January 2006 - Development - lists.drupal.org

Re: Remove PHP filter by default
by Raven Brooks 29 Jan '06

29 Jan '06

Why is the existing option to disable this or limit it to certain roles not sufficient? One simply has to go to admin/filters and click disable if they don't want it. Perhaps the documentation or install instructions need to be enhanced to have a chapter about security (i.e. if you want to secure your site here are all the things you can do and their impact). As others have said, just because you are writing PHP doesn't mean you are coding functionality, you may just be trying to generate dynamic content on your site in a block or something. That is something drupal should allow and you should need to write a module to do that. Drupal is not exclusively used by people that can get in there and upload files to their FTP server. If that was to be offered as "more secure" way of doing things that is fine, but it should be an administrator choice it shouldn't be required.

4 3

Re: Remove PHP filter by default
by Raven Brooks 29 Jan '06

29 Jan '06

> The problem occurs when you have a lot of sites, and do not want > *anyone* to > run PHP. You have to disable not only the PHP input. But also the > ability > for people to switch it on. Which means you ghave to seriously > restrict all > their permissions. > Same goes for when you *do* what Joe Moderator of your site to be > able to > administer certain areas (like users) but definately not to give > the the > option to run code. Fair enough, but that seems like something specific to Drupal hosting providers. This would not necessarily be beneficial or desirable for the average drupal administrator running a few sites. I think this could be a good feature to include as an option somewhere, perhaps invoked from settings.php but I think it should be optional, not required.

1 0

Another (minor) module upgrade step
by Scott McLewin 29 Jan '06

29 Jan '06

I received a bug report against my converted 4.7 wishlist.module this morning about submission guidelines appearing twice on the node/add/wishlist form. It appears that the node.module is now retrieving the variable $type.'_help' from the variables table and displaying it. My module's wishlist_help function was also retrieving variable "wishlist_help" when the node/add/wishlist page was displayed. I've removed the case for 'node/add/help' in my wishlist_help function and the submission guidelines now appear only once. My question for the Drupal experts: Did I resolve this correctly in my module? I didn't see any indication that I needed to alter my module's hook_help in the Drupal 4.6 to 4.7 migration guidelines (http://drupal.org/node/22218) I already missed the revision system changes page, so there is a good chance I missed this little change too. :) However, there is also a chance that the module conversion guidelines have missed this very minor step. Scott

