Todo List
pls. see bugtracker
Process and release
|
Please help out where you can.
Roadmap
Main Focus: basic HTML5 support, address security related features
see JavaScript
https://dev.mysql.com/doc/refm[..]type-conversion.html
whOOt https://dev.mysql.com/doc/refm[..]ent-programming.html
open issues (add)
so far
1. R 5.5
dev repo [bitbucket.org]
ChangeLog
Team Sessions1.1. Security Headers
Content-Security-Policy
Content-Security-Policy:
default-src 'self';
script-src 'self' 'unsafe-eval' ajax.googleapis.com google-analytics.com;
style-src 'self' ajax.googleapis.com;
connect-src 'self' https://api.myapp.com realtime.myapp.com:8080;
media-src 'self' youtube.com;
object-src 'self' youtube.com;
frame-src 'self' youtube.com embed.ly
Content-Security-Policy:
default-src 'self';
script-src 'self' 'unsafe-inline';
style-src 'self' 'unsafe-inline';
img-src *;
1.1.1. Replace inline JavaScript
1.2. SafeHTML / HTMLPurifier
1.3. PHP
1.3.1. PHP 7.4
1.4. MariaDB / MySQL type casting
https://stackoverflow.com/ques[..]d-backticks-in-mysql
1.5. Features
1.6. M7
((../ back to parent page)), it links to root level (?!)
_properties)
<audio> <video> using the link function
has_access() for $ -> moderate handler : locking
Not Found
The requested URL /doc/Bugs/WackoWikiStart was not found on this server.
double click in edit / write comment form field should not load edit page, user looses his already written content, ANNOYING FIXEDrevisions.xml handler adds falsely,
</body></html>##<! WackoWiki Caching Engine: page cached at 2017-05-21 07:41:20 >##
and diag output
see final.php
<?php
// tabs theme options =========
$this->db->revisions_hide_cancel = 1;
$this->db->footer_inside = 0;
// ============================
$theme_translation = [
'EditIcon' => '<img src="' . $this->db->theme_url . 'icon/edit.png" alt="Edit included page" />',
'' => '',
];
?>
1.7. Fix
$this->page_id_cache[$page['tag']] = $page['page_id'];
preload_link() function
parse also page path for bread crumbs in page_link table
help to action to show all parameters in a info box kbd tag isset($_GET|$_POST) ? .. : null
search?phrase="sourceforge.net" -> paging fails with "term to search"
add options to show/hide page related categories at the page bottom
$this->config['footer_tags'] = OFF
chicken.egg, might conflict with other settings like tikiwiki formatter option
file?get= -> performance, time, resources, necessity, alternatives
1.8. Notifications
1.8.1. Notice digest
1.9. Installer
'base_url' => 'https://example.com/wiki/' ?
https://example.com/wiki/?page=OpenTasks
1.10. Handler
new and moderate -> strip
preg_replace('/\s+/', '', $string);
rel="canonical" to show handler?
delay_index
<meta name=“robots” content=“noindex,nofollow” />
This is the simplest way to standardize document locations and for the language-independent single instances of service pages, like login. Next step is the separated cluster for those pages, linked with prefix, for example,
((service:login)).handler/account/
$
1.11. Action
1.12. Formatter
(/Users/WikiAdmin UserSpace | WikiAdmin)) -fails on |
<# #> adds <!--notypo--> on first and <!--/notypo--> on second appearance of double quote like class=""
<#<div class="" style="background:transparent; border:.1em solid #F66; border-left:1em solid #F66; box-sizing:border-box; margin:.5em 0; overflow:hidden; padding:.5em; text-align:left; width:auto;">Unter den Btrfs-spezifischen Anpassungen (1, 2) waren einige, die Latenz- und Stabilitäts-Probleme beseitigen, die bei knapp werdendem Speicherplatz auftreten können.</div>#>
2
<#<div class="" style="background:transparent; border:.1em solid #fcfce9; border-left:1em solid #fcfce9; box-sizing:border-box; margin:.5em 0; overflow:hidden; padding:.5em; text-align:left; width:auto;">Unter den Btrfs-spezifischen Anpassungen (1, 2) waren einige, die Latenz- und Stabilitäts-Probleme beseitigen, die bei knapp werdendem Speicherplatz auftreten können.</div>#>
<!--notypo--><div class="<!--notypo--> style="background:transparent; border:.1em solid #F66; border-left:1em solid #F66; box-sizing:border-box; margin:.5em 0; overflow:hidden; padding:.5em; text-align:left; width:auto;">Unter den Btrfs-spezifischen Anpassungen (1, 2) waren einige, die Latenz- und Stabilitäts-Probleme beseitigen, die bei knapp werdendem Speicherplatz auftreten können.</div>#><br />2<br /><#<div class=<!--/notypo-->" style="background:transparent; border:.1em solid #fcfce9; border-left:1em solid #fcfce9; box-sizing:border-box; margin:.5em 0; overflow:hidden; padding:.5em; text-align:left; width:auto;">Unter den Btrfs-spezifischen Anpassungen (1, 2) waren einige, die Latenz- und Stabilitäts-Probleme beseitigen, die bei knapp werdendem Speicherplatz auftreten können.</div><!--/notypo--><br />
