Category: User Administration (Registration, Login & Banning)

Use case:

We want users to update their profiles every once in a while.

So the system should be reminding users to click on tiki-view_tracker_item.php?view=+user and update their user profile.

Eventually, an email reminder could be cool as well.

Anonymous can view this gallery:
http://www.marclaporte.com/gallery1
And there is a list to the galleries:
Put I can't list the available galleries (available to anonymous)
http://www.marclaporte.com/tiki-galleries.php


There is a related problem with tiki-list_gallery.php where a :

if ($tiki_p_admin_galleries != 'y')

which prevents all individual image gallery permission checks

If a user has no access to a feature or a wiki page, normally the login page is shown. However, if the site has a phpLayers menu (E.g. {phplayers id=43 type=horiz} in Site Identity features - Custom Code - Content ), the phpLayers menu fails and dies. The user only sees a blank page with the message "LayersMenu Error: setMenuStructureString: empty string. Halted".

when downloading image/jpeg type of user avatar it fails due to problem in execution of SQL query. It seems that binary uploads that for sure contains special characters destroys the SQL statament to be queries.
My TikiWiki is 1.9.1 configured with Postgersql 8.x
For more info see --> https://sourceforge.net/tracker/index.php?func=detail&aid=1283624&group_id=64258&atid=506846

tiki-objectpermissions.php references tiki_p_admin_objects which is not defined. For that reason the test in line 11 fails and even admin does not have the permissioin the change permissions of article themes.

For several weeks, I have problems to log into dev. tiki.org. Error messages about problems with a security ticket. This even happens on freshly loaded browser tabs. Workaround is to reload that page several (!) times.

And: after the login was successfully done, there is no "post new comment" button. To make this appear another several (!) reloads are necessary...

Sounds like some caching issue.

When you edit a banning rule, that rule gets deleted (at least, from the list at the Banning interface in Tiki).

To reproduce:
* go to tiki-admin_banning.php
* add a rule for this ip "91.201.66.6" (real ip of spammers, btw) with the title "91.201.66.6_regular_spammers"
* Check all features
* Check the setting to activate the rule by dates
* Select the maximum possible time frame (btyw, this only allows selecting within the same year: reported by somebody else already in another bug report; see [bug3643])
* add some custom message
* save
* click at the title of your rule in order to have it open for edition again for you
* the rule is deleted from the list of rules, and the edit interface is empty

---
confirmed in two different tiksi from different servers... (btw, 5.x is also affected)

provide a clicable link to login to dev.t.o from a smartphone out of the menu icon at the top right corner

Have you tried recently (in the last several weeks?) {sign user="xavi" datetime="2016-04-06T15:43:28+00:00"}
Same issue when testing https://nextdev.tiki.org

You can't click there at any login link, it's hidden below the square icon of the collapsed menu at the topbar.

And ensure that this fix is applied to the main *.t.o sites , at least. (tiki.org, dev, doc, I would say)

When clicking on a validate e-mail link the user gets a "Invalid username or password" error, rather than being validated.

Not sure i can set up a show instance as you need the validation email system to work but have reproduced locally (and can't see how to fix it)

Probably a blocker?

When I configure Tiki with User Tracker, I can set «Tracker field IDs to sync the "real name" pref from» in tiki-admin.php?page=login

This is ignored. No synchronization happens.

Community / User features /
User Preferences Screen: yes

Community / General /
Show user's real name instead of login (when possible): yes

The realName user preference is not used in trackerlist, tracker, and pretty tracker. Actually, why the when possible? Is not it where implemented?

Note that
- in my case the e-mail is used as the login name
- it does work when adding new comments to trackers
used: TW5.0Beta1

It is possible to include groups recursively.
As a result the users that belong to those groups receive a CGI Error when trying to login.

As anon, when I land on a page that require permission I see the login module (page).

I enter my credential and I’m redirected to the homepage instead of being where I was trying to go.
It is not a very old (3 month +/-) regression.

I didn’t spot it right away because I though it was on a tiki I’m working with but I just found it also happen on dev.tiki.org.

The login settings page should be refactored to eliminate the presentation of unneeded configuration options.

Steps to reproduce:

Use admin rights for the following steps

1. Create at least 2 categories
2. Give Registered (default no rights changed) User group access to one of them and deny access to the other
3. Now create 1 Wiki site in each Category
4. Link both pages from the tiki.index.php via Wiki link

5. Log in as the Registered user now
6. Try viewing both Sites via the Wiki link on one u get the error that u dont have permission to do so
7. Now click on the Link
Create this page (page will be orphaned)
8. Now u can view the page even though u arent allowed to do so
9. Uncheck the category change the site and u are even able to save the edits u did even though u dont have permission to do so

Hello,

I am testing the registrations into one of the sites I develop (the first test 4.1)
The message sent to the user as various content and "structure" errors.

