elasticsearch port: 9200
Auth username: (not set)
Auth password: (not set)
Index name: mahara
Bypass index: (not set)
Elasticsearch analyzer: mahara_analyze
lasticsearch types:
usr,interaction_instance,interaction_forum_post,group,view,artefact
Cron record limit: 0
Artefact types: Select all
Number of records of each type currently in the queue:
usr (1)
interaction_instance (0)
interaction_forum_post(0)
group (0)
view (0)
artefact (0)
- Mahara 1.10.1
- Ubuntu Linux 14.04.1
- Postgres database (version 9.3.5)
- Chrome Version 39.0.2171.95 m, Firefox 33.0.2, I.E. 11
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1408577/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1374163] Re: List of shared pages to a group not taking account of access date
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1374163 Title: List of shared pages to a group not taking account of access date Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 1.8 series: Confirmed Status in Mahara 1.9 series: Confirmed Status in Mahara 15.04 series: Confirmed Bug description: Version: master(1.10) and previous version Browser, platform: any When I clicked a shared page in the list of shared pages in the group homepage (htdocs/group/view.php), I got "Access denied" message. Steps 1. Login as user A, create a page, share the page to a group Z 2. Set the 'Overriding start date' to a future date 3. Login as a member of group Z 4. In the group Z homepage, click the page shared by the user A You will see the "Access denied" message. Expected result: The page shared by the user A to the group Z should not be displayed in the list until the date set by 'Overriding start date' To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1374163/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1420590] Re: access denied error when editing group as group admin
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1420590 Title: access denied error when editing group as group admin Status in Mahara ePortfolio: Confirmed Status in Mahara 1.10 series: Confirmed Status in Mahara 1.9 series: Confirmed Status in Mahara 15.04 series: Confirmed Status in Mahara 15.10 series: In Progress Bug description: Get a: You do not have access to view this page. group_update: cannot update a group in this institution error - this is due a group admin that is only in the 'no insitituion' (mahara) institution doesn't have the expected info set in their $USER data. So need to make an exception for the 'mahara' institution. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1420590/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1356638] Re: Can not see the image in the static page "Home" for logged-in users
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1356638 Title: Can not see the image in the static page "Home" for logged-in users Status in Mahara ePortfolio: New Status in Mahara 1.10 series: New Status in Mahara 1.8 series: New Status in Mahara 1.9 series: New Status in Mahara 15.04 series: In Progress Bug description: Version: master(1.10), 1.9, 1.8 Platform: any Browser: any Steps to reproduce the issue 1. Login as a site admin, add a site image file out of the 'public' folder 2. Add the image into the static page Home (Dashboard) 3. Logout and login as a normal user Expected result: the image should display in my dashboard Actual result: the image is not accessible To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1356638/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1401158] Re: iframe for youtube does not work
** No longer affects: mahara/1.10 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1401158 Title: iframe for youtube does not work Status in Mahara ePortfolio: Expired Bug description: mahara version: 1.10.1 allowed iframe source: youtube.com/ embedcode entered in an textbox: In the editor I change to html-code in order to enter the embed-code. Then I enter the embed-code and change back to wysiwyg-editor an the youtube-video is shown. Now I save the changes and the embeded code is deleted and no video ist shown. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1401158/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1397736] Re: Use SafeCURL in external RSS block
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1397736 Title: Use SafeCURL in external RSS block Status in Mahara ePortfolio: In Progress Status in Mahara 1.10 series: Confirmed Status in Mahara 1.8 series: Confirmed Status in Mahara 1.9 series: Confirmed Status in Mahara 15.04 series: In Progress Bug description: For better security in the external RSS feed block, we should be using a library like SafeCURL to help guard against attacks.: https://github.com/fin1te/safecurl See also bug 1394820 To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1397736/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1262040] Re: Problems with group artefact permissions due to misuse of $USER->can_view_artefact and $USER->can_edit_artefact
