Category: Administration

Problem:
Some changes in Tiki code (especially the parser) between versions cause slight changes of behavior. Devs have no comprehensive way to test the result of a change on a large data set.

We have a large data set with all *.tiki.org sites.

Similar to ((tw:Pre-Dogfood servers)), we could have a script which checks the HTML output for all wiki pages for a given version, and compare this to another version.

And thus, we can check if this is a desired behavior.

The HTML entities change in Tiki9 would be a great 1st test of this. It would have been nice to have it for UTF-8 changes in Tiki5 as well...

This should be done as part of the script for ((tw:Pre-Dogfood servers)) so we have daily reports on issues. (and we know that it's the same data)

As an admin, I change the group of a user, and the default group.
The user needs to logout/login or the default group is not changed

{syntax type="tiki" editor="plain"}
I looked if something like this has been reported previously, but didn't find something that completely fits, so I post this and apologize if I missed something.

Since I have already put some detail into a [http://tiki.org/tiki-view_forum_thread.php?forumId=6&comments_parentId=44097#threadId44102|support request] and at the moment I believe it only concerns two Wikis belonging to the same admin, here is a description:

Steps to reproduce:
1) Take any Tiki installation and move a new directory
2) Create a new DB with a copy of the original DB
3) Upgrade and start it up
4) Log into the old installation as admin
5) Find out you're admin on the new one, too.

It may well be that for some admins this is a wanted behaviour like as a single-sign-on (SSO).

But it is my firm belief that any such behaviour is to be considerd a breach of security unless both admins have expressley activated this as a wanted behaviour. Possibly the problem also exists if two different admins operate two different Tikis on the same hosted volume, that somehow were created from one single predecessor, so maybe this is not as harmless as it might seem to be.

I do not know, but suspect, this could be a cookie issue.

Resolution could be that tiki-installer regenerates all security structures upon installation and/or upgrades, or at least asks the admin whether such should be reset. Also, there should be a button in the administration panel to reset this at any later time. In my opinion TikiWiki should at all times, if not told to behave otherwise, protect its instance against all other possible instances of itself...

At some point confusion may get so high to a user's browser that logging into Wiki B alone will not function, and you have to log into Wiki A to be able to access Wiki B. At the moment I experience this with my new 6.7 LTS and my old 1.9.8.3. sitting in different directories on the same volume, accessing to different MySQL DBs with differing user names and passwords...

The log in "Remember me" option can be set to "User's choice". There are fine grained options up to one day, but there's a gap between one day and one week. I'd be helpful and convenient to offer two days and three days as well.

Another nice-to-have would be a menu for users to choose themselves how long to remember up to a maximum set by the administrator. The administrator's duration menu should include the "Always" option in this case, too.

{syntax type="tiki" editor="plain"}
Using a pretty tracker as registration form doesn't allow to de-activate the captcha.
Since one of the point of using a tracker for registration is to allow special questions which robots can't answer, what is the point of forcing the use of the captcha (through which robots can easily pass)?
Maybe a duplicate of bug #1818, I'm unsure.

SHOW admin password: 01234

Using services like http://www.stopforumspam.com can help to identify and handle spam-related mail addresses trying to create an account.

stopforumspam provides an API to test a mail address against a "known spammer"-list. This could be used to warn an admin before confirming an account.

How to reproduce:
1. Allow Group Homepage
2. Set homepage for anonymous group: agr_home
3. Set homepage for registered group: rgr_home
4. make default page agr_home page
5. login -> you ll be redirected to rgr_gome -> thats ok
6. logout -> you ll be redirected to http://yoursitename.com/agr_home (note: not index.php?page=agr_home)

I have updgrade Tiki 10.0 to 10.2. i have facing problem with both version.
Problem is when i click on Red Cross Delete button then it will displayed Blank page. but if i select remove option then it is working properly. so i have facing problem with delete button.

This should be migrated to the community site, and handled with ((doc:Organic groups)) and ((doc:User Trackers))

At https://tiki.org/tiki-syslog.php we have a link to "Export through Action Log".
It is displayed even if the feature "feature_actionlog" is disabled

The link shouldn't be displayed if the feature is disabled.

---

If the purpose is to show a new admin it is possible to see more logs then we should add an informative/help/tooltip text and not a link that is not active.

Clicking on the interrogation mark that exist on the right of the title "Assign global permissions" on objectpermissions.php takes the user to a wrong doc page: [https://doc.tiki.org/Permission] (The word Permission in the singular form)

!!!!Facts:
*The page [https://doc.tiki.org/Permissions] (in the plural form) exists.
* An alias "permission" at the bottom of the page above also exists, but seems not to work properly.

