Thursday, 2010-08-05

../irclogs/#mantishelp.2010-08-05.log
--- scribe started ---00:00
dhx_mpau:o06:35
davidinchi07:10
davidincmantis docbook doesn't support xml text file format because it use jw converter.07:11
davidincit only convert .sgml file.07:11
davidincit would be nice if mantis uses xsltproc converter in the Makefile07:12
gialludavidinc, I can be bribed to work on that ;)07:33
dhx_mgiallu: I can't... it's documentation :p07:45
CIA-25Mantisbt: hickseydr * rbfc9e9fff9a5 /print_all_bug_page_word.php: Fix #12238: XSS in print_all_bug_page_word.php project/category names08:02
CIA-25Mantisbt: hickseydr master-1.2.x * r9fc1dd815411 /print_all_bug_page_word.php: Fix #12238: XSS in print_all_bug_page_word.php project/category names08:03
YisasHello08:14
dhx_mhi08:14
YisasI am adding some echo debug messages in ldap_api.php08:14
Yisashow can I see them? what is the default stdout? I am currently using IIS08:15
dhx_myou may not see them08:17
dhx_mit's not quite as easy as throwing around debug echo statements08:17
dhx_mit'd be better to log messages to a file08:17
dhx_mor perhaps even die(message)08:17
Yisasyep08:18
YisasI think using a file will be the best option08:18
Yisasthanks dhx!08:18
dhx_mafaik there is meant to be LDAP logging built in but I've never used it08:18
CIA-25Mantisbt: hickseydr master-1.2.x * r5709cc992eb6 /core/email_api.php: Fix #11852: Forgotton password feature prevents admin password reset08:37
CIA-25Mantisbt: hickseydr * r23b1d934f64f /core/email_api.php: Fix #11852: Forgotton password feature prevents admin password reset08:38
samtukeis there a way of making project news display at the top of each page, or at least the view issues page? or would I have to add that as a module/patch myself?09:20
dhx_mit sounds like something you'd add using a plugin09:20
dhx_mor within the header_include (you can specify a PHP file that gets included in the header of each page)09:21
samtukedhx_m: hmm, the news feature is soon to be split off into a module, right? but currently its still part of the main release?09:24
dhx_mright, it's something we'd ideally split into a plugin09:26
samtukedhx_m: Ideally I'd like to add a config option so that others can get news to appear on more pages, but if the feature is going to split off, there isn't much point on me working on the existing code it seems09:27
dhx_mif it is a bug fix I'd consider committing it09:28
dhx_mbut adding new features/configuration options... not so sure09:28
YisasHello Again09:28
Yisasregarding the issue with the Active Directory connection09:29
YisasI have found out that the following line $t_br = @ldap_bind( $t_ds, $p_binddn, $p_password );09:29
samtukedhx_m: so I should just modify my header_include instead then?09:29
Yisasof the ldap_connect_bind function (ldap_api.php ) does not return anything09:30
Yisasis it possible to obtain more information09:30
dhx_msamtuke: yes09:30
dhx_mremove the ampersand to see any errors that function is causing09:31
samtukedhx_m: you're support in this room is a great feature of the mantisbt project, IMO. Thanks for your help :)09:32
YisasI mean the function that return nothing is the ldap_bind not ldap_connect_bind09:32
dhx_msamtuke: np, let me know if you need any more help09:33
YisasI am checking the variable $t_br but it´s empty09:33
dhx_mYisas: @ldap_bind will suppress error messages that would normally be raised by ldap_bind09:34
paulrmorning09:34
dhx_mpaulr: hi09:34
Yisasand where is teh ldap_bin function located, so I could add more trace messages?09:35
dhx_m<Yisas> I have found out that the following line $t_br = @ldap_bind( $t_ds, $p_binddn, $p_password );09:35
dhx_mjust remove the @09:35
Yisaswhat does the @ mean?09:37
dhx_msuppress errors raised from the function09:38
dhx_mie. ignore them, do nothing09:38
Yisasok... great09:39
Yisasthanks for the hint09:39
Yisasnow I get invalid credentials09:39
dhx_m:)09:40
Yisasthe password has to be codified in any special way?09:41
Yisassuch as CN= ??? I dont know ... what would be the problem, as everything seems to be fine09:42
Yisasthe user name CN has accents, do you think it may cause problems in the logon proces?09:45
YisasGREAT!09:55
YisasIT's WORKING!09:55
YisasIt was a problem related with the accents!09:56
YisasDHX THANKS!10:00
dhx_mah10:01
dhx_m:)10:01
Yisasg_logo_image is it working on 1.1.8 version?10:47
* paulr_ pokes nuclear_eclipse and dhx_m11:11
CIA-25Mantisbt: paul * rea729d74b9e4 /javascript/min/ (15 files in 3 dirs): Remove pre-compiled jscript files - a compile.php can be used to compile these as part of build process using the google closure compiler from http://code.google.com/closure/compiler/11:14
CIA-25Mantisbt: paul * r0cad50d74a7e / (16 files in 4 dirs): Merge branch 'master' of mantisbt.org:mantisbt11:14
CIA-25Mantisbt: paul * rcc87385166f6 /javascript/dev/ (jquery-1.4.2.js jquery-ui-1.8.2.js jquery-ui.js jquery.js): Don't use symlinks in git repo's - not all OS's support them e.g. windows.11:14
paulr_hmm11:14
paulr_whats with  paul * r0cad50d74a7e / (16 files in 4 dirs): Merge branch 'master' of mantisbt.org:mantisbt11:15
nuclear_eclipsehi paulr_11:46
nuclear_eclipsepaulr_: if you made any local commits before doing a `git pull`, it merges by default unless you specify `git pull --rebase`11:46
paulr_dunno11:46
paulr_:@)11:47
paulr_dhx has gone quiet :)11:47
