Category: 21.x Regression

When a user runs the user wizard, one of the few things he or she can set is country. But the information entered there is not persistent, upon reload it is forgotten.

Possibly the same bug that we had in the user preference.

A poll template is created and attached to a page.
When the voting in the poll, a CSRF error is given.
{img fileId="1407" thumb="box"}

It is not possible to place a hyperlink to this -valid- URL:
{CODE(Colors="Tiki")}
https://www.stadt-zuerich.ch/kultur/de/index/institutionen/nonam_indianer_inuit_kulturen/fuehrungen---freizeitangebote/let-s-talk---mari-boine--die-stimme-des-nordens.html
{CODE}

If you place this in square brackets or use the insert external link GUI function, Tiki will show the URL instead of a given alternative text, and interpret the double dashes as strikethrough.

Tiki should NEVER interpret Wiki syntax in URLs...

Module Categories parameter "hideEmpty" doesn’t work if Performance=>Show category object count
is turned off (tiki-admin.php?page=category) even if there are objects in the category.

In a Tiki 21.4 I get a WSOD (white screen of death / blank page) when I save a newly created page.

The page is created anyway and usable. The WSOD disappears when the browser is sent one page back or the site/page is loaded manually.

The bug __only__ occurs while __saving__ a newly created page for the __first time__.

After editing a previously existing wiki page, there is no WSOD after saving.

I did not yet test the behaviour for other versions, but I will add versions accordingly.

Tested in show instances:

Tiki 23.1vcs
http://bsfez-11581-7912.show2.tikiwiki.org
success - could not reproduce

Tiki 21.5vcs
http://torsten-11143-7928.show2.tikiwiki.org
success - could not reproduce

The WYSIWYG doesn't load the bars with size and font into the post (''and several other tools in the toolbar'') .
Please see this short video recording which explains and shows the issue:
[https://drive.google.com/file/d/1-kZWIMVLvu-Z9AO_C0nsPKupW194NYQ_/view|https://drive.google.com/file/d/1-kZWIMVLvu-Z9AO_C0nsPKupW194NYQ_/view]

Kind regards
PowerQuest

In tiki-calendar_nav.tpl the display of calendar dates is formed (template), but in a IMHO rather bizarre mix of hard-coded and localizable syntax, which
a) does not make use and thus circumvents the existing user pref for date formats and
b) effectively makes correct localization impossible.

I quote from this template a code snippet:

{CODE(colors="tiki")}
{if $viewlist ne 'list' or $prefs.calendar_list_begins_focus ne 'y'}
{if $calendarViewMode eq 'month'}
{$daystart|tiki_date_format:"%B %Y"}
{elseif $calendarViewMode eq 'week'}
{* test display_field_order and use %d/%m or %m/%d *}
{if ($prefs.display_field_order eq 'DMY') || ($prefs.display_field_order eq 'DYM') || ($prefs.display_field_order eq 'YDM')}
{$daystart|tiki_date_format:"{tr}%d/%m{/tr}/%Y"} - {$dayend|tiki_date_format:"{tr}%d/%m{/tr}/%Y"}
{else}
{$daystart|tiki_date_format:"{tr}%m/%d{/tr}/%Y"} - {$dayend|tiki_date_format:"{tr}%m/%d{/tr}/%Y"}
{/if}
{else}
{$daystart|tiki_date_format:"%B %Y"} - {$dayend|tiki_date_format:"%B %Y"}
{/if}
{else}
{$daystart|tiki_date_format:"{tr}%m/%d{/tr}/%Y"} - {$dayend|tiki_date_format:"{tr}%m/%d{/tr}/%Y"}
{/if}
{CODE}

So there is some testing for localized date format, but it assumes that only the order of day and month may be swapped through translation? This only works inside the USA or partly in the UK. It does not work in Germany, and not in Japan and possibly conflicts with other countries as well.

Germany uses
{CODE(colors="tiki")}
%d.%m.%Y
{CODE}

Japan uses
{CODE(colors="tiki")}
%Y-%m-%d
{CODE}

Look at the peculiar coding in tiki-calendar_nav.php. To magnify, I have extracted one example that clearly shows the logical error in it:

{CODE(colors="tiki")}
{$dayend|tiki_date_format:"{tr}%d/%m{/tr}/%Y"}
{CODE}

The year was excluded from translation and also the slash that comes before the year (at least in the USA...). So the slash cannot be removed by custom.php, because it is outside the translation. And it would be even worse for a localization into Japanese, because of their year leading the date...