1 0

Release critical bugs for January 29, 2006
by drupal-devel＠drupal.org 29 Jan '06

29 Jan '06

/ bug reports Article tag repeating age: 10 weeks 5 days url: http://drupal.org/node/37544 / bug reports admin/modules fails to display age: 5 weeks 5 days url: http://drupal.org/node/41791 / bug reports Getting Buddylist ready for 4.7 age: 9 weeks 3 days url: http://drupal.org/node/38683 / bug reports No check for loading chatbox with other name age: 9 weeks 5 days url: http://drupal.org/node/38397 / bug reports Devel Module Throws Error Messages age: 4 weeks 4 days url: http://drupal.org/node/42457 / bug reports Drupal Event age: 5 weeks 4 days url: http://drupal.org/node/41833 Event start and end times not getting saved in database age: 6 weeks 2 days url: http://drupal.org/node/41300 event_calendar_data : warning: gmdate() [function.gmdate]: Windows does not support dates prior to midnight (00:00:00), January age: 7 weeks 2 days url: http://drupal.org/node/40470 Issues with list view for events age: 7 weeks 6 days url: http://drupal.org/node/39943 Database error keeps popping up age: 8 weeks 4 days url: http://drupal.org/node/39396 Events module bugs adding and changeing events age: 8 weeks 6 days url: http://drupal.org/node/39016 / feature requests Checkbox to disable Ical link age: 8 weeks 6 hours url: http://drupal.org/node/39848 Events only for registered users age: 14 weeks 3 days url: http://drupal.org/node/34640 / support requests Can't Administer Event Module age: 3 weeks 2 days url: http://drupal.org/node/43509 displaying event start info in flexinode tabular view? age: 16 weeks 4 days url: http://drupal.org/node/33019 Event block missing content of many fields age: 18 weeks 6 days url: http://drupal.org/node/31532 / bug reports file size bug age: 33 weeks 1 day url: http://drupal.org/node/24728 / bug reports Image block not showing up, while integration is working. age: 5 days 1 hour url: http://drupal.org/node/46142 Latest patch hosed my G2 integration and G2 Standalone age: 8 weeks 5 days url: http://drupal.org/node/39168 problem viewing newly added photos in embedded gallery. age: 9 weeks 6 days url: http://drupal.org/node/38352 problem viewing newly added photos in embedded gallery. assigned: trobison age: 9 weeks 6 days url: http://drupal.org/node/38351 Search results give incorrect links age: 15 weeks 6 days url: http://drupal.org/node/33539 Full screen slideshow in Gallery module is not working (erroring out on the wrong URL) age: 29 weeks 3 days url: http://drupal.org/node/26479 / support requests Gallery Module stopped working age: 7 weeks 5 days url: http://drupal.org/node/40117 import existing gallery2 user account age: 12 weeks 5 days url: http://drupal.org/node/35920 Enhanced gallery.module age: 17 weeks 4 days url: http://drupal.org/node/32393 / bug reports Remove theme->page calls from glossary assigned: Jaza age: 3 weeks 4 days url: http://drupal.org/node/43234 / feature requests po files and other language support age: 3 days 21 hours url: http://drupal.org/node/46313 / bug reports Goofy theme broken in 4.7? age: 1 week 3 days url: http://drupal.org/node/45300 / feature requests Goofy Forum UI age: 17 weeks 5 days url: http://drupal.org/node/32294 / bug reports view source broken in firefox 1.5 age: 4 days 9 hours url: http://drupal.org/node/46246 Toolbar won't display correct in IE 6 with Pushbutton Theme age: 20 weeks 2 days url: http://drupal.org/node/30696 / bug reports images not showing in multisite setup age: 3 weeks 1 day url: http://drupal.org/node/43566 BMP's don't work age: 5 weeks 4 days url: http://drupal.org/node/41926 By CHanging the following the error changes assigned: walkah age: 6 weeks 2 days url: http://drupal.org/node/41353 Deleting Image gallery age: 8 weeks 4 days url: http://drupal.org/node/39290 imagemagick.inc file does not contain the function... age: 11 weeks 10 hours url: http://drupal.org/node/37372 Error when Submitting New Image Node age: 11 weeks 10 hours url: http://drupal.org/node/37366 only variables can be passed by reference on line 713 