Tuesday, 2009-06-09

../irclogs/#mantishelp.2009-06-09.log
--- scribe started ---00:00
mantisbotNew bug: Bug 10572 - sdurkin - open - new04:37
mantisbotNew bug: APPLICATION ERROR #1802: Relationship not found. - http://www.mantisbt.org/bugs/view.php?id=1057204:37
mantisbotNew bug: Bug 10573 - nobswolf - open - new07:43
mantisbotNew bug: support SQLite - http://www.mantisbt.org/bugs/view.php?id=1057307:43
gialluSQLite rocks07:46
CIA-61Mantisbt: s.mazeland * rd9978e58107f /lang/strings_english.txt: Consistent capitalisation09:36
nuclear_eclipsemorning all12:27
Kirill_Krasnovnuclear_eclipse: lo12:28
[KK]KirillJohn, I have wish12:29
nuclear_eclipseuh oh12:29
[KK]Kirill:)12:29
[KK]KirillI need 2 events12:29
[KK]Kirillbefore create/update user and after update create user12:29
nuclear_eclipseso, four events? :P12:30
[KK]Kirill612:30
[KK]Kirilland delete12:30
[KK]Kirillbefore after12:30
nuclear_eclipsewhy both befre and after delete?12:30
nuclear_eclipseI should think a single delete event would suffice12:31
[KK]Kirillno.. 2 events before and after delete12:31
[KK]Kirillif user can't be deleted?12:31
[KK]Kirillor I don't want delete him in plugin12:31
nuclear_eclipseif there's an event before the deletion, I don't see how the second event adds any other ability12:31
[KK]Kirillfor example I check user and reject this operation12:32
nuclear_eclipsewhy would a plugin reject deletion of a user?12:32
[KK]KirillI can't write example now, but I think I found for why12:34
[KK]Kirillfor now I want any manipulation with users in other system.12:37
[KK]Kirillex. dokuwiki, smf12:37
dhx_mhi12:41
[KK]Kirilldhx_m: lo12:41
nuclear_eclipsehi dhx_m, long time no see :)12:41
dhx_mwould the before delete event take place before Mantis checks if the user is authorised to delete the account?12:41
dhx_m:)12:41
dhx_mI've been watching development here still12:41
[KK]Kirilldhx_m: no. it must be after12:42
nuclear_eclipsedhx_m: I'd assume the event would take place *right* before the deletion...12:42
dhx_mso in that case, why do you need an after event (if you already know for sure the user will be deleted)?12:42
nuclear_eclipsethat was my point :)12:43
dhx_myep12:43
[KK]Kirilldhx_m: ok12:43
dhx_mactually I know12:43
[KK]Kirillnuclear_eclipse: ok12:43
[KK]KirillI understand12:43
[KK]Kirill5 events12:43
[KK]Kirill:)12:43
dhx_mif the user is deleted from the database... and a plugin needs to remove data from another db table after the user is deleted12:44
nuclear_eclipseI'm also not fond of allowing plugins to reject user deletions12:44
dhx_mthat action may need to happen after the user is removed from mantis_user_table12:44
[KK]Kirilldhx_m: no12:44
[KK]Kirillbefore12:44
[KK]KirillOk. simple example12:45
nuclear_eclipseeg, allowing plugins to reject deletions *does* make a second event necessary, but I don't like that idea; mantis should make the decision, and just send a single event before deleting to allow plugins to clean up any datasets necessary, and then delete the user12:45
dhx_myep I would normally agree12:45
[KK]Kirillone sec.. I just see event sytem12:46
dhx_mI can't see a current need for an after delete event, but it is something that can easily be added in the future if required12:47
[KK]Kirillfunction event_signal( $p_name, $p_params = null, $p_params_dynamic = null, $p_type = null ) {12:48
[KK]Kirillwe have $p_params12:48
[KK]Kirillwhat's about return reject in params?12:48
nuclear_eclipse[KK]Kirill: I don't understand why a plugin should be able to reject deleting a user12:49
nuclear_eclipsethat just doesn't make sense to me12:49
[KK]Kirillsimple example, I check able delete user in other systems12:50
[KK]Kirillif I can't delete in other - I reject delete in mantis12:50
[KK]KirillIt very simple example in my mind12:51
nuclear_eclipse[KK]Kirill: I think that just breaks user interaction and expectations12:51
nuclear_eclipsenot to mention, it overcomplicates the subject12:51
[KK]Kirillbrr, sorry I don't understand12:51
dhx_mcan I ask why we're including a complete copy of 3rd party dependencies within the main mantis repository12:51
dhx_mrather than create a separate repository (local clone) that includes Mantis patches?12:52
nuclear_eclipsedhx_m: adodb and phpmailer you mean?12:52
dhx_myep12:52
dhx_mseems odd to me that they're bundled with source code for mantis12:52
[KK]Kirillok12:52
dhx_mI guess those libraries don't use SCM which makes it harder (or they use weird stuff)12:52
nuclear_eclipsea) that's how we've always done it, b) it makes mantis installs much much simpler, and c) upstream for both those libs sucks12:53
[KK]Kirillnuclear_eclipse:  I translate you text12:53
[KK]Kirillnuclear_eclipse: may be12:54
[KK]Kirillnuclear_eclipse: What can you offer?12:54
dhx_mnuclear_eclipse: true, and I guess most package managers don't really understand web scripts12:55
dhx_m[KK]Kirill: I agree that a plugin may want to prevent a user from being deleted, but are there any plugins (or plans for plugins) that would need to do it right now?12:56