Image links to other sites FIXED
The automatically added symbol for an outerlink is misplaced here, e.g.:
((http://example.com/ https://www.example.com/media/img/logo.png))
nofollow' to protected link -> class="acl-denied"
<p class="auto" id="p96596-1"><!--notypo--><pre class="code">
<p class="auto" id="p21312-1"><!--notypo--><div class="layout-box">
1. hallo
5. should not take the number but 1, same for i, I, a, A
disable_wikilinks) the formatter should try to form links for in intralinks with at least one slash (?) like
<img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR4nGP6zwAAAgcBApocMXEAAAAASUVORK5CYII="/>
div.image {
width: 100px;
height: 100px;
background-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR4nGP6zwAAAgcBApocMXEAAAAASUVORK5CYII=');
}
File:image.jpg
<[http://www.example.com]>
((image.jpg)) shows images from image/ folder ???
display of correct headings inside wrapper
%%(wacko wrapper="shade") with toc is brokenhttps://de.wikipedia.org/wiki/Geh%C3%B6rnte_Mauerbiene
<[ ]> eats blank line in quote, undesired
<[block
<[nested quote]>
quote
]>
1.13. Template Engine
<textarea>[ ' body ' ]</textarea>
write templates.tpl for remaining actions and handlers where suitable DONE
1.14. Cache
1.15. Admin Panel
https://rest.db.ripe.net/search.json?query-string=
PAY ATTENTION TO SECURITY RISKS
Before adding random file/MIME types: please think about possible security issues.
For example HTML (.htm, .html), JavaScript (.js) and PHP (.php) file are types you’d better avoid as they can be “executed” on your server where you really would not want that to happen. For most of these kind of files, this should not be a problem though as these files are better off being compressed into a ZIP file anyway.
Only add file types that you REALLY need and that you are comfortable with.
recovery mode: CSS and images won't load FIXED
<colgroup>
<col span="1" style="width: 10%;">
<col span="1" style="width: 5%;">
<col span="1" style="width: 5%;">
<col span="1" style="width: 45%;">
<col span="1" style="width: 15%;">
<col span="1" style="width: 10%;">
<col span="1" style="width: 10%;">
</colgroup>
<thead class="data-head">
<tr class="">
</tr>
[...]
</thead>
<tbody id="table-section-one">
[...]
</tbody>
<tbody id="table-section-two">
[...]
</tbody> 1.16. Database
1.16.1. Check for SQL STRICT mode violations
SELECT
`DIGEST_TEXT` AS `query`,
`SCHEMA_NAME` AS `db`,
`COUNT_STAR` AS `exec_count`,
`SUM_ERRORS` AS `errors`,
(ifnull((`SUM_ERRORS` / nullif(`COUNT_STAR`,0)),0) * 100) AS `error_pct`,
`SUM_WARNINGS` AS `warnings`,
(ifnull((`SUM_WARNINGS` / nullif(`COUNT_STAR`,0)),0) * 100) AS `warning_pct`,
`FIRST_SEEN` AS `first_seen`,
`LAST_SEEN` AS `last_seen`,
`DIGEST` AS `digest`
FROM
performance_schema.events_statements_summary_by_digest
WHERE
((`SUM_ERRORS` > 0) OR (`SUM_WARNINGS` > 0))
ORDER BY
`SUM_ERRORS` DESC,
`SUM_WARNINGS` DESC;
1.17. WikiEdit
- use only one popup for new link, having link and link description together
- popup for tables
- set table header
- select color for text and highlighting
- resize textarea
- undo / redo
- javascript search&replace
- symbols
1.18. Translations
-> /Dev/Release/R55/Translations
add
-
"\n\n" "Click on the following link to view the page:\n\n"
- function notify_watcher
Refactor message sets, e.g. use only a common set for generic messages 'CancelButton'
- 199: 'ACLCancelButton' => 'Cancel',
- 242: 'CategoriesCancelButton' => 'Cancel',
- 277: 'MetaCancelButton' => 'Cancel',
- 280: 'EditCancelButton' => 'Cancel',
- 964: 'ModerateDecline' => 'Cancel',
- 1.066: 'PollsCancel' => 'cancel',
1.18.1. improve notifications
-
'EmailRegistered' => 'You\'ve successfully registered at %1.'."\n".'Your username: %2'."\n\n".'If you want to receive notifications, you must click on the link below or copy it to a web browser.'."\n".'%3'."\n\n".'Please return to the Wiki and login with your new username and password.'."\n\n\n".'If you did not request any registration, ignore this message and nothing will happen.'."\n\n".'Do not reply to this message'."\n\n".'',
- revisit all email message sets
1.19. Usability issues
- indicate page [language|permissions]
- add double-click support for editing comments
- When should I use a select box instead of radio buttons?