1- the system inserts HTML comment [<!-- TPL: mail/user_validation_mail.tpl -->]
because the option
(preference name: log_tpl) was activated
These comment are displayed into the message and placed (3 times) in not a right place.
A blank line into the mime definition is interpreted as begin of text.

2- Even the option is not used there is a blank line into mime commands so the second part of mime definition are not taken in account and appear as document text....

Join three file *.eml
*name ended "b-html_v4b.eml" which is sent with option log_tpl
*name ended "-b.eml" without option log_tpl
*name ended "-b-v5.eml" without option log_tpl with corrections integrated : mail well displayed has text:plain

This makes us unable to start normal exploitation of the site, till is not solved.
We track all messages display and check French translation.

I don't had time till know to go to the soft structure to find the error.

Best regards

It should be useful for registered developers to have the option to join documents to the bug-track during main redact

''__the b-html_v4b.eml__''
X-Account-Key: account36
X-UIDL: 12627.....48.mail97.ha.ovh.net,S=1947
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <teawik@trebly.net>
Delivered-To: bty-........@trebly.net
Received: from b0.ovh.net (HELO queue) (213.186.33.50)
by b0.ovh.net with SMTP; 6 Jan 2010 01:33:36 -0000
Received: from localhost (HELO mail97.ha.ovh.net) (127.0.0.1)
by localhost with SMTP; 6 Jan 2010 01:33:36 -0000
Received: from b0.ovh.net (HELO queueout) (213.186.33.50)
by b0.ovh.net with SMTP; 6 Jan 2010 01:33:36 -0000
Delivered-To: trebly.net-bty-...........@trebly.net
Received: from b0.ovh.net (HELO queue) (213.186.33.50)
by b0.ovh.net with SMTP; 6 Jan 2010 01:33:36 -0000
Received: from localhost (HELO mail97.ha.ovh.net) (127.0.0.1)
by localhost with SMTP; 6 Jan 2010 01:33:36 -0000
Received: from b0.ovh.net (HELO queueout) (213.186.33.50)
by b0.ovh.net with SMTP; 6 Jan 2010 01:33:36 -0000
Received: from unknown (HELO teawik.trebly.net) (bty@trebly.net@213.251.189.205)
by ns0.ovh.net with SMTP; 6 Jan 2010 01:33:35 -0000
MIME-Version: 1.0
From: Teawik@trebly.net
Return-Path: Teawik@trebly.net
Reply-To: Teawik@trebly.net
Subject: <!-- TPL: mail/user_validation_mail_subject.tpl -->Votre inscription Tiki (teawik.trebly.net)
X-Ovh-Tracer-Id: 16748887014789590094
X-Antivirus: avast! (VPS 100105-0, 05/01/2010), Inbound message
X-Antivirus-Status: Clean

<!-- /TPL: mail/user_validation_mail_subject.tpl -->
Content-Type:text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <kvsxny......@teawik.trebly.net>
To: bty-...........@trebly.net
X-Ovh-Tracer-Id: 16748605539809995854
X-Ovh-Remote: 213.251.189.205 ()
X-Ovh-Local: 213.186.33.20 (ns0.ovh.net)
X-Spam-Check: DONE|U 0.5/N

<!-- TPL: mail/user_validation_mail.tpl -->Bonjour BTY044,
Vous (ou quelqu'un d'autre) a inscrit cette adresse électronique à teawik.trebly.net
Si vous voulez pouvoir vous connecter sur ce site, vous devrez suivre le lien suivant pour la première connexion :
http://teawik.trebly.net/tiki-login_validate.php?user=B?????&pass=........................
Bonne visite sur le site!