nuclear_eclipseprobably eating dinner or something :P11:50
dhx_mbusy unbreaking your commits :p11:52
paulr_wtf?11:52
paulr_they shouldn't break anything11:52
paulr_dhx_m: how in install.php do we want to generate a random string for crypto_master_salt?11:53
dhx_mthis.previousComment.sarcasm = true;11:53
dhx_mpaulr_: /dev/urandom if available, otherwise get the user to select it themselves?11:53
paulr_if(( $salt = crypto_generate_random_string(64, true)) === null) {11:54
paulr_  $salt = base64_encode(m_rand()) ;11:54
paulr_}11:54
paulr_something like that maybe?11:54
dhx_mwhooa no11:54
dhx_mwe have functions for this :)11:54
dhx_mcrypto_api.php11:54
paulr_yea11:55
paulr_which is the last param isn't true11:55
paulr_requires crypto_master_salt to be set11:55
paulr_which i want a way to generate :P11:55
paulr_other option is we ask user to type in a random string11:55
paulr_atabase connection failed. Error received from database was #1045: Access denied for user 'root'@'localhost' (using password: NO).11:57
dhx_moh yeah heh11:57
paulr_interestingly11:57
paulr_i'd like to know why installers not set my db pass ;/11:57
paulr_when did footer change?11:58
dhx_mIMO just look for /dev/urandom and get some random bytes, try openssl_get_pseudorandom_bytes() or ask the user to do some random stuff11:58
dhx_ma few months ago11:58
paulr_why?11:58
dhx_mnuclear_eclipse: Secunia got back to me, your fix was the same one they found :)11:58
paulr_echo "\t<address id=\"mantisbt-copyright\">Powered by <a href=\"http://www.mantisbt.org\" title=\"Mantis Bug Tracker: a free and open source web based bug tracking system.\">Mantis Bug Tracker</a> (MantisBT)$t_version_suffix. Copyright &copy;$t_copyright_years MantisBT contributors. Licensed under the terms of the <a href=\"http://www.gnu.org/licenses/old-licenses/gpl-2.0.html\" title=\"GNU General Public License (GPL) ve11:58
paulr_ 62211:58
paulr_i'm specifically talking that11:59
nuclear_eclipsedhx_m: great :)11:59
dhx_mnuclear_eclipse: although I think they may be pushing their advisory release sooner now that we've fixed it11:59
nuclear_eclipseI thought they said august 17th?11:59
dhx_mperhaps that is what they meant be "shortly" then12:00
nuclear_eclipse"A preliminary disclosure date of August 17, 2010 has been set, where12:00
nuclear_eclipsethe12:00
nuclear_eclipsedetails will be publicly disclosed. However, we are naturally prepared12:00
nuclear_eclipseto postpone the disclosure date if you need more time to address the12:00
nuclear_eclipsevulnerability.12:00
dhx_mpaulr_: a problem? :)12:01
paulr_Powered by Mantis Bug Tracker (MantisBT). Copyright © MantisBT contributors. Licensed under the terms of the GNU General Public License (GPL) version 2 or a later version12:02
paulr_sure12:02
paulr_:)12:02
paulr_it wraps12:02
paulr_also seeing the words 'gpl' reminds me i'm starting to hate gpl12:02
nuclear_eclipseyay12:02
paulr_makes we want to email all contributors asking them to transfer their copyright to me12:02
nuclear_eclipseI'm not the only one :P12:02
paulr_dhx_m: so why we do feel the need to have a 3000 word footer? :)12:03
dhx_mI'm all for dropping that copyright statement12:08
dhx_mthe only reason I put it there is because we always had it :)12:08
paulr_mm12:09
paulr_on bug_report page12:09
paulr_should the javascript be collapsible?12:09
dhx_m?12:10
paulr_Select Profile12:11
paulr_  Or Fill In12:11
paulr_Platform12:11
paulr_OS12:11
paulr_OS Version12:11
paulr_ Or Fill In12:11
paulr_I get that with a box that looks like it collapses12:12
paulr_a) it does't12:12
paulr_b) there's nothing under the 2nd 'or fill in'12:12
dhx_mnuclear_eclipse: here's a fun one for you...12:15
dhx_mif ( $t_prefix === 'UNUSED' ) {12:15
dhx_mecho $t_prefix;12:15
dhx_mI'm getting a result of "0" from that12:16
dhx_mgo PHP 5.3.3!12:16
paulr_really?12:16
dhx_mperhaps it's a caching issue, let me see12:16
nuclear_eclipsegotta head to work now12:16
nuclear_eclipsecheers guys12:17
dhx_mcya later12:17
dhx_mpaulr_: that box is ugly12:17
paulr_?12:17
paulr_box?12:17
dhx_mpaulr_: the profile box12:17
dhx_mpaulr_: feel free to cut it to pieces :)12:17
dhx_m("0" == 'unused') is true for me... great12:30
paulr_in php5.3.3 ?12:30
dhx_mright12:30
paulr_eval that on the cmdline12:30
dhx_mphp > var_dump("0"=="UNUSED");12:31
dhx_mbool(false)12:31
dhx_mworks there... perhaps it's an FPM/APC bug12:32
paulr_what apc version?12:32
dhx_m3.1.3p112:32
paulr_try their svn trunk version12:34
dhx_mAPC disabled, same result12:35
paulr_this on mantis code ?12:35
paulr_or are you saying var_dump("0"=="UNUSED"); in its own file does it in a browser?12:35
dhx_mI'll check12:35
dhx_mfalse there12:37
dhx_mit's happening inside a for each loop12:37
dhx_mhere you go:12:38
dhx_m$t_prefix_array = array();12:38
dhx_mfor ( $i = 0; $i <= 9; $i++ ) {12:38
dhx_m$t_prefix_array["$i"] = "$i";12:38
dhx_m}12:38
dhx_mforeach ( $t_prefix_array as $t_prefix => $t_caption ) {12:38
dhx_mvar_dump($t_prefix == 'UNUSED');12:38
dhx_m}12:38
paulr_that returns true,falseX9 for me right?12:39
dhx_myep12:39
dhx_mnotice the error?12:39
dhx_m$t_prefix is an "int" each time btw12:40
dhx_mint(0) bool(true) int(1) bool(false) int(2) bool(false) int(3) bool(false) int(4) bool(false) int(5) bool(false) int(6) bool(false) int(7) bool(false) int(8) bool(false) int(9) bool(false)12:40
dhx_mthat's var_dump($t_prefix); var_dump($t_prefix == 'UNUSED');12:41
