Re: [pmwiki-users] A robust user registration module

2010-05-28 Thread Eemeli Aro
On 27 May 2010 17:16, Wordit Ltd wordi...@googlemail.com wrote:
 - The data does not have to be stored *before* verification because
 the data will be sent back when the user clicks the email link, and
 the key tells us if it's correct.

The way I see it, storing the new user data on first submission is a
relatively easy task, no matter what background storage system is
used. As a minimum, each of those will need to store the password hash
somewhere, and it's easy to corrupt it by combining it with the key
(in an identifiable reversible manner, of course).

There are at least three benefits from storing the data, as opposed to
passing it through the authentication link:

1) Query parameters will get stored into browser histories and other
places; we'll be leaking personal information jsut for our own minor
convenience

2) Authentication links get significantly longer, which may produce
more copy-paste errors, especially if an e-mail client breaks the link
to multiple lines

3) There's a secret that is potentially discoverable and would allow
bypassing the authentication. Minor risk (salted MD5 hash...) and with
little reward, but still...

 - This also works for email subscription only sign-ups to newsletters
 or Notify, for users without accounts. It should not require a
 username and password.

For using PmWiki data as a back-end to a newsletter or mailing list,
I'd recommend Enemies of Carlotta
http://liw.iki.fi/liw/eoc/index.html. It's no longer maintained, but
the latest version seems stable. The reason I recommend it is that it
has very few external requirements, and its back-end is completely
flat-file. This means that it's been relatively simple to write a
function for $EditFunctions that uses a pagelist to get the e-mail
addresses, and writes the changes to the EoC subscriber lists.

If someone's interested, I can publish the code, but I figured it's a
bit too arcane for general use. I'm also using MHonArc
http://www.mhonarc.org/ to convert the list archives to HTML, and
yet more custom code to make that accessible from within PmWiki
(including attachments, which TBH I was surprised would work).

eemeli

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


[pmwiki-users] pmwiki.org web server instability

2010-05-28 Thread Eemeli Aro
For the last week or so (hard to say exactly) I've seen brief periods
when pmwiki.org and pmichaud.com have been refusing connections on
port 80. SVN has still worked, mind. Anyone else experienced the same,
or is it just me?

eemeli

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] pmwiki.org web server instability

2010-05-28 Thread Francesco Sblendorio
me too

2010/5/28 Eemeli Aro eem...@gmail.com

 For the last week or so (hard to say exactly) I've seen brief periods
 when pmwiki.org and pmichaud.com have been refusing connections on
 port 80. SVN has still worked, mind. Anyone else experienced the same,
 or is it just me?

 eemeli

 ___
 pmwiki-users mailing list
 pmwiki-users@pmichaud.com
 http://www.pmichaud.com/mailman/listinfo/pmwiki-users




-- 
Francesco Sblendorio
http://fsblendorio.blogspot.com
http://www.sblendorio.eu
___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


[pmwiki-users] Problem with PTV in Pagelists

2010-05-28 Thread Ian Barton
I have just upgraded my PmWiki to the latest stable 2.2.16 from a 
previous 2.x version. I am now having a problem using page text 
variables in page lists. I am presuming that this is caused by a change 
in behavior, but can't work out how to fix it.


My page list looks like this:

(:pagelist group=Calendar if=date {(ftime %Y%m%d)}.. {=$Name} count=5 
fmt=#calendar order=name -Calendar.HomePage -RecentChanges:)


the format command looks like:

[[#calendar]]
||'''[[{=$FullName}| {=$JournalDateTitle}]]'''||

(:include {=$FullName} lines=2:)

(:if ! equal {$Group}:)
-
(:if:)
[[#calendarend]]

The pagelist displays the next five events in the Calendar group. The 
problem is with $JournalDateTitle. This splits the filename from 
Calendar.201005028 into a more human readable format. It displays 
correctly when I use it on a page in the calendar group, but not 
displayed in a side bar on the front page. This worked OK with the 
previous version of PmWiki that I had installed.


You can see the site at: http://www.dodcott.org/wiki/

Ian.

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] pmwiki.org web server instability

2010-05-28 Thread Peter Bowers
On Fri, May 28, 2010 at 12:43 PM, Eemeli Aro eem...@gmail.com wrote:
 For the last week or so (hard to say exactly) I've seen brief periods
 when pmwiki.org and pmichaud.com have been refusing connections on
 port 80.

I've been running into the same thing.