nuclear_eclipsedhx_m: our Fedora and Debian maintainers both do what they can to separate out the libs when they generate packages for their distros, but it also means issues because upstream doesn't seem to ever pay attention to our patches....12:57
dhx_mI'm not sure what the process is for adding events, whether they're added now (before a use is found) or whether they're added on demand12:57
nuclear_eclipsedhx_m: kind of both12:57
[KK]Kirillnuclear_eclipse: update channel topic12:57
nuclear_eclipseif it's something that I can anticipate a need for, I tend to add them as soon as I can understand their purpose, and either write a throwaway plugin to test it, or write a full plugin to test it12:58
dhx_mnuclear_eclipse: yep, not much you can about their method of packaging and ignoring patches (they do have valid reasons for using common upstream libs in place of bundled copies)13:00
nuclear_eclipseand I certainly don't blame them13:00
dhx_mnuclear_eclipse: OpenOffice was/is notorious for bundling copies of quite a few libraries and that is generally a bad thing13:00
nuclear_eclipseI do appreciate all the work that aptituz_ and giallu go through; I know there are a lot of people that run Mantis from their packages13:01
* giallu is around13:01
dhx_mnuclear_eclipse: for example, updating a library because of a security flaw... you don't want to wait for every application on your system to release a new version (complete with updated bundled libraries)13:01
nuclear_eclipsethe only reason I don't use packages for webapps is because distros never stay on the bleeding edge :P13:01
nuclear_eclipsehi giallu13:01
dhx_myep, they're very behind on web scripts13:01
dhx_mand many distros just aren't setup properly to handle them nicely13:02
nuclear_eclipsedhx_m: with a lib security issue, you don't want to *find* all the packages bundling that lib to make sure they're up to date...13:02
giallunuclear_eclipse, solution is to use Fedora ;)13:02
nuclear_eclipseyeah, but that would mean I have to use *Fedora*; don't make me vomit ;)13:03
dhx_myep that is what I was saying :)13:03
dhx_mI guess the common scenario is creating a symbolic link from the wwwroot to the Mantis scripts in /usr/share/? or some other common directory13:03
gialluif you're not vomiting sorrounded by all those broen stinky stuff, you'll be fine in the blue13:03
dhx_mand how you go about changing config.php type files I'm not 100% sure13:03
giallus/broen/brown13:04
nuclear_eclipsegiallu: orange is my favorite color ;)13:04
dhx_mhow does debian/fedora/etc handle web scripts? can you do slotted installs like Gentoo where multiple versions can be installed on your disk at once?13:04
gialludhx_m, config_inc is a symlink to /etc/mantis/config_inc.php13:04
dhx_mgiallu: that isn't so good for shared web hosting though13:05
gialludhx_m, no13:05
gialluor better, that's another topic13:05
gialluwhich is not covered by my packagin13:05
dhx_mgiallu: well the problem I see is what happens if multiple users on the system want to use Mantis on their "web space"13:05
dhx_mgiallu: they'll want to update the version of the script independently of each other, and have their own config13:06
gialludhx_m, not that I'm going to work on that anytime soon, but no one reported a bug in bugzilla for the mantis component, so I assume that's not a common issue13:07
dhx_mgiallu: sounds more like people ignore the packaged version of a script completely?13:08
gialluhow can I know?13:08
gialluI know that I have some users of the mantis rpm13:09
dhx_myou can't :)13:09
dhx_myep I know, I'm not having a go at the Mantis RPMs13:09
dhx_mbecause it is a general problem that affects all web script packages IMO13:09
nuclear_eclipsedhx_m: that just points out yet another reason why SquirrelMail is the only webapp that I ever use from distro packages :P13:12
nuclear_eclipseugh, meeting time13:13
dhx_mhave fun :)13:14
dhx_mpaul_: good work with the WIP on your graph branch :D13:32
dhx_mpaul_: although I certainly don't like graph_get_font() in graph_api.php (in your new plugin directory) having a hardcoded path to c:\windows\fonts\arial.ttf :)13:34
dhx_mpaul_: I was half thinking of trying to get Mantis using gnuplot instead of jpgraph13:37
giallutalking about graphs13:39
gialluI was asked if interested to package phplot.sf.net13:40
dhx_mpaul_: the reason I don't like jpgraph currently is the huge amount of memory it requires to generate large-ish graphs13:40
gialluI denied, but can reconsider if we think we finally want to move away from jpgraph13:40
dhx_mjpgraph looks better in terms of features from what I can see13:41
giallupity is not free...13:42
dhx_moh yeah you're right... jpgraph is fairly useless then13:42
dhx_mgiven it can't be used in corporate settings (for profit)13:42
* giallu never seen a single graph from mantis13:43