age: 12 weeks 3 days url: http://drupal.org/node/36092 image.module 4.6.0 strange actions age: 16 weeks 2 days url: http://drupal.org/node/33292 cannot asociate image to the gallery age: 17 weeks 1 day url: http://drupal.org/node/32723 File copy failed: source file does not exist error after running update-image.php age: 18 weeks 3 days url: http://drupal.org/node/31816 Path for image folder not inserted correctly when nodetype = image age: 21 weeks 4 days url: http://drupal.org/node/30031 image module patch & image_import module age: 22 weeks 5 days url: http://drupal.org/node/29377 image module fails on dual site configuration age: 28 weeks 3 days url: http://drupal.org/node/26657 Cannot upload .jpgs age: 47 weeks 6 days url: http://drupal.org/node/18076 / feature requests Copying original age: 12 weeks 1 day url: http://drupal.org/node/36321 Image deletions? age: 20 weeks 4 days url: http://drupal.org/node/30557 / support requests I need to change the style of displaying each node. Please help. age: 3 weeks 5 days url: http://drupal.org/node/43017 What does update-image.php do exactly? age: 5 weeks 1 day url: http://drupal.org/node/42222 images not showing2 age: 8 weeks 20 hours url: http://drupal.org/node/39773 Image Folder Permissions age: 14 weeks 1 day url: http://drupal.org/node/34839 Image Module Permissions age: 29 weeks 6 days url: http://drupal.org/node/26280 / bug reports Link to mailhandler does not use l() function age: 2 weeks 1 day url: http://drupal.org/node/44599 Listhandler caused error in "comment.module on line 996" ? age: 12 weeks 2 days url: http://drupal.org/node/36244 / tasks Correct/Complete Documentation age: 14 weeks 11 hours url: http://drupal.org/node/34909 / bug reports Error on retreiving mail age: 8 weeks 5 days url: http://drupal.org/node/39178 / support requests Mail Body not downloaded age: 3 weeks 3 days url: http://drupal.org/node/43374 / bug reports Port to CVS age: 4 weeks 11 hours url: http://drupal.org/node/42893 foreach() assigned: neablo age: 4 weeks 5 days url: http://drupal.org/node/42350 / bug reports Error when deleting nodes or in the case below - error when deleting a taxonomy term age: 8 weeks 19 hours url: http://drupal.org/node/39781 / feature requests Description as a tag in the theme. age: 8 weeks 4 days url: http://drupal.org/node/39354 / tasks here's Postgresql table definition age: 2 weeks 1 day url: http://drupal.org/node/44674 / bug reports nodes are being created with no body age: 7 weeks 2 days url: http://drupal.org/node/40373 missing promote column assigned: Bèr Kessels age: 9 weeks 1 day url: http://drupal.org/node/38836 Naming issues with files and DB tables age: 14 weeks 6 days url: http://drupal.org/node/34298 RSS "no element found at line 1" age: 30 weeks 1 day url: http://drupal.org/node/26185 Outdated help texts age: 1 year 25 weeks url: http://drupal.org/node/9692 Import doesn't like XML/RSS feeds with no Title element age: 1 year 34 weeks url: http://drupal.org/node/8128 / tasks move XML-parser into an inclde file. age: 31 weeks 4 days url: http://drupal.org/node/25439 / bug reports Path to notify_module.inc incorrect age: 2 days 14 hours url: http://drupal.org/node/46532 Notify not playing well with Organic Groups age: 6 weeks 5 days url: http://drupal.org/node/40967 / feature requests Notify.module ignores the true submission queue age: 2 years 14 weeks url: http://drupal.org/node/3765 / bug reports Login as an alias gets cached age: 18 weeks 5 days url: http://drupal.org/node/31699 / bug reports Malformed PDFs age: 4 weeks 6 days url: http://drupal.org/node/42312 Drupal 4.7 age: 5 weeks 4 days url: http://drupal.org/node/41887 support dynamic content? age: 10 weeks 23 hours url: http://drupal.org/node/38181 please explain html2fpdf age: 10 weeks 4 days url: http://drupal.org/node/37748 Management of french charaters age: 11 weeks 6 days url: http://drupal.org/node/36605 / feature requests Internationalization support for PDF assigned: TheLibrarian age: 1 year 43 weeks url: http://drupal.org/node/6795 / support requests Problem