| 00:50 |
mamep |
anyone arround? |
| 10:39 |
d|g |
hi all |
| 11:07 |
scarab |
hi, is thre some problems with captcha in login form to this irc chat? |
| 11:09 |
scarab |
is any body here? |
| 11:11 |
mayeco |
how to save and get session data with an extension? |
| 11:11 |
mayeco |
like ajax vars |
| 11:11 |
mayeco |
I try $TSFE->getKey("user","data") but dont work |
| 11:21 |
mayeco |
ahhhhhhh |
| 11:21 |
mayeco |
i did it! |
| 15:03 |
isolysis |
hi |
| 15:03 |
void |
hi |
| 15:06 |
isolysis |
hey void, i've been trying to restore a typo3 site because i had to move servers, and ive been having some issues.. but the latest one seems to be that if i restore the database, i have the page tree structure in the backend but the content elements are not shown for editing, on the other hand if i try to restore the site pages via the .t3d import, i click import and the page goes blank,... |
| 15:06 |
isolysis |
...nothing happens.. |
| 15:07 |
isolysis |
i think it may have something to do with my mysql version, so i am restoring that with a manual install.. will have to see how it goes |
| 15:07 |
void |
if you have different mysql versions, i'd recommed to use .t3d |
| 15:08 |
void |
maybe you used wrong options during exporting t3d |
| 15:13 |
isolysis |
void: when i exported i tried to select all tables, infinite levels, preserve relations etc, everything maximum i think.. but i need to setup my mysql first, i will report back to see if that helped, because initially i had problems with logging into typo3 backend, but it turns out the auto installer of php probably screwed something up because manual install of php fixed the login |
| 15:13 |
isolysis |
i dont think it helped that we have 64 bit OS this time |
| 16:27 |
Phlogi |
typo3 has no maintenance mode right? |
| 16:37 |
kermit_green |
What do you mean with maintanace mode ? |
| 16:37 |
timdeluxe |
hm, not directly, it depends on what you want to do |
| 16:59 |
Phlogi |
So that every request to a page goes to one same page.... |
| 17:00 |
Phlogi |
that informs the user that the site is currently down |
| 17:04 |
timdeluxe |
and for what purpose? do you want to set up new pages in the backend? |
| 17:04 |
Phlogi |
yes or if I'm creating a new page, but don't want anyone to be able to access it... |
| 17:05 |
Phlogi |
it would be great if backend users can normally browse the site if they are logged in |
| 17:07 |
kermit_green |
Just give the new pages to a usergroup, so a normal FE user can't visit them |
| 17:10 |
Phlogi |
kermit_green: hmm yes, but its not that confortable |
| 17:11 |
Phlogi |
can I set it for all pages at once? =) |
| 17:23 |
timdeluxe |
never heard of workspaces? |
| 17:26 |
timdeluxe |
never used them by myself, but if you speak german, this could help you: http://typo3.org/documentation/document-library/extension-manuals/doc_v4_workspace/1.0.5/view/ |
| 17:28 |
timdeluxe |
another simple solution would be to change the root template, but then the backend users cant see the page also |
| 18:15 |
socken23 |
Hi all! indexed_search works, but searches in header and keywords by default. How can I switch that to page content? |
| 18:16 |
socken23 |
ah, I created my own search box which links to the search page. It works if I select page content in the search page of course... |
| 18:42 |
isolysis |
is there any way to view what's in a .t3d file? i made an export file, but i need to find out some information like the database character set was it utf8, but opening the file in wordpad gives all garbed text |
| 18:58 |
timdeluxe |
isolysis: there was a t3d "unzipper" somewhere, i needed it by myself someday |
| 18:58 |
timdeluxe |
cant remember where it was |
| 18:59 |
timdeluxe |
i think it was posted on some forum |
| 19:00 |
isolysis |
timdeluxe: oh, cool, i will search it online after i have my dinner.. |
| 19:00 |