dhx_m=== is also no help12:41
paulr_it's always returned that value12:41
paulr_even in 5.2.412:41
dhx_mhmmm?12:41
paulr_HP 5.2.4-2ubuntu5.10 with Suhosin-Patch 0.9.6.2 (cli) (built: Jan  6 2010 21:59:29)12:42
dhx_moutside the loop "0" == 'UNUSED' is false12:42
paulr_ php foo.php12:42
paulr_bool(true)12:42
paulr_bool(false)12:42
paulr_bool(false)12:42
paulr_bool(false)12:42
dhx_mI'm not using Suhosin btw12:42
paulr_nod12:42
paulr_inside the loop12:45
paulr_your comparing12:45
paulr_(int)0 == (string)'UNUSED'12:45
paulr_which is defined as true12:45
paulr_outside the loop12:45
paulr_your comparing12:45
paulr_(string)"0" == (stirng)'UNUSED'12:46
dhx_myep12:46
paulr_and (int)0 == (string)'UNUSED' is defined as true12:46
dhx_mso "UNUSED" is an internal string constant only used inside loops?12:46
paulr_no12:47
paulr_0 == "STRING" is true12:47
paulr_0 = "foobar" is true12:47
paulr_0 == "foobar" is true even12:47
dhx_mwhy is "0" == "STRING" true12:48
paulr_because http://www.php.net/manual/en/types.comparisons.php says it is!12:49
paulr_The way PHP handles comparisons when multiple types are concerned is quite confusing.12:50
paulr_For example:12:50
paulr_"php" == 012:50
paulr_This is true, because the string is casted interally to an integer. Any string (that does not start with a number), when casted to an integer, will be 0.12:50
paulr_from a user comment btw :)12:50
paulr_just use === :P12:50
paulr_and cast the int's to a string first :P12:50
paulr_my plan is to have lunch, read a bit thenbreak stuff :)12:52
dhx_mI knew '0' == 0 == "0" == '' and so forth12:59
dhx_mI guess PHP was converting string "0" to int 0 in the foreach statement13:06
dhx_mthus causing the int 0 == string "0" check13:06
dhx_m;/13:07
nuclear_eclipsedhx_m: http://us2.php.net/manual/en/types.comparisons.php13:14
paulr_slow ;)13:14
nuclear_eclipsesorry, just got to work, haven't fully gone throguh the backlog13:15
dhx_mthe actual problem wasn't that13:15
dhx_mit was my prefix_filters array containing string keys13:15
dhx_mand the foreach loop converting the key "0" (a string) into an integer 013:16
dhx_mor something like that13:16
dhx_mit's quite funny seeing a huge table trying to tell people whether 0 is equal to 1 :p13:16
nuclear_eclipsetype coercion is both useful and painful13:16
dhx_mpaulr_: error: git checkout-index: unable to create symlink javascript/dev/jquery-ui.js (File name too long)13:34
dhx_myou broke it? :p13:34
paulr_no13:48
paulr_that file doesn't exist anymore13:48
dhx_mhmm?13:48
CIA-25Mantisbt: hickseydr * ra4e6b210fcae /manage_user_page.php: Fix #11930: Fix unused/new prefix filters on manage users page13:48
dhx_msee my latest commit13:48
CIA-25Mantisbt: hickseydr * r24e117c53b81 /javascript/dev/ (jquery-ui.js jquery.js): Fix type of jQuery files from symlink to file13:48
CIA-25Mantisbt: hickseydr master-1.2.x * r94aaca8058b5 /manage_user_page.php: Fix #11930: Fix unused/new prefix filters on manage users page13:48
paulr_windows doesn't support symlinks13:48
dhx_myes but the replacement files you put on top of the symlinks13:49
dhx_mwere still being treated as symlinks by git13:49
paulr_heh13:49
dhx_mas the type hadn't changed13:49
dhx_mmust be a Windows/git thing13:49
paulr_worked fine in windows :P13:49
paulr_and that's not the dev version of jquery13:49
* paulr_ sighs13:49
dhx_mnope13:51
paulr_it should be ;p13:51
dhx_mI'd rather use their minified version that one we compress ourselves13:51
paulr_we'd compress their minified version anyway..13:51
paulr_this was why we said about using the same compressor13:51
paulr_;p13:51
dhx_mno point ;)13:51
paulr_the point is that if your using the /dev jscript13:52
paulr_you should be able to debug issues13:52
dhx_mhmm ok I was just wanting to keep the same hash as upstream for those files13:52
paulr_I dont really want to get into the case of having to compress some files but not others13:52
dhx_mthat way we can be sure that our compressor hasn't introduced bugs that don't occur in the official distribution13:53
paulr_if we hit issues, we can always change13:53
paulr_but in theory as we using same compressor13:53
nuclear_eclipsewhy are we even trying to use our own compressor?13:54
nuclear_eclipsethat just seems like added complexity for no reason13:54
paulr_such that all jscript is compressed13:54
paulr_why do people compress javascript :)13:55
nuclear_eclipseif a developer really needs to debug into jQuery, they can get their own copy of it....13:55
nuclear_eclipsegranted, I'd be perfectly fine only ever having the full jQuery included with mantis, and if people really need to save space, they can get the compressed version themselves...13:56
nuclear_eclipsebut I don't think we should be trying to keep multiple versions of our scripts around, or adding build steps to compress things, that's just a waste of time and effort that could be better spent on a *lot* of other things in mantis13:56
paulr_we had the discussion a couple of weeks back now about compressing jscript13:57
paulr_when I wrote script13:57
nuclear_eclipsepaulr_: you need to start having these decisions on the developer mailing list where everyone can join in, not just one or two people from IRC13:57
paulr_iirc, the same time you made the comment about integrity stuff in /check13:58
paulr_and whether it's waste of time building those files13:58
paulr_so dhx has code to check integrity13:58
