Go to main content

Textpattern CMS support forum

You are not logged in. Register | Login | Help

#1 2011-03-26 20:04:26

wet
Developer Emeritus
From: Schoerfling, Austria
Registered: 2005-06-06
Posts: 3,323
Website Mastodon

Feedback for the Textpattern 4.4.0 release

Please provide any feedback, reports and success stories related to the Textpattern 4.4.0 release in this thread.

Offline

#2 2011-03-26 20:55:53

Pat64
Plugin Author
From: France
Registered: 2005-12-12
Posts: 1,595
GitHub Twitter

Re: Feedback for the Textpattern 4.4.0 release

On last page install, I’ve got this warning message:

Warning: is_readable() [function.is-readable]: open_basedir restriction in effect. File(/dev/urandom) is not within the allowed path(s): (/home/usersX/c/XXX/:/home/temporaire/upload:/tmp:/usr/local/lib/php/) in /home/usersX/c/XXX/www/domain/test/txp/textpattern/lib/PasswordHash.php on line 51

Where this File /dev/urandom is located ?

Regards.


Patrick.

Github | CodePen | Codier | Simplr theme | Wait Me: a maintenance theme | [\a mi.ni.ma]: a “Low Tech” simple Blog theme.

Offline

#3 2011-03-26 21:28:48

els
Moderator
From: The Netherlands
Registered: 2004-06-06
Posts: 7,458

Re: Feedback for the Textpattern 4.4.0 release

Yep, same message here. At the top of the languages page. Disappears after updating the language.

Warning: is_readable() [function.is-readable]: open_basedir restriction in effect. File(/dev/urandom) is not within the allowed path(s): (.:/home/xxx/xxx/xxx.nl:/tmp:/usr/share/pear) in /home/xxx/xxx/xxx.nl/httpdocs/textpattern/lib/PasswordHash.php on line 51

Last edited by els (2011-03-26 21:31:42)

Offline

#4 2011-03-26 21:48:58

Smartys
New Member
Registered: 2011-03-25
Posts: 2

Re: Feedback for the Textpattern 4.4.0 release

Ugh. Hosts that enable open_basedir are incredibly annoying :P

Apparently Wordpress had a similar problem when it integrated PHPass: it was fixed by using error suppression. The patch is at http://core.trac.wordpress.org/changeset/13429

Offline

#5 2011-03-26 21:56:24

ruud
Developer Emeritus
From: a galaxy far far away
Registered: 2006-06-04
Posts: 5,068
Website

Re: Feedback for the Textpattern 4.4.0 release

Patrick, Els, are you running TXP on Windows hosting instead of Unix hosting?

Offline

#6 2011-03-26 21:59:49

gomedia
Plugin Author
Registered: 2008-06-01
Posts: 1,373

Re: Feedback for the Textpattern 4.4.0 release

Is there any advice on whether we need to do anything with the newly added (but commented-out) line in .htaccess:

#ErrorDocument 403 default

Offline

#7 2011-03-26 22:09:40

els
Moderator
From: The Netherlands
Registered: 2004-06-06
Posts: 7,458

Re: Feedback for the Textpattern 4.4.0 release

ruud wrote:

Patrick, Els, are you running TXP on Windows hosting instead of Unix hosting?

No :)

PHP versie: 5.2.17
GD bibliotheek: bundled (2.0.34 compatible); ondersteunde bestandssoorten: GIF, JPG, PNG.
Server TZ: Europe/Berlin
Lokale servertijd: 2011-03-26 23:07:55
Zomertijd: 0
Zomer- en wintertijd automatisch bijstellen?: 1
Tijdzone: Europe/Amsterdam (3600)
MySQL: 5.0.91
Localisatie: nl_NL.UTF-8
Server: Apache
Apache versie: Apache
PHP server API: apache2handler
RFC 2616 headers: 
Besturingssysteem van de server: Linux 2.6.18-194.32.1.el5PAE

The message appears again when changing the password in the Users tab.

Last edited by els (2011-03-26 22:12:07)

Offline

#8 2011-03-26 22:33:47

Pat64
Plugin Author
From: France
Registered: 2005-12-12
Posts: 1,595
GitHub Twitter

Re: Feedback for the Textpattern 4.4.0 release

@rudd.

Neither. Server running on (good) CGI PHP 5.3.5 :

Version de PHP: 5.3.5
Bibliothèque GD: bundled (2.0.34 compatible)  formats supportés : GIF, JPG, PNG.
Serveur TZ: Europe/Berlin
Date & heure du serveur: 2011-03-26 23:41:21
Mises à jour heures d’été utilisées: 0
Ajuster automatiquement les heures été / hiver ?: 0
Fuseau horaire GMT: Europe/Paris (3600)
MySQL: 5.1.37-1ubuntu5.5-log
Locale: fr_FR.UTF-8
Serveur: Apache/2.2.17
API PHP du serveur: cgi-fcgi
Entêtes RFC 2616: 0
Système d’exploitation serveur: Linux 2.6.31-20-vserver

May be warning message result from the new password hash or from a (bad) WP 3.x installed on the same domain ;)

gomedia wrote:

Is there any advice on whether we need to do anything with the newly added (but commented-out) line in .htaccess:

#ErrorDocument 403 default

I’d been uncommented this line before install.

Last edited by Pat64 (2011-03-26 22:47:44)


Patrick.

Github | CodePen | Codier | Simplr theme | Wait Me: a maintenance theme | [\a mi.ni.ma]: a “Low Tech” simple Blog theme.

Offline

#9 2011-03-26 22:34:24

hcgtv
Plugin Author
From: Key Largo, Florida
Registered: 2005-11-29
Posts: 2,722
Website

Re: Feedback for the Textpattern 4.4.0 release

Updated all my sites, which are on DreamHost, and no problems to report.

Thanks to Robert for making Textpattern more secure, and to Neal for taking the time to report his findings.

Offline

#10 2011-03-26 22:45:45

els
Moderator
From: The Netherlands
Registered: 2004-06-06
Posts: 7,458

Re: Feedback for the Textpattern 4.4.0 release

Apart from the message everything is OK. Logging in and out, changing password, everything works.

Offline

#11 2011-03-26 22:50:08

Pat64
Plugin Author
From: France
Registered: 2005-12-12
Posts: 1,595
GitHub Twitter

Re: Feedback for the Textpattern 4.4.0 release

Yep Els. All works fine too.


Patrick.

Github | CodePen | Codier | Simplr theme | Wait Me: a maintenance theme | [\a mi.ni.ma]: a “Low Tech” simple Blog theme.

Offline

#12 2011-03-26 23:04:52

gomedia
Plugin Author
Registered: 2008-06-01
Posts: 1,373

Re: Feedback for the Textpattern 4.4.0 release

I notice a change in the upgrade instructions.

I know it advises to do a backup but can I suggest that the old procedure of copying the top level files (css.php, index.php etc) and then the contents of /textpattern is safer – i.e. it’s less likely that users might wipe out their config.php file by mistake, by blindly copying all files & directories in one go.

Either that or say “YOU MUST MAKE A COPY OF YOUR CONFIG.PHP FILE AS A MINIMUM” rather than “Backup (to be safe)” & hope that they do.

Offline

Board footer

Powered by FluxBB