Category: User Administration (Registration, Login & Banning)

I tested deleting user and users.

If I delete a group of users using the checkboxes and the delete dropdown at the bottom I see the confirmation dialog but it doesn’t seems to work.
I need to refresh the page to see they were deleted and ONLY THEN I see the success message:

Success
The following users have been deleted:
test3gmail.com, test4gmail.com

If I delete one by one users using the action wrench "X delete" it does the same, as long as I don’t refresh no Success message and they still appears on the list.

While trying to delete my test user on t.o I get the following issue:
https://youtu.be/M0yRw425VuM

suggested by r1 on #tikiwiki
http://24ways.org/2007/capturing-caps-lock

To speedup this site, delete any login which:

1- has not voted in tracker ratings
2- has not submitted, modified or commented a tracker item
3- no tracker item is submitted to them

In short, all logins which are not useful here at the moment. Logins will be recreated here at their next login via InterTiki anyway...

Use case: LDAP setups with numeric ID's for usernames: the admin needs to be able to switch to some user's account to check that settings and perms are as expected for that usergroup, etc. I know the co-worker names, but I don't know their ID's in the setup, other than manually checking at the users list and infer it's name from their email.

This line seems to control it at the template for the login box module:
{CODE()}
{autocomplete element="#login-switchuser_"|cat:$module_logo_instance type="username"}
{CODE}

which implies that there is a function.autocomplete.php smarty_tiki file.

I managed to make the userrealname display in the dropdown box. But I need that userrealname as label, while keeping the username as option to be used internally (otherwise the switch user does not work, as far as I could see)

1st attempt:
-------------------
I tried with this type of syntax, but it didnt' work:
{CODE()}
{autocomplete element="#login-switchuser_"|cat:$module_logo_instance type="userrealname" options="label:userrealname,value:username"}
{CODE}

since that is what I understood from here:
http://api.jqueryui.com/autocomplete/#option-source


2nd attempt:
-------------------
I also tried modifying function.autocomplete.php and the
mod-login_box.tpl to end up producing this syntax (as I could see in the
html source of the produced page):
{CODE()}
$("#login-switchuser_2").tiki("autocomplete", "userrealname", { source:[label:"userrealname",value:"username"] });
{CODE}

but it didnt' work either.

---


Any tips on how to write it in the proper jquery and smarty syntax?

Display Realname instead of login at the ((doc:Action Log)) for admins or non-admins with permission to see log reports (teachers seeing reports of their students, project managers seeing reports on their workers, etc)

For those cases (such as LDAP in which username can be just a numeric ID of the user but RealName is the meaningful info/name for that user) where the tiki admin chose to display Realname instead of login where possible.

Setting, for instance, at : tiki-wizard_admin.php?&stepNr=17&url=index.php (Set up User & Community features):
user_show_realnames : "Show user's real name instead of login (when possible)"

Now that I found the tab with the password blacklist, I wanted to use it (to translate it - that was before I found out it is untranslateable).

I generated a custom (test) file of passwords to be banned. As the instruction says, a list with one banned password per line. I had two: "123456" and "test". Every one on a line of it's own. I uploaded the word list,

The counter of "Words currentyl indexed" remained at 0. I tried another setting than "Automatically select blacklist", there are many that claim "Word count: 1000". The counter of indexed words remained 0. Also tried "Create or Replace Word Index" and "Delete Temporary Index". The number of indexed words remained 0...

So does this thing actually work?

So far it did *not* block passwords 123456 and test...

This would be great ((tw:Dogfood)) to better organize our community and let users join groups according to their interests.

As suggested by Nyloth at TikiFest Strasbourg,

1- "Sender Email" could be set by default to no-reply@domain.tld
2- It could be requested as part of the install script.

Many features don't work well until it's set (ex.: Inter-User message, registration with email validation, etc)

Can someone give more details on this one?

I believe the problem occurs when someone goes to edit a page then uses the browser buttons, links or types a new URL without clicking either the svae or cancel buttons. -- mdavey

A related issue is that the lock is checked /before/ all the permissions checks have been done. The result is that one can try to edit a page as anonymous, get an error warning, login, try again only to be told that 'Anonymous' is editing the page. -- mdavey

obs: waiting for cvs to unlock to commit

When user try to register they get the following message after pressing "register":

Your email could not be validated; make sure you email is correct and click register below.

Even if the email has been configured to be not required. (I did not try a blank installation.)
dthacker: Was this installation an upgrade or a new install at version 1.10?

Also the email field is present during registration (I don't know if this is related to the bug or if this is normal behaviour)
dthacker: Asking for the email is normal.