paulr_I made script to build files for said code13:58
nuclear_eclipsewhat does that have to do with compressing javascript files?!13:58
paulr_we've had minified/dev versions of javascript files for *ages*13:59
paulr_the only thing i've done13:59
paulr_is removed the minified versions and written a script to rebuild them13:59
paulr_and instead of using yahoo's compressor, used google's one (such that it's the same one as jquery uses)13:59
nuclear_eclipseyes, and I never liked that because a) it's just extra copies of the same thing, and b) I don't even know how you can select between them, so it's worthless IMO13:59
paulr_there's a config variable of minimal_jscss14:00
paulr_which i'd like to dump14:00
paulr_for debug/production mode14:00
nuclear_eclipsejust leave the uncompressed versions and be done with it; no scripts or anything14:00
paulr_there's no reason not to compress them14:01
paulr_it's no more work14:01
nuclear_eclipseyes it is14:01
paulr_wow 2 seconds of computer time14:01
paulr_:)14:01
nuclear_eclipseno14:01
paulr_yes14:01
nuclear_eclipseit means a bigger toolchain14:01
paulr_sure14:02
paulr_which I've already got setup14:02
nuclear_eclipsea bigger toolchain, and more things that have changed between development and release14:02
nuclear_eclipseI don't care what you have set up, youdon't build any of our relesase14:02
paulr_i'm happy to build releases if it's too much work14:03
paulr_that's a crap comment :)14:03
nuclear_eclipsepaulr_: you're not getting my point14:03
paulr_I do however14:03
paulr_take the point that having minified jscript could potentially add a bug if there's a bug in the minifier14:03
nuclear_eclipsewhen I make a release, I don't want to have to do a bunch of testing just to make sure that the minifier didn't bork the javascript that worked in my dev environment14:04
paulr_well, I personally think we should minify the javascript14:05
paulr_and that was the suggestion of how not to have two copies of the files14:05
nuclear_eclipseI don't really care whether we keep a full or minified version in our repo, but I don't want minifying script to be part of the build process14:05
paulr_maybe i'll see if I can tweak it such that14:05
paulr_the build process does a git commit if the dev versions change14:06
paulr_and by default the code always uses the minified version14:06
nuclear_eclipsewhat?14:06
paulr_i.e. if someone updates jscript/dev14:06
paulr_automatically regenerate jscript/min files and commit back to git14:06
nuclear_eclipseeven if we use a minified version in our repo, why would we need to keep a full version around? how often do we ever need to debug inside of jQuery?  it's pointless14:06
nuclear_eclipsepaulr_: no, that's just being complex14:07
paulr_it's not just jquery14:07
paulr_http://git.mantisbt.org/?p=mantisbt.git;a=blob;f=javascript/dev/ajax.js;h=01f824109916e0e158f3926f1bfa84c1bf425a2e;hb=HEAD14:07
paulr_it's more for files like that14:07
paulr_and jscalendar14:07
paulr_etc14:07
dhx_m"the build process does a git commit if the dev versions change"... bad idea14:08
nuclear_eclipsepaulr_: SIMPLE14:08
nuclear_eclipseKEEP IT SIMPLE14:08
dhx_mI much prefer just minifying the files in the build script before putting them in the tarball14:08
paulr_this was supposed to be simple14:08
paulr_atm we had 2 copies of the javascript14:08
dhx_mit sounds simple to me :)14:08
paulr_dhx/myself were trying to reduce it to ONE14:09
nuclear_eclipseI don't see why it's such a big deal to just *pick one* and only ever have that...14:09
gialluboy14:09
dhx_myeah I agree actually14:09
nuclear_eclipsetrying to switch between multiple copies or compressing during build script is just a pain in the ass14:09
gialluare we compressing jquery stuff ourselves?14:09
dhx_mpick upstream's file14:09
nuclear_eclipsehi giallu14:09
* giallu sighs14:09
dhx_mas we're only going to be using jQuery in the future anyway :)14:10
dhx_mit does everything14:10
dhx_mgiallu: nope :)14:10
dhx_mwe hardly need to compress our own scripts because they're small14:10
dhx_mthat is why web servers support gzipped output :)14:11
nuclear_eclipsedhx_m: exactly!14:11
istvanbhi there14:23
istvanbquick question: how can I disable the clone button? (I can not found the word "clone" in the config defaults.inc)14:24
nuclear_eclipseistvanb: I don't think that's configurable14:25
istvanboh, ok14:26
istvanbthanks man!14:27
nuclear_eclipseyou're welcome14:28
istvanbI am not sure if this is the right place, but issue 0012099 can be closed14:30
nuclear_eclipsefoobot: bug 1209914:30
foobotBug 12099 - istvanb - open - new14:30
istvanbas well as 001214214:30
foobotCan not send mail thru smtp.gmail.com - http://www.mantisbt.org/bugs/view.php?id=1209914:30
nuclear_eclipsefoobot: bug 1214214:31
foobotBug 12142 - istvanb - open - new14:31
foobotRemoving the Assigned to field from the Report Issue page - http://www.mantisbt.org/bugs/view.php?id=1214214:31
alexsanderI'm trying 1.2.2 and I think the phpmailer has a bug14:40
alexsanderphpmailer does not validate emails like user@box that are valid if the mail() is used14:41
nuclear_eclipsealexsander: iirc this is a bug that was traced into core PHP?14:42
paulr_nuclear_eclipse: whats the lgpl allow you to do/not do?14:43
alexsandernuclear_eclipse, http://bugs.php.net/bug.php?id=49576 <--- I do not agree with Rasmus' fix14:44