dhx_mfor simple bar graphs, something like phplot might be OK13:43
dhx_mI use graphs regularly with Mantis13:43
dhx_malthough there is a lot of work to be done with it13:43
dhx_mthat is something I don't mind working on13:43
dhx_mI already tried to make some gnuplot scripts to show Mantis metrics13:43
dhx_mie. area graph over time showing the number of bugs at each status level13:44
dhx_mwhat I'm not entirely sure of is how to properly add graph capabilities into Mantis13:44
dhx_mparticularly in a way which plugins can provide their own graphs/statistics13:44
dhx_mfor instance, creating a graph showing the number of commits per day13:45
dhx_mgiallu: it seems paul was trying out ezGraph (sample graphs at http://ezcomponents.org/docs/api/trunk/Graph_gallery.html)13:51
dhx_mit looks quite pretty :)13:51
gialluthat's fine ( already packaged in Fedora :) )13:52
dhx_mI haven't looked much at it, but it seems fairly heavyweight (you get a lot of other unwanted stuff bundled in)13:53
dhx_mie. you download all the components at once, even though you only want the graph part13:53
giallupackagers usually split it13:55
RonaldHHi, Looking for dynamic allocation of custom field from database source. I believe this currently will work through a custom function definition in a custom field?14:35
RonaldHNext would be to chain the selected value to another field... this is what I really cannot find wether its possible though custom functions or plugins (1.2 alpha) ?14:36
jlebHi all.  Working with source-control-integration plugin and having some issues trying to connect it to local server Subversion repository.  Anybody familiar with how to config that?15:45
nuclear_eclipsejleb: what's the issue?15:53
jlebsubversion is running only a SVN connection, not WebDAV or anything.  how do i configure the plugin to pick that up?15:54
nuclear_eclipseshould be just a matter of entering an SVN-style url hen configuring the repository in Mantis15:55
nuclear_eclipsewhen*15:55
jlebwhich type of repo?  Generic?15:55
nuclear_eclipseWebSVN15:55
nuclear_eclipsethe "generic" type does nothing but display data already in the system; you should always use a specific repository type15:56
nuclear_eclipsejleb: I have to go to lunch; I'll be back in about 45 minutes15:57
jlebok, i see.  that would be why i was having so much trouble.   i will try to work from here and check back in later if i'm still stuck15:57
jlebthanks15:57
riochshould all the .php files be executable on the server? I'm getting 404 errors.16:34
riochwell, I think it's 404...it's this: The requested URL /bugs/admin/install.php was not found on this server.16:34
nuclear_eclipserioch: no, they don't need to be executable16:47
nuclear_eclipsehowever, you do need to make sure that the webserver process has read access to the files16:48
riochnuclear_eclipse: hmmm I think my problem is to do with it being on a subdomain of my site. Any chance you can help?16:48
nuclear_eclipsewhat server are you running?16:48
riochnuclear_eclipse: yes, it has read access16:48
riochapache16:48
nuclear_eclipseusing vhosts?16:48
riochhmmm not sure. how can I find that out?16:49
nuclear_eclipsethat would be part of how your apache configuration is set up16:49
nuclear_eclipseyou'll need to make sure that mantis is contained within either your apache's DocumentRoot, or the DocumentRoot of an apache vhost16:50
riochah I think this isn't an issue related to mantis...16:51
nuclear_eclipseprobably not16:51
riochI have /subdomains/httdocs/bugs and /subdomains/httdocs/test. The test one was created when I setup the domain in plesk, and when I put that as my address in a browser I get "no permissions to view the directory"...16:52
rioch...however, with /bugs it just says it can't find it16:52
nuclear_eclipsehmm, it might also be a plesk issue,which I've never dealt with -- I don't think it's a mantis issue though -- so I'm sorry, but I'm not sure that I'm gonna be able to help16:54
nuclear_eclipseyou should probably try talking to plesk/whoever hosts/admins/configured your system16:54
nuclear_eclipsehi Victor16:55
riochnuclear_eclipse: ok no problem, thanks anyway16:57
[KK]KirillJohn, you update avatar? :)17:03
nuclear_eclipseyeah, a couple weeks ago :P17:03
[KK]Kirillnice17:04
[KK]KirillI just look it in bugtracker17:04
[KK]KirillCan you assign this issue to siebrand bug 1055317:05
mantisbotBug 10553 - datacompboy - open - new17:05
mantisbotMantis on www.mantisbt.org/bugs/ sends mails in wrong encoding - http://www.mantisbt.org/bugs/view.php?id=1055317:05
nuclear_eclipse[KK]Kirill: it seems to me that's a duplicate of 10136?17:07
[KK]Kirillnot17:07
[KK]KirillThis task about bad header17:07
[KK]Kirillbut this issue about wrong email from mantisbt.org17:08
[KK]KirillI set english only for recieve correct email17:08
nuclear_eclipse10553 is about emails not using proper encoding, because mantisbt.org is not yet running latest git ...17:08
nuclear_eclipseand 10136 is where the problem was fixed..17:09
