Category: 1.9.x

When enabled feature_search it is possible for
Anonymous user to read protected pages via
special search request

Just try "a" or any other word that is in hidden
or protected area in search box - tiki-
searchresults.php give U text from hidden
pages

from tiki-searchresults.php



http://tikiwiki.org/tiki-view_forum_thread.php?
topics_offset=0&forumId=4&comments_parentI
d=16071

Assigned permissions:
tiki_p_forums_report(x)
tiki_p_forum_post(x)
tiki_p_forum_post_topic(x)
tiki_p_forum_read(x)
tiki_p_forum_vote(x)
tiki_p_view(x)
tiki_p_wiki_view_comments(x)
tiki_p_wiki_view_history(x)
to anonymous. but they cannot reply in forum. No error message.

If you post a message to the forum you can enabling e-mail notification.

Assume, you have the following message:
* my Message (watched)

Now you get an answer:
* my Message (watched)
* answer

A notification is sent about "answer", because the thread is watched.
now you receive a second answer, to the answer before
* my Mesage (watched)
* answer
** sub answer

You won't get a notification about "sub answer".

When logging into my site under various accounts the Apache web server intermittently crashes with the following error in the error log:

[Thu Oct 26 00:20:05 2006] [notice] Parent: child process exited with status 3221225477 -- Restarting.
[Thu Oct 26 00:20:05 2006] [notice] Apache/2.0.59 (Win32) SVN/1.3.1 PHP/5.1.6 DAV/2 configured -- resuming normal operations

I have not made any modifications to the TikiWiki code (1.9.6) or changes to my server configuration. Everything was working normally for several months before the error started to appear.

I am able to force a similar crash to occur every time throught the Community -> User List feature (tiki-list_users.tpl). I debugged the template code and found that userlink in the following caused the crash:

{section name=changes loop=$listusers}
<tr>
<td class="odd"> {$listusers[changes].login|userlink} </td>
<td class="odd"> {$listusers[changes].realName} </td>
{if $feature_score eq 'y'}

Any help?

-Anthony

When using the "_htaccess" files in Tikiwiki 1.9.5 you get an "Regex could not be compiled" access error in some of the directories when using Apache 2.2.
The Problem occurs, if the statement <FilesMatch "*"> is in the .htaccess file.

Using mod_rewrite to direct tiki-index.php?page=.... to kb/pageName breaks template. I think other things might break too. I can't think of anyway to fix this but to scan the code for dependencies on code that reads the URL? Any ideas?

Articles dissapear from view when author is no longer a member.
Message displayed: Articla could not be found.

Everything reappears when username is re-created...

"Loss" of content or messy userbase=major bug

i have a problem with categorization.
when i add a new article. an old article in the tiki_categorized_objects got overwritten.
the objid and the href gets the new article id.
the result is that the old article losses its cat and the new article has the both.

when i take out the update in the method:
approve_submission
all is fine again:

catelib.php:

function approve_submission($subId, $articleId) {
$query = "update `tiki_categorized_objects` set `type`= ?, `objId`= ?, `href`=? where `objId` = ?";
//$this->query($query, array('article', (int)$articleId, "tiki-read_article.php?articleId=$articleId", (int)$subId));
}

what i find strange is the $subid at the end.

i'm not sure what the method is for. probably i broke something else.

i must add. i added a the category right in the database.
i added the articles by hand to the tiki_categorzed_objects
and added the category by using the topics from the article's.

When you choose "home Page" on left menu, and you have configured articles like your home, you are not redirected correctly.


I don't have a developer account to CVS. I'm working on 1.9 cvs.
rogeliotg

To filter articles by language:
{CODE()}
{ARTICLES(lang=>)}{ARTICLES}
{CODE}


Using the nifty lang & notlang as below gives more flexibility:
{CODE()}
{LANG([not]lang=>code[+code+...])}text{LANG
{CODE}

When I post an article on Tiki with a future publication date, the regular interface correctly keeps it from being visible, but the mobile mode lets it pass through. Is the mobile interface not checking the publication date?

This happens on my 1.9.1 and 1.9.2 install.

When I post an article on Tiki with a future publication date, the regular interface correctly keeps it from being visible, but the mobile mode lets it pass through. Is the mobile interface not checking the publication date?

This happens on my 1.9.1 and 1.9.2 install.

