support

support@drupal.org

7912 discussions

site::name and user::name goes blank....
by Kamal Palei 28 Jun '13

28 Jun '13

Dear All Recently I noticed when account is created (D7), Drupal send a welcome mail to user (mode is no_approval_required), the format of the mail is something like this .. *user*, Thank you for registering at* <site>*. You may now log in by clicking this link or copying and pasting it to your browser. Please set your password accordingly. <link> username: *user* -- <site> team This was working fine till recently. Then I have written a custom module to send group mails. It is very simple, reads all mail ids from a table and send mail one by one just making use of PHP's inbuilt mail function. Then I noticed, all the yellow colored text above goes blank when Drupal sends mail to user. On further debugging found that, in function *_user_mail_text *(in user module), the variables *site::name* and *user::name* are blank. Did anybody face this kind of issue anytime? Kindly give me some pointer how to approach to fix this issue. Thanks Kamal Net Cloud Systems

2 3

Index reset for a multi-value field in SOLR
by Kamal Palei 25 Jun '13

25 Jun '13

Dear All I have added a multi value field in schema file (say skillset). In my * _apachesolr_index_document_build* hook, I get all the values of field and do add to $document using addField api. With this values are indexed and I can search, I get the search result perfect. Just for example purpose, say field name is *skillset* (it's a multi value field). Say initially I added, Java, PHP, MySQL, Drupal, C++ as skill sets to skillset field as separate separate values. If I search for PHP + MySQL + C++, I get this document. So far so good. Say after 1 month, user came and removed C++ skill set. Then in index, for skillset field the corresponding change should happen. That is first all old values should be removed, next Java, PHP, MySQL, Drupal should added only. Today I do not know how to remove a field's old values, Can somebody help me to find out how do I remove old datas for that particular field (skillset). Today what is happening, I go and add again. Now the resultant data for skillset becomes Java, PHP, MySQL, Drupal, C++, ava, PHP, MySQL, Drupal. Hence if I search c++, I get this document in search which is wrong. Please somebody help me or give me pointer how to delete the old data for a field in index. Please note that in case of single-value field this issue would not arsie. Thanks kamal Net Cloud Systems

