Category: 19.x

At tiki-admin_notifications.php if I select "User" for destination I got an error that the selected user doesn’t have an email. Which is wrong.

{img type="fileId" fileId="1262" thumb="box"}

I can’t upload an image on dev.t.o (using elFinder) because of CSRF error: https://ibb.co/b9AXnf

In a new post in the t.o forums I tried to set a plugin img using the help icon;

#Uploading an image at t.o didn’t work (cross error on elfinder)
#Using an image anywhere on internet didn’t work the plugin wasn't saved on the post
#Writing the plugin syntax (manual) was saved but the result is a broken image and a correct image (image 1 on 2).

https://tiki.org/forumthread68989-Tracker-List-Image-Display-Params-Have-No-Effect?topics_offset=1

Any action that requires an confirmation results in a Ajax call with a popup menu. This does not work in Safari.

To reproduce:

Modify a "registered" group, and click save. There is a confirmation page, that does not have any buttons to confirm the charge.

See the example on https://doc.tiki.org/PluginList-output-control-block?latest=1&no_bl=y#Example
The Carousel formatting output is messed up (arrows under the images, both images shown, no carousel look).

I just reviewed Canadas anti-spam legislation & it looks like we're currently not complying with it.

http://fightspam.gc.ca/eic/site/030.nsf/eng/00285.html

# Express consent (rules for implied consent are too difficult to satisfy)
# Name of the Sender
# Address of the Sender.
# A way of getting in touch with the sender. (phone number, domain name, email address) For us, a simple domain name would be ideal.
# Easy unsubscribe mechanism.

I just reviewed an email I received from a user watch at dev.tiki.org. We comply with (maybe) #1. 2-5 we do not comply on.

A lot hinges on if the emails we send out are considered "Commercial Electronic Messages" but we don't appear to fall in the exception list, so I'm guessing that means almost all our messages are considered CES, including watches.

There is implied and also explicit consent. It looks like most of our emails are explicit concent emails, so that makes things easier. However if no specific action was taken to request an email, it falls in "implied consent" and there is a 2-year limitation on this clause. That would be a lot of work to program, so I suggest that we place a line in our Terms and Conditions that states that we may send occasional emails, and require them to agree to these upon registration. This would seem to cover our basis in making a strong case for explicit consent. The onus is upon us to prove that explicit consent has been granted. The empty toggle box concent is mentioned as "acceptable" under these regulations.

Now that we have explicit consent (and can prove it) we need to comply with the required information in an email. For Tiki already has the name and domain name, but perhaps we need a field for the business address in the preferences somewhere.

We also need an "easy unsubscribe mechanism" so if someone creates a "user watch" we need to include a link to an unsubscribe page. Or a page that unsubscribes them. I'm sure we already have this within tiki, we just need to generate the link and include it in user watches, and other emails.

It would also be nice if we had some generic compliance built into Tiki. So the solution taken is not specific to *.tiki.org and everyone else needs to come up with there own solution. More and more legislation is playing a larger role in how business on the net is conducted.

I would love to see a generic feature in Tiki called something like Terms, Conditions & Privacy Policy. Where terms, conditions and privacy policy can be (almost) auto generated based on selected options. This then could be integrated into the user registration form as part of the standard process.

If one installs tiki for the first time and for some reason the install process is not completed, then the admin change password prompt will not be displayed.

To reproduce:

Install tiki, but don't change the admin password.
Upgrade tiki. The admin change password does not appear.

There is no option to do a "fresh install" so if there is an issue during installation that forces on to restart, then the admin change prompt won't appear to them.

Perhaps instead of detecting if the install is an "upgrade" or "fresh install" to trigger the admin password change, it should check if the admin password is still the default password.

Trying to download an uploaded file through the diff view in a comment produces garbled data instead of downloading the file. The file can still be downloaded through a right-click and open in a new tab. But if clicking directly on the link, rather than downloading, it's opening the data of the file within the comment.

See following GIF that shows the downloading failing at first, with garbled data, and then the possible download through right-click:

https://cl.ly/e51ea86f0b21

I'm not familiar enough yet with the code to be able to narrow the issue. I dug until the `{trackeroutput}` custom smarty function and the `field_render_value` but I'm not sure where the issue is. For both cases where the link to download a file works and for when it doesn't work, the url (and whole html tag attributes) is the same, so I suspect it's javascript that is doing something but there's so many libs that I need some advice on where to look for.

Clicking on icon after file upload from text area through toolbar icons fails for me to add the right syntax for that file

Reproduced in https://adup.cat (in case theme style matters, etc)

The code that got inserted said something like "cat" or "file" with no number or fileId, etc.

Tested on https://doc.tiki.org when you click the cog icon in the top bar and then one of the control panel icons in Chrome it does nothing (does not go to the control panel).

