| ../irclogs/#mantishelp.2009-11-03.log | ||
| --- scribe started --- | 00:00 | |
| paulr | dhx_m: moo? | 20:02 |
|---|---|---|
| Watergad | hi. is anybody making "project documentation" workaround here? | 20:06 |
| paulr | ? | 20:06 |
| Watergad | there's a bug when attaching file to the "All projects" and I can't find where exactly I have to fix it | 20:07 |
| Watergad | (rc2) | 20:07 |
| paulr | i didn't realise you could attach to all projects | 20:08 |
| nuclear_eclipse | me either :P | 20:09 |
| paulr | ! | 20:09 |
| paulr | time to break stuff | 20:09 |
| Watergad | oh, then it's the bug not the feature... too bad (: | 20:09 |
| sand3rs | hello anyone online | 20:12 |
| nuclear_eclipse | maybe | 20:12 |
| Watergad | it was looking very promising, quite useful for me (: | 20:12 |
| sand3rs | well i need some help with mantis | 20:12 |
| Watergad | well, have to look if there's anything possible to do with | 20:12 |
| sand3rs | i've update my lower version to 1.1.8 | 20:12 |
| Watergad | hmm, no, there's definitely some kind of support for this logic - to add files to ALL_PROJECTS (: | 20:21 |
| Watergad | but it's trying to get 'file_path' DB field instead of config param somewhere... | 20:22 |
| Watergad | Found it. Bug localized, patch performed - now all is ready for bug report (: | 20:42 |
| CIA-22 | Mantisbt: cfitch master-1.2.x * r606b93a7b626 /core/filter_api.php: Fix #11116: proper permalink for custom filters | 21:03 |
| CIA-22 | Mantisbt: cfitch * rbe048ab7266d /core/filter_api.php: Fix #11116: proper permalink for custom filters | 21:03 |
| Watergad | btw is my assumption right that there is a, err, megaexploit that users may bruteforce "add monitoring users" field to reveal users list? ) | 21:43 |
| giallu | Watergad, what can you do with the user list? | 21:48 |
| Watergad | I can try to guess an username, type it to the "monitor issue" field, press button and see if I success with that username ) | 21:50 |
| nuclear_eclipse | Watergad: giallu's point is: why is that an exploit? | 21:50 |
| Watergad | well, there's no any page where users can see userlist | 21:51 |
| giallu | nuclear_eclipse, thanks for the translation... | 21:51 |
| nuclear_eclipse | Watergad: that's just because a list of users isn't really useful to anyone but admins :P | 21:51 |
| giallu | and anyway it wastes tons of ram to generate... | 21:52 |
| nuclear_eclipse | and the View Issues page already gives a mostly-comprehensive list of reporters and developers already... | 21:52 |
| Watergad | got it (: we're paranoid a bit here to prevent one customers to know about other customer (: | 21:53 |
| nuclear_eclipse | Watergad: so set the threshold higher so that normal users can't add other users to the monitor list ;) | 21:53 |
| Watergad | that's why such a question (: | 21:53 |
| Watergad | I can't, it's quite useful feature ) | 21:54 |
| * paulr doesn't get it | 22:19 | |
| Watergad | nevermind (: | 22:22 |
| Watergad | btw | 22:22 |
| Watergad | if paulr there alive (: | 22:22 |
| Watergad | what is better - persist connections, or not? | 22:23 |
| Watergad | *persistent | 22:23 |
| Watergad | $g_use_persistent_connections= ON; - or OFF, which values should be used in which cases? | 22:24 |
| Watergad | or is that persistent connections not to DB? | 22:25 |
| moto-moi | afaik it is | 22:26 |
| Watergad | ok, stupid question, I agree | 22:26 |
| moto-moi | I don't like to use it, it has caused some problemen in our past, but it could be that problem arose because we use more than 1 webserver | 22:26 |
| Watergad | I just don't understand what drawbacks it has? | 22:27 |
| moto-moi | afaik it keeps the connection open to the dbserver, which wasn't all that great for us, because we have multiple webservers and don't know beforehand which webserver will be connecting for mantis | 22:28 |
| moto-moi | but then again, it has been some time ago we stopped using it, so I could be wrong :) | 22:28 |
| Watergad | roger | 22:29 |
| Watergad | thanks | 22:29 |
| moto-moi | np | 22:29 |
Generated by irclog2html.py