[KK]Kirill:(17:09
[KK]Kirillwhen it's fixed in mantisbt ?17:09
nuclear_eclipsea) we could cherry-pick the fix to live, or b) wait until we're sure the latest date issues are resolved, and update live to latest master17:10
nuclear_eclipsehmm17:10
[KK]Kirillnice17:10
nuclear_eclipsewait, live *should* have the fix; the fix was committed to master in Feb, but live is running master from Apr...17:11
[KK]Kirillnot17:12
[KK]Kirillpaul fixed in april17:12
[KK]Kirill1317:12
[KK]Kirilllook history of issue17:12
nuclear_eclipsehe marked it as resolved in April, but if you look at the timestamp on the changeset, it says 2009-02-28 16:21:3517:13
nuclear_eclipsethe fix was committed to git on Feb17:13
nuclear_eclipse13:13 < nuclear_eclipse> he marked it as resolved in April, but if you look at the timestamp on the changeset, it says 2009-02-2817:16
nuclear_eclipse      16:21:3517:16
nuclear_eclipse13:13 < nuclear_eclipse> the fix was committed to git on Feb17:16
[KK]Kirillok. may be17:16
[KK]Kirillif siebrand want - I can test this issue together17:19
siebrand[KK]Kirill: as long as I do not have a test system with e-mail, I cannot test it..17:24
paul_.17:36
paul_dhx_m: WIP?17:38
paul_dhx_m: oh, work in progress17:38
paul_dhx_m: obviously graph_Get_font is not going to stay as is17:38
paul_i think phplot might fail17:40
[KK]Kirillpaul_: hi17:45
paul_lo17:47
nuclear_eclipsepaul_: bug 1057317:54
mantisbotBug 10573 - nobswolf - open - new17:54
mantisbotsupport SQLite - http://www.mantisbt.org/bugs/view.php?id=1057317:54
nuclear_eclipseis that possible with adodb?17:54
paul_I saw that earlier17:54
[KK]Kirillsiebrand: I can test this. Did you have own mantis?17:55
[KK]Kirillpaul_: and bug 1036917:56
mantisbotBug 10369 - Kirill - open - assigned17:56
mantisbotVerification link not work - http://www.mantisbt.org/bugs/view.php?id=1036917:56
sshirleyHi everyone. I am migrating from Mantis 1.1.0 to 1.1.7 and I have a slight issue. I brought over all my config files (config_defaults_inc, constant_inc, custom_strings_inc). But when I am on my_view_page.php, I cannot see the priority type but instead I see a strange little down arrow. Any clue?18:41
nuclear_eclipsesshirley: that's intended behavior18:41
nuclear_eclipsethe down arrow means it's lower-than-normal -- up arrows mean higher-than-normal18:42
sshirleyHmmm18:43
sshirleyNot making much sense there.18:43
sshirleyLower-than-normal? Normal what? Ah....priority.18:44
nuclear_eclipseright, it's just a graphical representation of the priority field18:45
sshirleyThat's odd. Is there a setting somewhere that says 'use graphic or text'?18:47
nuclear_eclipseno, afaik it was a bug in 1.1.0 that caused the graphics to not show up; I'm pretty sure that it's been that way for as long as I've been around Mantis18:48
sshirleyReally? Wow. It doesn't happen in 1.1.0 for me. Just 1.1.7.18:49
nuclear_eclipse"afaik it was a bug in 1.1.0"18:49
sshirleyAh18:50
sshirley:-)18:50
sshirleyAhhh. You mean I *should* see the graphic in 1.1.0. Gotcha. Now it seems that I see the graphic in 1.1.7 but not the text.18:51
nuclear_eclipsehowever, a glance at config_defaults_inc.php turns up "$g_show_priority_text   = OFF;"18:51
[KK]Kirillgood night18:51
sshirleylol18:52
sshirleyYou, Sir, are awesome. Once I get this project up and running, I plan on going more in-depth with the options and settings such as that.18:52
nuclear_eclipsebtw, 1.1.7 is officially out of date :P18:53
sshirleyDamn! That was REALLY recent, wasn't it?18:54
riochok, my install is progressing. I get the possible problem that php.ini has register_globals set to ON. I've checked my server, and this is true, but I don't have access to php.ini......is there another way to disable it?18:55
nuclear_eclipsesshirley: yesterday, not even 24 hours ago :P18:56
paul_heh18:57
paul_1.2beta/rc soon too18:57
nuclear_eclipserioch: you'll need to talk with your hosting about that; it's possible to override php.ini in a .htacess, but they need to allow that18:57
riochnuclear_eclipse: is it a problem with it enabled?18:58
nuclear_eclipserioch: I'm not sure offhand, but register_globals is well-known as a security hole for PHP applications18:58
riochaha ok, thanks.18:59
riochnuclear_eclipse: in the meantime, what is the admin default username/pwd?19:01
vb123administrator/root19:03
paul_lo vb123 !19:04
nuclear_eclipsehi Victor19:04
vb123hi paul_ / nuclear_eclipse19:04
paul_nuclear_eclipse: are you serious about sqlite btw? ;p19:04
nuclear_eclipseactually, yes19:04
vb123you mean supporting it?19:04
nuclear_eclipseit would at least make testing supremely easy19:05
nuclear_eclipsevb123: bug 1057319:05
mantisbotBug 10573 - nobswolf - open - new19:05
mantisbotsupport SQLite - http://www.mantisbt.org/bugs/view.php?id=1057319:05
paul_nuclear_eclipse: are you sure your serious?19:06
paul_:(19:06
vb123It would be a could candidate for a newer version of InstantMantis.19:06