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1262040 Title: Problems with group artefact permissions due to misuse of $USER->can_view_artefact and $USER->can_edit_artefact Status in Mahara ePortfolio: In Progress Status in Mahara 1.10 series: Confirmed Status in Mahara 1.8 series: Confirmed Status in Mahara 1.9 series: Confirmed Status in Mahara 15.04 series: In Progress Bug description: While discussing the export to ZIP bug ( Bug 1013022 ) I realized that $USER->can_view_artefact() does not do what I thought it did. I thought that it was like can_view_view(), i.e. it was an easy way to tell whether a particular user is allowed to see the contents of a particular artefact. But it does not mean that, as evidenced by the fact that it's not accessed at all on the artefact detail page, view/artefact.php. Instead, this function refers to whether or not the user should be able to see the artefact in their own or a group's Content area. The reason it exists and has this name, is because of the group files permissions system (see http://manual.mahara.org/en/1.8/groups/inside_group.html#index-16 ). This defines three permission levels for a file: "View" lets you see the page in Contents and use it in Group pages, "Edit" lets you change the file's metadata, and "Publish" lets you use the file in your own Portfolio pages. Anyway, I misunderstood it as doing the same thing as can_view_view(), which checks whether a particular user can see a particular Page in display-mode. The similar functionality for artefacts, as seen on view/artefact.php, is to provide an artefact ID & a page ID, and to check whether the artefact is in the page and the user can view the page. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1262040/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1440955] Re: Behat test (secret_url.feature) failing on MySQL database.
** Changed in: mahara Milestone: 1.10.3 => 15.10.0 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1440955 Title: Behat test (secret_url.feature) failing on MySQL database. Status in Mahara ePortfolio: New Bug description: Hi, The Behat test secret_url.feature is failing on MySQL database, but it's passing locally on PostgreSQL database. The bot hasn't been failing the tests either (that runs PostgreSQL). The test is located is in /tests/Behat/features/artefact/collections The step it's failing on is: And I click on "secreturl_6" Thanks, Jinelle To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1440955/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1340151] Re: Consider a different approach to libxml_disable_entity_loader(true) in init.php
** Changed in: mahara/1.10
Milestone: 1.10.3 => 1.10.4
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1340151
Title:
Consider a different approach to libxml_disable_entity_loader(true) in
init.php
Status in Mahara ePortfolio:
Confirmed
Status in Mahara 1.10 series:
Confirmed
Status in Mahara 1.8 series:
Confirmed
Status in Mahara 1.9 series:
Confirmed
Status in Mahara 15.04 series:
Confirmed
Bug description:
Unfortunately it seems like using libxml_disable_entity_loader(true)
in init.php is unkind to other applications living on the same system.
PHP Bug https://bugs.php.net/bug.php?id=64938 is the heart of the
problem - the use of this setting leaks between different threads and
by setting it for the duration of every single Mahara request this bug
comes into play much more easily.
The other problem is https://bugs.php.net/bug.php?id=62577 which means
that simplexml_load_file() will not even load *local* files off disk.
For example, this would break in Mahara even though no entities come
into play:
$xml = simplexml_load_file(get_config('libroot').'/db/install.xml');
In Moodle we've been warned on one of our issues that users have seen
this problem in the wild with Mahara, I didn't find an issue reported
to you about it, so i'll copy and paste the report from our tracker
here:
"We had experience with this problem on an upgrade to Mahara 1.7, when
https://bugs.launchpad.net/mahara/+bug/1047111 was fixed. The approach
was the same as is suggested in this ticket. This caused seemingly
random failures in Moodle (which is run on the same webserver)
whenever there was usage of Mahara. The root cause was not obvious,
nor well advertised with the Mahara fix, so it took awhile to finally
implement a fix. In the meantime, significant functionality is broken.
Unfortunately, there's really no way around this unless you switch
from using mod_php."