Seems like it's only this way, when logged in as admin.

Some routine to link a tracker to an Image Gallery, making a tracker of every image gallery, adding an item to the tracker for each item in the ig, etc, would seriously enhance the functionality in the image galleries feature. Image Galleries do handle right the image files (tif support would be nice, though). However, it is near to useless to classify the images themselves, the "categories" feature being of very little use, for example, to have a catalogue of paintings with artist's names, titles, dates, etc. Having some linking code written, it would be easy to use the images through the tracker feature, leaving the handling of the image files to the gallery.

See video:

{FLASH(movie="tiki-download_item_attachment.php?attId=62",width=>876,height=>677,quality=>high)}{FLASH}

I understand the option
"Authoritative status for modified items"
like that: When you modify a tracker item, then its status gets set to your selection. Probably best way to do, would be to just set the desired status in the edit field.

Well, nothing happens.

I'd like to see some sort of an "autosave". That way when you're engaged in editing a really lengthy page, it will save itself periodically. For those of us that have flaky internet connections, this would be a huge boon. My edits wouldn't necessarily be lost if my internet connection goes pouf for a few minutes.

CVS Head (code name Tiki 1.10) has some goodies.

((tw:ReleaseProcess110))


Many of which we could backport to 1.9.x without much risk.

ex/:

#Multiple wiki pages can be added to or removed from multiple categories at the same time (terence) __done__
#Batch wiki page renaming (terence) - __that doesn't make much sense to me and I can't find it in HEAD... perhaps you mean remove?__
#New permission tiki_p_view_wiki_history to control access to wiki page histories (terence) __done__
#More intelligent rendering of the wiki page bar so unnecessary tab buttons are not displayed (terence) - __should be done__
#IP addresses can be hidden in wiki history (sylvie) - __done__


Terence has indicated he won't have time to do this this week-end. We are looking for volunteers.

We promise to be able to run Tiki with PHP > 4.1 - never the less we use several functions, that are not available in some of these PHP-versions. Some of these issues have been fixed, the following is an excerpt of the PHP4-changelog: http://www.php.net/ChangeLog-4.php

I hope to list all the relevant stuff here. The following list doesn't include all the possible breakages - but most of them. For the complete list, visit the PHP-changelog.

