Go to main content

Textpattern CMS support forum

You are not logged in. Register | Login | Help

#76 2019-04-08 12:33:01

jakob
Admin
From: Germany
Registered: 2005-01-20
Posts: 5,188
Website GitHub

Re: Textpattern CMS demo site

gaekwad wrote #317529:

I was considering this, but I thought it was too easy a solution…I’m glad to hear someone else suggest it!

In English we say “Great minds think alike” * :-)
In German they say “Two dummies, same thought”. Take your pick ?.

*to which the retort is “… but fools seldom differ!”


TXP Builders – finely-crafted code, design and txp

Offline

#77 2019-04-13 07:55:08

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,709
GitHub

Re: Textpattern CMS demo site

jakob wrote #317538:

In English we say “Great minds think alike” * :-)
In German they say “Two dummies, same thought”. Take your pick ?.

This dummy is going to have another attempt at MySQL 8.0 this morning.

And so, please be aware there may some demo site availability issues until 1200UTC today.

Offline

#78 2019-04-13 12:25:43

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,709
GitHub

Re: Textpattern CMS demo site

jakob wrote #317527:

But for the purposes of the demo, could you not insert the result of PASSWORD('…') in your SQL, thus bypassing the function? The PWs are predictable in this particular case…

I just tried this: it doesn’t work.

The query…:

INSERT INTO `txp_users` (`user_id`, `name`, `pass`, `RealName`, `email`, `privs`, `last_access`, `nonce`)
VALUES
	(1,'managing-editor1','*148A21ADCD976A60C9CBCC45A4E12B0182C5493A','Managing Editor #1','managing-editor1@example.com',2,NULL,''),
	(2,'managing-editor2','*47BDDAA4BD592DC9EACDF12811C2827423C5AA3C','Managing Editor #2','managing-editor2@example.com',2,NULL,''),
	(3,'managing-editor3','*4EA79AF019C4EF8CE793F9DAEB430A9E8EEC8395','Managing Editor #3','managing-editor3@example.com',2,NULL,''),
	(4,'managing-editor4','*76D4F5138D51A84B0E10E922B4FF2E4729ACE10B','Managing Editor #4','managing-editor4@example.com',2,NULL,''),
	(5,'managing-editor5','*CF72B87C4E0D21DAC39EB5B203CC4ECFDA7781B9','Managing Editor #5','managing-editor5@example.com',2,NULL,''),
	[…]

…inserts fine, no errors. Logging in throws the Internal error dialog, which I was half-expecting.

For completeness, I emailed Stef about this issue a few days and got a comprehensive email reply back very quickly…which I haven’t fully grok’d yet. With my workload and various brain issues the last few weeks, the steps to resolve are about three clicks above my mental pay grade, so it’s going to have to sit until I can digest and action it.

I think what I need to do right now is use phpass to chew through 6001 usernames and generate the respective password, and then use that as the password insert. I just don’t how to do that, at least not at the moment.

Last edited by gaekwad (2019-04-13 12:26:09)

Offline

#79 2019-04-13 14:12:54

jakob
Admin
From: Germany
Registered: 2005-01-20
Posts: 5,188
Website GitHub

Re: Textpattern CMS demo site

Logging in throws the Internal error dialog, which I was half-expecting.

Hmm, I know nothing about what’s changed in MySQL, but I’m surprised plain-old existing imported passwords from earlier versions won’t carry over.
Would that not have huge implications for thousands or millions of sites with existing user bases? Will all those sites with online shops and large users bases now be obliged to force their users to reset their passwords in order to have continued access?


TXP Builders – finely-crafted code, design and txp

Offline

#80 2019-04-13 14:30:29

Gocom
Developer Emeritus
From: Helsinki, Finland
Registered: 2006-07-14
Posts: 4,533
Website

Re: Textpattern CMS demo site

You could use the same password for each user. They do not need to be different, as they are not particularly unique anyways.