Yesterday whilst debugging some code with Yuliya we realised she also
was encountering this horrible combination of bugs affecting her
Moodle install so it seems this is not a theoretical problem.
In Moodle we have decided to use the same approach of many other projects and
enable/disable the loader around vulnerable code to reduce the chance of this
combination of bugs affecting other applications or uses of the the
simplexml_load_file:
http://cgit.drupalcode.org/drupal/commit/?id=b912710
https://github.com/symfony/symfony/blob/8ef8a1d289a6ce454b7c79baeddbfb45e4af6191/src/Symfony/Component/Config/Util/XmlUtils.php#L41
http://www.mediawiki.org/wiki/XML_External_Entity_Processing
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1340151/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1400595] Re: PDFs not displaying in IE
** Changed in: mahara/1.10 Milestone: 1.10.3 => 1.10.4 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1400595 Title: PDFs not displaying in IE Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Confirmed Bug description: When a PDF block is added to a page, the PDF page doesn't display in IE. In IE, all that is displayed is a grey box. The PDF menu items are displayed but the actual document isn't visible. It works correctly in Chrome. I've tested this in the Mahara demo site and the problem existed there as well. I've attached screenshots. Version info: Mahara 1.10.1 IE: 9 Chrome: 39 To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1400595/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1414628] Re: strptime on OS X always returns 0 for tm_wday and tm_yday
** Changed in: mahara/1.10
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1414628
Title:
strptime on OS X always returns 0 for tm_wday and tm_yday
Status in Mahara ePortfolio:
Fix Released
Status in Mahara 1.10 series:
Fix Released
Status in Mahara 15.04 series:
Fix Released
Bug description:
As mentioned in this 5-year old comment on the php documentation page
http://php.net/manual/en/function.strptime.php#89239 , tm_wday and
tm_yday are not initialized on BSD-based systems.
This is apparently still true, at least on OS X. I'm running PHP
5.5.20, and these values are always set to 0.
htdocs/view/access.php in Mahara 1.10.2 uses tm_wday in the
ptimetotime() function.
I propose that this method be updated to not use tm_wday, since it
doesn't need to.
```
diff --git a/htdocs/view/access.php b/htdocs/view/access.php
index 26ea7d3..299bf89 100644
--- a/htdocs/view/access.php
+++ b/htdocs/view/access.php
@@ -336,8 +336,8 @@ function ptimetotime($ptime) {
$ptime['tm_hour'],
$ptime['tm_min'],
$ptime['tm_sec'],
-1,
-$ptime['tm_yday'] + 1,
+$ptime['tm_mon'] + 1,
+$ptime['tm_mday'],
$ptime['tm_year'] + 1900
);
}
```
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1414628/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1395919] Re: TinyMCE spellchecker gives Error: General
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1395919 Title: TinyMCE spellchecker gives Error: General Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 15.04 series: Fix Released Bug description: Mahara 1.10/master When you try to use the spellchecker (new TinyMCE), you just get "Error: General", but no actual spellchecking via TinyMCE. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1395919/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1415709] Re: "Deprecated" warning coming from BBCode parser
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1415709 Title: "Deprecated" warning coming from BBCode parser Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: Each time I make a wall post, I see this warning message in my logs: [Thu Jan 29 15:44:50.155838 2015] [:error] [pid 15222] [client 127.0.0.1:44464] PHP Deprecated: Assigning the return value of new by reference is deprecated in /home/aaronw/www/mahara/htdocs/lib/stringparser_bbcode/stringparser.class.php on line 285, referer: http://vegas.wgtn.cat-it.co.nz/mahara/htdocs/user/view.php?id=1 To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1415709/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1416935] Re: Incorrect debug message
** Changed in: mahara/1.10
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1416935
Title:
Incorrect debug message
Status in Mahara ePortfolio:
Fix Released
Status in Mahara 1.10 series:
Fix Released
Status in Mahara 15.04 series:
Fix Released
Bug description:
The debug info in the following section appears to be incorrect
/mahara/auth/lib.php:
2604 public static function save_instance_config_options($values,
Pieform $form) {
2605 throw new SystemException('This plugin claims to have instance
config but does not define a '
2606:. 'submit_instance_config_options() method. Most likely it
is still using the get_config_options() '
2607 . 'method for this purpose. Please ask the developer to
upgrade the plugin.');
2608 }
I believe that
submit_instance_config_options()
should be changed to
save_instance_config_options()
and
get_config_options()
should be changed to
save_config_options()
This was encountered when attempting to install the (oldish)
Shibboleth plugin on Mahara 1.10.