- Not indicating an active form field
- e.g.
textarea:focus { border: 1px solid red; } - You can use the ‘:focus’ selector on lots of elements, but it’s super handy when used on inputs and textareas to indicate that the field is active. Add CSS styling such as a highlighted border, or a subtle change to the background color.
- e.g.
- forms with checkboxes and options in lists
- e.g.
category handleror users in admin panel - assignment of form buttons
- e.g.
- usage of new page handler
- seen in many fresh installs, users adding sub pages to HomePage/subpage
- this is possible but is it really desired and understood, should we filter out system pages as pre-provided cluster in the /new [page] handler?
- seen in many fresh installs, users adding sub pages to HomePage/subpage
- make name spaces for users and groups more intuitive accessible
-
users/nickname/userspace/.. -
groups/usability/groupspace/..
-
- add ability to easily create groups and to add group members
- suggestions?
- GUI inconsistencies
- handler
- actions
- message boxes
- Your session has timed out. Please sign in again.
Readings
- https://www.nngroup.com/articles/low-contrast/
- https://backchannel.com/how-th[..]eadable-a781ddc711b6
1.20. Libs
-
update PHPMailer to v6.0 -
update Hashids to v2.0
1.21. Extentions
- foster gallery action
- replace fancybox
- http://www.jacklmoore.com/colorbox/ [MIT license]
- https://brutaldesign.github.io/swipebox/ [MIT license]
- https://github.com/dimsemenov/Magnific-Popup [MIT license]
- replace fancybox
- provide Web Player
- https://github.com/google/code-prettify
1.22. Refactoring
- start replacing magic numbers at least with
trueandfalsewhere possible - erode the mountain of technical debt
- https://www.owasp.org/index.php/Logging_Cheat_Sheet
1.23. Staging Area
- blog action (will replace news action)
- snippet action
- forum, topics action
- Admin Panel
- refactor -> antipatterns
- bad behaviour module
- list and check each module, assign status
- moderate handler -> quite a mess
- poll actions -> quite a mess
1.24. Ideas
- spam / badword handling -> bad_words($text) function
- https://en.wikipedia.org/wiki/Wordfilter
- https://stackoverflow.com/ques[..]ood-profanity-filter
- What you need is a good way for users to flag inappropriate content and a mechanism to deal with it swiftly. One way is to automatically hide/remove content if it's been flagged more than X times.
- HTML5 media action:
{{media type="[audio|video|flash]" source=http://.... [width=000] [height=000] [...some other options...]}} -
rel="edit"-> https://tools.ietf.org/html/rfc686 - enforce ACL-Policy, e.g. set read to
$, user can't overwrite the setting - test PHPThumb alternatives
- Composer
- https://github.com/openpgpjs/openpgpjs
- https://highlightjs.org/
- https://github.com/FineUploader/react-fine-uploader as extension
- https://www.w3.org/TR/css3-page/
1.25. Themes
- Clean up themes section
- update repo links and info section
- foster or (re)move theme
- default theme:
- switch from pixels to (root) ems
- increase global font-size from 13px to 16px
- add flexbox support
- new mobile ready theme / layout -> on hold (we got a new template engine!)
- https://github.com/KDE/breeze-icons
- https://developers.google.com/web/fundamentals/
- https://www.w3.org/Style/Examples/007/leaders
Flexbox vs Grid
- Flexbox: content dictates layout
- Grid: container dictates layout (to some extent)
Flexbox is great, it just isn't the best thing for overall page layouts.
Flexbox and grid play well together, and are a huge step forward from the float & table hacks they replace. The sooner we can use them both in production, the better.