__Check, if we utilize any of this:__
* Added the %F modifier to *printf to render a non-locale-aware representation of a float with the . as decimal separator.
* NSAPI: added "bucket" parameter to list of non-php.ini-keys of php4_execute for doing performance stats without warnings in server-log.
* Improved the sybase_ct module: (Timm)
** Added ability to define a message handler not only globally, but also per connection.
** Added "sybct.packet_size" php.ini option.
** Changed "sybct.login_timeout" php.ini option changeable at runtime.
* Improved the NSAPI SAPI module (Uwe Schindler)
** Added support for virtual().
** Added nsapi_request_headers() and nsapi_response_headers() with aliases for apache compatibility.
** Added possibility to use PHP to generate HTTP error pages (404 Not Found..)
** Added possibility to use PHP to generate directory listings for directories without index.html
* Added a new parameter to preg_match*() that can be used to specify the starting offset in the subject string to match from. (Andrei)
* Added imagesavealpha() and imageistruecolor() functions. (Pierre)
* Added session_regenerate_id() function. (Sascha)
* Added zlib_get_coding_type() function which returns the coding type used for output compression. (Moriyoshi)
* Added OCIPasswordChange() which allows renewing expired Oracle users. (Maxim)
* Added memory_get_usage(). Only available when PHP is configured with --enable-memory-limit. (Andrey)
* Added KOI8-R, CP866, and CP1251 support for htmlentities(). (Antony Dovgal, Moriyoshi)
* Added domdocument->free() to free XML-documents from memory. (Rob Richards)
* Added gd_info() which returns an array of gd support information. (Marcus)
* Added a new function sybase_unbuffered_query()
* Added a new function sybase_fetch_assoc()
* Added sybase_set_message_handler() which enables users to handle server messages in a callback function
* Added an aditional parameter to the jdtojewish() function which makes the function return the symbolic hebrew name. (Moshe Doron, Derick)
* Added dba_handlers() that returns an array of installed handlers and dba_list() that returns an associative array of open database files
* Added imagerotate() which is available only when bundled libgd is used. (Pierre-Alain Joye, Ilia)
* Added optional skip parameter to dba_fetch() to support multiple key-value pairs with the same key for cdb handler.
* Remove $_FILES from $_REQUEST (import_request_variables is not modified), this didn't work properly in the first place, and added confusion. (Sterling)
* Added dbx_escape_string() function to dbx module. (Marc)
* Added mb_strtolower() and mb_strtoupper(). (Moriyoshi)
* Added fribidi_get_charsets() and fribidi_charset_info() functions. (Tal)
* Added str_word_count() function which counts words inside a string. (Ilia)
* Added PGSQL_CONNECT_FORCE_NEW option to pg_connect() (Yasuo)
* (Added %e & %E support to printf/sprintf). (Ilia)
* Added mb_regex_set_options(). The Options parameters of various mbregex functions are now deprecated. (Moriyoshi)
* Added xslt_set_object and xslt_setopt function
* Made xslt_make_array() always set NULL on last index to signal array end.
* Added ob_get_clean() and ob_get_flush(). (Yasuo)
* Added ftp_ssl_connect() to ext/ftp for FTP over SSL support. (Stefan Esser)
* Added apache_response_headers(), apache_note(), apache_getenv() and apache_setenv() functions.
* Renamed getallheaders() to apache_request_headers() and made an alias for BC.
* Added php_apache_sapi_getenv() and php_apache_sapi_get_stat().
* Added array_diff_assoc() and array_intersect_assoc(). (Andrey)
* Added pg_fetch_assoc(), pg_fetch_all(), pg_ping(), pg_meta_data(), pg_convert(), pg_insert(), pg_select(), pg_update(), pg_delete(), pg_result_seek(), pg_unescape_bytea(), pg_get_notify() and pg_get_pid(). (Yasuo)
* socket_set_timeout() -> stream_set_timeout()
* socket_set_blocking() -> stream_set_blocking()
* set_file_buffer() -> stream_set_write_buffer()
* socket_get_status() -> stream_get_meta_data()
* Added stream_context_create(), stream_context_set_params() and stream_context_set_option and added an optional fourth parameter to fopen() which accepts a stream context. Contexts allow sharing of information between streams (a kind of "session") and setting notification callbacks. (Wez)
* Added stream_filter_prepend() and stream_filter_append() which apply a filter to either the top or the bottom of a stream filter stack. Implemented "string.rot13" filter as an example; more filters are expected to follow in later releases and other extensions. (Wez)
* Added stream_select() which works like socket_select but works on streams returned by fopen(), fsockopen() and pfsockopen() instead. (Wez)
* Added STDIN, STDOUT and STDERR constants for CLI sapi reflecting opened streams to their respective standard I/O counterparts. (Edin)
* Added file_get_contents() which returns the contents of a file as a string. This function also supports the URL wrappers. (Wez)
* Added mb_convert_case() function to the mbstring extension which can convert strings between upper, lower and title case using Unicode mappings. Fixed bug #19257 (strtolower & strtoupper does not work for UTF-8 strings). (Wez)
* Added ability to use Perl-style ${n} subpattern references in the replacement string for preg_replace() (bug #18442). (Andrei)
* Added ability to extract() variables as references via OR'able EXTR_REFS flag. (Andrei)