Please ask if you require more information.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1416935/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1409545] Re: RSS block: "Invalid array key 'url'" messages when using an atom feed
** Changed in: mahara/1.10
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1409545
Title:
RSS block: "Invalid array key 'url'" messages when using an atom feed
Status in Mahara ePortfolio:
Fix Released
Status in Mahara 1.10 series:
Fix Released
Status in Mahara 1.8 series:
Won't Fix
Status in Mahara 1.9 series:
Won't Fix
Status in Mahara 15.04 series:
Fix Released
Bug description:
A client reported that when using the external feed block to display
the Atom feeds of Mahara's own blogs, you'd see this warning message:
[WAR] f9 (blocktype/externalfeed/lib.php:464) Illegal string offset 'url'
Call stack (most recent first):
log_message("Illegal string offset 'url'", 8, true, true,
"/home/aaronw/www/mahara/htdocs/blocktype/externalf...", 464) at
/home/aaronw/www/mahara/htdocs/lib/errors.php:439
error(2, "Illegal string offset 'url'",
"/home/aaronw/www/mahara/htdocs/blocktype/externalf...", 464, array(size 2)) at
/home/aaronw/www/mahara/htdocs/blocktype/externalfeed/lib.php:464
PluginBlocktypeExternalfeed::make_feed_image_tag("http://trinity-mahara.testing.elearning.catalyst.n...";)
at /home/aaronw/www/mahara/htdocs/blocktype/externalfeed/lib.php:98
PluginBlocktypeExternalfeed::render_instance(object(BlockInstance)) at
Unknown:0
call_user_func_array(array(size 2), array(size 1)) at
/home/aaronw/www/mahara/htdocs/lib/mahara.php:1578
call_static_method("PluginBlocktypeExternalfeed", "render_instance",
object(BlockInstance)) at /home/aaronw/www/mahara/htdocs/blocktype/lib.php:782
BlockInstance->render_viewing() at
/home/aaronw/www/mahara/htdocs/lib/view.php:2049
View->build_column(1, 1, false) at
/home/aaronw/www/mahara/htdocs/lib/view.php:2006
View->build_columns(1, false) at
/home/aaronw/www/mahara/htdocs/lib/view.php:1991
View->build_rows() at /home/aaronw/www/mahara/htdocs/view/view.php:257
On looking at the code, it looks like the problem is that the
PluginBlocktypeExternalfeed::make_feed_image_tag() function is in dire
need of a cleanup. It is built to handle an array if the feed is an
RSS feed, and a URL string if the feed is an Atom feed. But it just
checks for array keys directly, rather than checking whether it's an
array or if the array key exists, and although that works, it throws a
warning message.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1409545/+subscriptions
___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1422232] Re: elasticsearch - reset and indexing
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1422232 Title: elasticsearch - reset and indexing Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: When one resets the index via extensions -> elasticsearch configuration form part of the process is to index the elasticsearch If the site is large the 'Cron record limit' value should be set so that not too much of the queue is slurped up to be handled at one time. One thing I noticed from doing some tests was that when I hit reset index button it goes off and does it's thing which calls the index_queued_items() to index some items but then the cron rolls around and calls it too. When we hit reset index we should set the cron flag to stop cron from doing the indexing at same time and unset the flag once the reindex step is done by the form. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1422232/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1436841] Re: Add External Media - YouTube Video
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1436841 Title: Add External Media - YouTube Video Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: Version: 15.04rc1 When adding a new External Media block to a page using the embed code from YouTube, if the option 'Enable privacy-enhanced mode' in YouTube is selected the video is not displayed in the block on Mahara. I think this is related to the URL changing if this option is selected: Option selected in YouTube: https://www.youtube-nocookie.com/embed Option not selected in YouTube: https://www.youtube.com/embed/ To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1436841/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1429883] Re: Display Problem on the page exported HTML "Profile Information"
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1429883 Title: Display Problem on the page exported HTML "Profile Information" Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Bug description: Here some instructions to reproduce the bug : - login as admin - create a new user with basic informations - logout and login with this new user - export the portfolio as HTML - download the Zip and Unzip - go the index page and click View all profile information - you should see 'Last name: Array' ( see the screenshot ) on master To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1429883/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1286935] Re: Allowed iframe check doesn't handle URLs with a question mark immediately after the domain name
