Re: wiki on sf

[Etienne Grossmann]

On Thu, Jun 05, 2003 at 10:58:09AM -0500, Alex Schroeder wrote:
# Etienne Grossmann <address@hidden> writes:
# 
# >   So we have this option for hosting the wiki. The machine is
# > omni.isr.ist.utl.pt or isr.isr.ist.utl.pt.
# 
# My secret home is of course the contribution of some "páginas
# portuguesas para o manual..."
# 
# >   I got Oddmuse working on my machine, but didn't manage (yet) to use
# > the previous octave-wiki (I guess I should s/old_host/new_host/ a
# > little everywhere, right?).
# 
# Using the latest version of the wiki will allow you to do a global
# search and replace if you are an administrator (set $AdminPass in the
# config file, and use http://.../wiki.pl?action=password to set it in
# your cookie).
# 
# >   Indeed, from oddmuse's code, it looks like 'little-sister'
# > security. I don't know much on the subject, but iigc your next
# > sentences, a script in a html page cannot make the server do a system
# > call?
# 
# That is not so; the config file, and the config page -- if you want
# to enable it, it is disabled by default -- allow all Perl code.  If
# you think this is insecure, then don't set $ConfigPage.

  I don't get it : there is no $ConfigPage in the script (got from
http://www.emacswiki.org/current.txt). There's $ConfigPage. Is that
what you meant?

$UseConfig is set and the config file defines $FooterNote, $EditNote,
$HomePage, $LogoUrl and $StyleSheet. Is that insecure?

  I set $AdminPass, did

  http://anonimo.local/cgi-bin-etienne/oddmuse.pl?action=password 

  entered and received a cookie valid until 2005. Until then, I can do
anything I like? If I get it correctly, the wiki's owner can add
(edit|admin)passwords and communicate them to each developer? Once an
editor|administrator logs in, he's in for 2 year?

  Cheers,

  Etienne

# 
# > # I have an email by a user in my queue talking about setting up a wiki
# > # on sf.net -- interested?
# >
# >   Sure, I was going to ask.
# 
# I have added him to the CC as well, in case there are any news.
# 
# Jason Diamond wrote:
# 
# > I just discovered OddMuse and was working on getting it to work on
# > SourceForge. It would've been very easy to install if it wasn't for
# > SourceForge. I had to install the latest versions of CGI and
# > File::Spec. It took way too long to debug this (you have to wait 30
# > minutes for them to rsync their web server error logs over to the
# > shell server in order to see what went wrong). I had to add a use lib
# > /path/to/my/libs'; line before the use CGI; line. I'm not a Perl
# > hacker so am not sure if that was the best thing to do.
# 
# Alex.
# -- 
# http://www.emacswiki.org/cgi-bin/alex.pl
# 

-- 
Etienne Grossmann ------ http://www.isr.ist.utl.pt/~etienne



-------------------------------------------------------------
Octave is freely available under the terms of the GNU GPL.

Octave's home on the web:  http://www.octave.org
How to fund new projects:  http://www.octave.org/funding.html
Subscription information:  http://www.octave.org/archive.html
-------------------------------------------------------------