* Added XsltObject-<result_dump_mem($result) for returning xslt-result directly into a string and XsltObject-<result_dump_file($result,$file[,$compression]) for dumping into a file. (morus.walter@web.de, chregu)
* Added xslt_backend_version() and xslt_backend_name() for getting information about the processor backend. (chregu)
* Added ImageColorMatch() and ImageLayerEffect() functions which are only available when using the bundled GD library. (ttoohey)
* Added DomNode->set_namespace(uri[,prefix]) (chregu)
* Added some namespace support with DomNode->add_namespace(uri, prefix) and DomDocument->create_element_ns(uri, nodename) (chregu)
* Added optional parameter to DomElement->node_name() for retrieving fully qualified name (ie. namespace prefix). (chregu)
* Added ob_list_handlers() which returns an array of all active output handlers. (Marcus)
* Added mbstring encoding/decoding "HTML-ENTITIES". (Marcus)
* Added parameter 'L' for mb_http_input() to retrieve input encoding as a comma separated string. (Marcus)
* Added optional 5th parameter to FTP functions to support resuming. (Stefan)
* Added optional 2nd parameter to print_r() to make it return the variable representation instead of echoing it. (Derick)
* Added mysql_ping(), mysql_real_escape_string(), mysql_character_set_name(), mysql_thread_id(), mysql_stat() and mysql_list_processes(). (Zak, Georg)
* Added safe_mode & open_basedir checks for pg_lo_export(). (Yasuo)
* Added open_basedir check for pg_lo_import(). (Yasuo)
* Added optional parameter "flags" to mysql_connect() and mysql_pconnect() which can be used to set usage of idle timeout and different protocols, SSL and compressed. (Georg)
* Added domxml_node_namespace_uri(). (Rui Lopes)
* Added optional 3rd parameter 'recursive' to ftp_rawlist() which will do 'LIST -R' instead of 'LIST'. (Jani)
* Added an optional parameter to the header() function which overrides the HTTP response code. (Derick)
* Added new constants: PHP_PREFIX and PHP_SHLIB_SUFFIX. (Stig)
* Added pctnl_alarm() function. (Edin)
* Renamed getallheaders() to apache_request_headers() and kept getallheaders() as an alias to it. Also added apache_response_headers() which returns the current response headers from Apache. (Rasmus)
* Added ability to capture string offsets in preg_split() results. (David Brown, Andrei)
* Added experimental support for Simplified Chinese, Traditional Chinese and Korean encodings into mbstring. (Rui)
* Added optional 5th parameter to domxml_xslt_process(). When set, profiling information is saved to the specified file. (chregu)
* Added MD5 support for crypt() on Windows. (Edin)
* Added output_add_rewrite_var() and output_remove_rewrite_var() to inject and remove variables from the URL-Rewriter. (Thies)
* Added large OID value (2^31 to 2^32) support for pg_lo_import(), pg_lo_unlink(), pg_lo_open() and pg_lo_export(). (Yasuo)
* Added __FUNCTION__ and __CLASS__ constants. (Jani, Zend Engine)
* Added optional 2nd parameter for pg_result_status() to specify return type. (Yasuo)
* Added mysql_info() function. (Jan)
* Added mysql_list_processes() and mysql_stat() functions. (Georg)
* Added exif_imagetype() function. (Marcus)
* Added domxml functions:
** domxml_elem_get_elements_by_tagname()
** domxml_doc_get_elements_by_tagname()
** domxml_doc_get_element_by_id()
** domxml_elem_remove_attribute()
** domxml_elem_get_attribute_node()
* Added formatting option to domxml_dump_mem().
(Uwe, jtate, Chregu)
* Added automatic host lookup capability to all functions that take addr's. example: socket_connect($sock, 'www.yahoo.com', 80);
* Added socket_set_block() which changes a socket into blocking IO mode
* Added socket_clear_error() which clears the last error on a socket
* Added optional 3rd parameter "int encoding_mode" to gzencode() and fixed parameters to conform documentation. (Stefan)
* Added exif_tagname() function which returns the names of tags and exif_thumbnail() function to extract embedded thumbnails. (Marcus)
* Added posix_errno() and posix_strerror() for fetching error messages
* Added safe_mode checks for opendir(). (jflemer)
* Added PHP_SAPI constant which contains the name of running SAPI. (Edin)
* Added ob_get_status() which returns an array of buffers with their status. (Yasuo)
* Added 3rd parameter "bool erase" to ob_start(). If FALSE, the buffer may not be deleted until script finishes. (Yasuo)
* Added object aggregation capability, see aggregation_*() functions. (Andrei)
* Added debug_zval_dump() which works similarly to var_dump, but displays extra internal information such as refcounts and true type names. (Jason)
* Added Andrei's tokenizer extension. (Stig)
* Added is_a() function that can be used to test whether object is of a certain class or is derived from it. (Andrei, Zend Engine)
* Added optional parameter to highlight_string() and highlight_file() which makes these functions to return a highlighted string instead of dumping it to standard output. (Derick)
* Added EXTR_IF_EXISTS and EXTR_PREFIX_IF_EXISTS flags to extract(). (Rasmus)
* Added function domxml_dump_node($doc,$node). Dumps a node plus all children into a string. (chregu)
* Added function domxml_node_get_content(). (chregu)
* Added function domxml_dump_file($filename,[$compression]). Dumps XML to a file and uses compression, if specified. (chregu)
* Added xpath_register_ns() function. This makes it possible to issue XPath queries with namespaces like for example: "//namespace:sampletag". (Chris Jarecki)