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1286935 Title: Allowed iframe check doesn't handle URLs with a question mark immediately after the domain name Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: See https://mahara.org/interaction/forum/topic.php?id=6124 In the Mahara forums, a user reported this issue with an embed code for hapyak.com. The full embed code: Note that the URL starts with "//hapyak.com?embed=true...". If you change that to "//hapyak.com/?embed=true..." then it works. It looks like the problem is that the regular expression we use to identify iframes with a valid URL, doesn't handle the scenario of a URL where there's a query component but no path component. In other words, a "?" immediately after the domain name. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1286935/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1414828] Re: The cron 'export_process_queue' does not run as the false alarm server_busy
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1414828 Title: The cron 'export_process_queue' does not run as the false alarm server_busy Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Bug description: Version: master(15.04), 1.10 The function server_busy() does not take into account the number of CPU cores. That's why it often returns true on the server with many CPU core. This postpones the cron 'export_process_queue'. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1414828/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1348024] Re: users can stay logged into suspended institution
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1348024 Title: users can stay logged into suspended institution Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: If a user does not use their own institution's auth method then user only belonging to a suspended institution can still log in. Scenario: - Create an institution called 'testone' with the auth method internal mahara - Add a user to it (so that the user is only in this institution and no others) - Update the user auth method to be another internal one - suspend the institution - log out and then in as user - can get in because the auth method is paired to 'mahara' institution Another problem: Same as above but have the user using the institutions auth method - this time one gets a warning about the institution being suspended, which is good but also gets the top menu and is actually logged in/can navigate about. What needs to be done: 1) when an institution is suspended make sure all users that only belong to this institution have a valid usr.authinstance value and if they don't give them one. 2) when they are trying to log in to their suspended institution actually deny them properly. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1348024/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1358092] Re: Improve SQL performance when deleting notifications
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1358092 Title: Improve SQL performance when deleting notifications Status in Mahara ePortfolio: Triaged Status in Mahara 1.10 series: Fix Released Status in Mahara 1.9 series: Fix Released Bug description: Martin from Catalyst EU pointed out to me that the performance of the code in account/activity/index.json.php could be improved by stripping an unnecessary subquery from it. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1358092/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1428266] Re: Missing page description when export/import via Leap2a
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released ** Changed in: mahara/1.10 Assignee: (unassigned) => Son Nguyen (ngson2000) -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1428266 Title: Missing page description when export/import via Leap2a Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: Version: master(15.04) When exporting a page via leap2a, the description is only exported in the summary entry. However, this description is not extracted from the entry. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1428266/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1429647] Re: Watchlist lets you watch and receive notifications about pages you don't have view access to
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1429647 Title: Watchlist lets you watch and receive notifications about pages you don't have view access to Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: In analyzing watchlist bug 1429505 (pages stay on your watchlist even if you lose access to them) I noticed a couple of things in the code: 1. You apparently still can receive watchlist notifications about pages on your watchlist which you don't have access to. 2. There are no access control checks in togglewatchlist.json.php, so it is apparently possible to add a page to your watchlist even if you don't have access to it. Together, these bugs mean that a user could watch private pages, and receive notifications about changes to those pages. While these notifications would not contain the actual page content, they would contain the title of the page and the names of blocks and/or artefacts changed in the page. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1429647/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1432635] Re: Changing view layout causes block removal