alexsanderthe RFC states "local aliases MUST NOT appear in any SMTP transaction" but when mail() method is used they should be OK14:45
nuclear_eclipselgpl allows you to use code however you like, but if you distribute a modified version of the code, you have to release those changes14:45
paulr_nuclear_eclipse: so similar to mit etc ?14:45
nuclear_eclipseno14:45
nuclear_eclipseMIT doesn't require you to release any source code at all14:45
paulr_lets do this a quicker way14:45
paulr_do I hate lgpl?14:45
nuclear_eclipsenot as much as GPL14:45
paulr_ok14:45
alexsanderis there a #phpmailer channel?14:46
paulr_alexsander: what mail is not actually sending?14:46
nuclear_eclipsealexsander: not that I know of, I think it's maintained by a company14:47
alexsanderpaulr_, for user@box addresses14:47
paulr_alexsander: as that reads like rasmus is gonna fix the regex in php, but some of the examples in the framework described are not14:47
paulr_in fact14:47
paulr_why not just change the phpmailer method14:47
paulr_and be done with it?14:47
alexsanderpaulr_, I'm using mail() and local addresses14:47
paulr_nuclear_eclipse: right, gonna break/fix this jscript mess in some fashion in a bit14:48
paulr_going to read for an hour first14:48
paulr_alexsander14:48
alexsanderpaulr_, if I change the method the local addresses will be, according with the RFC, invalid14:48
paulr_alexsander: so no smtp server in loop?14:48
alexsanderpaulr_, no14:48
paulr_what address do you think should work, but rasmus says is invalid?14:49
alexsanderpaulr_, I think phpmailer should not validate for mail() method -- or at least, it should use a more flexible validator14:49
alexsanderpaulr_, the user@box (or test@test for that matter)14:49
paulr_[2010-04-02 17:57 UTC] rasmus@php.net14:53
paulr_A much better RFC-compliant regex has been committed now.14:53
paulr_and have you seen/proved that his better regex doesn't work?14:53
alexsanderpaulr_, the problem is: the RFC talk about SMTP14:53
alexsandertest@test is, indeed, invalid for SMTP14:54
alexsanderbut phpmailer also uses the mail() method -- it should NOT use the standard REGEX for that method14:54
alexsanderthe RFC states "local aliases MUST NOT appear in any SMTP transaction"14:55
alexsanderhttp://tools.ietf.org/html/rfc5321#section-2.3.514:55
paulr_and let me guess14:56
nuclear_eclipsealexsander: don't you have sendmail on the box that you could use instead of mail()?14:56
paulr_mail() calls FILTER_VALIDATE_EMAIL ?14:56
alexsanderpaulr_, no but phpmailer calls14:57
paulr_yea, I see now14:57
nuclear_eclipsealexsander: I would report that to the upstream bugtracker for phpmailer14:57
nuclear_eclipseand then just comment out the call in your local install14:57
paulr_right i'm gonna email person who wrote the jscalendar we are using15:01
paulr_and try and work out how he licenses he's 'new' version15:01
paulr_(as it supports timestamp thing that jquery's one doesnt)15:01
paulr_Licensing quote:15:02
paulr_"The new calendar isn't exactly free. There was a lot of demand for a commercial version and I believe this new product it's worth the price. It includes code from various other products of Dynarch.com, such as the DynarchLIB AJAX Toolkit, which aren't free softwar"15:02
paulr_"The version you can download from here is fully functional, but the source code is minified and mangled (using the YUI compressor). If you want the full source code, please purchase a license."15:02
paulr_"Feel free to use the version distributed here for non-commercial purposes, i.e. on your personal blog, on a charity or educational website, in your free software, etc."15:02
paulr_since that was written however, DynarchLIB  is now bsd licensed apparently15:02
alexsandernuclear_eclipse, paulr_ : https://sourceforge.net/tracker/?func=detail&aid=3040090&group_id=26031&atid=38570715:10
alexsanderthe bug report15:10
alexsandernuclear_eclipse, it's done! changed line 525 of library/phpmailer/class.phpmailer.php15:34
alexsanderif(this-Mailer != 'mail' && filter_var($address, FILTER_VALIDATE_EMAIL) === FALSE) {15:36
alexsanderok, I managed to upgrade from 1.1.815:57
alexsanderhow do I fix the admin/check that says all my "table collations" are latin1 ?15:58
ShakraI don't know if it's the right way to do it, but I took my backup of the mantis database, changed all the charsets to utf8 in the table creates in the backup and then restored the database... worked for me ;)16:03
yaptHello to all.....      I would like how to upgrade to version 1.2.2 from 1.2.1.16:05
yaptI mean.... I am sure I must to maintain some files untouch.... But what files ?16:06
nuclear_eclipseyapt: there's a file in the release  named doc/INSTALL which has that information16:06
yaptOppppssss.... :-(16:06
yaptSorry....  I am going to read it....   Sorry again.16:06
nuclear_eclipsenp16:07
yaptI have upload Mantis 1.2.2 to the web server, unzipped it and check: mantisbt-1.2.2/admin/check.php    But a red box at the right is showed with the word: 'BAD'      It seems bad, doesn't it ?16:14
yaptAfter the 'check' I have executed install.php and all boxes are green.....16:21
nuclear_eclipseyapt: assuming 1.2.1 was working just fine, then 1.2.2 should work fine too16:22
yaptOk... but I have a question.   If I had mantis 1.2.1 on this directory: /www/mantis     and I unzipped the new 1.2.2 on this directory: /www/mantis122    After the upgrade (executing install.php) what would be the directory in production ?16:23