* Added optional second parameter to count() which can be used to specify either normal or recursive counting. (patch by Vlad Bosinceanu <glipy@fx.ro
* Added mb_get_info() to get internal settings of mbstring. (Rui)
* Added is_finite(), is_infinite() and is_nan(). (Jim)
* Added flags parameter to preg_grep(). The only flag currently is PREG_GREP_INVERT that will make the function return entries that did not match. (Andrei)
* Added var_export() which outputs a representation of a variable as reusable PHP code. (Derick)
* Added ob_get_level() which returns the nesting level of the output buffering mechanism. (Yasuo, Derick)
* Added ob_flush() and ob_clean() functions which flush and clean an output buffer without destroying the buffer. (Derick)
* Added new optional parameter to mysql_connect() which forces a new database link to be created. (Markus, Derick)
* Added ldap_sort() function. (Stig Venaas)
* Added md5_file() function which calculates the MD5 sum of a file. Patch by Alessandro Astarita <aleast@capri.it> (Derick)
* Renamed key_exists() to array_key_exists(). (Derick)
* Added support for bind_textdomain_codeset().
* Added udm_check_charset() function into mnoGoSearch extension.
* Added array_chunk() function which splits an array into chunks of specified size. (Andrei)
* Added session_cache_expire() function. (patch by <anuradha@gnu.org>) (Andrei)
* Added array_fill() function. (Rasmus)
* Added user-space object overloading extension. (Andrei)
* Added ldap_start_tls() function. (Stig Venaas, patch by <kuenne@rentec.com>)
* Added array_change_key_case() function which returns an array with all string keys lowercased or uppercased. (Edin)
* Added parameter to ircg_pconnect to suppress treating non-fatal errors as fatal, and added conversion of Windows quotes to &quot;. (Sascha)
* Added pcntl_exec() function which behaves similar to the system execve. (Jason)
* Added mcrypt_generic_deinit() to replace mcrypt_generic_end(). (Derick)
* Added apache_setenv() function for injecting variables into Apache's subprocess_env table. (Rasmus)
* Added support for 'int', 'bool', 'float' and 'null' in settype(). (Jeroen)
* Added ini_get_all() function which returns all registered ini entries or entries for the specified extension. (Jani)
* Added version_compare() function. (Stig)
* Added support for single dimensional SafeArrays and Enumerations. Added com_isenum() function to check if a component implements an enumeration. (Alan, Harald)
* Added ircg_get_username, a roomkey argument to ircg_join, error fetching infrastructure, a tokenizer to speed up message processing, and fixed a lot of bugs in the IRCG extension. (Sascha)
* Added import_request_variables(), to allow users to safely import form variables to the global scope (Zeev)
* Added vprintf() and vsprintf() functions that allow passing all arguments after format as an array. (Andrei)
* Added ImageCreateFromGD(), ImageCreateFromGD2(), ImageCreateFromGD2part(), ImageGD() and ImageGD2() functions (Jani)
* Added optional extra argument to gmp_init(). The extra argument indicates which number base gmp should use when converting a string to the gmp-number. (Troels)
* Added optional second parameter to trim, chop and ltrim. You can now specify which characters to trim (jeroen)
* Added a few new math functions. (Jesus)
* Added optional use of Boyer-Moore algorithm to str_replace() (Sascha)
* Added support for socket and popen file types to ftp_fput (Jason)
* Added hostname:port support to snmp functions (nbougues@axialys.net, Rasmus)
* Added fdf_set_encoding() function (Masaki YATSU, Rasmus)
* Added option for returning XMLRPC fault packets. (Matt Allen, Sascha Schumann)
* Added getmygid() and safe_mode_gid ini directive to allow safe mode to do a gid check instead of a uid check. (James E. Flemer, Rasmus)
* Made assert() accept the array(&$obj, 'methodname') syntax. (Thies)
* Added nl_langinfo() (when OS provides it) that returns locale.
* Added optional suffix removal parameter to basename(). (Hartmut)
* Added new parameter UDM_PARAM_VARDIR ha in Udm_Set_Agent_Param() function to support alternative search data directory. This requires mnogoSearch 3.1.13 or later.
* Added new experimental module pcntl (Process Control). (Jason)
* Added a further parameter to the constructor to load typelibs from file when instantiating components (e.g. DCOM Components without local registration). (phanto)
* Added the possibility to specify typelibs by full name in the typelib file (Alan Brown)
* Added a third argument to pg_lowrite() which is the length of the data to write. (Sterling)
* Added the CONNECTION_ABORTED, CONNECTION_TIMEOUT and CONNECTION_NORMAL constants. (Zak)
* Added 'W' flag to date() function to return week number of year using ISO 8601 standard. (Colin)
* Added get_defined_constants() function to return an associative array of constants mapped to their values. (Sean)
* Added the 'u' modifier to printf/sprintf which prints unsigned longs. (Derick)
* Added the IMG_ARC_ROUNDED option for the ImageFilledArc() function, which specified that the drawn curve should be rounded. (Sterling)
* Added disk_total_space() to return the total size of a filesystem. (Patch from Steven Bower)
* Added com_release($obj) and com_addref($obj) functions and the related class members $obj->Release() and $obj->AddRef() to gain more control over the used COM components. (phanto)
* Added an additional parameter to dotnet_load to specify the codepage (phanto)
* Added apache_get_version() function. (Ilia)