-Peter

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] Problem with PTV in Pagelists

2010-05-28 Thread Eemeli Aro
On 28 May 2010 14:37, Ian Barton li...@manor-farm.org wrote:
 The pagelist displays the next five events in the Calendar group. The
 problem is with $JournalDateTitle. This splits the filename from
 Calendar.201005028 into a more human readable format. It displays correctly
 when I use it on a page in the calendar group, but not displayed in a side
 bar on the front page. This worked OK with the previous version of PmWiki
 that I had installed.

Where's $JournalDateTitle coming from? Is it some custom code that's
generating it, as it doesn't appear on the page sources?

I'd recommend instead using the standard MarkupExpression ftime:

{(ftime fmt=%A, %B %d, %Y when='{=$Name}')}

instead of {=$JournalDateTitle}.

eemeli

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] position:relative in divs but the negative valuesdisappear

2010-05-28 Thread vinc...@vizway.se

Thank you Petko

Yes, you have right, I have localized it to MarkupExtension.
Now I have disabled it.

Thank for your tips.
Vincent



Den 2010-05-27 09:01:42 skrev Petko Yotov 5...@5ko.fr:


On Thursday 27 May 2010 01:53:19, vinc...@vizway.se wrote :

top:minus;17;
do not work.

Do someone have a solotion?


Hello. That is not something done by PmWiki but very probably by the recipe
MarkupExtensions http://www.pmwiki.org/wiki/Cookbook/MarkupExtensions .

To fix this specific bug without disabling the full recipe, place in
config.php, before including the recipe, such a line :

  DisableMarkup(-d);

Petko




--
Använder Operas banbrytande e-postklient: http://www.opera.com/mail/


Må gott
**Vincent

+46 70 727 88 66




___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] A robust user registration module

2010-05-28 Thread Wordit Ltd
On Fri, May 28, 2010 at 12:35 PM, Eemeli Aro eem...@gmail.com wrote:

 There are at least three benefits from storing the data, as opposed to 
 passing it through the authentication link...


There certainly are benefits, and I did use a temp sign-up storage
file myself. I was just suggesting a solution with less work since
initially everybody said they had little to no time to work on this
recipe.

There are other benefits to storing sign-up data, which I also used.
Store the IP and you can limit attempts to crack the secret. Store the
date to have the link expire, etc.


 For using PmWiki data as a back-end to a newsletter or mailing list, I'd 
 recommend Enemies of Carlotta:


I was thinking of Notify/FoxNotify, and other pmwiki based mailing recipes.

Eemeli, you already have the mechanisms in your new AuthUserProfiles
recipe proposal. Why not have an email-only option, stored in a
separate place for these purposes?

e.g. SiteAdmin.VerifiedAddresses, or whatever, which other recipes can
access. Unsubscribing can use the same mechanism as the
subscription/sign-up process.


Marcus

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] A robust user registration module

2010-05-28 Thread Eemeli Aro
On 28 May 2010 15:24, Wordit Ltd wordi...@googlemail.com wrote:
 Eemeli, you already have the mechanisms in your new AuthUserProfiles
 recipe proposal. Why not have an email-only option, stored in a
 separate place for these purposes?

 e.g. SiteAdmin.VerifiedAddresses, or whatever, which other recipes can
 access. Unsubscribing can use the same mechanism as the
 subscription/sign-up process.

I'm working on the next version of that just now, a rather heavy-duty
refactoring of the code to make it more generic, separating the
back-end storage solution from the rest of the code. I'll publish a
new version once it's got at least the features that the current
AuthUserProfiles has.

eemeli

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] Problem with PTV in Pagelists

2010-05-28 Thread Ian Barton

On 28/05/10 12:56, Eemeli Aro wrote:
 On 28 May 2010 14:37, Ian Bartonli...@manor-farm.org  wrote:
 The pagelist displays the next five events in the Calendar group. The
 problem is with $JournalDateTitle. This splits the filename from
 Calendar.201005028 into a more human readable format. It displays 
correctly
 when I use it on a page in the calendar group, but not displayed in 
a side
 bar on the front page. This worked OK with the previous version of 
PmWiki

 that I had installed.

 Where's $JournalDateTitle coming from? Is it some custom code that's
 generating it, as it doesn't appear on the page sources?

 I'd recommend instead using the standard MarkupExpression ftime:

 {(ftime fmt=%A, %B %d, %Y when='{=$Name}')}

 instead of {=$JournalDateTitle}.

It's a custom function (see end of message). It's designed to return a 
human readable date from the Page name e.g. News.20100527 would give 
Thursday, 27 May 2010.


