August 2005 - support - lists.drupal.org

[drupal-support] Drupal 4.6.3 released (security alert)
by Dries Buytaert 17 Oct '05

17 Oct '05

The Drupal project has released version 4.6.3 of its open-source content management platform. Drupal 4.6.3 is a maintenance release that fixes problems reported using the bug tracking system. Drupal 4.6.3 also fixes a NEW SECURITY VULNERABILITY which was discovered in the third-party XML-RPC library Drupal uses. An attacker could execute arbitrary PHP code on a target site. Upgrading your existing Drupal sites is highly recommended. As the same bugs are also present in the Drupal 4.5 series, Drupal 4.5.5 is released as well. For detailed information about this release and the security vulnerability, please consult the release announcement at http:// drupal.org/drupal-4.6.3 and read the DRUPAL-SA-2005-004 security advisory at http://drupal.org/files/sa-2005-004/advisory.txt. Kudos to all Drupal contributors who helped to get these releases out, -- Dries Buytaert :: http://www.buytaert.net/

14 19

[drupal-support] changing Drupal .htaccess files directive
by Charlie Lowe 03 Sep '05

03 Sep '05

I realize this is sort of a how to unDrupalize something request, but I'm hoping someone has the easy answer. I've got a Drupal site: http://kairosnews.org/ I've installed PHPSurveyor in a subfolder: http://kairosnews.org/surveyor/ However, I cannot access the admin page: http://kairosnews.org/surveyor/admin/admin.php I'm guessing that either (a) Drupal's .htaccess files directive might be blocking access or (b) Drupal assumes it's supposed to read that file. I know that it's not the file directives in .htaccess, for I tried my .htaccess file with all of those deleted. Still not working. Thanks for any help :) Charlie Lowe

4 6

[drupal-support] Bottom of list
by Ron Mahon 30 Aug '05

30 Aug '05

There's a check box for having a new page displayed at the top of the list. I need one to make the page display at the bottom of the list. I want to display an external search box after the viewer has viewed all my content on that subject. Anybody know how to do this Thanks Ron Ron Mahon Is a principal in the "InterNet Marketing Resource Club" a web site devoted to revealing the best of InterNet Marketing Secrets. A Free Super Mart of Articles, Demos, Tutorials everything you need to Succeed on the net. http://www.inmrc.com

1 0

Re: [drupal-support] changing Drupal .htaccess files directive
by k_imes 30 Aug '05

30 Aug '05

Hi Charlie - >I've installed PHPSurveyor in a subfolder: > >http://kairosnews.org/surveyor/ > >However, I cannot access the admin page: > >http://kairosnews.org/surveyor/admin/admin.php > >I'm guessing that either (a) Drupal's .htaccess files directive might be >blocking access or (b) Drupal assumes it's supposed to read that file. I >know that it's not the file directives in .htaccess, for I tried my >.htaccess file with all of those deleted. Still not working. > >Thanks for any help :) To be sure, you can rename the .htaccess file (temporarily - name it back as soon as you have done this quick test) and then try accessing http://kairosnews.org/surveyor/admin/admin.php If it still doesn't work, then you *know* it is something other than the .htaccess file. I'd check the file & folder permissions for the admin folder and the files within it; make sure it is readable by the webserver (which usually means 'readable by all'). Also, check for an .htaccess file inside of the admin directory. Hope that gets you a step farther. Cheers, --Katin

1 0

[drupal-support] Using Node Privacy By Role in Forums
by Dennis Bennett 28 Aug '05

28 Aug '05

Hi, I have a new Drupal site and want to create a forum that only certain members can access, with the rest of the forums accessible by all authenticated members. I've seen the Node Privacy by Role module (http://drupal.org/project/node_privacy_byrole) used for this, but I'm having a heck of a time figuring out how to do it on our site. We've already successfully installed and enabled the module in ?q=admin/settings/node_privacy_byrole. However, we're not able to determine how to actually restrict access to a particular node (the private forum) by role. Could someone please post a procedure for doing so? Thanks in advance, Dennis

2 1

[drupal-support] system messages showing on all pages
by Abalieno 28 Aug '05

28 Aug '05

My host screwed something and now my site doesn't run anymore with php 4 but it seems to work with php 5. As I can use it only as CGI I cannot pass parameters through the .htaccess and the sessions vanish after half an hour. I guess I have no hope to solve this problem? It's not fun when you work on an article for an hour, post it and discover the session vanished and you lost everything. The other problem is that I see the system messages ( like "The block settings have been updated.") sticking on EVERY page. They also group up and just don't vanish till the session isn't ended. Is this a problem with PHP 5 or it's again about the settings not being applied correctly? -HRose / Abalieno

2 1

[drupal-support] Allow anyone in a role to edit any page
by Travis Spencer 28 Aug '05

