support

support@drupal.org

7912 discussions

Strange behavior of upload in drupal.js
by luca capra 04 Oct '08

04 Oct '08

Hi all, I've got a multisite installation of drupal 5.10. In the main domain, when adding an item via upload form (or imagefield) the server give me back an error keeping the animation running. The #redirect-target has inside the json data but trought firebug I get a "data is null" referred to line 131 of drupal.js This is caused I think by this line (about 56) /response = (iframe.contentWindow || iframe.contentDocument || iframe).document.body.innerHTML; /that say (from console.log) "Permission denied to obtain the property Window.document" This happens on various browsers and only in the main site (upload in subdomains works well). (maybe a theme related error?) Did somebody ever had a similar problem ? Cheers, Lu

1 0

refer some free drupal web hosting
by bharani kumar 04 Oct '08

04 Oct '08

Hi Friends Can any one refer some free web host which support the drupal CMS, Also one thing that is , Web Host FTP control must be given to my hand, Thanks

2 2

Strange behavior of upload in drupal.js
by luca capra 04 Oct '08

04 Oct '08

Hi, I've got a multisite installation of drupal 5.10. In the main domain, when adding content the upload module give me back an error keeping the animation running. The #redirect-target has inside the json data but trought firebug I get a "data is null" referred to line 131 of drupal.js This is caused I think by this line (about 56) /response = (iframe.contentWindow || iframe.contentDocument || iframe).document.body.innerHTML; /If I try to see content with the console.log() command I get something like "Permission denied to obtain the property Window.document" This happens on various browsers and only in the main site (other upload in subdomains works well). (maybe a theme related error?) Did somebody ever had a similar problem ? Cheers, Lu

1 0

Privatemsg Access Denied Error
by Brett Evanson 03 Oct '08

03 Oct '08

I posted this on the privatemsg issue list, but I thought I might get a bite off the support list, too. I get an Access Denied message when I go to /privatemsg However, when I go to /privatemsg/msgto it works. I have the "Access Private Messages" Permission set for authenticated users. I'm logged in. Are there any known modules this doesn't play well with? Stuff like OG? When I log in as admin, it works fine. It definitely seems like something screwy with permissions. I have cleared cache tables and my browser cache multiple times. Please help! -- Brett Evanson

2 2

Passwords in Drupal
by Daniel Carrera 03 Oct '08

03 Oct '08

Hello, This isn't a question but rather a comment. I'm not sure if this is the right list to bring this up. I just noticed that Drupal stores user passwords as a simple MD5 sum: md5($password) Sure, MD5(passwd) clearly beats plain text, but I was hoping for something better. In particular, I was hoping to see secure salts and maybe other security features. The current system has vulnerabilities. You can compute the hashes for a standard dictionary of passwords and compare the hashes. Some passwords are very common ("password" and "password1"). I just tried it on my system an I found 6 users whose password is password. Because MD5 is a very cheap function and there are no salts, a dictionary attack is quite easy. I understand that there are already millions of Drupal users and you can't drop MD5(pass). But I can still suggest a simple upgrade path that results in a secure hash. A future version of Drupal (e.g. Drupal 7) could use a hash of the form: $salt = "uqYmV7yoUFYLQ5AspBK"; // Anything long and random is fine. $hash = hash_hmac('sha1', md5($passwd), $user_id . $salt); There, simple. The last parameter the key, but we only use it as a salt. Notice how each user gets a different salt. This makes dictionary attacks more difficult. I use HMAC rather than SHA1 because it has great key-mixing properties. With SHA1 the salt ($user_id.$salt) would have important weaknesses. If a future version of Drupal used this hash, it would be easy to migrate users from previous versions of Drupal. The upgrade.php program would grab the password field - MDF(pass) - and user id of each user, compute the new hash, and store that back into the password field. For brownie points we could add another step that runs the hash through a slower compression algorithm like Blowfish or Serpent. The idea is that if computing a hash is more expensive, we can foil dictionary attacks more effectively. What do you think? Daniel.

2 1

Some nodes repeated on views
by Marolijo / Pol Maresma 03 Oct '08

03 Oct '08

Hi! I have a view that duplicates some entries. I cleared views cache and I'm sure it's not a filter error problem. any idea? thank's! Pol Maresma

2 2

Performance with APC/cacherouter
by Marolijo / Pol Maresma 03 Oct '08

03 Oct '08

Hi, I'm on a performance issue. On my server (VPS/Centos/Plesk) I have performance issues. I'd cheched I'm not out of memory/CPU... I'd installed APC and configured it with cacherouter I'd reared some guides like this http://drupal.org/project/cacherouter http://buytaert.net/drupal-5-performance But now my system is working well when serving cached sites (i tested it with ab) but sometimes the homepage is still served very slow (10/12 seconds sometimes). I assume it's when cache is created? The site I'm testing on is http://www.gravat.com The modules I use are CCK/Views/Slideshow/Ubercart. Thank's a lot! Pol Maresma PolNetwork.com / Serveis d'Internet pol(a)polnetwork.com msn: marolijo

1 0

PrivateMsg Module
by Vishakha Tambe 03 Oct '08

03 Oct '08

Hello All, I'm using privateMsg module. There is reply facility in the module. But i want to make some changes in that. When any user will click on "Reply to this message" link, then he should be diverted to the page which i've created. In that page i want user to pay something to have reply facility. But how can i divert user to that page? I'm trying with changes in privatemsg.module file, bt not finding a right way. Regards, Vishakha

1 0

UPDATE: domain access settings and permissions
by Christopher M. Jones 02 Oct '08

02 Oct '08

/** this is an update to my previous post **/ When I changed content back to "all", for send to all affiliates, thereby overriding the affiliate specific settings, the content appeared again. I created a page at sub1.example.com, published it to sub1.example.com. As anonymous, I get an "Access Denied" message when trying to visit the page. /** below is my original message **/ I recently installed the domain access module on my wife's blog. She wants two blogs, with some content shared. So this seemed like the solution. However, I am having some trouble. I think it's either a permissions issue, or its got something to do with the author settings on her existing content. Anyway, this is what is happening: We have three domains: example.com sub1.example.com sub2.example.com None of these domains shows any content (I get the default Drupal 'welcome' on all of them). If I visit her blog at blog/user/3 then I have a message that the user has not posted anything. But if I log in and visit the same blog/user/3 then I see all her content. When I'm admin on sub1.example.com I am sometimes told I do not have permission to do things. For example, I can configure all domain access settings until I attempt to enter the "Batch Updating" tab. I am then denied access. When I'm admin on example.com I cannot view content assigned to an affiliate. Clearly, I am missing something. BTW, one of the first things I did when I installed this module is change the publish status of all her content. I sent it to sub1.example.com, where it was set to 'all' before. -- [ Drupal support list | http://lists.drupal.org/ ]

1 0

how to add a link for comments in views
by geniekids 02 Oct '08

02 Oct '08

I have a view which shows few fields of a CCK node. If i use FULL NODE VIEW - i get a link at the bottom which takes me to see the comments on that particular node. # Comments How do i put a similar kind of link (to all comments) in a list or table view? -- View this message in context: http://www.nabble.com/how-to-add-a-link-for-comments-in-views-tp19773780p19… Sent from the Drupal - Support mailing list archive at Nabble.com.

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

support