!!!!Trying to workaround myself:
*I created an alias called "Permission" at https://doc.tiki.org/Permissions to test if the the upper case sensitivity of the letter "P" could eventually be what was preventing at the alias to work properly. It did not work. Another possible bug.

"Look and Feel" feature is activated on install. In the more links section of the Administration ::General page there is a label for this feature, but no link.

The email that is sent to the admin to validate a new account includes a link that is messing a "?"

Hi,

atest2 < mark@emailaddress.com.au> has requested an account on tikiwikiwebsite.com.au

To validate that account, please follow the link:
http://tikiwikiwebsite.com.au/tiki-login_validate.phpuser=atest2&pass=3c903b60c1f6b3cc6ebae63e214bc081


best regards,
your Tikiwiki

the link should start with

http://tikiwikiwebsite.com.au/tiki-login_validate.php?user


I've never submitted a bug before, let alone a fix, hopefully I'm providing the info the right way....

From tiki-devel. This is a blocker in my view.

{QUOTE(replyto=)}>> A user added a link to a comment, and now any page that tries to show the link (e.g. the wiki page or the comments admin page) gives me a sql error. My code is up to date to about a week ago ‑ has this been spotted and fixed? A quick search didn't turn anything up for me.
>>
>>
> No, I can reproduce this on current trunk. Here's the stack trace:
>
>> * /var/www/tiki/trunk/tiki‑index.php : 0 ‑> {main}(array ( ))
>> * /var/www/tiki/trunk/tiki‑index.php : 427 ‑> runSetups(array ( ))
>> * /var/www/tiki/trunk/lib/wiki/renderlib.php : 89 ‑> setupPage(array ( ))
>> * /var/www/tiki/trunk/lib/wiki/renderlib.php : 310 ‑> get_parse(array
>> ( 'page' => '\'HomePage\'', 'canBeRefreshed' => 'FALSE', ))
>> * /var/www/tiki/trunk/lib/wiki/wikilib.php : 375 ‑> parse_data(array (
>> 'data' => '\'{BACKLINKS()}{BACKLINKS}\\r\\n((nouvel escape
>> test))\\r\\n((Home
>> ))\\r\\n{YOUTUBE(movie="http://www.youtube.com/watch?v=_wesmkqvUPI")}{YOUTUBE}\\r\\n!!{img
>> src=pics/icons/star.png alt="Star"} Get started.\\r\\nTo begin
>> configuring your site:\\r\\n{FANCYLIST()}\\r\\n1) Log in as the
>> __admin__ with password __admin__.\\r\\n2) Change the admin
>> password.\\r\\n3) Enable specific Tiki features.\\r\\n4) Configure the
>> features.\\r\\n{FANCYLIST}\\r\\n\\r\\n!!{img src=pics/icons/help.png
>> alt="Help"} Need help?\\r...\'', 'options' => 'array (\'is_html\' =>
>> \'0\')', ))
>> * /var/www/tiki/trunk/lib/tikilib.php : 6370 ‑> cache_links(array (
>> 'links' => 'array (0 => \'http://info.tikiwiki.org/Learn+More\', 1 =>
>> \'http://info.tikiwiki.org/Help+Others\', 2 =>
>> \'http://doc.tikiwiki.org\', 3 => \'http://www.tikiwiki.org/forums\',
>> 4 => \'http://info.tikiwiki.org/Join+the+community\')', ))
>> * /var/www/tiki/trunk/lib/tikilib.php : 3505 ‑> cache_url(array (
>> 'url' => '\'http://info.tikiwiki.org/Learn+More\'', 'data' => '', ))
>> * /var/www/tiki/trunk/lib/tikilib.php : 3739 ‑> queryError(array (
>> 'query' => '\'insert into `tiki_link_cache`(`url`,`data`,`refresh`)
>> values(?,?,?)\'', 'error' => 'NULL', 'values' => 'array (0 =>
>> \'http://info.tikiwiki.org/Learn+More\', 1 =>
>> \'\\n\\n\\n\\t\\n\\n\\n\\t\\t\\n\\t\\t\\n\\t\\t\\n\\n\\t\\n\\n\\n\\t\\t\\n\\t\\t\\n\\t\\t
>>
>
> cache_url unconditionally calls queryError(). I don't know what
> queryError() is supposed to do (and certainly didn't hope to find this
> documented), but the following code from Bridge.php is odd:
>
> function query( $query = null, $values = null, $numrows = ‑1,
> $offset = ‑1, $reporterrors = true ) // {{{
> {
> return self::get()‑>query( $query, $values, $numrows, $offset,
> $reporterrors );
> } // }}}
>
> function queryError( $query, &$error, $values = null, $numrows = ‑1,
> $offset = ‑1 ) // {{{
> {
> return self::get()‑>query( $query, $error, $values, $numrows,
> $offset );
> } // }}}
>
> Calling self::get()‑>query() with in turn $values or $error as second
> argument is strange. I figure queryError is probably meant to call
> self::get()‑>queryError() instead.
>
> This code was introduced in r20205.
>
{QUOTE}

At first I had the problem with the Login Bug listed here:- http://tikiwiki.org/tiki-index.php?page=LoginBug&highlight=login%20bug

I have tried using all fixes on this page and to no avail.