isolysis |
thanks |
| 19:04 |
isolysis |
Are you sure you saved mapping information into Template Object with UID "18"?" from what i read online it is something to do with character encodings ut8 etc, but i am struggling now and getting desperate argh! plus after dumping the database i can't save anything anymore, i.e. i can see the content elements under 'list' view but not 'page' view.. and if i try to edit something , it just... |
| 19:04 |
isolysis |
in the meantime if anyone has any ideas for me: i am trying to restore my site from a previous server, but dumping the database will work, but in backend i lose all records from the 'edit page' section, plus the front end says ":Template Object could not be unserialized successfully. |
| 19:04 |
isolysis |
...goes blank. |
| 19:16 |
timdeluxe |
sounds crazy. i did not have those problems when changing from php/mysql 4 to php/mysql 5 |
| 19:17 |
timdeluxe |
did you manage to import the database with the old character set -> latin... ? |
| 19:18 |
timdeluxe |
isolysis: if you are interested in i could try to get your page working on my server to help you finding out where the problem is... |
| 19:20 |
isolysis |
timdeluxe: thanks, i appreciate the offer |
| 19:21 |
isolysis |
i am going to see if i can troubleshoot it for abit longer |
| 19:21 |
isolysis |
i will give you an update on where i am at currently.. because last we spoke i had login issues |
| 19:21 |
timdeluxe |
yes, i remember :) |
| 19:21 |
isolysis |
but those are resolved now, since i unintalled php from auto instaler, and re install manually and enaabled some extensions like mcrypt |
| 19:22 |
isolysis |
so login to backend works |
| 19:22 |
timdeluxe |
but you experience strange problems... |
| 19:22 |
isolysis |
the next issue that arose for me, was that i couldnt' restore database without the templavoila errors, and the records not showing under 'page' view... it will show under 'list' not but page, and plus trying to edit and save results in blank page |
| 19:23 |
isolysis |
clicking clear cache link also makes the menu frame go blank |
| 19:23 |
timdeluxe |
hm. did you update the mapping in templa voila? |
| 19:23 |
timdeluxe |
and how about memory limit? |
| 19:23 |
isolysis |
i setup a separate typo3 install.. and tested things there, and for example clicking clear cache works ok, it doesnt make the page go blank, but once i dump the old db into it, then it starts doing that too |
| 19:24 |
isolysis |
i am pretty sure that it has something to do with my character encoding somewhere |
| 19:25 |
timdeluxe |
i am, too :) |
| 19:25 |
timdeluxe |
try to import the database with the old character set, i did that, too |
| 19:26 |
timdeluxe |
and check after import if database and tables really have the old set |
| 19:26 |
timdeluxe |
with myadmin that is easy to do |
| 19:29 |
Phlogi |
timdeluxe: I even used workspaces :D |
| 19:31 |
timdeluxe |
Phlogi: and? happy about it? ;D |
| 19:32 |
Phlogi |
more or less :D |
| 19:32 |
isolysis |
timdeluxe: i just checked the templa voila mapping structure, and it was lost also, so i started mapping them again which working fine, but when i click 'save' then the page went blank, just like everywhere else i click save and it gets screwed up |
| 19:32 |
isolysis |
i think php has memory limit set at 128mb and the server has plently |
| 19:33 |
timdeluxe |
hm |
| 19:33 |
timdeluxe |
very strange |
| 19:50 |
isolysis |
well i am doing some further testing, on separate fresh install.. i can import t3d files for other testsite packages, but i cant import any of my own t3d files even if they were not my most recent backup.. so i am fairly confident that its not the server enviroment to blame but my old database encoding |
| 19:51 |
isolysis |
i think my next issue is working out what character set was being used in my old db and how to restore it as that |