with PDFView age: 1 week 4 days url: http://drupal.org/node/45092 / bug reports Race Condition in the code. age: 3 weeks 2 days url: http://drupal.org/node/43511 / bug reports anonymous users can create folders and view all anonymous sent-mail age: 6 weeks 1 day url: http://drupal.org/node/41361 error when trying to send private message age: 7 weeks 1 day url: http://drupal.org/node/40626 privatemsg not working with current head age: 19 weeks 17 hours url: http://drupal.org/node/31469 Reminder email links don't work age: 31 weeks 1 day url: http://drupal.org/node/25677 / feature requests Simplified Chinese translations age: 10 weeks 6 days url: http://drupal.org/node/37505 / bug reports Install KO's Module Admin age: 1 week 3 days url: http://drupal.org/node/45389 SQL errors on issues and my projects pages age: 5 weeks 1 day url: http://drupal.org/node/42160 Blank page on admin/settings/project/status age: 5 weeks 6 days url: http://drupal.org/node/41646 Issues from multiple projects listed on a single issue's page age: 9 weeks 3 days url: http://drupal.org/node/38704 Get disconnected from server on attempting to add an issue age: 12 weeks 3 days url: http://drupal.org/node/36124 can't select all projects age: 16 weeks 2 days url: http://drupal.org/node/33262 Can't update issue title from issue comment assigned: nedjo age: 16 weeks 6 days url: http://drupal.org/node/32843 Projects not listed and page not complete age: 34 weeks 5 days url: http://drupal.org/node/23956 Date for latest is incorrect age: 41 weeks 3 days url: http://drupal.org/node/20485 / feature requests Need Documentation age: 7 weeks 2 days url: http://drupal.org/node/40392 Search by Version age: 10 weeks 1 day url: http://drupal.org/node/38122 Allow subscription to individual project issues age: 14 weeks 4 days url: http://drupal.org/node/34496 / support requests Add the project release manually without the scan feature age: 14 weeks 4 days url: http://drupal.org/node/34500 / bug reports Error with URL to recipe age: 21 weeks 6 days url: http://drupal.org/node/29885 / tasks Need update for new Forms API age: 11 weeks 1 day url: http://drupal.org/node/37269 / feature requests Request to generate email for all content changes/additions, including comments age: 28 weeks 19 hours url: http://drupal.org/node/26824 / bug reports Error when searching an existing user.... age: 4 days 1 hour url: http://drupal.org/node/46288 / bug reports taxonomy_dhtml breaks security? age: 4 weeks 3 days url: http://drupal.org/node/42531 Does not work correctly in Internet Explorer age: 16 weeks 1 day url: http://drupal.org/node/33354 Blocks switch and reset when vocabs are modified age: 37 weeks 3 days url: http://drupal.org/node/22631 javascrip downloads square.gif for every category age: 49 weeks 4 days url: http://drupal.org/node/17366 / feature requests A unique page for each category group? age: 14 weeks 3 days url: http://drupal.org/node/34610 / support requests Taxonomy has dissapeared age: 16 weeks 4 days url: http://drupal.org/node/33061 / bug reports Sends trackbacks for unpublished nodes assigned: ankur age: 1 year 2 days url: http://drupal.org/node/16239 / tasks would love to see this for 4.7... age: 1 week 3 days url: http://drupal.org/node/45429 / bug reports Event start/end date section should *not* show first on Submit event page age: 5 weeks 4 days url: http://drupal.org/node/41869 meet age: 6 weeks 4 days url: http://drupal.org/node/40996 / feature requests A better Drupal.org Index (homepage) interface/layout mockup age: 6 days 3 hours url: http://drupal.org/node/45967 A small but effective improvement to Improvement of admin/user accessability suggestion age: 15 weeks 1 day url: http://drupal.org/node/34073 / support requests Acess denied to login Newly installed and upgraded site that I need up and running A.S.A.P assigned: Johnny age: 10 weeks 11 hours url: http://drupal.org/node/38227 / bug reports Resolution appears to be in the cvs version of the linkattach module assigned: hintbw age: 14 weeks 1 day url: http://drupal.org/node/34765