It is weird and no idea how to reproduce but on the page https://doc.tiki.org/Changelog-1.8?page_ref_id=4088 the CODE plugin is ignored like if it was not enabled at all.

Steps to reproduce, for instance on dev.tiki.org :
# View a tracker item as anonymous: you can't comment
# Log in
# Get back to the item report: you still can't comment. Even after shift-reload

Reasons:
The ajax response is cached by the browser.

Even if someone else adds a comment, you still can't see it.

It might affect all other ajax services.

The page "comments" on tiki.org returns a 404 not found.

I have looked in the wiki pages, and we do in fact have a comments page, so something must be broken there. Not sure if this is a tiki bug, or bad data or what, but the error message (404) is really not very helpful.

https://tiki.org/comments -- is broken
https://tiki.org/tiki-index.php?page=comments -- works

https://tiki.org/changelog -- is broken
https://tiki.org/tiki-index.php?page=changelog --works

Consolidate menu types as just Bootstrap menus. That is, remove suckerfish and legacy - neither Bootstrap nor suckerfish - menus. Then add Smartmenus ([https://www.smartmenus.org/]) to enhance/extend Bootstrap menus to regain features lost by the removal of suckerfish menus.

UPDATE: Smartmenus feature has been added to branch 19 and trunk and will be configured and bug-fixed hopefully before the release of Tiki 19, or soon thereafter. The feature is optional of course and is marked as experimental for now.

TODO: resolve any issues in Smartmenus integration in Tiki. Longer term, evaluate removing CSS menus (suckerfish/superfish menus) when it's determined that Smartmenus makes them redundant.

If the content of a remarksbox __which is part of a list wiki syntax__ contains a line (carriage return) the part below it is displayed outside the remarksbox.

{img type="fileId" fileId="1257" thumb="box" desc="Plugin content"}

{img fileId="1258" thumb="box" desc="Plugin display"}

See the attachment

See https://dev.tiki.org/Git-and-SVN-combined-workflow for example

Upgrade from 18.1 to 18.3, no configuration changes.

Each save in the control panels and when login/logout ends up with a page full of error messages. When pressing back, changes are nonetheless saved, but something like login out is not possible.
Please have a look at this full MySQL error log, from just one login action: https://drive.google.com/file/d/1eKmRTE_l9S90fGuONyWst0Xz7wgFwBmI/view?usp=sharing
This is already 80mb large, can you imagine each save action... quite interesting what is happening there. Hopefully someone has a clue?

Hello, I had a problem with the response to emails, since from the forum the reading is read correctly, but when entering from the module "Last email forums" and answering from there, the thread of the communication is lost, so that the comments are lost .. could you help me with that please? Thank you.

When I use the image plugin in TikiWiki 18.3 and set the text to flow around the image (imalign=right|left) then the text flows around as it should.

When I set a caption to the image (desc="") then the flow is immediately disrupted.

Captions, when no text flow is set, work perfectly, so these two features disturb each other. I posted this as a question in the forum, and got a workaround and the advice to report this as a bug.

Thanks for your help
hman

{syntax type="tiki" editor="plain"}
When trying to log in using the top bar "Log in" module user gets CSRF error and is not logged in. Reproducible on tiki.org and dev.tiki.org. Not reproduced on doc.tiki.org. I feel it has something to do with the buggy cookie consent feature.

It does not happen when loggin in using the dev.tiki.org/login URL directly (instead of the top bar module).

You need to open new incognito window in Chrome/Firefox to "start fresh" and reproduce the issue.

Steps to reproduce in the attached screencast video.

https://dev.tiki.org/tiki-download_item_attachment.php?attId=514&display

Sometimes after editing and saving the tracker item here I get a CSRF confirmation warning and when I confirm that I see an error on top of the form which says something like:

{CODE()}
The following mandatory fields are missing :
Category
{CODE}

Even though the category field is there filled with correct category values!

__Please note the edited form contains your values but it is not saved yet!__ Only after another "Save" button click attempt it gets saved normally then...

When I create a new site and I add the ''switch_themes'' module, it does not show up. Instead, I get a "Module error" box (see picture 01) which tells me I need to activate the "users can change theme" feature.
So far, so good (except for the weird placement of the box in the bottom but that's off topic here).

When I check this "users can change theme" feature in the "Module error" box and save, I get a CSRF error and nothing is actually done :-(
That's the issue I report
See picture 02

I'm trying to add menu options and successfully added several, but trying to add another one I get a CSRF message and have to reload the page without the menu option being saved. So I can't make the complete menu.

The new feature n 18.x "[https://doc.tiki.org/tiki18#Multilevel_style_numbering_for_ordered_lists|Multilevel style numbering for ordered lists]" is broken (not working) in 19.x and trunk...
I suspect some CSS/classes have changed.