It would be far better if date format was used in the form of the user pref that exists! But for a faster "quick resolution" moving the %Y into the translation braces would do the trick, and later introduce the "proper" way... Thanks.

We receive many issues while people try to register. So I went to test out what is going on... While testing new user registration in new incognito mode Chrome I got this when I submitted the filled in form:
{img fileId="1361" thumb="box"}

Not a good feedback to the user trying to register :(

Steps to reproduce:

# open new incognito window
# go to https://tiki.org/login
# click the Register link in the login form which brings you to https://tiki.org/tiki-register.php?key=randomstring
# fill in the form and click "Register" button
# you get the error screen

__Anyway, the user was created.__
As an admin I received immediately a watch notification email first:
^__User joined Registered__
The user lucitest joined Registered%%%
at: Sun 23 Feb 2020 17:13 CET^

Then --after some minutes (17:21 CET)-- 17:14 CET I received "Community Members Information" tracker email about the Item Creation too __with no link to validate the user__ (but at that time I validated the test user manually already).

We also receive many registration attempts (in comparison as seen while watching user joining Registered group) __without__ any tracker or validation link emails coming out / being received at all.
---
Confirmed sadly {sign user="jonnybradley" datetime="2020-03-09T17:22:33+00:00"}

Since I upgraded to Tiki21 when I import data to a tracker using the Tabular Formats I have the following error (was working without warning on Tik20 - Field not used yet)

It seems it appears when a new item is created.


{CODE()}
[root@ip-xxxxxxx html]# php console.php tracker:import 7 ../biens/biens.csv
Importing tracker...
Undefined index: lon on line 209 of /var/www/virtual/dev.xxx.fr/html/lib/core/Tracker/Field/Location.php
Undefined index: lat on line 209 of /var/www/virtual/dev.xxx.fr/html/lib/core/Tracker/Field/Location.php
Undefined index: lon on line 209 of /var/www/virtual/dev.xxx.fr/html/lib/core/Tracker/Field/Location.php
Undefined index: lat on line 209 of /var/www/virtual/dev.xxx.fr/html/lib/core/Tracker/Field/Location.php
<feedback>feedback: 2 new tracker(s) item(s) created<br>7 tracker(s) item(s) updated
</feedback>
Import done

Hello,

tried to do fresh installation of Tiki-21 (from *.xz tarball) on my production server and the installer seemingly choked after selecting "Inno DB", iow. pressing the button did not show any effect and it looked as the installed just died.

After several attempts, I had to leave the process working for some time having some non computer-related tasks to do and after returning back to the computer, discovered that installer did finish the job, but no progress-bar dialog was visible, although the feature did work during my testing of Tiki before release, so it is certainly a regression.


Sincerely,
Gour

In /lib/toolbars/toolbarslib.php several calls for icon FILES get translated. Why would the file names or paths of icon files be translated?

This is just a (very) minor issue, but unnecessarily inflates language.php in all target languages. Example:

{CODE(Colors="Tiki")}
switch ($tagName) {
case 'bold':
$label = tra('Bold');
$icon = tra('img/icons/text_bold.png');
$iconname = 'bold';
$wysiwyg = 'Bold';
$syntax = '__text__';
break;
{CODE}
With this, a translator could exchange toolbar icons (or their paths) in his/her translation. But what would be the use case for that? 22 icon file names are pumped through tra() in total... Maybe there is some deeper logic, but I don't get it ;-)

I have a tracker with 2306 items that individuals can filter through. If the search result is large enough their is an option on the bottom to select a page of results or they can chose a next or previous button. The initial result is fine, but if they select any option they are redirected to a page that lists the "path" of the url twice i.e., "https://example.com/tiki-index.php/tiki-index.php?page=TrackerName&tr_offset1=25" the same issue happens when I select from tracker directly i.e., "https://example.com/tiki-view_tracker.php /tiki-view_tracker.php?trackerId=6&offset=25"
In both instances if I remove the duplicate "path" I get the desired result. However, I cannot expect the user to take this action. I have this issue with tiki21.4 and tiki23.0
It seems to be an issue with parsing the url and putting it back together with the path twice. I have been coming through lib/tikilib.php to see if I can find the issue. I didn't have this issue with tiki18 which was prior to the change in 21 that included converting from absolute to relative links