2 4

Re: [support] support Digest, Vol 126, Issue 26
by Chris McAndrew 24 Jun '13

24 Jun '13

Depends where you live and if you trust your neighbors. On Jun 21, 2013 11:03 AM, <support-request(a)drupal.org> wrote: > Send support mailing list submissions to > support(a)drupal.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.drupal.org/mailman/listinfo/support > or, via email, send a message with subject or body 'help' to > support-request(a)drupal.org > > You can reach the person managing the list at > support-owner(a)drupal.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of support digest..." > > > Today's Topics: > > 1. Re: How to safeguard sites from unwanted users (Jamie Holly) > 2. Re: How to safeguard sites from unwanted users (Kamal Palei) > 3. Re: How to safeguard sites from unwanted users (Jamie Holly) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 21 Jun 2013 10:00:02 -0400 > From: Jamie Holly <hovercrafter(a)earthlink.net> > Subject: Re: [support] How to safeguard sites from unwanted users > To: support(a)drupal.org > Message-ID: <51C45C62.1040807(a)earthlink.net> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > The goal is to make it more difficult for people to register unwanted > accounts. You aren't going to stop it completely. Email verification is > just another hoop for them to jump through, one that is also accepted by > a vast majority of regular users. It should always be used. > > Something I did for a client last year was a custom module. It did a few > things. First we could set the number of registrations per IP in a given > time frame. After that the account requires admin approval. It also > recorded all the request headers so that I could look for a pattern, > which I ended up finding. Once I was able to isolate that, I blocked > that pattern from registering, which took a client's site from a few > hundred spam registrations per day, down to one or two per week. Per my > agreement with that client, I can't give out that pattern, but doing > something similar on any site wouldn't be that complex. > > A common practice now is for companies to hire people to generate these > accounts. They then use the accounts to spam your site. After that a > company contacts you regarding the spam on your site, offering to "clean > it up" and help your seo rankings. Very, very dirty indeed. > > The interesting part of that is what we found out. The registrations > were happening from IP addresses all around the globe, yet the actual > spam postings were mostly from U.S. IP addresses and over 70% were from > hosting companies that offer VPS. We were successful in getting one > hosting company to shut down an account, but most just ignore it. > > The whole morale of the story is vigilance. Things like CAPTCHA, email > verification and keeping bad user accounts to prevent reuse of bad names > and emails all give an extra layer of security (albeit not all that > much). Or do you believe in leaving the front door of your home standing > wide open, when you aren't there? > > > Jamie Holly > http://www.intoxination.net > http://www.hollyit.net > > On 6/21/2013 1:56 AM, John Summerfield wrote: > > On 12/06/2013 10:37 PM, Jamie Holly wrote: > > > +1 to that! Also, they can't reuse the email. Make it harder on them, > > > not easier. > > > > Reread gmail's rules about its email addresses. One can generate any > > number of alternatives for any one email address. Besides, unless one > > requires email addresses to be verified during registration, users can > > use anything at all, even fred(a)example.net or joe(a)domain.test (both of > > which _can_ be valid). > > > > Email hosts often allow +arbitrarySuffix to the localpart of email > > addresses, but the "+" can be another arbitrary character, I've seen > > hyphens used. > > > > And then there are some domains where everything is delivered, if not to > > a specific addressee then to a default address and that too is > configurable. > > > > > > > > > > > > ------------------------------ > > Message: 2 > Date: Fri, 21 Jun 2013 19:45:03 +0530 > From: Kamal Palei <palei.kamal(a)gmail.com> > Subject: Re: [support] How to safeguard sites from unwanted users > To: support(a)drupal.org > Message-ID: > < > CALO8XuVd7N5-GyRPn6Ra_h_CyqRt8HgQXb391b47FDfXqPtVWA(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > I am thinking of below solution. > > For my site, it is easy for us to find who are unwanted users using some > mechanism. I am planning to write a custom module, that will allow > administrator to list down unwanted users and these users references I will > keep in a separate table , lets call it *table-a*. When a new user > registers, I will check table-a, and if any entry found, I will use that > entry's UID, for new user. Thereby over the time, anytime you see the > unwanted users in my site will be less. > > Best Regards > Kamal > Net Cloud Systems, Bangalore-08 > > > On Fri, Jun 21, 2013 at 7:30 PM, Jamie Holly <hovercrafter(a)earthlink.net > >wrote: > > > The goal is to make it more difficult for people to register unwanted > > accounts. You aren't going to stop it completely. Email verification is > > just another hoop for them to jump through, one that is also accepted by > > a vast majority of regular users. It should always be used. > > > > Something I did for a client last year was a custom module. It did a few > > things. First we could set the number of registrations per IP in a given > > time frame. After that the account requires admin approval. It also > > recorded all the request headers so that I could look for a pattern, > > which I ended up finding. Once I was able to isolate that, I blocked > > that pattern from registering, which took a client's site from a few > > hundred spam registrations per day, down to one or two per week. Per my > > agreement with that client, I can't give out that pattern, but doing > > something similar on any site wouldn't be that complex. > > > > A common practice now is for companies to hire people to generate these > > accounts. They then use the accounts to spam your site. After that a > > company contacts you regarding the spam on your site, offering to "clean > > it up" and help your seo rankings. Very, very dirty indeed. > > > > The interesting part of that is what we found out. The registrations > > were happening from IP addresses all around the globe, yet the actual > > spam postings were mostly from U.S. IP addresses and over 70% were from > > hosting companies that offer VPS. We were successful in getting one > > hosting company to shut down an account, but most just ignore it. > > > > The whole morale of the story is vigilance. Things like CAPTCHA, email > > verification and keeping bad user accounts to prevent reuse of bad names > > and emails all give an extra layer of security (albeit not all that > > much). Or do you believe in leaving the front door of your home standing > > wide open, when you aren't there? > > > > > > Jamie Holly > > http://www.intoxination.net > > http://www.hollyit.net > > > > On 6/21/2013 1:56 AM, John Summerfield wrote: > > > On 12/06/2013 10:37 PM, Jamie Holly wrote: > > > > +1 to that! Also, they can't reuse the email. Make it harder on them, > > > > not easier. > > > > > > Reread gmail's rules about its email addresses. One can generate any > > > number of alternatives for any one email address. Besides, unless one > > > requires email addresses to be verified during registration, users can > > > use anything at all, even fred(a)example.net or joe(a)domain.test (both of > > > which _can_ be valid). > > > > > > Email hosts often allow +arbitrarySuffix to the localpart of email > > > addresses, but the "+" can be another arbitrary character, I've seen > > > hyphens used. > > > > > > And then there are some domains where everything is delivered, if not > to > > > a specific addressee then to a default address and that too is > > configurable. > > > > > > > > > > > > > > > > -- > > [ Drupal support list | http://lists.drupal.org/ ] > > >