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1432635 Title: Changing view layout causes block removal Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.9 series: Fix Committed Bug description: Steps to reproduce: 1. Create a new view 2. Select layout with one column in first row and three columns in second 3. Add one textbox to each column, 4 textboxes total 4. Go to layout-tab again and change the layout to one row & one column (the first) Result: The block(s) in the first column of the second row is gone. Tested in 1.9.1 and Mahara Demo (1.10 at the moment). To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1432635/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1414783] Re: Reply to message link in Inbox block is not working after upgrade
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1414783 Title: Reply to message link in Inbox block is not working after upgrade Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Bug description: This is for existing messages from pre-upgraded site. Either get an access denied error - or get taken to a different post-upgrade message. Messages made after upgrade work as expected. The problem looks to be in the 'replyto' variable in the url link. This is not present when looking at the same message in the notifications inbox. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1414783/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1432641] Re: Changing view layout causes an error
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released ** Changed in: mahara/1.8 Milestone: 1.8.7 => None ** No longer affects: mahara/1.8 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1432641 Title: Changing view layout causes an error Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: Steps to reproduce: 1. Create a new view 2. Select the layout with one column in first row and three columns in second 3. Add two textboxes to each column, 8 textboxes total 4. Change the layout to one row & one column This results in following error: [WAR] d1 (lib/dml.php:890) Failed to get a recordset: mysqli error: [1062: Duplicate entry '593-2-1-0' for key 'blocinst_vierowcolord_uk'] in adodb_throw(UPDATE "block_instance" SET "order" = 0 WHERE "order" = '1' AND "view" = '593' AND "row" = '2' AND "column" = 1, ) Command was: UPDATE "block_instance" SET "order" = ? WHERE "order" = ? AND "view" = ? AND "row" = ? AND "column" = ? and values was (0,1,593,2,1) Tested in 1.9.1 (Ubuntu 14.04.2 / MySQL 5.5.35 / Chrome 41.0.2272.89 (64-bit)) and Mahara Demo (currently 1.10). To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1432641/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1429871] Re: Link underlining in skins doesn't work
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1429871 Title: Link underlining in skins doesn't work Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: If the user edits a skin (Edit skin > Fonts and colours) and checks the Underline link -option, the link doesn't get underlined on a page with the skin applied. There seems to be a bug in skin/style.php#38 with the comparison if ($option == 'transparent') because when a checkbox is selected, the $option value is a boolean TRUE and when using PHP's loose comparison operator, (true == 'transparent') = true. Therefore for example $skin->viewskin['view_link_normal_underline'] (and a few others) value changes to an empty string and the value assigned to template is 'none' instead of 'underline'. A simple fix is to use strict comparison: if ($option === 'transparent') --- Mahara version: 1.9.1 Browser: Chrome (Linux) 40.0.2214.115 (64-bit) To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1429871/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1414474] Re: Sub navigation background color not used for sub navigation
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1414474 Title: Sub navigation background color not used for sub navigation Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Bug description: In Mahara 1.8 a change was introduced to the configurable theme that does not show the second level navigation in the "sub navigation background" color anymore. I attach a screenshot to illustrate it. This change needs to be reverted back for 15.04 so that users of the configurable theme have the optimal theming possibilities available until we switch the CSS framework. If they cannot theme the second level navigation (except for the item in the top level navigation), they cannot implement their preferred colors correctly. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1414474/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1390833] Re: File attachments aren't copied when note is copied
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released ** Changed in: mahara/1.10 Assignee: (unassigned) => Son Nguyen (ngson2000) -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1390833 Title: File attachments aren't copied when note is copied Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Bug description: reported by Stephen Bright on MyPortfolio: When you have a note (text box up to 1.10), file attachments are not copied when somebody else copies the page that contains the note. When you yourself copy it, the attachment is retained, but not when somebody else copies it. To reproduce: 1. Add a note to your page. 2. Add an attachment to the note. 3. Share the page with someone else and make it copyable. 4. Log in as that other person and copy the page. 5. The attachment is not on the page anymore. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1390833/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1388669] Re: Change lang strings in export queue