yaptPerhaps I must to copy now my ../mantis122/*  to ../mantis/   to get it on the same folder....16:26
Githubmantisbt: master David Hicks * bfc9e9f (1 files in 1 dirs): Fix #12238: XSS in print_all_bug_page_word.php project/category names ...16:30
Githubmantisbt: master David Hicks * 23b1d93 (1 files in 1 dirs): Fix #11852: Forgotton password feature prevents admin password reset ...16:30
Githubmantisbt: master Paul * 0cad50d (14 files in 4 dirs): Merge branch 'master' of mantisbt.org:mantisbt16:30
Githubmantisbt: master David Hicks * 24e117c (2 files in 1 dirs): Fix type of jQuery files from symlink to file ...16:30
Githubmantisbt: master David Hicks * a4e6b21 (1 files in 1 dirs): Fix #11930: Fix unused/new prefix filters on manage users page ...16:30
yapt\part16:42
paulr_.16:58
--- scribe started ---17:17
paulr_http://blogs.msdn.com/b/sqlphp/archive/2010/08/04/microsoft-drivers-for-php-for-sql-server-2-0-released.aspx17:45
nuclear_eclipseso... they're bragging that they've finally produced what all the other database types have had for years?17:48
nuclear_eclipsewhy is mssql the only mainstream database that hasn't been able to decide on any given driver implementation for more than a year or so before finding something new to say is the "standard"?17:49
nuclear_eclipse</hyperbole>17:49
nuclear_eclipse*angry hyperbole17:50
paulr_shh17:52
paulr_;)17:52
paulr_it means I might now be able to do db laye17:52
* alexsander added notes here --> http://www.mantisbt.org/bugs/view.php?id=1221618:11
alexsandernuclear_eclipse, I added a patch to http://www.mantisbt.org/bugs/view.php?id=1221619:30
alexsanderdoing what you suggested19:30
paulr_alexsander: is the issue that php denies foo@localhost as a email address now?19:36
alexsanderpaulr_, yes19:38
alexsanderpaulr_, I edited "class.phpmailer.php" to check if the method is mail() in order to validate19:38
paulr_so you can't email paul@com anymore I assume?19:42
alexsanderpaulr_, with the vanilla installation, you can't19:42
paulr_alexsander: you are on 5.3.3 right?20:20
alexsandernope20:21
alexsanderpaulr_, I'm on 5.2.1420:21
paulr_so <?php mail('foo@localhost'); doesn't work since what version?20:21
paulr_@ alexsander20:22
foobotpaulr_: Error: "alexsander" is not a valid command.20:22
alexsanderpaulr_, it does work -- but phpmail do not20:23
nuclear_eclipsefoobot: set reply.whenNotCommand False20:24
foobotnuclear_eclipse: Error: "set" is not a valid command.20:24
nuclear_eclipsefoobot: config reply.whenNotCommand False20:24
foobotnuclear_eclipse: Error: You don't have the owner capability. If you think that you should have this capability, be sure that you are identified before trying again. The 'whoami' command can tell you if you're identified.20:24
alexsanderpaulr_, phpmailer has a ValidateAddress function that checks if an address is valid BEFORE even try to send the email -- and it uses the PHP's FILTER_VALIDATE_EMAIL regex20:24
paulr_yea20:24
paulr_foobot: help20:25
foobotpaulr_: (help [<plugin>] [<command>]) -- This command gives a useful description of what <command> does. <plugin> is only necessary if the command is in more than one plugin.20:25
paulr_foobot: help list20:25
foobotpaulr_: (list [--private] [<plugin>]) -- Lists the commands available in the given plugin. If no plugin is given, lists the public plugins available. If --private is given, lists the private plugins.20:25
paulr_foobot: help list *20:25
foobotpaulr_: Error: There is no command "list *".20:25
paulr_foobot: help list --private20:25
foobotpaulr_: Error: There is no command "list private".20:25
paulr_foobot: list20:25
foobotpaulr_: Admin, Anonymous, Channel, Config, Mantis, Misc, Owner, Plugin, Seen, Status, Unix, and User20:25
paulr_foobot: Mantis20:25
foobotpaulr_: Error: "Mantis" is not a valid command.20:25
paulr_foobot: help Mantis20:25
foobotpaulr_: Error: There is no command "mantis".20:25
nuclear_eclipselist Mantis20:25
paulr_foobot: Mantis help20:25
foobotpaulr_: Error: The "Mantis" plugin is loaded, but there is no command named "help" in it.  Try "list Mantis" to see the commands in the "Mantis" plugin.20:25
paulr_list Mantis20:25
paulr_foobot: list mantis20:25
paulr_foobot: list Mantis20:26
foobotpaulr_: bug and version20:26
foobotpaulr_: bug and version20:26
paulr_foobot: version20:26
foobotpaulr_: The current (running) version of this Supybot is 0.83.4.1.  The newest version available online is 0.83.4.1.20:26
paulr_foobot: Mantis version20:26
foobotpaulr_: Mantis SOAP API version: 1.2.220:26
paulr_foobot: bug20:26
foobotpaulr_: (bug <bug number>) -- Expand bug # to a full URI20:26
paulr_foobot: Mantis bug20:26
foobotpaulr_: (mantis bug <bug number>) -- Expand bug # to a full URI20:26
paulr_foobot: Mantis bug 120:26
foobotBug 1 - prescience - no change required - closed20:26
foobotThe blockhead admin deleted the database - http://www.mantisbt.org/bugs/view.php?id=120:26
paulr_wow20:26
moto-moi:D20:27
nuclear_eclipsepaulr_: foobot runs the same code that mantisbot did20:28
paulr_ahh20:28
nuclear_eclipsewhoami20:31
nuclear_eclipse@whoami20:31
foobotnuclear_eclipse: nuclear_eclipse20:31
nuclear_eclipsefoobot: config reply.whenNotCommand False20:31
foobotnuclear_eclipse: The operation succeeded.20:31
nuclear_eclipse@howdy20:32
nuclear_eclipseyay~!20:32