Parameter nobox=y is not working anymore for the module forums_last_posts

http://bsfez-11581-7540.show2.tikiwiki.org/tiki-index.php

---

Updated on the 8/05/2023; Still broken, tested at https://nextdev.dev9.evoludata.com

{img fileId="2055" thumb="box"}

The GUI layout in tiki-calendar_edit_item.php breaks if localization comes into play. Look at the screenshot (attachment) to see these issues, that surface when you want to introduce a repeated event. They are:
a) in "monthly" all ordinals below 10 have a leading zero, which is unnessary. It would do no harm, but surprisingly the leading 0 is separated by the number with a space, which together render wider than the space that was allocated for that, leaving only the leading 0 visible... There is no dot, although ordinals in German have a dot "sixth" is spelled "6." in German.
b) in "yearly", where you can for instance define "every 6th of a month", there is the dot, but as a text input field? Actually you cannot write in there, but is is layouted as a text input field (white background). And here also the width is highly insufficient.

c) I cannot translate the "End period" string. Even if I add the array_merge to custom.php (see the bug report for that). And in tiki-calendar_edit_item.php I do see tr in curly braces, so it should respond to language.php and custom.php, but it doesn't?

Please add a (small) timeout to the popup box that is launched on mouseover that contains user info, avatar etc.

Or add a mouseout that kills the popup, which would even be better IMHO.

Reason: If you navigate "classic style", i.e. with a mouse, over sites like dev.tiki.org, you constantly mouseover peoples' user info, and this means you have to stop in your mouse movement and go back to the info that caused the popup, which in long lists might take a while, and not before you found the source will it go away... So this behaviour blocks you in your tracks...

Thanks alot!

Since I was critized for editing an existing Tiki theme to fit my needs on two installations, I wanted to give the "official" way a try.

So I visited
https://themes.tiki.org/Creating-a-Tiki-theme

which is the official documentation. I have the impression (but cannot prove this, of course) that I am the first to actually use this...

It fails. On step 1 (Three Ways to Make a New Theme).
https://themes.tiki.org/Three-Ways-to-Make-a-New-Theme

Btw, BOTH pages are dated 2016... There are three alternatives listed:
# Link to a Bootstrap.css File for a New Theme
# Add a Style Sheet to the Themes Directory
# Make a Less-Compiled Tiki Theme

===''__Less...__''===

There is another documentation from Tiki:
https://themes.tiki.org/Updating-a-Tiki-theme-from-Bootstrap-3-to-4

to which I was pointed recently. Besides the fact that it hasn't been updated in 4 years, it stil reads als "work in progress". Like this table:

|| Less function | SCSS equivalent
coming soon | coming soon ||

"coming soon". How "soon" is 4 years? Another example

"I'll add a table here of the changes I've had to make when updating Tiki themes, but in the meantime" So we do not learn what changes had to be made, and we cannot learn from Tiki's devs what pitfalls were discovered. And there the documentation ends...

Bootstrap's documentation, on the other hand
https://getbootstrap.com/docs/4.0/migration/

isn't very useful as well. It addresses only developers who are fully rooted in the entire Bootstrap universe. Frankly, I understand not even half of the stuff.

I have a pluginList that produce a listing.
I need to print this listing and to print only the data, the table I use "d-print-none" class on the customSearch template, and other buttons bar (custom and Tiki).

I use a small jq script and a nice button
{CODE(caption="jq")}
{jq}
$('.print-button').on('click', function() {
window.print();
return false;
});
{/jq}
{CODE}
{CODE(caption="html")}
<a href="#icon-print" class="print-button m-1"><i class="fas fa-print"></i> </a>
{CODE}

It work fine on Firefox but not on Chrome and Safari.
{img fileId="1377" thumb="box"}
{img fileId="1378" thumb="box"}

May not directly related to Tiki... but it used to work.

There is a problem in Slides in 21.x: Section about wiki page comments wrongly placed on top of all slide titles, when some setting is on related to comments.

This was not happening in previous LTS versions, with the former slideshow system (that's why I tagged it as regression; untested in 19.x, 20.x, etc).

