[Mahara-contributors] [Bug 823789] Re: SecretURL link not intuitive to add in 1.4

2011-09-06 Thread Melissa Draper
https://reviews.mahara.org/#change,653 adds some info/help text and and a link back. ** Changed in: mahara Status: Triaged => In Progress ** Changed in: mahara Assignee: (unassigned) => Melissa Draper (melissa) -- You received this bug notification because you are a member of Mahara

[Mahara-contributors] [Bug 843588] [NEW] Google spreadsheet can't be embedded

2011-09-06 Thread Kristina Hoeppner
Public bug reported: It seems like that Google spreadsheets can't be embedded anymore. I think to remember that it worked just a short while ago, but not anymore. Another user has remarked on this on the download page of the plugin for Mahara 1.3 as well (http://mahara.org/view/view.php?id=11634).

[Mahara-contributors] [Bug 786739] Re: Add CPD to Mahara core

2011-09-06 Thread François Marier
** Changed in: mahara Milestone: 1.5.0 => None -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. https://bugs.launchpad.net/bugs/786739 Title: Add CPD to Mahara core Status in Mahara ePortfolio: Confirmed Bug descripti

[Mahara-contributors] [Bug 843568] [NEW] Stored passwords with a stronger hash algorithm

2011-09-06 Thread François Marier
Public bug reported: MD5 is broken, we should switch to something better. Ideally, we should use PHP 5.3.2's crypt() function (http://nz.php.net/manual/en/function.crypt.php) with the CRYPT_BLOWFISH algorithm. Not sure what cost parameter we should use, but ideally a large number (we should do te

[Mahara-contributors] [Bug 843573] [NEW] Enable secure cookies is wwwroot is set to HTTPS

2011-09-06 Thread François Marier
Public bug reported: To further increase our protection against https-to-http downgrades, we should only set Secure Cookies (the ones that browsers will only send over HTTPS) when the wwwroot points to https or when a ssl proxy is enabled. ** Affects: mahara Importance: Medium Statu

[Mahara-contributors] [Bug 843561] [NEW] Temporarily lock accounts after too many bad passwords

2011-09-06 Thread François Marier
Public bug reported: To deter brute-forcing of passwords (and prevent ensuing DoS attacks), we should temporarily lock accounts once they've had too many (4? 5?) bad passwords. Considerations: - This should be as fast as possible and ideally not use extra queries. In a DoS setting, we want brute

[Mahara-contributors] [Bug 547469] Re: password is too complex for younger people

2011-09-06 Thread François Marier
I agree with Nigel and others on this. Let's stop pretending that password policies make people use good passwords. ** Changed in: mahara Milestone: None => 1.5.0 ** Tags added: password -- You received this bug notification because you are a member of Mahara Contributors, which is subscrib

[Mahara-contributors] [Bug 676727] Re: Posting on my wall throws errors

2011-09-06 Thread Melissa Draper
** Changed in: mahara/1.5 Assignee: (unassigned) => Melissa Draper (melissa) ** Changed in: mahara/1.5 Status: Confirmed => In Progress -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. https://bugs.launchpad.net/bug

[Mahara-contributors] [Bug 820182] Re: Mulitple blogs not enabled when creating new blog during view copying

2011-09-06 Thread Melissa Draper
** Changed in: mahara Assignee: (unassigned) => Melissa Draper (melissa) ** Changed in: mahara Status: Confirmed => Triaged ** Changed in: mahara Status: Triaged => In Progress -- You received this bug notification because you are a member of Mahara Contributors, which is sub

[Mahara-contributors] [Bug 826453] Re: Code to delete session id on logout is not triggered

2011-09-06 Thread Eugene
** Changed in: mahara Assignee: (unassigned) => Eugene (eugenev) -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. https://bugs.launchpad.net/bugs/826453 Title: Code to delete session id on logout is not triggered Status

[Mahara-contributors] [Bug 825595] Re: List your friends on the "Share page" for being able to select them more easily

2011-09-06 Thread Eugene
** Changed in: mahara Assignee: (unassigned) => Eugene (eugenev) -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. https://bugs.launchpad.net/bugs/825595 Title: List your friends on the "Share page" for being able to sele

[Mahara-contributors] [Bug 819396] Re: Add unit testing to Mahara

2011-09-06 Thread Andrew Nicols
Submitted for review. The actual framework is in https://reviews.mahara.org/#change,647 Some sample tests are in https://reviews.mahara.org/#change,648 Francois: No problem with doing this what-so-ever having thought about it more. ** Changed in: mahara Status: Confirmed => In Progress --

[Mahara-contributors] [Bug 819396] Re: Add unit testing to Mahara

2011-09-06 Thread Andrew Nicols
This bug also requires inclusion of: Bug #841708 Bug #841694 Bug #841723 Bug #841711 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. https://bugs.launchpad.net/bugs/819396 Title: Add unit testing to Mahara Status in Mahara

[Mahara-contributors] [Bug 676727] Re: Posting on my wall throws errors

2011-09-06 Thread Ruslan Kabalin
> I think commit 6415c6bf56 broke it. Yeah, feel free to revert it. I am not sure why I removed it on the first instance, probably for cosmetic reason. -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. https://bugs.launchpad.net