<!-- /TPL: mail/user_validation_mail.tpl -->


''__the -b.eml file__''
X-Account-Key: account36
X-UIDL: 1262928532.31100.mail97.ha.ovh.net,S=1715
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <teawik@trebly.net>
Delivered-To: bty-a.......ly.net
Received: from b0.ovh.net (HELO queue) (213.186.33.50)
by b0.ovh.net with SMTP; 8 Jan 2010 05:28:51 -0000
Received: from localhost (HELO mail97.ha.ovh.net) (127.0.0.1)
by localhost with SMTP; 8 Jan 2010 05:28:51 -0000
Received: from b0.ovh.net (HELO queueout) (213.186.33.50)
by b0.ovh.net with SMTP; 8 Jan 2010 05:28:51 -0000
Delivered-To: trebly.net-bty-...........@trebly.net
Received: from b0.ovh.net (HELO queue) (213.186.33.50)
by b0.ovh.net with SMTP; 8 Jan 2010 05:28:51 -0000
Received: from localhost (HELO mail97.ha.ovh.net) (127.0.0.1)
by localhost with SMTP; 8 Jan 2010 05:28:51 -0000
Received: from b0.ovh.net (HELO queueout) (213.186.33.50)
by b0.ovh.net with SMTP; 8 Jan 2010 05:28:51 -0000
Received: from unknown (HELO teawik.trebly.net) (bty@trebly.net@213.251.189.205)
by ns0.ovh.net with SMTP; 8 Jan 2010 05:28:50 -0000
MIME-Version: 1.0
From: Teawik@trebly.net
Return-Path: Teawik@trebly.net
Reply-To: Teawik@trebly.net
Subject: Votre inscription Tiki (teawik.trebly.net)

Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <kvwxw7.......trebly.net>
To: bty-........@trebly.net
X-Ovh-Tracer-Id: 14020268591991991374
X-Ovh-Remote: 213.251.189.205 ()
X-Ovh-Local: 213.186.33.20 (ns0.ovh.net)
X-Spam-Check: DONE|U 0.5/N
X-Antivirus: avast! (VPS 100107-1, 07/01/2010), Inbound message
X-Antivirus-Status: Clean

Bonjour BTY05,
Vous (ou quelqu'un d'autre) a inscrit cette adresse électronique à teawik.trebly.net
Si vous voulez pouvoir vous connecter sur ce site, vous devrez suivre le lien suivant pour la première connexion :
http://teawik.trebly.net/tiki-login_validate.php?user=BTY05&pass=0de72c4e5ca890a3b931d7dfab38f992
Bonne visite sur le site!

''__the "b-v5.eml" (manually corrected on output)__''

X-Account-Key: account36
X-UIDL: 1262928532.31100.mail97.ha.ovh.net,S=1715
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <teawik@trebly.net>
Delivered-To: bty-a.......ly.net
Received: from b0.ovh.net (HELO queue) (213.186.33.50)
by b0.ovh.net with SMTP; 8 Jan 2010 05:28:51 -0000
Received: from localhost (HELO mail97.ha.ovh.net) (127.0.0.1)
by localhost with SMTP; 8 Jan 2010 05:28:51 -0000
Received: from b0.ovh.net (HELO queueout) (213.186.33.50)
by b0.ovh.net with SMTP; 8 Jan 2010 05:28:51 -0000
Delivered-To: trebly.net-bty-...........@trebly.net
Received: from b0.ovh.net (HELO queue) (213.186.33.50)
by b0.ovh.net with SMTP; 8 Jan 2010 05:28:51 -0000
Received: from localhost (HELO mail97.ha.ovh.net) (127.0.0.1)
by localhost with SMTP; 8 Jan 2010 05:28:51 -0000
Received: from b0.ovh.net (HELO queueout) (213.186.33.50)
by b0.ovh.net with SMTP; 8 Jan 2010 05:28:51 -0000
Received: from unknown (HELO teawik.trebly.net) (bty@trebly.net@213.251.189.205)
by ns0.ovh.net with SMTP; 8 Jan 2010 05:28:50 -0000
MIME-Version: 1.0
From: Teawik@trebly.net
Return-Path: Teawik@trebly.net
Reply-To: Teawik@trebly.net
Subject: Votre inscription Tiki (teawik.trebly.net)
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <kvwxw7.......trebly.net>
To: bty-........@trebly.net
X-Ovh-Tracer-Id: 14020268591991991374
X-Ovh-Remote: 213.251.189.205 ()
X-Ovh-Local: 213.186.33.20 (ns0.ovh.net)
X-Spam-Check: DONE|U 0.5/N
X-Antivirus: avast! (VPS 100107-1, 07/01/2010), Inbound message
X-Antivirus-Status: Clean

Bonjour BTY..,
Vous (ou quelqu'un d'autre) a inscrit cette adresse électronique à teawik.trebly.net
Si vous voulez pouvoir vous connecter sur ce site, vous devrez suivre le lien suivant pour la première connexion :
http://teawik.trebly.net/tiki-login_validate.php?user=BTY..&pass=..........................
Bonne visite sur le site!