Reproduced here:
http://xavi-9794-7332.show2.tikiwiki.org/tiki-slideshow.php?page=Tiki+Wiki+CMS+Groupware#s0
u: admin
p: 12345

Just after enabling the pref:
-+wiki_comments_displayed_default+-
and while keeping the default pref: -+wiki_comments_allow_per_page+- Disabled (which is the default setting).

You don't see the comment as Anonymous.
You'll see the comment if you log as admin.

In all cases, comments should NOT be displayed in a Wiki slideshow: https://doc.tiki.org/Slideshow

{img fileId="1637" thumb="box"}

{syntax type="tiki" editor="plain"}
On May 12, the US President issued an Executive Order that binds US agencies that software purchased needs a Software Bill of Materials (SBOM).

[https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/|Executive Order on Improving the Nation’s Cybersecurity]

A SBOM is a comprehensive (!) list of ALL dependencies. You have to list every (!) module, tool, library, whatever that Tiki relies on in a predefined, machine readable format. If you do not provide a SBOM, no US agency or office will be allowed to use Tiki.

The reasoning behind that is simple and clear: Unknown dependencies cause unknown cyber risks. As they are unknown, the impact of those can range from negligible to catastrophic. All dependencies must be tracked. If software that Tiki depends on does not get updated, features might break, or even worse, impose direct security threats through Zero Day exploits. Oh well, looking at some popular tool's outdated version history, you might not even need "0days" to break into other vendor's software, where the user (or admin) might not even be aware of the dependency. Or the depency of some other dependency.

Log4j was the last warning to the industry (and in this regard, Tiki must be considered to be part of the industry).

The machine readable format of SBOM makes it possible to discover the depencies of the dependencies. Nestings of a dozen or more levels are not uncommon...

Now the president took action. Tiki should react, IMHO. Tiki must react, or Tiki won't be usable by officials anymore.

Was hard to diagnose...

After upgrading a Tiki20 to Tiki21 I was able to rebuilt the index:

{CODE()}
[03-03-2020 12:05] Started rebuilding index... logging to file: /var/tmp/Search_Indexer_mysql_tsaharoniki_tiki21_console.log
Unified search engine: MySQL, version 5.7.26
error: The search index could not be rebuilt.
Expression #1 of ORDER BY clause is not in SELECT list, references column 'tsaharoniki_tiki21.ttif0.value' which is not in SELECT list; this is incompatible with DISTINCT
{CODE}

The log:
{CODE()}
2020-03-03T10:47:35+02:00 ERR (3): WARNING: PDOStatement::execute(): SQLSTATE[HY000]: General error: 3065 Expression #1 of ORDER BY clause is not in SELECT list, references column 'tsaharoniki_tiki21.tti$
{CODE}

Checking the item (I had to find it!) I found out that having a sort parameter in an itemList field was responsible.

{img fileId="1373" thumb="box"}

Once removed it worked.
This is very problematic when you have financial data as any report must be ordered (by date).

Update: {sign user="Bsfez" datetime="2020-03-08T17:20:40+00:00"}
Same same in Tiki 20
It may be related to the removal of the "split" function in PHP 7+;
https://whmcs.community/topic/290945-how-to-sort-smarty-variables-in-whmcs-76/

Update: {sign user="Bsfez" datetime="2021-03-02T14:41:19+00:00"}
It is now also on Tiki18.8 as it was signaled to me by another Tiki user (tested with him)
I tried to reproduce on the show instance but there is a bug with field list on the trackers and it is not possible to recreate the caches.
{img fileId="1514" thumb="box"}

[https://tiki.org/TikiFest2018 Montreal] uses the Swiper plugin. The page wasn't displaying - I got a gateway timeout error - so at Jonny's suggestion I commented out the Swiper plugin and now the page displays normally (except for that plugin's content of course). So maybe there is a regression in the Swiper code.

__Update:__ https://tiki.org/file78 (the gallery used by Swiper on TikiFest2018 Montreal) along with the other file galleries won't display. This is probably the reason for Swiper holding up the display of the page its on. File galleries display ok at my localhost installations, so maybe the problem is tiki.org-specific.