If you look at http://www.dodcott-cum-wilkesley.co.uk/wiki/News/20100527 
you can see that it works in the base page, but not when used in a pagelist.


I don't normally write php and it's been a couple of years since I set 
up this site. As it's always worked OK before the latest upgrade, my 
memory of why I did it that way is a bit rusty:)


{(ftime fmt=%A, %B %d, %Y when='{=$Name}')} doesn't appear to work, 
see the page referenced above for the output.


Thanks for your help.


# Title that appears as at the top of each entry.
$FmtPV['$JournalDateTitle'] = 'TitleToDate2($pagename)'

function TitleToDate2($pagename) {
$tname = 
preg_replace(/[^.]*\.([\d\-]*)(.*)/e,'$1'==''?'$2':'$1',$pagename);

preg_match(/([\d]*)[-]?([\d]*)[-]?([\d]*)/e,$tname,$m);

$year = (integer) substr($tname, 0, 4);
$month = (integer) substr($tname, 4, 2);
$day = (integer) substr($tname, 6, 2);

   $tdate=  mktime(0, 0, 0, $month, $day, $year);


$bmonth = strftime(%A, %d %B %Y,$tdate);
return $bmonth;
}

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] Problem with PTV in Pagelists

2010-05-28 Thread Eemeli Aro
On 28 May 2010 16:32, Ian Barton li...@manor-farm.org wrote:
 {(ftime fmt=%A, %B %d, %Y when='{=$Name}')} doesn't appear to work, see
 the page referenced above for the output.

On the page itself, you need to use {$Name} or {*$Name}.

{=$Name} is required in the pagelist template to refer to the name of
page being listed at the moment.

eemeli

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] Problem with PTV in Pagelists

2010-05-28 Thread Ian Barton

On 28/05/10 14:43, Eemeli Aro wrote:

On 28 May 2010 16:32, Ian Bartonli...@manor-farm.org  wrote:

{(ftime fmt=%A, %B %d, %Y when='{=$Name}')} doesn't appear to work, see
the page referenced above for the output.


On the page itself, you need to use {$Name} or {*$Name}.

{=$Name} is required in the pagelist template to refer to the name of
page being listed at the moment.

eemeli


Thank you. Page list now working!

Ian.

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] pmwiki.org web server instability

2010-05-28 Thread DaveG
Same -- large number of timeouts, usually lasting around 5-10 minutes. 
Several per day, over the last 10 days or so.



On 5/28/2010 6:43 AM, Eemeli Aro wrote:

For the last week or so (hard to say exactly) I've seen brief periods
when pmwiki.org and pmichaud.com have been refusing connections on
port 80. SVN has still worked, mind. Anyone else experienced the same,
or is it just me?

eemeli

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users




Internal Virus Database is out of date.
Checked by AVG - www.avg.com
Version: 9.0.733 / Virus Database: 271.1.1/2703 - Release Date: 02/22/10 
03:34:00



___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] A robust user registration module

2010-05-28 Thread DaveG



On 5/28/2010 6:35 AM, Eemeli Aro wrote:

On 27 May 2010 17:16, Wordit Ltdwordi...@googlemail.com  wrote:

- The data does not have to be stored *before* verification because
the data will be sent back when the user clicks the email link, and
the key tells us if it's correct.


The way I see it, storing the new user data on first submission is a
relatively easy task, no matter what background storage system is
used.
We'd need some way to manage the likely spam signups. Perhaps placing 
the 'pending verification' data in a separate page would suffice.


 ~ ~ Dave

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


[pmwiki-users] permission weirdness!!

2010-05-28 Thread Roc
Last week i created a page on my wiki and since it was a test i set a
view password.
Ever since i did that, i have been experiencing all sorts of trouble.
First with that page, but even after deleting it, it happens with
every new page i create. As soon as i enter text into it and save it,
i get a white page saying:

Forbidden

You don't have permission to access
/XX/X/pmwiki/pmwiki.php/Main/X on this server.

i have NOT changed the passwords in config.php
i have tried resetting the 3 page passwords with ?action=attr but i
still get the same
what am i missing?
i am going insane!

THANKS!

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


[pmwiki-users] Question on Tagger recipe

2010-05-28 Thread Francesco Sblendorio
Hi.
I need to classify two different group of pages that can have tags with same
name, but different context.

So I imported tagged recipe (http://www.pmwiki.org/wiki/Cookbook/Tagger),
read the documentation and defined two group of categories in config.php:

$TaggerGroups['Autore']='Autore';
$TaggerGroups['Conferenza']='Conferenza';
include_once($FarmD/cookbook/tagger.php);

Well, I included at the end of a page, the tags:

Autore:Valerio
Conferenza:Astronomia

and then... I don't know how to query these categories. I can't find in the
documentation how to get a list of all pages with the tag
Conferenza/Astronomia.

