Textpattern CMS

#1 2011-03-26 20:04:26

wet

Developer Emeritus

From: Vöcklabruck, Austria

Registered: 2005-06-06

Posts: 3,421

Website GitHub Mastodon

Feedback for the Textpattern 4.4.0 release

Please provide any feedback, reports and success stories related to the Textpattern 4.4.0 release in this thread.

#2 2011-03-26 20:55:53

Pat64

Plugin Author

From: France

Registered: 2005-12-12

Posts: 1,677

GitHub Twitter

Re: Feedback for the Textpattern 4.4.0 release

On last page install, I’ve got this warning message:

Warning: is_readable() [function.is-readable]: open_basedir restriction in effect. File(/dev/urandom) is not within the allowed path(s): (/home/usersX/c/XXX/:/home/temporaire/upload:/tmp:/usr/local/lib/php/) in /home/usersX/c/XXX/www/domain/test/txp/textpattern/lib/PasswordHash.php on line 51

Where this File /dev/urandom is located ?

Regards.

---

Patrick.

Github | CodePen | Codier | Simplr theme | Wait Me: a maintenance theme | [\a mi.ni.ma]: a “Low Tech” simple Blog theme.

#3 2011-03-26 21:28:48

els

Moderator

From: The Netherlands

Registered: 2004-06-06

Posts: 7,458

Re: Feedback for the Textpattern 4.4.0 release

Yep, same message here. At the top of the languages page. Disappears after updating the language.

Warning: is_readable() [function.is-readable]: open_basedir restriction in effect. File(/dev/urandom) is not within the allowed path(s): (.:/home/xxx/xxx/xxx.nl:/tmp:/usr/share/pear) in /home/xxx/xxx/xxx.nl/httpdocs/textpattern/lib/PasswordHash.php on line 51

Last edited by els (2011-03-26 21:31:42)

#4 2011-03-26 21:48:58

Smartys

New Member

Registered: 2011-03-25

Posts: 2

Re: Feedback for the Textpattern 4.4.0 release

Ugh. Hosts that enable open_basedir are incredibly annoying :P

Apparently Wordpress had a similar problem when it integrated PHPass: it was fixed by using error suppression. The patch is at http://core.trac.wordpress.org/changeset/13429

#5 2011-03-26 21:56:24

ruud

Developer Emeritus

From: a galaxy far far away

Registered: 2006-06-04

Posts: 5,068

Website

Re: Feedback for the Textpattern 4.4.0 release

Patrick, Els, are you running TXP on Windows hosting instead of Unix hosting?

#6 2011-03-26 21:59:49

gomedia

Plugin Author

Registered: 2008-06-01

Posts: 1,373

Re: Feedback for the Textpattern 4.4.0 release

Is there any advice on whether we need to do anything with the newly added (but commented-out) line in .htaccess:

#ErrorDocument 403 default

#7 2011-03-26 22:09:40

els

Moderator

From: The Netherlands

Registered: 2004-06-06

Posts: 7,458

Re: Feedback for the Textpattern 4.4.0 release

ruud wrote:

Patrick, Els, are you running TXP on Windows hosting instead of Unix hosting?

No :)

PHP versie: 5.2.17
GD bibliotheek: bundled (2.0.34 compatible); ondersteunde bestandssoorten: GIF, JPG, PNG.
Server TZ: Europe/Berlin
Lokale servertijd: 2011-03-26 23:07:55
Zomertijd: 0
Zomer- en wintertijd automatisch bijstellen?: 1
Tijdzone: Europe/Amsterdam (3600)
MySQL: 5.0.91
Localisatie: nl_NL.UTF-8
Server: Apache
Apache versie: Apache
PHP server API: apache2handler
RFC 2616 headers: 
Besturingssysteem van de server: Linux 2.6.18-194.32.1.el5PAE

The message appears again when changing the password in the Users tab.

Last edited by els (2011-03-26 22:12:07)

#8 2011-03-26 22:33:47

Pat64

Plugin Author

From: France

Registered: 2005-12-12

Posts: 1,677

GitHub Twitter

Re: Feedback for the Textpattern 4.4.0 release

@rudd.

Neither. Server running on (good) CGI PHP 5.3.5 :

Version de PHP: 5.3.5
Bibliothèque GD: bundled (2.0.34 compatible)  formats supportés : GIF, JPG, PNG.
Serveur TZ: Europe/Berlin
Date & heure du serveur: 2011-03-26 23:41:21
Mises à jour heures d’été utilisées: 0
Ajuster automatiquement les heures été / hiver ?: 0
Fuseau horaire GMT: Europe/Paris (3600)
MySQL: 5.1.37-1ubuntu5.5-log
Locale: fr_FR.UTF-8
Serveur: Apache/2.2.17
API PHP du serveur: cgi-fcgi
Entêtes RFC 2616: 0
Système d’exploitation serveur: Linux 2.6.31-20-vserver

May be warning message result from the new password hash or from a (bad) WP 3.x installed on the same domain ;)

gomedia wrote:

Is there any advice on whether we need to do anything with the newly added (but commented-out) line in .htaccess:

#ErrorDocument 403 default

I’d been uncommented this line before install.

Last edited by Pat64 (2011-03-26 22:47:44)

---

Patrick.

Github | CodePen | Codier | Simplr theme | Wait Me: a maintenance theme | [\a mi.ni.ma]: a “Low Tech” simple Blog theme.