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1388669 Title: Change lang strings in export queue Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Bug description: Mahara 1.10+ On /admin/users/exportqueue.php the button to re-export failed exports is called "Archive" as that used to be the initial usage. Hwoever, now that it is also possible to put user Leap2A portfolios into the export queue that term is not correct anymore and will need to be changed. 1. Change the button text from "Archive" to "Export". 2. Change the column heading from "Export" to "Re-queue" as you can only re-queue items whose export has failed. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1388669/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1425306] Re: Users can delete submitted page through URL
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1425306 Title: Users can delete submitted page through URL Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Bug description: To reproduce: - Create a page - Submit it to a group - Check that there is no 'Delete' button on 'Pages' web-page for this page - Find out page ID (through page view URL) - Go to YOURSITE/view/delete.php?id=XXX where XXX is page ID - See that you can easily delete a page To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1425306/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1439194] Re: Notes and attached files
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1439194 Title: Notes and attached files Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: When I attach a file to a note on a page and then delete the file using the "content > files" panel, I can't edit the note via the "portfolio > pages" panel anymore. When I try to do it, I get : "Artefact with id XXX not found" (where XXX is the id of the recently deleted file). I can still however edit the note directly from "content > notes". The problem only occurs via "portfolio > pages > edit content and layout". Mahara version : 1.10.3testing (2014092315) Operating system : Linux Database : MariaDB To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1439194/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1440908] Re: Clicking 'more' in friend request is not working
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1440908 Title: Clicking 'more' in friend request is not working Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: After a friend request has been accepted, the notification is send and appears in my inbox. Clicking on 'More...' at the bottom of that message produces an 'Not found' error while it redirects using the following URL structure: http://mymahara.com/http://mymahara.com/user/view.php?id=2 To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1440908/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1415713] Re: Rewrite old view/artefact.php URLs to new artefact/artefact.php URLs
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1415713 Title: Rewrite old view/artefact.php URLs to new artefact/artefact.php URLs Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 15.04 series: Fix Released Bug description: In preparation for Bug 1298646, we refactored the view/artefact.php file into artefact/artefact.php This has the side effect that old URLs for individual artefact pages are now incorrect. This affects search engines and hard-coded links, as well as some third-party modules that haven't been properly updated. It's a simple matter to add a redirect script at the old location, pointing to the new location, so that these URLs will continue to function. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1415713/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1435750] Re: Google URLs changes
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1435750 Title: Google URLs changes Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Bug description: Google URLs changed again. I've only tested with a spreadsheet tonight, but others might be affected as well: This spreadsheet is shared through "Publish to the web" as the Google Apps block requires, but it only says "Unable to parse embedded code or URL" https://docs.google.com/spreadsheets/d/17YzSbbHd4kISimF9OLp6apbE_YHB-3QdG_V5VGPTn2Y/pubhtml To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1435750/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1367077] Re: Pagination in the page htdocs/group/report.php does not work
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released ** Changed in: mahara/1.10 Assignee: (unassigned) => Son Nguyen (ngson2000) -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1367077 Title: Pagination in the page htdocs/group/report.php does not work Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 15.04 series: Fix Released Bug description: Version: master (1.10) Platform, browser: any Steps to replicate: 1. Login as a group admin, enable the setting "Participation report" 2. Click the tab 'Report' you will see the list 'Pages owned by this group' The pagination of the list does not work To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1367077/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1443770] Re: "Content -> Files" accessibility links show up when attempting to drag and drop