This with the following options enabled (and all the others disabled) in the login settings:
(some extra listed here just in case)
* Users can register: yes
* Crypt passwords method: hash-md5
* Reg users can change password: yes
* Reg users can change theme: yes
* Reg users can change language: yes
* Minimum username length: 3
* Minimum password length: 3
* Re-validate user by email after days: -1
* Re-validate user by email after unsuccessful logins: -1
* HTTPS login: disables
* Protect against CSRF with a confirmation step: yes
* Protect against CSRF with a ticket: yes
---
dthacker:
I am unable to reproduce this using your settings. Could you please retest using the latest SVN version?

any time I login to my own corporate tiki or the tiki.org website for the first time, I get the "Request could not be completed due to problems encountered in the security check. The security ticket included in the request does not match the ticket on the server. Reloading the page may help."
Reloading does help but seeing this error on your first use of this website is not great. Is there a way to stop this from happening ?
{img fileId="2052" thumb="box"}

Users are able to customize Forum Threat layout in a menu on top of the threat with number of posts per page, style, sort by. In My Tiki users are able to set this as preference for user to user messages. This should be possible for the Forum layout too!

Some users prefere the Forum old-post-first and all posts on one page, others prefere latest-post-first and 10 or 20 messages per Page. I would like users to set personal preferences for the discussion forum too. Not for each forum, but once per user, globally in myTiki.

This is a standard feature of most bulletin Board software and the TikiForum should have it too :)

This improvement in Tiki would be very welcome. After spammers add noise to your site (in one day, 10 comments to different places in your tiki from 10 different ip's!), it would be nice if there was the chance that the tiki admin can ban all those 10 ip's with a minimum number of clicks (besides removing many spam comments at once, which can be done already).

This is some possible way to add if (from the interface point of view):

{img src=img122}

Self explicative?
User selects multiple checkboxes, and clicks on some button below which sends all that information (those ip's from those comments) to fill admin banning data (storing the data already for the 10 ip's at once).
Alternatively, one by one, prefilling the interface one by one.

{img src=img123}

Weird issue, maybe too specific of the tiki 12 configuration for a local chapter of the World Social Forum in Catalonia.
But this is serious, and since might happen to other tikis, I report it before I forget what happened, and which manual workaround allowed us to keep going.

We have set up a Tiki site to gather information on workshops in a tracker. The Tracker (through a Wiki page with PluginTracker) also shows the registration fields, in order to get a user registered with the information of the workshop they want to propose.

That wiki page is shown through an iframe in from a wordpress (yes, this is real life; main site was created first with Wordpress, and they only want to use Tiki for the tracker system, so far).

http://www.forumsocialcatala.cat/fscat2014/inscripcio-tallers-fscat2014/

{GROUP(groups="Registered")}This is using this tiki url inside:
http://2014clean.forumsocialcatala.cat/Inscripcions?cookietab=2

inside plugin group since I don't want robots to crawl the tiki directly
{GROUP}

Once the form was submitted, Tiki displayed a page that an error occurred ("did you check your db is up & running", etc)
Apache logs don't show anything rellevant.
Tiki logs indicate that the database table

__dbname.index_52d52c9cad158__

was missing. Checking the mysql db directly, I saw that another similar db table name was there:

__dbname.index_5305ecc55cd29__

I did clear the Tiki caches many times, rebuild the serch index many times, changed from mysqlfts to lucene (clear caches and rebuild index each time) and back, a few times. Even disabled the unified search index. (clearing tiki caches also), and no way, each time the new item was attempted to get added to the Tiki site:
* that error page was shown
* the tiki logs showed the message that __dbname.index_52d52c9cad158__ was missing
* the user got added, but not the tracker item with the workshop information.

I only know that the system worked well until Feb 14th (the date of the last valid item in the tracker). After that, I svn updated to recent revisions yesterday (maybe to r49950ish or similar, I don't know for sure), and today svn-updated again, to r49974. And that mysql table either dissapeared, or was rebuilt to a different name, or the code decided to look for a different name of table at the database.

---
Update: I admit, that this is too of an edge case.
I have not been able to reproduce in a clone of that db in my localhost, so I close this bug report. I hope this issue doesn't happen to anyone else. {sign user="xavi" datetime="2014-03-05T12:56:35+00:00"}

Hello,

a freshly unzipped Tiki 11.0 installation which is configured to use Tiki and LDAP user accounts can't require_once the Net/LDAP2.php file in lib/auth/ldap.php line 14.

I tried to re-generate the composer autoload files, but without success.

Now, I extended the include_path in my php.ini file for vendor_extra/pear

Please have a look at this issues.