nuclear_eclipsepaulr_: I just actually have foobot running on my server with an init script so that it will automatically come online, versus giallu who was only running it manually from his home workstation20:38
paulr_ya20:43
paulr_@whoami20:58
foobotpaulr_: I don't recognize you.20:58
micahgfoobot: can you fix bug 566821:17
nuclear_eclipsemicahg: we wish :P21:18
micahgfoobot: bug 566821:18
foobotBug 5668 - polzin - open - acknowledged21:18
foobot"versions" of parent project should be used in subprojects. - http://www.mantisbt.org/bugs/view.php?id=566821:18
nuclear_eclipsemicahg: on the surface, that's implemented, but it's woefully incomplete... =/21:18
micahgnuclear_eclipse: how soon is the next release approximately, this one's really biting me ATM, mostly the ones related to it21:19
micahgnuclear_eclipse: I want to work on a patch, but won't get to it for another 4 weeks21:19
micahgI can use the version in the chlid project, but it doesn't appear on any roadmap21:19
micahgoh, I should check if another bug is in there related21:20
micahgmy current issue is actually bug 1087321:20
foobotBug 10873 - andy_mbt - open - acknowledged21:20
foobotChange Log/Roadmap do not work with inherited versions. - http://www.mantisbt.org/bugs/view.php?id=1087321:20
nuclear_eclipsemicahg: I'll probably push another release for 1.2 with the recent round of security fixes, but there are a lot of underlying design issues that were never taken into account for 566921:20
micahgnuclear_eclipse: I jsut ran into an issue that if subprojects are sharing the same version, you can't do a bulk update from teh top project view issues page21:21
nuclear_eclipsemicahg: that's actually the one reported by one of my project's, and we have a local "fix" that just comments out the sections where versions get cached...21:21
nuclear_eclipsemicahg: yeah, that too :P21:22
micahgright, I don't even know if you can properly implement it in the 1.2.x branch, I think it requires a bit of schema change21:22
nuclear_eclipseyes, there are definite schema changes that should have been made to support this, similar to the round of schema changes made for categories in 1.2.021:22
nuclear_eclipsebut there are wholesale sections of code that should have been rewritten with inheriting versions in mind, that are still left just the way they were...21:23
micahgnuclear_eclipse: bug 12189 is a dupe of bug 001087321:25
foobotBug 12189 - ha17 - open - new21:25
foobotSubprojects using Parent project versions don't have roadmaps - http://www.mantisbt.org/bugs/view.php?id=1218921:25
foobotBug 0010873 - andy_mbt - open - acknowledged21:25
foobotChange Log/Roadmap do not work with inherited versions. - http://www.mantisbt.org/bugs/view.php?id=001087321:25
* micahg doesn't have privs21:25
nuclear_eclipsewould you like to?21:25
micahgnuclear_eclipse: idk if I"ve earned it21:25
nuclear_eclipseyou've stuck around long enough that I have no problem giving you developer access to the tracker if you ever want to help out on triaging stuff21:26
micahgnuclear_eclipse: ok, I'm willing to help where I can21:26
micahgs/where/when21:26
nuclear_eclipsedone21:27
micahgthanks21:27
nuclear_eclipsealways looking for good help around here :)21:28
micahgnuclear_eclipse: actually, this new bug has a patch :)21:29
micahgnuclear_eclipse: what's the process for that?21:30
nuclear_eclipseusually get one of the core developer's attention long enough to get them to test it and push the patch to main repo :P21:30
micahgk, but more specifically WRT the duplication of issues21:31
nuclear_eclipseoh, just mark the duplicate as resolved, and put the main issue # is the duplicate id field21:32
nuclear_eclipseand ofc select "duplicate" as the resolution21:32
micahgnuclear_eclipse: right, but the other bug is already set at related to the main bug21:32
nuclear_eclipseissues can have multiple relationships, so I wouldn't worry about that21:33
micahgnuclear_eclipse: right, but I don't want to lose the patch, I'm wondering if I need to make the old issue a dupe of the one with the patch and update the relationships accordingly21:33
nuclear_eclipseoh, yeah, that's fine too21:34
nuclear_eclipsejust gotta decide which issue will be the "main" one, and resolve the other one21:34
micahgwill the people watching see my change and then choose if they want to follow the new issue or shoudl I not worry about that?21:35
nuclear_eclipsethey'll get a notice that it's been marked as a duplicate, so they'll watch the new one if they really want to21:36
micahgk21:36
nuclear_eclipseI think there was some discussion about automatically merging monitor lists when doing that, but I don't think anything ever happened with that21:37
micahgI see people using closed for dupes, is that better than resolved?21:38
micahgor resolved duplicate is fine21:39
nuclear_eclipseI personally prefer to use resolved21:39
micahgk21:39
nuclear_eclipsethat gives users a chance to reopen the issue if they feel the action was incorrect21:39
micahgok21:39
nuclear_eclipsethen I periodically go through and mark undisputed issues as closed21:39
micahgI've been using bugzilla heavily and was wondering if parent/child is meant to operate in a similar way to Depends on/Blocks21:40
nuclear_eclipseyes, somewhat21:40
nuclear_eclipseit's a bit more abstract though because we don't have any well-defined process for things like that21:40