nuclear_eclipsewith sqlite, we could build a useful test database that we could pass around as a single file for the ability to jump start test installations...19:06
nuclear_eclipsepaul_: of course, that's all reliant on adodb supporting sqlite19:06
vb123agreed.  We can also support it only for demo / experimental.19:07
vb123but people will use it in production anways :)19:07
nuclear_eclipsea quick look at adodb's site shows that they support it, but I don't know enough about what version we use / they support19:07
paul_nuclear_eclipse: you forgot rule 119:07
nuclear_eclipseironically, sqlite supports better ACID properties than MySQL...19:08
vb123The best thing would be to support Gears for MantisBT>19:08
vb123offline support :)19:08
nuclear_eclipsethat would require a lot more effort than sqlite ;)19:08
vb123I know!19:09
paul_actually19:09
paul_i'm not so sure it would19:09
paul_:P19:09
vb123It depends on the scenarios we want to light up.19:09
nuclear_eclipsepaul_: it would first require building support for an AJAX-based UI model, and second would require a lot of coordination of some sort -- how do you handle two bugs created offline at the same time?  who gets what bug id?19:10
paul_hey, isn't gears a google project19:10
nuclear_eclipseyes19:10
vb123Yes, the latter problem about ids we will have to support if we want to support rich clients with offline mode.  There is the lease model where a client takes a range of bug ids to use.  This however means non-ordered bug ids.19:12
nuclear_eclipseI'd rather just not support offline mode :P19:13
paul_just generate a guid for a bug19:13
paul_anyway, i'm not going to get distracted with sqlite19:14
* paul_ hits nuclear_eclipse 19:14
* nuclear_eclipse stabs paul_ in the kneecap19:15
vb123nuclear_eclipse: don't distract paul_ -- he is working on the rc :)19:16
riochwhat do the different user access levels grant?19:16
paul_vb123: john reminded me i'd coded a patch i'd forgotton about ::P19:17
vb123so are we ready yet?19:17
nuclear_eclipserioch: depends on how you configure all the access thresholds ;)19:17
nuclear_eclipsevb123: I've got two fix branches I'd like reviewed19:17
vb123fixes for what?19:18
riochnuclear_eclipse: :) its a fresh install, so whatever it is by default19:18
paul_nuclear_eclipse: where?19:18
nuclear_eclipsebug 9744 and bug 1030319:18
mantisbotBug 9744 - seiji - open - assigned19:18
mantisbotUsers behind proxy will get 'ERROR_SESSION_NOT_VALID' - http://www.mantisbt.org/bugs/view.php?id=974419:18
mantisbotBug 10303 - jreese - open - assigned19:18
mantisbotCreate and use string_api wrappers for multibyte string functions - http://www.mantisbt.org/bugs/view.php?id=1030319:18
nuclear_eclipseboth issues have a link to a public branch implementation19:19
paul_url?19:19
paul_in fact19:19
paul_i've got issues with 1030319:20
paul_see what I pasted at you last night19:20
nuclear_eclipsepaul_: you always have issues...19:20
vb123You shouldn't have formatting in the language strings.19:20
nuclear_eclipsepaul_: what you pasted at me last night had absolutely no context; I didn't know wtf I was looking at...19:20
paul_replacing strlen->string_length fro every string is not appropriate imo19:21
paul_i've been going through the ones that cause issues19:21
paul_we already have utf8_strlen in git19:21
paul_what I pasted you last night was a function to do a substr to nearest whole wordt19:21
paul_that should support utf819:21
nuclear_eclipsepaul_: I left alone stuff that I new wouldn't be needing utf819:22
nuclear_eclipseand utf8_strlen is not in git, and i don't think it should be19:22
paul_I think we should support utf8 for people without mbstring19:22
paul_if possible19:22
nuclear_eclipsepaul_: see what I did for 1030319:22
nuclear_eclipseI did do that19:23
paul_no, you dont support utf8 unless mbstring is running19:23
nuclear_eclipsepaul_: check 10303, *I DO*19:23
paul_ return strtoupper( $p_string ); isn't utf819:24
vb123what does the secure session thing for?19:24
nuclear_eclipsevb123: prevents session hijacking by limiting the session to a single IP19:24
paul_http://git.mantisforge.org/w/mantisbt/jreese.git?a=commitdiff;h=68debc492667bcfe6ad046c17171635439d9e76c19:24
paul_and strtoupper is fine for all of those19:25
nuclear_eclipsewithout mb_*, I'm not sure how you could possibly support uppercasing UTF8 strings without reimplementing everything yourself....19:25
* paul_ has already done this exercise19:25
paul_in the case of the first strtoupper19:25
paul_the captcha api only generates ascii strings atm19:25
paul_in the case of the tags strtoupper19:25
nuclear_eclipseright, that was overlooked on my part19:25
vb123nuclear_eclipse: where do you enforce the IP?19:25
paul_the array that f_filter uses only supports ascii strings atm19:25
nuclear_eclipsevb123: in session_validate()19:26
paul_in the case of the 3rd strtoupper, the array that f_filter only supports ascii strings19:26