How can I do it?

Thanks in advance,
Francesco


-- 
Francesco Sblendorio
http://fsblendorio.blogspot.com
http://www.sblendorio.eu
___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] A robust user registration module

2010-05-28 Thread Simon
Using captcha http://www.pmwiki.org/wiki/Cookbook/TextCaptchaor textcaptcha
http://www.pmwiki.org/wiki/Cookbook/TextCaptchamay be helpful here

On 29 May 2010 02:48, DaveG pmw...@solidgone.com wrote:



 On 5/28/2010 6:35 AM, Eemeli Aro wrote:

 On 27 May 2010 17:16, Wordit Ltdwordi...@googlemail.com  wrote:

 - The data does not have to be stored *before* verification because
 the data will be sent back when the user clicks the email link, and
 the key tells us if it's correct.


 The way I see it, storing the new user data on first submission is a
 relatively easy task, no matter what background storage system is
 used.

 We'd need some way to manage the likely spam signups. Perhaps placing the
 'pending verification' data in a separate page would suffice.

  ~ ~ Dave
___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] pmwiki.org web server instability

2010-05-28 Thread Chris Cox
On Fri, 2010-05-28 at 13:50 +0200, Peter Bowers wrote:
 On Fri, May 28, 2010 at 12:43 PM, Eemeli Aro eem...@gmail.com wrote:
  For the last week or so (hard to say exactly) I've seen brief periods
  when pmwiki.org and pmichaud.com have been refusing connections on
  port 80.
 
 I've been running into the same thing.

Cursory look at the server... I'm not seeing anything right now.



___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] pmwiki.org web server instability

2010-05-28 Thread DaveG


On 5/28/2010 5:09 PM, Chris Cox wrote:

I've been running into the same thing.


Cursory look at the server... I'm not seeing anything right now.

Same problem, right now.


 ~ ~ Dave

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] pmwiki.org web server instability

2010-05-28 Thread Chris Cox
On Fri, 2010-05-28 at 17:15 -0400, DaveG wrote:
 On 5/28/2010 5:09 PM, Chris Cox wrote:
  I've been running into the same thing.
 
  Cursory look at the server... I'm not seeing anything right now.
 Same problem, right now.

IMHO, it's not a problem related to the server itself.

I don't admin the box, just have a login.
It's a shared box.

Both CPUs show 78%+ idle... lots of free memory...
I'm just not seeing much of anything.  Maybe when the
smtp wakes up to handle mail... perhaps something happens
then but it's not obvious to me that is causing
any problem.




___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] pmwiki.org web server instability

2010-05-28 Thread Chris Cox
scrap what I said about idle... it is under some load (httpd's).



___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users


Re: [pmwiki-users] pmwiki.org web server instability

2010-05-28 Thread Patrick R. Michaud
On Fri, May 28, 2010 at 10:46:20AM -0400, DaveG wrote:
 Same -- large number of timeouts, usually lasting around 5-10
 minutes. Several per day, over the last 10 days or so.

The virtual private server (VPS) software that pmwiki.org is under
watches memory usage, and when it exceeds a certain threshhold limit 
(burst mode) the controller starts killing off processes somewhat randomly
to bring total memory usage back under the limit.  Other processes
run from time to time to bring key services (such as the webserver)
back online if they were killed.

I've never been able to determine exactly what causes the server to
hit the limits.  I know that some of the automated cpanel updates
and system maintenance utilities often cause the memory limit
to be exceeded (which I find frankly annoying, since I don't have
much control over those).

Also, if pmwiki.org (or the other sites I host on the VPS) gets 
flooded with a lot of HTTP requests (e.g. from poorly-behaved spiders) 
then memory usage can go up dramatically as well.  This is especially
true if those requests are for things like pagelists and search
results that require a lot of memory to generate.

I just checked with my service provider, and they apparently have
new hosting packages that eliminate the burst mode problem and are 
also $30/mo *cheaper* than what I currently have.  So, the solution 
looks to me like I should migrate pmwiki.org and my other sites
to a new server package, and this should resolve a lot of our 
service issues.  (It would also upgrade me to later versions
of the OS and control panels and give me a good reason to clean
up many things on the overall system, which should increase 
security and performance a fair bit.)

I'll work on that over the next few days.

Pm

___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users