__Update:__ Subject changed, to be more accurate.

We have an issue with Tabular when a value of a field = "0"
And then how it is seen using : tiki-pluginlist_experiment.php

To reproduce.
I have a CSV with the following:
ID,NUMBER
111,1
112,1
113,0
114,0
115,0
116,5
117,4

Tabular import will create/update trackerItems as follow.

|| ID | NUMBER
111 | 1
112 | 1
113 |
114 |
115 |
116 | 5
117 | 4 ||

Which is wrong, empty is empty and 0 is 0. ;-)

Then when using the tiki-pluginlist_experiment.php here what I got.
Where they were a value for the field NUMBER I see:
tracker_field_trackerNUMBER => "1"
tracker_field_trackerNUMBER => "Vendu"

Where they were a 0 => that became an empty value the field is not displayed at all...

I created a fairly basic tiki setup using a brand new Tiki 21 instance (aimed to be used in production next week)

I applied the Collaborative_community_12x profile.

When attempting to edit the registered group to remove the homepage, or select anonymous in the inheritance field, I can't save because this errors blocks the process:

^ Template Group children cannot have permission: Editors ^

I didn't select anything with editors at that level. Nor I did attempt to do anything with templated groups yet, but I was aiming to change basic options yet.

What's going on? Is this "templated groups" feature ready for production?
How can I disable the templated groups and roles options, in order to avoid their issues with basic behavior and setup of a basic Tiki site not requiring that level of complexity?

It should be optional, shouldn't it?
---
Reproduced cleanly in a brand new site at show2.t.o (on trunk since 21.x is not available yet at show2.t.o), and it's clearer to me that this is candidate to release blocker: too serious of an issue with a basic setup and expected change by tiki site admins willing to tweak the basic groups to their needs.

Steps to reproduce:
(1) Log in as admin here:
http://xavi-9794-7325.show2.tikiwiki.org/tiki-admingroups.php?group=Registered
u: admin
p: 12345

(2) Remove the contents of the homepage field and attempt to save. Error message is triggered.

HTH

Hi:

I wanted to test the new features coming along in BBB 2.3 & 2.4, so that I installed a new server with BBB 2.4. Everything from the BBB side did run smoothly, but the integration with tiki is not fully working as expected. I mean, after connectinng the tiki to bbb 2.4 server (providing the new url and bbb salt in the tiki control panel), I can see the recordings listed in the plugin bigbluebutton parsed content, but I'm never able to create a new meeting (when clicking to the create button shown by plugin bbb).

I had a look at the [https://docs.bigbluebutton.org/dev/api.html|bbb documentation], and I see that some changes are reported to the API in bbb 2.3 and 2.4.:
{CODE()}
Updated in 2.3:

create - Renamed keepEvents to meetingKeepEvents, removed joinViaHtml5, added endWhenNoModeratorDelayInMinutes
getDefaultConfigXML obsolete, not used in HTML5 client
setConfigXML obsolete, not used in HTML5 client

Updated in 2.4 (under development):

getDefaultConfigXML Removed, not used in HTML5 client
setConfigXML Removed, not used in HTML5 client
create - Added meetingLayout, activityReportTracking
{CODE}

I had a look i Tiki21 LTS, for instance, and I see that there are references to -+getDefaultConfigXML+- and -+setConfigXML+- in __lib/bigbluebuttonlib.php__

{CODE()}
(...)
173: $content = $this->performRequest('getDefaultConfigXML', ['random' => '1'], false);
(...)
192: $client = $tikilib->get_http_client($this->getBaseUrl('/api/setConfigXML.xml') . '?');
(...)
{CODE}

Could this be the reason why tiki is not creating the new room in the bbb-2.4-powered server?

If that hypothesis is confirmed, then we might hit a problem in the tiki community in the afew months whenever Fred Dixon and the BBB team upgrades the bbb instance we use in the "Tiki Roundtable Meetings" and TAG meetings, etc.

I can share the details of my bbb2.4 test server (url and salt) with any dev willing to debug and fix this issue.

Enable multilingual, create a tracker create a text field and set it as mandatory.
You can’t save without filling the field. (good and normal)

Turn the field to multilingual and dont set title for other language.
You can’t save an item anymore.

While they can be a discussion about the logic, having a title in every language used in that case shouldn’t be mandatory and one should be use as default when other don’t exist.

I remember it was once useable, if you had at least one field with a value it was good enough to allow saving.


http://bsfez-11581-7539.show2.tikiwiki.org/tiki-view_tracker.php?trackerId=1
You can’t save an item with only one language title