[pmwiki-users] UserAdmin, where does the main menu appear by default?

erik burggraaf burggraaferik at gmail.com
Tue May 12 16:23:25 CDT 2015


Hi peter,

Thanks for all this.

I performed an action=logout and I still see the list of users under edit users.  It let's me edit them too.  That makes me believe I have a stack of logins piled up somwhere.  Should ?action=logout clear all logins associalted with my php session or my IP or something?  Better still, can I enforce a timeout so that if there's no activity on an account for say half an hour or so, the account will be logged out?

After pondering, I repeated the action=logout several times with no divfferent results.  Then I opened firefox nightly to see what permissions I have.  I have firefox nightly but have never used it to do anything to my wiki sites.  Nightly still lets me edit users even though I have never logged in with nightly which is wicked creepy.

BAck in safari, I made a new user account and it says that the account was created but not that a confirmation was sent.

Over in firefox nightly which has never been used to log into the site, I created a user, but did not receive the message saying that an email was sent.  Only the one saying that an account had been created.

I got'a run, but if you have any light to shead on this, I'd appreciate it.  Please feel free to poke around on my test site.
http://www.erik-burggraaf.com/pmwiki/pmwiki.php <http://www.erik-burggraaf.com/pmwiki/pmwiki.php>


> On May 11, 2015, at 11:03 AM, Peter Bowers <pbowers at pobox.com> wrote:
> 
> No problem - I regularly  make all kinds of wonderful changes in my php files only to find out I made it to the wrong copy and then I find that's the reason why I'm not seeing anything happen. :-)
> 
> Issue #1 (no confirmation email):
> 
> (1) If you are logged in as admin then setting up a new account will do it without sending an email. This is intentional and by design. There are 2 ways to ensure this is not what is causing your problem with no emails:
> (a) explicitly ?action=logout before you create a new user
> (b) Look carefully at the message in the screen immediately after you sign up a new user - it will say "E-mail sent with activation link" at the top of the menu if it tried to send an email
> 
> (2) Assuming that useradmin is really trying to send an email (confirmed as above) then your system has to be capable of sending email from php. Are you using a hosted system or using wamp/xamp locally? I can point you in the right direction depnding on how you are using it.
> 
> Issue #2 (seeing all users):
> 
> This makes me think even more that you were logged in as admin. Be aware that in pmwiki logins can "stack up."  In other words you can be logged in with multiple usernames and multiple passwords all at once. Every time you append ?action=login and type in just a password or type in a username and password that is accepted you will be logged in as yet another user account. Not that the previous user account is no longer valid - you can be logged in as 2 or 5 or 25 users simultaneously. Loading a page with ?action=logout will log you out of ALL accounts immediately.
> 
> Please try explicitly appending the ?action=logout to your URL and reloading the page and then see if this issue goes away. It is likely the source of both your issue #1 and issue #2.
> 
> Issue #3 (blank screen in resetpasswd):
> 
> I will confess I haven't tested this functionality as much as I should have. I just tested it now and confirmed this behavior:
> (1) If I am NOT logged in as admin then it works fine
> (2) If I am logged in as admin then I get the behavior you described.
> 
> Of course, this confirms again that you have been logged in as admin, but it also points out an area I need to fix.  THANK YOU!
> 
> Please keep the resports coming... Being able to "break" software is a gift!!! :-)
> 
> -Peter
> 
> 
> 
> On Mon, May 11, 2015 at 6:11 PM, erik burggraaf <burggraaferik at gmail.com <mailto:burggraaferik at gmail.com>> wrote:
> Hi peter,
> 
> I'm embarrassed to report that the problem with instalation was to do with the fact that the include for useradmin was not in the site's active config file.  I have been useing about 5 different configs because I have a problem with ssl.  When turned on, I can't post any content to my sites.  So, in my playing around, I had clearly reverted or deleted and then not tripple checked.
> 
> Egg on face.
> 
> So, now I have the basic functionality up and working.
> 
> Issue one: I did not get confirmation emails when signing up for a new account.  I tried two different addresses: erik at erik-burggraaf.com <mailto:erik at erik-burggraaf.com>, and burggraaferik at gmail.com <mailto:burggraaferik at gmail.com>.  Do I need to set something up on the back end for email confirmation?
> 
> Issue two.  I can see all the users on my system except thankfully for the admin account.  It looks like I can edit anyone I want.  How can I restrict this so that when logging in as a user, I can only see and edit my own account?
> 
> Third: the address: 
> http://www.erik-burggraaf.com/pmwiki/pmwiki.php?n=Main.Login?action=user/resetpasswd <http://www.erik-burggraaf.com/pmwiki/pmwiki.php?n=Main.Login?action=user/resetpasswd>
> Leads to an empty page.  Tested with both safari and chrome.
> 
> I'm using the profile pages option for storing information.  The website I'm building needs cthe functionality.  Once I have a system up and running for them, I will be switching to the database system.  Then once that becomes robust enough to meet their needs, I will be migrating them up to the database version.
> 
> Thanks for your patience.  One thing about it, if anyone can find a bug in the system, it's sure to be me.  I'm a bit hapless.
> 
> Best,
> 
> Erik
> 
>> On May 10, 2015, at 1:14 PM, Peter Bowers <pbowers at pobox.com <mailto:pbowers at pobox.com>> wrote:
>> 
>> Did you get this figured out, Erik?
>> 
>> I'd be happy to help further...
>> 
>> Or if you wanted to start testing on the test--site I set up to test the authuser <http://useradmin.qdk.org/authuser>, the profiles <http://useradmin.qdk.org/profiles>, and the database <http://useradmin.qdk.org/dbase> storage solutions you could do that as well and avoid the setup entirely for testing purposes.
>> 
>> -Peter
>> 
>> On Thu, May 7, 2015 at 9:02 PM, Peter Bowers <pbowers at pobox.com <mailto:pbowers at pobox.com>> wrote:
>> On Thu, May 7, 2015 at 4:49 PM, erik burggraaf <burggraaferik at gmail.com <mailto:burggraaferik at gmail.com>> wrote:
>> ?action=user does not show me the user options.
>> 
>> Do the user options appear in the sidebar, alongside edit, print, recent changes and the like?  I have this hidden for users who ar not logged in.  So could this be why I don't see the options?
>> 
>> 
>> No, they appear in the main part of the page. 
>> 
>> Are you using a farm or a normal wiki?
>> 
>> Are you using the authuser or the profiles or the dbase storage method?
>> 
>> Can you send me the relevant part of your config.php or farmconfig.php?
>> 
>> Can you introduce a deliberate syntax error into your config.php or farmconfig.php (wherever you are putting the include_once("useradmin-xyz.php");) and make sure that your loaded page shows an error? That will rule out the possibility of having a misplaced config.php or something...
>> 
>> Happy to handle this off-list if you would like...
>> 
>> -Peter
>> 
> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pmichaud.com/pipermail/pmwiki-users/attachments/20150512/f7fad7b7/attachment.html>


More information about the pmwiki-users mailing list