Thanks und regards
Lars

Currently (2.x), admins can configure new registrations to select specific groups during registration. I would like to request the following enhancments:

# Specify a default group. Currently, there is no default. I want to be able to configure a default group (i.e., adding checked="checked"...)
#Allow admins to confirm group requests. For example, I want to allow users to ''request'' to join an admin-level group upon registration, but I want the current admin to be able to verify this, before the user gets admin access.

When using a user tracker to collect additional information per user during registration process, it would be great if you could specify to include that information in the user popup/mouseover.

Hi, I've setup a Facebook application to work with other systems and all is fine I can use the FB login feature. When using Tiki however, I go to Login then Login with Facebook option and straight away I hit this in the browser:

{CODE(theme="default")}Possible cross-site request forgery (CSRF, or "sea surfing") detected. Operation blocked.{CODE}

If I hit "Confirm Action":

1. if no fb_xxxxx user is created then a user called fb_ gets created but without any email or name

2. if fb_ user exists per above then login gets denied with:

{CODE(theme="default")}We were unable to create a new user with your Facebook account. Please contact the administrator.{CODE}

In the log all I see is "cannot connect to facebookGraph".

The userid and pass are both installed in Tiki for my FB app and I have the FB callback URL set to: FQDN/tiki-socialnetworks.php?request_facebook as per the documentation.

I set up a Tiki with User Registration with some required fields and using a pretty tracker.

When a user fills the registration form with no value in a ''mandatory'' field, the tracker item is not created and a failure message is displayed with the form so the user can try again. __BUT__ the user is still created.
So, the next attempt will fail again because the user already exist :-(
Also, the admin will not get the email about a new user registration.

In this case, the user should not be created :-(

__More info:__
The issue is only when using pretty tracker templates.
When not using a template, the validation prevents from leaving the registration page, so the issue is not there.

So, a fix would be to make the validation work even when a template is being used for registration.

For reference, the template file -+ask-registration.tpl+- is:
{CODE()}
<div class="registration_form">
<div id="registration" class="panel panel-default">
<div class="panel-body">
<div class="form">
<label for="name" class="control-label titlefield">username</label>
{$register_login}
</div>
<div class="form">
<label for="name" class="control-label titlefield">{tr}Email{/tr}</label>
{$register_email}
</div>
<div class="form">
<label for="pass1" class="control-label">{tr}New Password{/tr}</label>
{$register_pass}
</div>
<div class="form">
<label for="pass2" class="control-label">{tr}Confirm password{/tr}</label>
{$register_pass2}
</div>

<div class="form">
<label for="ins_6" class="control-label titlefield">Not mandatory</label>
{$f_1}
</div>
<div class="form">
<label for="ins_3" class="control-label titlefield">Mandatory field</label>
{$f_3}
</div>

<div>{$register_antibot}</div>
</div>
</div>
</div>
{CODE}

Hi:

After the fix for [item5785], next*.t.o sites display content for anons (yay, thanks!)

However, when attempting to login as user "xavi" (which belongs to several groups in t.o), I see a WSOD with this error message:
{CODE()}
Fatal error: Uncaught exception 'Exception' with message 'Cannot add user xavi to nonexistent group EduTwoEditors' in /var/local/doc.tiki.org/www/lib/userslib.php:6026 Stack trace: #0 /var/local/doc.tiki.org/www/lib/userslib.php(6126): UsersLib->assign_user_to_group('xavi', 'EduTwoEditors', true) #1 /var/local/doc.tiki.org/www/tiki-login.php(179): UsersLib->assign_user_to_groups('xavi', Array) #2 {main} thrown in /var/local/doc.tiki.org/www/lib/userslib.php on line 6026
{CODE}

[http://sourceforge.net/tracker/index.php?func=detail&aid=1325010&group_id=64258&atid=506846]

11.x: http://tiki.org/tiki-view_forum_thread.php?comments_parentId=49820

12.x: http://next.tiki.org/tiki-view_forum_thread.php?comments_parentId=49820

{flash type="url" movie="display525" width="928" height="602"}

{syntax type=tiki}
{syntax type="tiki" editor="plain"}
This is the ((Tracking system for Tiki issues)).
If this is your first time, please read: ((How to Submit a new item on the Wishlist))

I have encountered a few snags after upgrading from Tiki 1.9.11 to 2.0

One of the problems is that I am unable to register / add users, because of the following error message:

An error occured in a database query!
Unknown column 'email_confirm' in 'field list'

This happens on
tiki-register.php (registration) and tiki-adminusers.php (batch upload / add)

Is there a fix for this?