1 0

Cannot Access Module Install Page
by Warren Keuffel 22 Jun '13

22 Jun '13

I have a very strange problem -- I cannot access admin/module/install. Normally I install new modules with Drush but I had occasion to want to do it the traditional way and I simply cannot get that page to appear. When I enter that URL it takes me to the module list page. Drupal 7.22. Wanted to check here for possible "duh!" solutions before searching/opening an issue. Thanks! Warren

1 0

How to safeguard sites from unwanted users
by Kamal Palei 22 Jun '13

22 Jun '13

Dear ALL I see almost everyday in my site 2 or 3 unwanted users are created. The user id is something like *sdfdxsxvxcvbcxmv* which is totally somebody just playing. I need to block such accounts or more preferably reuse such accounts. For me the concern is , once a user is created, that user id is gone for ever. Next if I create another user, it will take up the higher UID. Assuming these things keeps happening, over few years of time we will have lot of unnecessary accounts in system, eating up resources for nothing. Even if I delete these users, still the user ID will not be reused. Within Drupal framework, is there any existing mechanism where, we can tell to re-use certain user ID when creating new users. If NOT existing, if somebody guides me, am ready to make one. Best Regards Kamal

6 14

Configuring an RSS feed with Drupal 7
by Stuart Lawler 19 Jun '13

19 Jun '13

Hello, We are having difficulties to get the rss feed at the below link to render correctly, and specifically, the Podcasts app on iOS devices does not see any content. http://www.ncbi.ie/technologypodcast.xml I am not sure if I have configured something incorrectly in either Elements Itunes or Elements Core, which seem only to consist of a number of drop-down boxes. We are using Drupal 7. Can anyone assist? Regards, Stuart

1 0

empty optional fields: saved node contains the token name instead of an empty section
by John Mitchell 17 Jun '13

17 Jun '13

I have created a content type that has some tokens within the read-only body section so that other custom fields that the user enters when they create content based on this content type are mapped to its associated token within the body section. If the user enters information within a optional field then that entered information replaces the token when the node is saved. The problem is for optional fields when they don't enter a anything within it then the saved node contains the token name instead of an empty section which is what we want. Thanks, John

2 1

Rich text editor application in Drupal 7
by Stuart Lawler 17 Jun '13

17 Jun '13

Hello, Is there a way I can disable the Rich Text editor application in Drupal 7 on a per user basis? Some of our site administrators use assistive technology, and it does not work well with it. It would be better, if these users could have ordinary text edit fields when editing or updating pages to which they have access. Kind regards, Stuart Lawler

3 4

private file downloads don't work with IE8 only when using hook_file_download
by John Mitchell 15 Jun '13

15 Jun '13

I am trying to allow files that are within the "/sites/default/files/private/" directory to available to users with correct role and this is working correctly within all browsers (including IE9) except for the IE8 browser. It does not appear to be a particular file type since it does not work with either .pdf's or .doc's extension. Is their something special that I need to do to the "mime type" so that IE8 will successfully download these files? I have listed below "hook_file_download" which determines when a requested file download is allowed based on a combination of the page $url and the requesting users role and I highlighted in bold the bottom of the function where it determines the mime type that is returned. Thanks, John function atf_retirees_file_download($uri) { $user = $GLOBALS['user']; $roles = $user->roles; $pos_inside_atf_alias = stripos($uri, '/inside-atf/'); $pos_nibin_alias = stripos($uri, '/nibin-user-area/'); if (($pos_inside_atf_alias === false && $pos_nibin_alias === false) || ($pos_inside_atf_alias !== false && !(in_array('ATF Retirees', $roles) || in_array('administrator', $roles))) || ($pos_nibin_alias !== false && !(in_array('NIBIN User Area', $roles) || in_array('administrator', $roles)))) { return -1; } else { *$mime_type = file_get_mimetype($uri);* * return array('Content-Type' => $mime_type);* } }

1 0

Comment Access on Private Group Node
by Fred Jones 13 Jun '13

13 Jun '13

I am trying to work with OG in D7 and I want all groups and all group posts to be private, i.e. for members only. It seems to work BUT if I visit a group_post page as an anonymous user, I see the comments posted and the node Title. All that's hidden is the Body. I even tried adding the https://drupal.org/project/content_access module to deny access to this content type, but it didn't help. Am I missing something here? Thank you.

3 5

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

support