Since then I have found that any function that uses the 'Click here to confirm action' page and button does not work. Are these interrelated? This happens if I try to delete a user, rollback a page in fact any function that uses that button and page?

Help or fixes would be very much appreciated as I have found tikiwiki excellent to use with my classes but these bugs are leading me to use something different next time!

hi,

i install the the tiki 3.0 but when i try to make the first login with admin give me a cookie error but i check and the cookies are enable.

any help
thank you

login with not activated account says "wrong password"

at least for my admin-created user account.

After upgrading from 4 to 4.1
I now can't login to my tiki. Every time I try to login, I get the following error:
The page isn't redirecting properly

Firefox has detected that the server is redirecting the request for this address in a way that will never complete.

Best regards

I upgraded my Tiki site to version 15.0, and consequently I was locked out, as my Admin password did not work after the upgrade.

In earlier versions of Tiki, this page would have helped ...
*https://doc.tiki.org/Lost+admin+password

.... but in Tiki version 15.0 there is no user_users table.

So where are the users stored now?
How do I recover my admin password?

Related:
((MemoryConsumption))


Here is a very famous error: "Fatal error: Allowed memory size of 8388608 bytes exhausted"
http://tikiwiki.org/art82

And they often cause blank pages. How can we can catch them and render a simple & descriptive error page (not enough memory) instead of a blank page?


__Maybe useful?__
Smarty validation class
http://www.phpriot.com/d/code/smarty/smarty-validator/index.html



Related:
Better protection against accidental site breakage with improper use of code in modules + template
http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=1065

I would like the java irc client pjirc to use grab the usernames from the tikiwiki database to log the people in when they want to use the irc channel. it is very similar to the mod for Simple machine forums http://pjirc.dtmdotexe.com/index.php?option=com_smf&Itemid=26. It will only work for registered users and does not need to work with wiki markup or group permissions (works as long as you are logged in). You do need a php script to input the irc server/channel to connect to.

Illori

Some prefs should need to be different per language

Ex: logo, site title, meta-description, meta-keywords, menu

So we may avoid:
http://doc.tikiwiki.org/Multilingual%20Menu#Check_language_and_show_alternate_menu


tiki-edit_perspective.php (Tiki5) is an efficient way to override global prefs depending on perspective. So now, how to handle similarly for languages?

Please note that some times, we'll have both perspectives and languages.


Related:
{wish id=968}



Two solutions:
* Add tra() for site title, meta-description
* Make text areas for things that smarty logic would be useful (ex: menu) __Done in Tiki5__

When going to Admin mods (tiki-mods.php) on a new install, make it report the directory name when the mods directory hasn't been created or lacks correct permissions.

The error reported asks to run ./setup.sh but is not specific about the directory affected here. This would be helpful to manually fix the individual directory instead of running ./setup.sh (which may not be possible in some situations like FTP installs).

Currently, there are four preference filters available in the Control Panel interfaces: "Basic", "Advanced", "Experimental" and "Unavailable".

As a user new to Tiki, I have on several occasions noted features that looked interesting, but which I have not enabled as I have subsequently found it is planned to deprecate them. In some cases this was obvious (e.g. a 'warning' icon with the deprecation message on hover next to the feature checkbox), in others it wasn't (i.e. I only found out about it from doc.t.o or related places).

On the assumption that it will help with planned deprecations if new installations don't enable and start using deprecated features, I would propose that a "Deprecated" preference filter be added, that relevant controls be assigned to it, and that it be disabled by default in new installations.

I understand the criteria for such might be controversial (indeed, I hope I'm not reigniting a heated discussion by posting this!) and so would understand if this is WONTFIXED. I also recognise that it is less appropriate for a new user to suggest criteria here than for those that have had Tiki installations for some time and/or are directly involved in development, which is why I haven't listed any in this initial report.

When setting preferences in each of the modules that Tiki supports, it would be of HUGE benefit and assistance to be able to click on a HELP ICON and get comments on what the setting or preference means and whether this should be used by you.