Now, if you do want to generate the users in the table, easiest way would be to use the API:

<?php
define('txpinterface', 'css');

require __DIR__ . '/index.php';

for ($i = 1; $i <= 6000; $i++) {
    $name = 'managing-editor' . $i;
    create_user($name, "{$name}@localhost.test", $name, "Managing Editor #{$i}", 2);
}

Setting the txpinterface constant to css and then including index.php appear still to be the only way to actually include all(-ish) dependencies without it echo’ing stuff all over the place. I wish there was a bootstrap file, and that Textpattern didn’t use die etc.

If you want to pre-generate hashes, you can do it the same way. You could dump the resulting database table, or you could generate them with the applicable Password hasher driver:

<?php
define('txpinterface', 'css');

require __DIR__ . '/index.php';

echo \Txp::get('\Textpattern\Password\Hash')->hash("yourPassword");

Last edited by Gocom (2019-04-13 14:31:37)

Offline

#81 2019-04-15 16:27:41

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,709
GitHub

Re: Textpattern CMS demo site

Thank you, Gocom. I’ll buy you a coffee next time I’m in Helsinki.

Offline

#82 2019-04-15 21:00:40

jakob
Admin
From: Germany
Registered: 2005-01-20
Posts: 5,188
Website GitHub

Re: Textpattern CMS demo site

Gocom wrote #317623:

Rah | GitHub

Just an aside: Great to see you updating your plugins Jukka! They’re pretty invaluable, so thanks!


TXP Builders – finely-crafted code, design and txp

Offline

#83 2019-04-16 15:00:43

Gocom
Developer Emeritus
From: Helsinki, Finland
Registered: 2006-07-14
Posts: 4,533
Website

Re: Textpattern CMS demo site

gaekwad wrote #317647:

Thank you, Gocom. I’ll buy you a coffee next time I’m in Helsinki.

:-) fika it is then.

jakob wrote #317649:

Just an aside: Great to see you updating your plugins Jukka! They’re pretty invaluable, so thanks!

Thanks.

Offline

#84 2019-05-07 18:48:17

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,709
GitHub

Re: Textpattern CMS demo site

I have fine-tuned the SSL ciphers and curves on the demo site server. There are far fewer weak ciphers, and modern operating system/browser compatibility is maintained.

Please report any supported (and non-ancient) browser(s) and operating system(s) that show errors.

Thank you.

Direct links for testing:

Offline

#85 2019-05-13 09:47:34

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,709
GitHub

Re: Textpattern CMS demo site

There may be some availability issues today as I work on the demo server, its associated cryptography and underlying libraries. I do not expect significant downtime, and I am taking steps to minimise any downtime.

I will report back later when work is complete. In the meantime, please go about your day in the usual way.

Offline

#86 2019-05-13 17:38:08

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,709
GitHub

Re: Textpattern CMS demo site

Work is complete. Thanks for your patience.

Offline

#87 2019-05-20 21:18:16

etc
Developer
Registered: 2010-11-11
Posts: 5,665
Website GitHub

Re: Textpattern CMS demo site

Weird dev site issue: switching the public language to, say, Dansk (works ok) and then back to English results in

Fatal error: Uncaught Exception: Invalid argument in /var/www/vhosts/textpattern.co/dev-demo/live/textpattern/vendors/Textpattern/L10n/Locale.php:196

on the admin side. Can not reproduce on my local setup. As if en locale was not available on dev-demo?

Release demo seems to work fine.

Offline

#88 2019-05-21 08:12:07

gaekwad
Server grease monkey
From: People's Republic of Cornwall
Registered: 2005-11-19
Posts: 4,709
GitHub

Re: Textpattern CMS demo site

etc wrote #318138:

Weird dev site issue: switching the public language to, say, Dansk (works ok) and then back to English results in

Fatal error: Uncaught Exception: Invalid argument in /var/www/vhosts/textpattern.co/dev-demo/live/textpattern/vendors/Textpattern/L10n/Locale.php:196...

on the admin side. Can not reproduce on my local setup. As if en locale was not available on dev-demo?