28 Aug '05

Hey All, I've got drupal up and running on my second drupal-based site. It sure has been easier and more enjoyable this time around now that I know, for example, what a node is :) One thing that I haven't been able to figure out though is how do I allow anyone of a certain role to edit any page? I can create the role no problem and I can grant access to allow users to modify their own pages, but I don't see a way to allow anyone of a particular role (e.g., Content Manager) to edit any page. I don't want members of this role to be able to create new pages; I just want them to be able to edit existing ones. This seems like a pretty common use case, so it must be hiding among all these options somewhere :/ Am I missing something or is it truly not possible? If it isn't currently doable, then perhaps I'll hack page.module to make it possible ;) -- Regards, Travis Spencer

6 7

[drupal-support] Regex to hide/show a block
by Travis Spencer 28 Aug '05

28 Aug '05

Hey All, In the `Pages' textbox under `admin/block/configure/menu/25' (i.e., my block associated with some menu), I have the following: <^node/[59]($|/.*)> <^node/1[0-4]($|/.*)> I've selected the `Show on only the listed pages.' option, so I would expect the block to be displayed on pages with these URLs: node/5 node/10 node/9 node/9/edit node/5/edit node/10/edit node/11/edit node/12/edit node/112 node/11 node/12 node/13 node/14 However, it only displays on pages *without* `edit' in the URL. Also, it *does* show up on pages such as `node/10/' (note the trailing slash). This is very confusing. To test things more easily and since drupal and PHP use PCRE regular expressions, grep's `-P' option (which searches using a PCRE library) should produce the same results as drupal (but without all the clicking). However, it doesn't; it matches just as I would expect it to: mj% cat patterns | while read pattern ; do pipe while> echo "$pattern: " ; grep -P "$pattern" < input pipe while> done ^node/[59]($|/.*): node/5 node/9 node/9/edit node/5/edit ^node/1[0-4]($|/.*): node/10 node/10/edit node/11/edit node/12/edit node/11 node/12 node/13 node/14 mj% cat patterns ^node/[59]($|/.*) ^node/1[0-4]($|/.*) mj% cat input node/5 node/10 node/9 node/9/edit node/5/edit node/10/edit node/11/edit node/12/edit node/112 node/11 node/12 node/13 node/14 Does anyone see where I'm going wrong? TIA. -- Regards, Travis Spencer

1 0

[drupal-support] Getting a blank page running upgrade 4.3.1.> 4.4.2
by Bob Doyle 27 Aug '05

27 Aug '05

Hi all, We backed everything up, added two new required fields to the database, then ran the update.php script for one of our sites (CMS-News). The results of clicking on the cms-news.org/update.php?op=update (just once) was a blank page. We also get a blank page when we request the updated site http://www.cms-news.org. We did the same operations for the CMS Forum site. Just to check we were connecting properly, we asked for cms-forum.org *before* we added the two new fields to its system table, and it came back (properly) with an error message saying "throttle" field was missing. This told us the new 4.4.2 code was trying to run. Any advice on how to get past the blank page? If we figure it out, we will add howto to the drupal.org update discussion. Thanks. -- Bob Doyle Editor In Chief, CMS Review - http://www.cmsreview.com Technology Adviser, CM Pros - http://www.cmprofessionals.org CEO, skyBuilders - http://www.skybuilders.com 77 Huron Avenue Cambridge, MA 02138 617-876-5678

2 1

Re: Re: [drupal-support] Unable to create first account
by Madhan Raj M 24 Aug '05

24 Aug '05

Hi Kobus, Thanks for your reply. It did work after copying the files over. Thanks On Wed, 24 Aug 2005 Kobus Myburgh wrote : >Hi, > >I once had a similar situation with a much older version of Drupal. The resolution was to copy the files over. I was missing some files. > >HTH > >Kobus > > > >>> raj_madan(a)rediffmail.com 8/24/2005 8:25:19 AM >>> >Hi > >I'm using Drupal-4.6.2. I installed it in Sourceforge.net >http://fosta.sf.net > >A database has been created and i'm able to bring the first page. Now when i try to create the first account, it doesnt do anything. It returns back to the same login page again without any error mesg or info. >Also when i checked the database, if any users are created, the users table is not altered. Also, Drupal is not sending any mail, when creating an account. >when i try to use wrong user name and passwd, its not showing any mesg and goin back to the login page again. I'm not albe to figure it out. I didnt alter the .htaccess file. Any help could be nice > >Thanks > > > >Madhan Raj M, B.E. > >GNOME Hacker >GNOME Foundation Member (madhanrm(a)gnome.org) >Registered Linux User #396102 >http://www.advogato.org/person/madan/ >http://madanrajm.blogspot.com > >-- >[ Drupal support list | http://lists.drupal.org/ ] Madhan Raj M, B.E. GNOME Hacker GNOME Foundation Member (madhanrm(a)gnome.org) Registered Linux User #396102 http://www.advogato.org/person/madan/ http://madanrajm.blogspot.com

1 0