nuclear_eclipseso it can mean just about anything depending on context :P21:41
micahgwhich category for a bug with change target version on teh View issues page?21:42
nuclear_eclipsehmm?21:42
micahgactually, idk if I should report since I'm still on 1.2.0rc221:42
nuclear_eclipseyes, please upgrade :P21:43
micahgwell, I can't afford a broken installation till this project is close to being done, so I'm waiting, should be about 3 weeks21:43
nuclear_eclipseI like to mark issues reported against out of date versions as "please upgrade and then reopen"21:43
nuclear_eclipseyeah, that's understandable21:43
nuclear_eclipseI usually use that line because then people will say "cant upgrade due to custom changes" so I can then go back and say "we can't support installations with changed code"21:45
micahgwell, I can tell you with Ubuntu, if we think it's solved, that's what we do, but we're supposed to try to replicate it, otherwise people get annoyed if they're asked to reproduce after every release and stop reporting bugs21:45
micahgnuclear_eclipse: I would think any bugs again 0.x could probably have that done though21:45
nuclear_eclipsehehe21:45
micahgwow, they're not even in the list anymore21:46
micahgwhich makes sense21:46
nuclear_eclipsemicahg: 11802 doesn't seem to me to be a dupe of 10873 though21:50
micahgnuclear_eclipse: did I goof?21:50
micahgmaybe I subscribed to the wrong bug21:50
micahgugh21:51
micahgI did the wrong bug21:51
nuclear_eclipse:P21:51
micahgI'll undo it21:51
micahgsorry21:51
nuclear_eclipseno worries21:51
nuclear_eclipseit's difficult to keep on top of so many different bug tracker implementations21:52
micahgI meant to do it to 1218921:52
nuclear_eclipsebetween bugzilla, launchpad, trac, and mantis I sometimes want to just want to blow up the internet :P21:52
micahgwhich has no patch21:53
micahgthat's better21:54
micahgwell, I have super privs in all 3 now :)21:55
micahgit does get confusing21:55
nuclear_eclipsedhx_m: http://seclists.org/bugtraq/2010/Aug/4722:12
micahgnuclear_eclipse: speaking of security issues, do I have to worry about the RSS feed link with my username/key22:18
nuclear_eclipsemicahg: you would likely want to use SSL to prevent snooping over the wire, but otherwise I wouldn't consider it a risk22:19
nuclear_eclipseunless the bugs in that list have ultra-sensitive data, the only thing (afaik) that someone could do with your rss key is subscribe to your personal feed22:20
micahgk, I'm going to add the feed for mantisbt and do what I can22:20
micahgI'm sorry I haven't had time to look into getting 1.2.x into Debian, the maintainer is afraid to upgrade22:23
nuclear_eclipseno worries22:23
nuclear_eclipseno offense to you, but I personally don't care if distros pick it up because I never use web apps packaged by distros, for multiple reasons22:24
nuclear_eclipseI understand the benefits of using packages from your distro, and I love it for actual native software, but web apps never seem to package well, and they always try to package apache configs that conflict with what I'm trying to do, and they're almost always behind because they insist on using some native database schema management that never works well with what web apps are trying to accomplish...22:26
nuclear_eclipseliterally the only webapp I use from a distro package is gitweb, just because it's so tightly tied to the version of git installed on the machine22:27
nuclear_eclipseanyways, sorry for ranting there, I still have some pent up frustrations from dealing with the previous maintainer for debian... =\22:29
nuclear_eclipseapparently the fact that the 1.1 => 1.2 upgrade required running code to migrate data from an old schema format to a new schema was enough to break any chance of being compatible with debian's schema management system, so he put up a fuss and then abandoned the package22:31
dhx_mnuclear_eclipse: ready for 1.2.3? :)22:34
nuclear_eclipseno, I'm not in a rush this time22:34
nuclear_eclipseit's not a critical vuln either22:34
dhx_mthe other ones I fixed may be :)22:34
nuclear_eclipsedhx_m: you should email victor and ask for access to manage files for the project on sourceforge.net22:35
dhx_mnuclear_eclipse: yep will do22:35
nuclear_eclipsethen maybe when I get around to documenting the release process, you'll be able to roll some on your own :P22:36
nuclear_eclipsemost of the work involved is all the stuff besides generating the tarballs22:36
dhx_mok good, that's the easy part for me22:36
nuclear_eclipseie, create the release notes, wrangle the issues on the official tracker22:36
dhx_mdo you close fixed issues for the latest release?22:37
nuclear_eclipseyep22:37
dhx_mok22:37
dhx_mI guess I'd need project manager permissions to add a new version?22:38
nuclear_eclipseI tag the release in git, generate tarballs, rename 1.2.x to 1.2.3, create a new 1.2.x, mass update issues to retarget for 1.2.x, do some other minor cleanups, close all the issues related to 1.2.3, upload the tarballs, update mantisbt.org to 1.2.3, send the release announcement email, and then post a blog entry announcement22:39
nuclear_eclipseand yes, it does require quite a bit of access to various areas22:40
nuclear_eclipseanywho, dinner time22:42
dhx_mok I'll look into it when I get back, gtg too, cya22:42
nuclear_eclipsecheers dhx_m22:42
paulr_dhx_m: morning!22:47

Generated by irclog2html.py