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1443770 Title: "Content -> Files" accessibility links show up when attempting to drag and drop Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 15.04 series: Fix Released Status in Mahara 15.10 series: Fix Committed Bug description: In 1.9 for accessibility purposes we added a feature to the "Content -> Files" screen, which makes it so that if you click on a thumbnail of a file, it shows you a list of locations you could move the file to. This is an accessible alternative to the drag-and-drop system for moving your files to different folders. There are a couple of problems with this currently. First, the patch that we added to make it work in IE, has the side effect that in Firefox and Chromium, the accessible alternative shows up when you start dragging and dropping, as opposed to when you just click on it. Also, the thumbnail shifts up and away from the mouse pointer at the same time, meaning you need to click on it, it pops open, then you have to move your mouse back over the thumbnail's new location. To replicate: 1. Go to Content -> Files 2. Upload at least one file 3. Create a folder called "Test" 3. Move your mouse pointer over the thumbnail's icon and try to drag and drop the thumbnail icon onto the Test folder. Expected result: You drag it onto the Test folder and drop it onto the Test folder. You do not see the accessibility options. Actual result: When you depress the mouse button, the accessibility option shows up, and the thumbnail moves away out from under your pointer. Using git bisect, I see this started with this patch, for IE support: https://reviews.mahara.org/#/c/3521/1 To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1443770/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1400140] Re: Images are not accessible anymore in text areas
** Changed in: mahara Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1400140 Title: Images are not accessible anymore in text areas Status in Mahara ePortfolio: Fix Released Bug description: See https://mahara.org/interaction/forum/topic.php?id=6592 Prior to Mahara 1.10, it was possible to link to images in text boxes and they would appear (see https://mahara.org/partners for example). This is not possible anymore and a broken image appears no matter what permissions are set for the page. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1400140/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1190788] Re: Can cause arbitrary SWF files to execute in the browser
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1190788 Title: Can cause arbitrary SWF files to execute in the browser Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: Subject:Found Critical XSS Vulnerability on Your System Hello, I found a really critical XSS (Cross Site Scripting) vulnerability on mahara.org. The vulnerability works as follows: 1) I opened the demo account on Mahara and logged in the admin account by using the link "http://demo.mahara.org/";. 2) Then I clicked admin avatar picture to go to user details page. 3) After that I clicked "edit this page" button. 4) Then I dragged "File(s) to Download image to About me section of the page. 5) I created a .swf file that contains ActionScript codes. I also attached that file to this email. 6) I uploaded that XSS.swf file. 7) When I open XSS.swf file on browser, I saw the alert message showing SOLVER (my nickname) 8) Example script: http://demo.mahara.org/artefact/file/download.php?file=247 By using this XSS vulnerability, an attacker can steal Mahara users' cookies, and their accounts. Furthermore, the attacker can redirect users to a harmful website that contains trojan horse, malware or a JavaScript downloader to get full access on the users' computers. This issue can get bigger by using a XSS Worm, and influence even some other Mahara product users. As a simple solution, the content of the file that is about to be uploaded should be checked against harmful scripts and codes. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1190788/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1364170] Re: Parent auth fails due to mixed case checking
** Changed in: mahara/1.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1364170 Title: Parent auth fails due to mixed case checking Status in Mahara ePortfolio: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Committed Status in Mahara 1.9 series: Fix Committed Status in Mahara 15.04 series: Fix Released Bug description: Currently in the auth/user.php [around line 187] there is a query that is matching lower(username) against username At the very least it should be lower(u.username) against us.username however the whole sql query could be tidied up to function better. Normally, usernames are email addresses and are stored as lowecase strings - but sometimes you need a username that is not lowercase and so this check fails. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1364170/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