Not much else of use in the error log (though I can increase the verbosity as needed):

2019/05/21 08:00:34 [error] 999#999: *7213 FastCGI sent in stderr: "PHP message: PHP Fatal error:  Uncaught Exception: Invalid argument in /var/www/vhosts/textpattern.co/dev-demo/live/textpattern/vendors/Textpattern/L10n/Locale.php:196
Stack trace:
#0 /var/www/vhosts/textpattern.co/dev-demo/live/textpattern/index.php(235): Textpattern\L10n\Locale->setLocale(6, 'en')
#1 {main}
  thrown in /var/www/vhosts/textpattern.co/dev-demo/live/textpattern/vendors/Textpattern/L10n/Locale.php on line 196" while reading response header from upstream, client: 165.231.40.14, server: dev-demo.textpattern.co, request: "POST /textpattern/index.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php7.3-fpm.sock:", host: "dev-demo.textpattern.co", referrer: "https://dev-demo.textpattern.co/"

Now you mention it, the en locale isn’t installed, though there are numerous en_*:

$ locale -a | grep en
ca_ES@valencia
en_AG
en_AU
en_AU.utf8
en_BW
en_BW.utf8
en_CA
en_CA.utf8
en_DK
en_DK.iso885915
en_DK.utf8
en_GB
en_GB.iso885915
en_GB.utf8
en_HK
en_HK.utf8
en_IE
en_IE.utf8
en_IE@euro
en_IL
en_IN
en_NG
en_NZ
en_NZ.utf8
en_PH
en_PH.utf8
en_SC.utf8
en_SG
en_SG.utf8
en_US
en_US.iso885915
en_US.utf8
en_ZA
en_ZA.utf8
en_ZM
en_ZW
en_ZW.utf8

The demo sites share system libraries, they’re all on the same server, they have the same PHP version (PHP-FPM socket), they use the same MySQL server socket, and so on. Is there anything I can change to assist with troubleshooting this?

Edit: I’ve regenerated all available locales (497 in total), let’s see if that helps.

Last edited by gaekwad (2019-05-21 09:19:18)

Offline

#89 2019-05-21 11:02:40

etc
Developer
Registered: 2010-11-11
Posts: 5,665
Website GitHub

Re: Textpattern CMS demo site

gaekwad wrote #318140:

Now you mention it, the en locale isn’t installed…

That would certainly explain the error (and should be patched), but this is bugging me:

The demo sites share system libraries, they’re all on the same server, they have the same PHP version (PHP-FPM socket), they use the same MySQL server socket, and so on.

Seemingly, we have made no commits to concerned code parts since 4.7.3, why everything is fine on release-demo???

Offline

#90 2019-05-27 09:54:46

colak
Admin
From: Cyprus
Registered: 2004-11-20
Posts: 9,370
Website GitHub Mastodon Twitter

Re: Textpattern CMS demo site

Just a heads up. Visiting the demo urls I get this warning

Did Not Connect: Potential Security Issue

Firefox detected an issue and did not continue to dev-demo.textpattern.co. The website is either misconfigured or your computer clock is set to the wrong time.

It’s likely the website’s certificate is expired, which prevents Firefox from connecting securely.

What can you do about it?

dev-demo.textpattern.co has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.

Your computer clock is set to 27/05/2019. Make sure your computer is set to the correct date, time, and time zone in your system settings, and then refresh dev-demo.textpattern.co.

If your clock is already set to the right time, the website is likely misconfigured, and there is nothing you can do to resolve the issue. You can notify the website’s administrator about the problem.


Yiannis
——————————
NeMe | hblack.art | EMAP | A Sea change | Toolkit of Care
I do my best editing after I click on the submit button.

Offline

Board footer

Powered by FluxBB