#9 2011-03-26 22:34:24

hcgtv

Archived Plugin Author

From: Key Largo, Florida

Registered: 2005-11-29

Posts: 2,722

Website

Re: Feedback for the Textpattern 4.4.0 release

Updated all my sites, which are on DreamHost, and no problems to report.

Thanks to Robert for making Textpattern more secure, and to Neal for taking the time to report his findings.

---

We Love TXP . TXP Themes . TXP Tags . TXP Planet . TXP Make

#10 2011-03-26 22:45:45

els

Moderator

From: The Netherlands

Registered: 2004-06-06

Posts: 7,458

Re: Feedback for the Textpattern 4.4.0 release

Apart from the message everything is OK. Logging in and out, changing password, everything works.

#11 2011-03-26 22:50:08

Pat64

Plugin Author

From: France

Registered: 2005-12-12

Posts: 1,677

GitHub Twitter

Re: Feedback for the Textpattern 4.4.0 release

Yep Els. All works fine too.

---

Patrick.

Github | CodePen | Codier | Simplr theme | Wait Me: a maintenance theme | [\a mi.ni.ma]: a “Low Tech” simple Blog theme.

#12 2011-03-26 23:04:52

gomedia

Plugin Author

Registered: 2008-06-01

Posts: 1,373

Re: Feedback for the Textpattern 4.4.0 release

I notice a change in the upgrade instructions.

I know it advises to do a backup but can I suggest that the old procedure of copying the top level files (css.php, index.php etc) and then the contents of /textpattern is safer – i.e. it’s less likely that users might wipe out their config.php file by mistake, by blindly copying all files & directories in one go.

Either that or say “YOU MUST MAKE A COPY OF YOUR CONFIG.PHP FILE AS A MINIMUM” rather than “Backup (to be safe)” & hope that they do.

#13 2011-03-26 23:11:00

els

Moderator

From: The Netherlands

Registered: 2004-06-06

Posts: 7,458

Re: Feedback for the Textpattern 4.4.0 release

Another site on another server:

Warning: is_readable() [function.is-readable]: open_basedir restriction in effect. File(/dev/urandom) is not within the allowed path(s): (/home/xxx/:/tmp:/var/tmp:/usr/local/lib/php/) in /home/xxx/domains/xxx.net/public_html/textpattern/lib/PasswordHash.php on line 51

Warning: Cannot modify header information - headers already sent by (output started at /home/xxx/domains/xxx.net/public_html/textpattern/lib/PasswordHash.php:51) in /home/xxx/domains/xxx.net/public_html/textpattern/include/txp_auth.php on line 224

Warning: Cannot modify header information - headers already sent by (output started at /home/xxx/domains/axxx.net/public_html/textpattern/lib/PasswordHash.php:51) in /home/xxx/domains/xxx.net/public_html/textpattern/include/txp_auth.php on line 231

The following PHP functions (which may be necessary to run Textpattern) are disabled on your server: escapeshellarg, escapeshellcmd, proc_close, proc_get_status, proc_nice, proc_terminate, pclose

PHP version: 5.2.5
GD Image Library: bundled (2.0.34 compatible); supported formats: GIF, JPG, PNG.
Server TZ: Europe/Berlin
Server Local Time: 2011-03-27 00:00:09
DST enabled?: 0
Automatically adjust DST setting?: 0
Time Zone:  (+3600)
MySQL: 5.0.51a-community
Locale: en_GB
Server: Apache/2
Apache version: Apache/2
PHP Server API: apache2handler
RFC 2616 headers: 
Server OS: Linux 2.6.24-ovz008.1

Otherwise OK just like the other ones.

#14 2011-03-26 23:19:18

ruud

Developer Emeritus

From: a galaxy far far away

Registered: 2006-06-04

Posts: 5,068

Website

Re: Feedback for the Textpattern 4.4.0 release

Adi, you’d miss updates on the /files (.htaccess-dist), /rpc and /sites directories.
Also, you’d copy the /textpattern/setup files, which should be deleted after the initial install (they’re not used when upgrading).

I noticed some other things in the instructions:

Using FTP/SFTP again, navigate to the folder you created in step 1 and copy the new files from there to the original location on your server, overwriting the old installation files.

You may not want to copy the contents of the images/files directories. On some installs the first 2 images have been modified by the user, so you don’t want them overwritten by the original files.

Then copy your existing config.php from the /textpattern/ folder in the folder you created in step 2 to the new /textpattern/ folder in the original location on your server.

The distributed TXP files don’t contain config.php, only config-dist.php, so that instruction seems unnecessary.

In the case of the .htaccess file, if you had any customizations…

This also applies to /textpattern/lib/admin_config.php if you’ve modified what each role is allowed to do.

Personally I tend to remove HISTORY and README files, because they show which TXP version you’re using.

#15 2011-03-26 23:39:43

gomedia

Plugin Author

Registered: 2008-06-01

Posts: 1,373

Re: Feedback for the Textpattern 4.4.0 release

Ruud,

I appreciate that the upgrade for this release is a bit more complicated, and I only sketched over the old procedure details, but if you tell users to copy all directories without impressing on them the need to do a backup, then /files, /images, custom .htaccess files, config.php etc etc may get obliterated. My concern is of the casual nature of the backup advice.