darcs changes 2008-07-01

Good Morning!

This are the darcs changes for DokuWiki committed
yesterday. Please test them and report bugs.

---------------------------------------------------------------------
Tue Jul  1 01:00:01 CEST 2008  Andreas Gohr <andi[at]splitbrain.org>
  tagged develsnap 2008-07-01
---------------------------------------------------------------------

Single patches can be downloaded from
http://dev.splitbrain.org/darcs/index.cgi/dokuwiki/?c=patches

Bye,
your darcs changelog mailer

--

-- 
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist

Re: [al-dokuwiki <at> none.at: enhancement for xsendfile]

On Son 29.06.2008 01:09, Anika Henke wrote:
> Aleksandar Lazic wrote:
>> Any opinion about this mail?

[snipp]

>> Please apologize if this is the wrong list, please point me to the
>> right way to add such feature requests to dokuwiki.
>
> Yes, this is exactly the correct way of addressing such issues. The
> mailinglist is best for development questions, patches, discussions,
> etc.

Thanks, this was unsure for me.

BR

Aleks
--

-- 
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist

Re: enhancement for xsendfile

Hi,

On Mon 30.06.2008 15:55, Michael Klier wrote:
>Hi,
>
>(I am replying to the wrong mail in the thread I know, but I somehow
>lost the original ).

[snipp]

>> Aleks wrote:
>> The new one like this:
>> 
>> X-Accel-Redirect:
>> /data/cache/a/a35c343a51444078ef7b481250ef70bc.media.50x50.png
>> 
>> for this only the url 'path' in the nginx config as in point 4, I think
>> it is better .
>
>Hmmm, so if I understand it right the point is that you don't have to
>write the full path to the data directory in your server configuration
>(the location setting)?

Yes.

>As I don't use nginx I had a quick look at the nginx documentation to
>be able to understand your proposal so please correct me if I am wrong
>.
>
>Looking add the other nginx configuration examples this is how the

User home directores installations

Hi,

A long time ago as I discovered dokuwiki I met some problems using nice
urls with dokuwiki installed in a *nix user home directory and we had
some exchanges on the list then (started with
<450031EA.70401 <at> teletopie.net>) --- only the main start page was
accessible albeit links to other pages were correct. It apparently was a
problem related to the PATH_INFO infromations being possibly shaken up
somehow and turning off nice urls did the trick. As this was not so much
of a problem then (and I'm soooo lazy) I stopped investigating further
before having found a good(TM) solution.

As I upgraded recently different DW instances to the last release
version, I made some tests and it turns out that with the 2008-05-05
version everything works well with the only important point being to set
both 'basedir' (to '/~username/wikipath/') and 'baseurl' (to
'http://servername:port') when installing or moving DW under
~user/some/where.

I made repeated tests with new installations as well as instances moved
from some other places (file-based wiki really rocks :-D) with no
problems (only cleared cache everytime and set permissions according to
new setups). On the other hand I noticed 2007-06-26 always exhibited the
problem reported some years ago.

Big cheers for all of DW's talented developers !

FWIW

--

-- 

Security Token error when accessing DW from hand-held device

Hello all,

I have an instance of DokuWiki on my intranet (version 2008-05-05).
When I try to make a change to an article through my blackberry, I get
a cross-site scripting error: "Security Token did not match.  Possible
CSRF attack."

Why is this happening?  What can I do to prevent it from happening?

Thanks

JDG

-- 
Jay Dickon Glanville
--

-- 
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist

Re: Security Token error when accessing DW from hand-held device

> I have an instance of DokuWiki on my intranet (version 2008-05-05).
> When I try to make a change to an article through my blackberry, I get
> a cross-site scripting error: "Security Token did not match.  Possible
> CSRF attack."
>
> Why is this happening?  What can I do to prevent it from happening?

This shouldn't happen, DokuWiki inserts a security code as a hidden
field in the edit form (and any other important form) and checks that
it is send with all the other form data. The security token is
generated from your session id and some secret static data. As long as
your session exists the token stays the same.

There are two possible causes for your error:

1) your blackberry does not send the hidden field with the rest of the
data - I doubt that
2) your session changes for some reason

The second is probably the problem. Here are a few questions that
might help to find the problem:

- do you log in to edit? Does the login work correctly?
- does the blackberry browser accept cookies?
- are you accessing your intranet via a VPN or Proxy? Could that one
messing with your cookies?

Andi

--

-- 

Re: Security Token error when accessing DW from hand-held device

On Wed, Jul 2, 2008 at 2:57 PM, Andreas Gohr <andi <at> splitbrain.org> wrote:
> This shouldn't happen, DokuWiki inserts a security code as a hidden
> field in the edit form (and any other important form) and checks that
> it is send with all the other form data. The security token is
> generated from your session id and some secret static data. As long as
> your session exists the token stays the same.
>
> There are two possible causes for your error:
>
> 1) your blackberry does not send the hidden field with the rest of the
> data - I doubt that
> 2) your session changes for some reason
>
> The second is probably the problem. Here are a few questions that
> might help to find the problem:
>
> - do you log in to edit? Does the login work correctly?

I am required to log in to edit.  The login appears to have worked correctly.

> - does the blackberry browser accept cookies?

Yes

> - are you accessing your intranet via a VPN or Proxy? Could that one
> messing with your cookies?

I believe I'm accessing the intranet through a proxy.  Could it be
messing with the cookies?  Possibly, but that's something totally out
of my control.

Can't upload anything anymore

Re: Can't upload anything anymore

Re: Can't upload anything anymore