END!

The register and forgot password link are barely visible at https://tiki.org/Community
{img fileId="2147" thumb="box"}

om: admin
To: admin
Cc:
Subject: Tiki User Registration Request
Date: Thu 07 of Sep, 2006 [13:32]

Hi,

gandalf < > has requested an account on www.domain.de

To validate that account, please follow the link:
http://www.domain.de/tiki-login_validate.phpuser=gandalf&pass=98d3eee5d2201c477b6066c28dac3bd2


best regards,
your Tikiwiki

The validation link should be something like this:

http://www.domain.de/tiki-login_validate.php?user=gandalf&pass=98d3eee5d2201c477b6066c28dac3bd2

When inserting the question mark manually validation is working.

Read on #wiki (freenode)

(10:47:42) TheSheep: marclaporte: don't want to be rude, but I have an implementation hint for tikiwiki -- make the registration url fit in 80 chars, it will be much easier to copy to the browser this way
(10:48:05) marclaporte: you mean the one you receive by email?
(10:48:17) marclaporte: (not rude at all, always like feedback, good or bad)
(10:48:45) TheSheep: marclaporte: yes
(10:49:19) TheSheep: marclaporte: the domain name is short, if only the php file name and the password were shorter, it would fit nicely
(10:49:38) TheSheep: just a small detail
(10:50:07) TheSheep: most people use graphical mail clients anyways probably


Below is an example:
Hi marclaporte2,
you or someone registered this email address at tikiwiki.org
If you want to be a registered user in this site you will have to use the following link to login for the first time:

http://tikiwiki.org/tiki-login_validate.php?user=marclaporte2&pass=de7fdd5c84dae05d133dc75948188b4c

Enjoy the site!

The registration button in the registration form (tiki-register.php) is not working.
The click has no effect, because in the script (jquery.validate.js line 59ff) detects validator.pendingRequest and returns 'false'.
So basically, the button appears to be 'dead'.
No registration is being processed, no error message issued.

To reproduce:
* Admin registers a new user, with confirm email and change password checked (as is typical)
* User clicks on confirmation email link
** User sees change password form
* User closes password form
* User click links again and sees "you have already validated your email" message
* User doesn't know the previous password and isn't offered the change password form again

---
p.s. there is a similar issue if you fail to match the two passwords

{syntax type="tiki" editor="plain"}
If you set the "login_is_user" flag, registration fails with the message "email_not_valid".

The confirmation message for new users has an incorrect order of headers. With cpanel hosting, this is not being recognised as a valid e-mail:

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:

xxxxxxx@bellsouth.net
Mail sent by user nobody being discarded due to sender restrictions in WHM->Tweak Settings

Here's the header as it's being generated in the current version:

Return-path: <xxxxxxx@vic-fontaine.com>
Received: from nobody by server.yourservermanagement.com with local (Exim 4.68)
(envelope-from <xxxxxxx@vic-fontaine.com>)
id 1JzEQ5-0006m7-Dq
for xxxxxxx@bellsouth.net; Thu, 22 May 2008 12:17:37 -0500
To: xxxxxxx@bellsouth.net
Subject: Your Tiki information registration (www.vic-fontaine.com)
MIME-Version: 1.0
From: xxxxxxx@vic-fontaine.com
Reply-To: <xxxxxxx@vic-fontaine.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <k1a5dd.xpbvyl@www.vic-fontaine.com>
Date: Thu, 22 May 2008 12:17:37 -0500

I couldn't find a related issue (registration / register => dogfood category) so I create this.

It is actually super hard to register at Tiki.org.
This is critical and should be fixed asap.

If you don’t enter correctly the captcha ''(this may also subject to a sub-bug because when I tested I paid attention to those too hard too read letters)'' you enter in a loop of error you can’t get out.

{img fileId="1276" thumb="box"}
{img fileId="1277" thumb="box"}
{img fileId="1278" thumb="box"}
{img fileId="1275" thumb="box"}

When the website was back I tried to login and got another error:
Error
Account requires administrator approval.

I had to validate and then to confirm email using tiki-adminusers.php.

This is very bad for new user willing to register and it ended with Tiki.org not being available.

I have encountered a few snags after upgrading from Tiki 1.9.11 to 2.0

One of the problems is that I am unable to register / add users, because of the following error message:

An error occured in a database query!
Unknown column 'email_confirm' in 'field list'

This happens on
tiki-register.php (registration) and tiki-adminusers.php (batch upload / add)

Is there a fix for this?