1 0

implementing hook_search
by Fabio Varesano 29 Jan '06

29 Jan '06

Hi everybody, Is it possible to implement the hook_search creating a search interface without the text field but only with categories and other fields? I'm stuck with this! Thanks, Fabio Varesano

2 2

drupal_to_js
by Jeff Griffiths 28 Jan '06

28 Jan '06

I submitted a bug a while ago while doing some drupal dev for work: http://drupal.org/node/42794 It would be cool if this was looked at prior to 4.7 final so that the released drupal / JSON implementation is more useful, and in particular functions like PHP-JSON. This will allow people implementing AJAX / JSON stuff in drupal to optionally compile and use PHP-JSON if they want the performance, without code changes. cheers, JeffG

2 1

renaming modules
by ae2005 28 Jan '06

28 Jan '06

thanks everyone for the comments. Nick had an interesting comment I'm forwarding. It's great that Gordon has volunteered to help with what Dries said. (I don't know enough to help.) Re Robert's comment that there are obscure but great modules, it makes sense to me that there should be a way to rename modules (or at least link new names to modules), and a page to submit new name suggestions. If it does not take too much time, I may be able to volunteer to monitor such a page, and change the names of modules, or something. ae On Tue, 2006-01-24 at 21:42 -0600, Nick Lewis wrote: > I moved this to infastructure [it seemed like the right place]... I > think something like this would really be helpful to new and old users > alike. In order to gauge a module's stability, I have to sort through > filters of messages, and CVS histories. Most people think CVS is a place > to fill prescriptions. > > Of course, the number of downloads would only be a useful measure (in > my opinion) with the following additional measures(stolen from > downloads.com to some extent): > > a) a non-anonymous rating system that requires a drupal.org user > account. Ratings include: > 1=doesn't work at all, 2=frequently crashes site 3=kind of buggy > 4=reliable, with minor bugs 5=recommended > > b) number of downloads -- by total, by month, and by week > > c)open comments on module front page. > > It is fairly time consuming to research a module -- to tell you the > truth, I usually just test out the module on a live site. And while bug > reports work well for experienced users, and/or users with time, a more > instant way to give feedback would be nice. I'd love to see a module's > front page have a comment at the top of the page that says "This module > rocks!", or "this module broke my site". > > All together, expanding the ways that users can give feedback on modules > would be a great improvement to drupal.org. It would both help good > modules gain attention, and use, while singling out certain modules that > fail to work Installing modules is too much like gambling... Seasoned > users have learned to live with it; however, new users may very well > judge drupal badly as a whole when they use a module that doesn't work. > > Few cents of a recently devalued currency, > Nick Lewis > http://nicklewis.smartcampaigns.com

11 10

Temporary database credentials
by Allie Micka 27 Jan '06

27 Jan '06

Like many hosting providers, we grant full access to databases for site administrators, and we create a separate, rights-limited user for each database. This is a great idea until it's time to run update.php. It really should detect that I don't have DROP, ALTER, etc; but instead it just fails badly. What I've been doing is editing settings.php to replace the credentials in $db_url, running update.php, and then re-editing the file. I'm sure that most of our users are just leaving things as-is, which is bad for many reasons. It would be nice to have a place to enter some temporary credentials, stored in $_SESSION and disposed of when the user logs out. a) Is this in-progress someplace? b) Anybody have UI suggestions for this? It could just go into update.php, but may have use elsewhere. Allie Micka pajunas interactive, inc. http://www.pajunas.com scalable web hosting and open source strategies

7 11

FAQ Module . . .
by Jason Flatt 27 Jan '06

27 Jan '06

Hello all. In the last month, I have had three separate people ask me about setting up an FAQ on their site. I know there is documentation about how to do this with the book module, and I know this is possible just using existing functionality within Drupal, but there is no real module designed to help easily create, edit and view a standardized FAQ. After thinking through the process, I think, for me, it would be a good exercise to create an FAQ module, and it could benefit the community, as well. So, before I get too far into it, I thought I would check: is anyone else is headed down this path as well? If so, maybe we can collaborate, or at least minimize duplication of effort. -- Jason Flatt http://www.oadae.net/ jason(a)oadae.net

4 3

Re: [development] Re: fixed project releases
by Khalid B 27 Jan '06

27 Jan '06

> >> 21:44 < killes> Dries_: please remove all releases older than 4.5, > >> all non-4.7 RCs +1 > >What to do with the issues associated with those releases? > > Change the release to 4.5 for all pre-4.5 releases. I assume there > will be a comment added to the issue recording the change. Create a new release called "obsolete" (or some other obnoxious but creative name) and assign anything that is now pre 4.5 to be against it so we know this is old stuff if we need to know, and it does not get in the way later. One related issue: any issue that says "cvs" now and does not get fixed, remains as cvs even if we release 4.7, then 4.8 then 5.0, then 5.1, ...etc. Later someone has to go thru and mark some of them as no longer applicable, ...etc. Is there a better way of doing this? For example, all current issues are marked either "4.6" or "pre-4.7". Future ones become "4.7" if they are against that live branch, or "pre-4.8". Would this ease tracking of old issue and give a sense of how long they have been around (since how many releases, not number of days).

4 4