vb123nuclear_eclipse: this doesn't seem to be part of this patch.19:27
nuclear_eclipseok, so the strtoupper stuff is unneeded atm, but the rest of it should be fine/needed19:27
nuclear_eclipsevb123: it was already implemented in Mantis since 1.1.3....19:27
nuclear_eclipsethat's what causes the proxy issue, because some proxies have multiple exit points19:27
paul_nuclear_eclipse: seriously though, i've been going through using utf_* for utf functions19:27
paul_you've got string to lowers on GET/POST19:28
paul_my personal view is mbstring is going to be a dead module in 18 months or so (aka php6)19:28
paul_it seems silly to add it now for stuff we dont need to add it against19:29
nuclear_eclipsepaul_: I'm not sure why that's a problem...19:29
nuclear_eclipseand mb_strlen is quite useful in many places...19:29
vb123Why is this a user option?19:29
vb123I think it should be an admin issue19:30
vb123Users shouldn't have to worry about proxy.19:30
nuclear_eclipsevb123: allows the user to disable it when they are behind a proxy, while allowing the rest of the users to maintain a more secure session19:30
vb123Why don't we use a model like the cookie test?19:30
nuclear_eclipsevb123: because you can't rely on that19:30
vb123is that possible?19:30
vb123Do we need a separate cookie for that?19:31
paul_nuclear_eclipse: i'd still rather go the approach we have been of looking at what causes a problem then trying to replace strlen->string_lower.19:32
paul_As personally, I'd want to make sure that mantis works without mbstring19:32
vb123I don't like the concept of an "unsecure" session.19:33
paul_so for example the code at http://mantis.pastebin.com/d40fa840619:33
paul_takes the fastest version of utf8_strlen i can find, faster utf8_substr19:33
paul_and I believe implements a function to split a string by whole word19:33
paul_which can be used for displaying relationships19:33
nuclear_eclipsevb123: the problem isfor example, user is behind load balancing proxy with two exit points A and B.  the first 1, 5, 10, etc requests could come from node A, and then at random, the next request comes from node B; mantis can't tell if thats a legit request or a session hijack, so we leave it to the user to decide if they need to loosen security on their session19:35
paul_nuclear_eclipse: what I was planning on doing with adding a comment to strlen's etc that dont require utf819:38
nuclear_eclipsemy internet dropped at work -- only on phone atm...19:38
paul_(hence why I can pretty much list ones which do/dont as I've spent a bunch of time looking ;)19:38
paul_strlen/utf8_strlen seem an easy to remember way of doing it19:39
paul_if the calls we're few enough i'd probably then be inclined to skip mbstring completely19:39
nuclear_eclipseiirc, mb_strlen is faster than strlen(utf8_decode())19:39
paul_correct by 0.002s to 0.008s or something19:40
paul_but then, if we only need to call it once..19:40
nuclear_eclipseso ithink it makes sense to prefer mb_* where available19:40
nuclear_eclipseand our code is littered with calls to strlen19:40
paul_nod19:41
paul_which is fine19:41
paul_as the non-mbstring version of strlen is slower19:41
paul_we need to change the ones which require utf8 to utf8_strlen19:41
paul_we can't just change all19:41
paul_and atm, I think there's a limited number we actually need to change19:41
sshirleyI have another question concerning my migration from v1.1.0 to v1.1.8. On my_view_page.php on v1.1.0 under Resolved, each entry has an edit icon. But using the same DB on v1.1.8, none of those entries have that icon. Any idea?19:48
nuclear_eclipsecheck read only threshold in your configuration19:48
paul_nuclear_eclipse: I think we need to look at the utf8 stuff properly/thoroughly19:49
nuclear_eclipsei cant imagine why it's that big of a deal to call mb* when the string isnt necessarily utf8...19:50
paul_because strlen is easier to type19:51
paul_the compatibility stuff is slower19:51
paul_so we only want to use it on utf8 strings19:51
nuclear_eclipseit's not really that much slower...19:51
paul_the point still remains, we've already dealt with a number of the functions that cause a problem19:52
nuclear_eclipseim not sure that youve even made a coherent point yet...19:52
paul_strlen is a built in function to return length of string19:53
nuclear_eclipseright....19:53
paul_i've added utf8_strlen locally I think (if it's not already in core)19:53
siebrand[KK]Kirill: yes, I have a local mantis installation, just no e-mail config in there19:53
paul_replace strlen with stringlower or something else is confusing19:53
nuclear_eclipsestrlen -> string_length19:54
siebrand[KK]Kirill: basically we need to know if this is fixed in master, and the reason that it does not work on Mantisbt.org is that the tracker on there is on branch 'live' instead of 'master'.19:54
paul_if strlen automatically does a slower utf8 version, i'd be incled to optimise it back to strlen for strings that we dont need to check utf8 for (for performance for people without mbstring)19:54
