[pmwiki-users] Errors I do not understand

[Petko Yotov]

I've fixed the first deprecated warning with PageStore(), could you 
please get the subversion pre-release, test it and report?

   http://www.pmwiki.org/wiki/PmWiki/Subversion
   via svn: , or get the zip file

The second warning with crypt(), does it appear:

(1) with passwords that are hashed in real time with pmcrypt() in 
config.php, or

(2) with passwords stored as a page attribute in the past, when trying 
to access a password-protected page or group; these are passwords set 
previously in a Group.Page?action=attr form.

(3) with passwords stored as a page attribute with the current PmWiki 
version: open a [[Page?action=attr]], set a read password, then try to 
read it by providing the password.

I have no warnings with the first (1) case of hashed passwords on PHP 7. 
If you experience the warning with this case, I'll investigate further.

I have no warnings with the second (2) or third (3) case of hashed 
passwords. But in previous versions of PHP on some systems (Windows), in 
some cases insufficiently secure, too short hashes were returned by the 
crypt() function and may be now saved as page attributes in your wiki.

So if you see the warning in case (2) but not in case (3), your existing 
hashes are probably insufficiently long or insufficiently secure. The 
only way to fix those is to set them again, on every page, with the new 
PmWiki version. You can find a list of pages with password attributes on 
your wiki, browse to the page [[SiteAdmin.AuthList]].

Please report what you found.

Petko
---
Change log     :  http://www.pmwiki.org/wiki/PmWiki/ChangeLog
Release notes  :  http://www.pmwiki.org/wiki/PmWiki/ReleaseNotes
If you upgrade :  http://www.pmwiki.org/wiki/PmWiki/Upgrades


On 2016-04-01 04:13, Lars Eighner wrote:
> I am not understanding these lines: (using "latest release" d/l 
> yesterday,
> with php 7.0 on Windows 7.
> 
> Deprecated: Methods with the same name as their class will not be
> constructors in a future version of PHP; PageStore has a deprecated
> constructor in C:\localhost\notebook\pmwiki.php on line 986
> 
> Deprecated: crypt(): Supplied salt is not valid for DES. Possible bug 
> in
> provided salt format. in C:\localhost\notebook\pmwiki.php on line 485
> 
> Deprecated: crypt(): Supplied salt is not valid for DES. Possible bug 
> in
> provided salt format. in C:\localhost\notebook\pmwiki.php on line 485