Tested on 1 site.

Banner stats are unreliable. Generally, they count 3 times each click. Needs to be verified on another site.

One one site, (needs to be checked elsewhere), the number of impressions seems to be triple the actual number.

Please comment if banners are reliable for you.

Normally, we want banners from 0h00 to 23h59 and this works well.

However, on banner edit, 3 hours are added (depends on server).

This is a new problem introduced by a fix a few months ago. Tiki 1.10 has much better handling of timezones.

Workaround: On each edit, make sure to change back to 0h00 to 23h59



{img src=show_image.php?id=31}

But it is shown fine when you save.

{img src=show_image.php?id=32}

Currently, when one attaches a first file to a wiki page, the attach a file tab turns into a tab that says how many attachments there already are on the page. Clicking on this button does two things:
# it allows you to see the existing attachments and
# it exposes a control that lets you add attachments.
The problem with this button is that it does not offer the affordance of attaching a file. A naive user who looks at this button will not understand that it is the button that one uses to attach a file.

phpBB is a popular open source forum software.
Sometimes, a forum is not enough.
So, the data must be migrated from phpBB to Tiki forums...

If you want to help:
Please post links to similar scripts.
ex.: phpbb to invision board, etc
If/when we do a script, we should do for all major forums.
---
__From kerrnel22 on 11/20/07:__

I have almost completed an integrated TikiWiki forum migration tool for 1.9.8.x and 1.10. Initial release will be to migrate only Tiki forums from one Tiki install to another. However, hooks are in place, and the intention is there, to work on extending the migration tool to importing of phpBB2 (or any other forum software) into Tiki. If you would like more information, email tiki.kerrnel@kerris.com. I expect a general release of the forum migration tool (for Tiki forums only) into cvs of both branches for beta testing by December 1/07. If all goes well, I'll have something released for phpBB2 migration prior to Dec 31.

When I set the homepage in Administration: General Preferences to "Articles" (which is what I want the homepage to be for both anonymous and registered visitors), the initial viewing for "anonymous" displays a homepage of "wiki".

When I set the homepage in Administration: General Preferences to Group homepage and then set the two group homepages to a typed-in "Articles" in the empty field and then log in as any user, the display is "No page 'Articles' found".

When I set the homepage in Administration: General Preferences to Group homepage and then set the two group homepages to a custom URL (http://www.progressiveomaha.com/tikidir/tiki-view_articles.php), the display is "no such page found".

One day I thought maybe the problem had to do with using Firefox on a Linux box, because my ancient Windows 98/IE machine brought up 'Articles' as the home page.

The next day both machines bring up the Wiki page as the home page. This is with the homepage set to 'Articles' in Admin-General.

Maybe I should be clear that I am refering to which page is brought up when TikiWiki is first accessed (from www.progressiveomaha.com/tikidir/).external link Once I have logged in as a user, I will access the 'Articles' homepage whether returning as another user or as anonymous. The problem only occurs on that initial anonymous access, and only after TikiWiki has had time to "forget" any earlier logons by that user.