nuclear_eclipsepaul_: so your point is you dont like the api names that i use...19:54
siebrand[KK]Kirill: if that assumption is true, it's a matter of time until it's fixed (I guess until 1.2.0 beta 1 is made available)19:54
paul_no, my point is, we should do it where it's needed19:55
paul_and review sensibly19:55
paul_siebrand/myself stripped out a bunch of strtolower/upper's from displaying functions in favour of css19:55
paul_email stuff phpmailer deals with utf819:55
paul_for display of strings, our current string api functions deal with19:55
nuclear_eclipseso, you favor taking a whole bunch more effort to do less than what ive done using sed?19:56
paul_yep19:56
paul_(as i've been putting in that effort anyway)19:57
nuclear_eclipseapi names i wouldnt mind changing, but i think youre insane otherwise =P19:57
paul_from one point of view20:00
paul_if i'm looking at adding non-mbstring utf8 safe functionality20:00
paul_mbstring stuff can follow up as performance increase afterwards20:00
paul_imo20:00
paul_for example http://mantis.pastebin.com/d40fa840620:01
paul_there's a substr there with a regex20:01
paul_X thousand calls of utf8_substr2 takes 0.08s vs 0.002s for mbsubstring20:02
paul_and we make about 30 substr calls a page or something20:05
paul_if we change strlen->mb_strlen, we dont 'fix' out utf8 support, as we aren't fixing regex's/str_pad and other stuff that isn't utf820:06
paul_there's no point changing database api to call string_lower as database table names need to be ascii (as adodb I believe calls strtolower internally)20:08
nuclear_eclipsegimme a bit to check the pastebins when my work access returns20:09
paul_nod :P20:09
paul_but you just happened to pick a topic to ask me about, that I just happened to have printed out and highlighted utf8 vs nonutf8 calls ;P20:09
nuclear_eclipseanywho, vb123, did you ever post an opinion of the session/proxy thing?20:11
paul_my logic was basically, for the few places we need utf8, take the utf8 compat functions that phpbb/mediawiki use that have been tested by others and use those. We can then decide if we want to add mbstring for additional performance, or if we conclude the changes elsewhere in 1.2 speed things up and the number of calls we make are so low20:11
paul_eof :)20:11
paul_20:38 < vb123> Why is this a user option?20:13
paul_20:38 < vb123> I think it should be an admin issue20:13
paul_20:39 < vb123> Users shouldn't have to worry about proxy.20:13
paul_20:39 < nuclear_eclipse> vb123: allows the user to disable it when they are behind a proxy, while allowing the rest of the users to maintain a more secure session20:13
paul_20:39 < vb123> Why don't we use a model like the cookie test?20:13
paul_20:39 < nuclear_eclipse> vb123: because you can't rely on that20:14
paul_20:39 < vb123> is that possible?20:14
paul_20:40 < vb123> Do we need a separate cookie for that?20:14
paul_20:42 < vb123> I don't like the concept of an "unsecure" session.20:14
nuclear_eclipseyeah, igot that, and responded, and never heard from him after that....20:14
nuclear_eclipsehi again giallu20:24
gialluhi John20:24
nuclear_eclipsehmm, seems i may not have internet back onat work for some time now....20:31
nuclear_eclipseoh fun, the Solaris and Windows machines have internet just fine, but not the Linux boxes...20:34
nuclear_eclipsehooray for chaining SSH logins....20:35
nuclear_eclipsepaul_: so remind me again why you're complaining about my wrapper of strlen() ?20:40
nuclear_eclipseand what's the purpose of utf8_substr2() ?20:41
nuclear_eclipsewwhat does that have anything to do with mantis and my patch to 1030320:41
paul_nuclear_eclipse: i've been adding/working on utf_* functions to support utf8 stuff20:48
paul_and reviewing where we need utf8 functionality and where strlen and such suffice20:49
nuclear_eclipseI get that part, but can you answer the question?20:49
paul_well, if i'm working out utf8_strlen and where to use it and where to just use strlen20:50
nuclear_eclipsein other words, why should we wait forever for you to review all these random things, rather than just take the patch I have and get 1.2cr out the door?20:50
paul_the patch doesn't fix any 'bugs' though20:51
paul_changing strlen isn't going to fix stuff if we haven't fixed the surrounding regex's20:51
nuclear_eclipseI don't see any harm in using a utf-capable strlen on "too many" things; if anything it just makes mantis run fractionally slower than it does now20:51
paul_we've already reviewed strtoupper20:51
nuclear_eclipseie, I don't know why we should even be trying to use strlen in one place and a utf8 strlen in other places?  that just adds confusion20:52
paul_strlen is for non-utf8 stuff for speed20:52
nuclear_eclipsefacepalm20:52
paul_utf8_strlen is for text20:52
paul_strlen is a built in php function so is generally what people will use20:53