| 20:04 |
Phlogi |
isolysis: or convert it to utf8, and make everything utf8 |
| 20:04 |
Phlogi |
I had to do that too once |
| 20:05 |
Phlogi |
I'm not even sure if I had similar problems as you |
| 20:05 |
Phlogi |
it was a horrible afternoon |
| 20:05 |
Phlogi |
i ended up with a character replacement script to fix my .sql |
| 20:07 |
uschi |
hey phlogi, i suffer with you |
| 20:07 |
isolysis |
Phlogi: do you have any tips on how to convert the sql file easily to utf8 ? |
| 20:07 |
uschi |
this is some ordeal still in front of me |
| 20:20 |
Phlogi |
hehe |
| 20:20 |
Phlogi |
isolysis: hmm use iconv on unix |
| 20:20 |
Phlogi |
or recode |
| 20:20 |
Phlogi |
and do just on your .sql file |
| 20:20 |
Phlogi |
you could do it with an editor too.... but if the file is large... |
| 20:21 |
isolysis |
im on windows.. i checked the sql file about 12mb |
| 20:22 |
isolysis |
it has lines like this: ) ENGINE=InnoDB DEFAULT CHARSET=latin1 AUTO_INCREMENT=6 ; |
| 20:22 |
isolysis |
i exported this dump via phpmyadmin |
| 20:22 |
isolysis |
within plesk |
| 20:22 |
isolysis |
now i cant remember if my orignial was utf8 or not and i selected to export in the wrong encoding |
| 21:38 |
bekks |
hi |
| 21:39 |
bekks |
is it a known bug that using the id= parameter in an URL, typo3 is exploitable with XSS attacks? |
| 21:39 |
bekks |
i just checked the trunk svn code to verify theres no check to prevent calls like ?id=http/... |
| 22:52 |
solshark |
Hello all |
| 22:57 |
Denyerec |
Hye so |
| 22:57 |
Denyerec |
Hey sol |
| 22:57 |
Denyerec |
bekks - have you exectured such an attack ? |
| 22:58 |
bekks |
yes. |
| 22:58 |
bekks |
today, at about 14:30 UTC |
| 22:58 |
Denyerec |
In which case, I would write to the security team immediately. |
| 22:58 |
Denyerec |
If you don't have their contact, I can find it for you |
| 22:58 |
bekks |
how do i reach them by email? |
| 22:58 |
Denyerec |
one sec |
| 22:59 |
Denyerec |
http://typo3.org/teams/security/ |
| 23:01 |
bekks |
so i'd just contact them by providing as many information as i can and sending an email to the one at http://typo3.org/teams/security/contact-us/ ? |
| 23:01 |
Denyerec |
Seems that way |
| 23:02 |
Denyerec |
Seems odd to me that they'd leave such an obvious security hole open. |
| 23:02 |
Denyerec |
Did you manage to do anything offensive with it? |
| 23:03 |
bekks |
yes. i am able to exploit the webserver running some ancient php version to be able to access a high port shell with werbservers access right to send spam emails |
| 23:04 |
bekks |
i even have the exploit script used to do so by the attacker handy. |
| 23:04 |
Denyerec |
That's good enough for me. |
| 23:04 |
Denyerec |
:) |
| 23:04 |
bekks |
so you are in the security team? :) |
| 23:05 |
Denyerec |
Oh, no no. |
| 23:05 |
Denyerec |
But if I were, that'd be enough justification for a hotfix release |
| 23:05 |
Denyerec |
:) |
| 23:06 |
bekks |
the point is, that the corresponding function in the t3 div class is mainly unfixed since 3.7.1 |
| 23:07 |
bekks |
maybe the necessary checks are done elsewhere ... but not where the given var is being read and checked. |
| 23:13 |
Rocketjock |
Hello Everyone |
| 23:14 |
bekks |
Denyerec: do you have any idea wherelse those checks could be done? |
| 23:14 |
Denyerec |
nOT AT ALL :( |
| 23:29 |
Rocketjock |
anyone know what IRC varnish (the reverse proxy) is on? |
| 23:52 |
joebankz |
is there anyone out there? |
| 23:56 |
joebankz |
I would like to have a clean unordered list. But as it is now, it prints the html in a lump. |
| 23:57 |
joebankz |
instead of neat line breaks between each <ul> and <li>, I get them all run together. |
| 23:57 |
joebankz |
any thoughts. |
| 23:57 |
joebankz |
? |
| 23:59 |
joebankz |
can someone help me? |
| 23:59 |
joebankz |
newb here. |
| 23:59 |
isolysis_ |
joebankz: post your q |