nuclear_eclipseit's really not that much of a speed difference between the two....20:53
paul_but the point still remains20:53
paul_most of the existing issues in mantis relating to stuff20:53
paul_and utf820:53
paul_refer to our handling of regex's and strpad/substr20:54
paul_(hence the utf8_substr function and strstop one)20:54
nuclear_eclipsemy point is that we should just be using one consistent strlen call throughout our whole API so that you *don't* have to think about whether the data is utf or not, you just use a single function....20:54
paul_*longterm* that'll just be 'strlen' (aka php6+unicode support21:03
paul_we need to review mantis properly for utf8 support (regardless of what we call string functions and how we do it)21:04
paul_as mbstring doesn't magically fix regex's and other stuff21:04
paul_so whilst your right in the sense that we could change the function name21:05
paul_the fact we need to go through them anyway and see how they are used, strikes me as something easier to do 'as is now'21:06
paul_(e.g. replace str* with utf8_str* if it requires utf8, add a comment if it doesn't require utf8 so we know we've considered it21:07
nuclear_eclipseI still don't see why we need to go through them all anyways; if we just change everything across the board to use utf8-compatible string functions, it'll work just as well, and both take less effort and be more consistent to work with21:07
nuclear_eclipsehonestly, it seems like a maintenance and development nightmare to have to conditionally use different string functions based on the context of the content....21:08
paul_ok, obvious example21:08
paul_we currently have:21:08
paul_echo str_pad( '', strlen( $t_release_title_without_hyperlinks ), '=' ), '<br />';21:08
paul_with your code, we now have:21:09
paul_cho str_pad( '', string_length( $t_release_title_without_hyperlinks ), '=' ), '<br />';21:09
nuclear_eclipseright...21:09
paul_now21:09
paul_str_pad isn't utf8 safe21:09
paul_iirc21:09
paul_and iirc21:09
paul_there isn't a mb_str_pad function21:09
nuclear_eclipseright, that's yet another evntual target to replace with mb* functions...21:09
paul_there isn't a mb_str_pad function21:09
nuclear_eclipseso what?21:09
nuclear_eclipsehow does that affect anything I've already done?21:10
nuclear_eclipseI never said my branch for 10303 was end-all-be-all of fixing utf8 issues21:10
nuclear_eclipseit's just the first step for strlen/strtolower/strtoupper...21:10
nuclear_eclipsebut by rolling out these changes in a manner that's consistent across the entire codebase, it's easier to maintain and understand...21:12
paul_I find utf_strlen / strlen easier to remember then string_length21:12
nuclear_eclipseeg, I shouldn't have to investigate the possible contents of a string just to figure which type of strlen to call; I should just have a single strlen type function to call21:12
nuclear_eclipseI don't give a damn what the function's called21:12
paul_and b using 2, and changing them as we investigate whether the use requires utf821:12
paul_we know what we've covered21:13
nuclear_eclipsesed know's that I've covered everything!21:13
* paul_ sighs21:13
nuclear_eclipsethe only thing I haven't covered is admin/*21:13
nuclear_eclipseand that's because admin/* doesn't use the standard api setup21:13
paul_I meant, what we've covered in terms of functionality21:13
nuclear_eclipsepaul_: you're missing my whole point...21:14
paul_I know your point21:14
paul_I think it's silly to call random function that might return the length of the string, when there's a strlen function which does it21:14
nuclear_eclipsewhy the hell do we need to investigate each usage of a function when we can just replace all calls to strlen() with wtfyw_strlen()?21:14
paul_the silly thing is that php's strlen doesn't return the correct length of a string due to php not supporting utf8 ;/21:14
nuclear_eclipsepaul_: when mantis requires php6, then we just sed utf8_strlen back to regular strlen; until then, by consistently using utf8_strlen everywhere, we don't have to figure out what a string uses first, we just use a single function guaranteed to work...21:16
* nuclear_eclipse heads home21:17
paul_argh22:16
paul_nuclear_eclipse: on the offchance, lurking?22:41
nuclear_eclipseperhaps...22:41
paul_relationship api22:42
paul_with bugobject stuff22:42
paul_should api take in a bug id or the object?22:42
nuclear_eclipsenot familiar with the relationship api, but assuming it doesn't actually need data other than the bug id, just pass an id22:44
paul_wtf22:59
paul_nuclear_eclipse: have you ever looked at bugnote api?23:00
nuclear_eclipseonly slighty23:00
nuclear_eclipselooked at a subsection of it recently to fix bugnotes in email notifications23:00
paul_I hate looking at stuff :(23:01
paul_generates work23:01
nuclear_eclipseit wouldn't generate work if you could just look at it and ignore the urge to rewrite things...23:02

Generated by irclog2html.py