CSS Varibles
CSS colums for index <div class="gimme-columns"><ul>
.gimme-columns {
columns: 20em 3;
column-count: 3;
column-width: 20em;
} default theme
- change blockquote
- box-shadow: 0 0 6px rgba(0, 0, 0, 0.5);
- add option to hide $this->config['site_name'] in theme header, e.g.: WackoWiki: To Do R5.5 -> To Do R5.5
- min-height: 200px for .article, #page
1.25.1. SVG
Icon setting: add viewBox="0 0 16 16" AND height="16" width="16"
explain
1.25.2. Site Logo
Customizable Logo and Favicon
- Location
image/ folder- chmod issue
- Options
- Favicon
-
site_favicon
-
- Logo
-
site_logo - logo_width
- logo_height
-
- Favicon
1.25.3. Favicon
Supported Formats
- ico -> type="image/x-icon" ->
- png -> type="image/png" -> http://caniuse.com/link-icon-png
- gif -> type="image/gif" ->
- svg -> type="image/svg+xml" -> http://caniuse.com/link-icon-svg
Dimensions
- 16×16
- 32×32
- 48×48
- 64×64
- https://en.wikipedia.org/wiki/Favicon
- https://github.com/audreyr/favicon-cheat-sheet
- https://html.spec.whatwg.org/m[..]antics.html#rel-icon
1.26. Documentation
- add documentation for Admin Panel
- backup and restore module
- Update / foster Core Documentation for
- Deutsch
- English
- Français
- Русский
- https://www.pgpru.com/proekt/wiki – well made
- https://www.pgpru.com/comment78727 – Markup Rules for nerds
- describe forum and topic action
- blog action -> Blogging with WackoWiki
- where and when you should use relative or absolute addressing (include action, files, actions with page parameter)
- how you use the include function (pages, comments)
- release notes
- add a New & Noteworthy section / sub page to raise visibility of 'hidden' features
- moderate handler
- message functions and usage
- add sub page to config documentation about CSP
- Video Tutorials
- update screen shots
1.27. Feedback
- themes
- migration and encoding issues
- frequent annoying issues
- unsolved questions
- add rfc section in dev cluster
- add dev activity log
- Nginx configuration (rewrite rules)
1.28. Testing
- Tools
- https://developers.google.com/speed/pagespeed/insights/
- https://securityheaders.io/
- http://validator.w3.org/nu/
- https://jigsaw.w3.org/css-validator/
- https://validator.w3.org/feed/
- https://web.dev/measure
- WAVE – Online accessibility validator
- http://jshint.com/
- https://www.google.com/webmast[..]ols/mobile-friendly/
- https://github.com/mozilla/readability – test with firefox reading mode
- /Forum/Discussion/UserPasswordReset -> solution paths
1.28.1. Test cases
-> Test cases
1.28.2. Debug
- Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf self blockiert ("script-src http://localhost 'unsafe-inline'").
- call to eval() or related function blocked by CSP: autocomplete.js (Line 253)
- #1139 – Got error 'this version of PCRE is compiled without UTF support at offset 0' from regexp
-
Error Static analysis: 8 errors were found during analysis. Unrecognized keyword. (near "REGEXP" at position 209) Unexpected token. (near "'^/Blog/.+/.+/.+$'" at position 216) Unrecognized keyword. (near "AND" at position 235) Unexpected token. (near "p" at position 239) Unexpected token. (near "." at position 240) Unexpected token. (near "deleted" at position 241) Unexpected token. (near "<>" at position 249) Unexpected token. (near "'1'" at position 252) SQL query: Documentation SELECT p.page_id, p.owner_id, p.user_id, p.tag, p.title, p.created, p.comments, u.user_name AS owner FROM wacko_page p INNER JOIN wacko_user u ON (p.owner_id = u.user_id) WHERE p.comment_on_id = '0' AND p.tag REGEXP '^/Blog/.+/.+/.+$' AND p.deleted <> '1' ORDER BY p.created DESC LIMIT 0, 10 MySQL said: Documentation #1139 - Got error 'this version of PCRE is compiled without UTF support at offset 0' from regexp - https://stackoverflow.com/ques[..]sing-regexp-in-mysql
-
if ( ! extension_loaded('mbstring')) die('mb functions not loaded'); if (1 != preg_match('/^.{1}$/u', "ñ", $UTF8_ar)) die('PCRE is not compiled with UTF-8 support'); exit('ok');
-
5.5.0 – distilled from error.log (PHP 7.0)
Undefined index: deleted in /class/wacko.php on line 1495 Undefined index: tag in /class/wacko.php on line 1507 Undefined index: page_lang in /class/wacko.php on line 1512 htmlspecialchars() expects parameter 1 to be string, array given in /class/wacko.php on line 3290 Undefined index: page_id in /class/wacko.php on line 1386 Undefined index: comment_on_id in /handler/page/show.php on line 12 Undefined index: deleted in /handler/page/show.php on line 43 Undefined index: latest in /handler/page/show.php on line 66 Undefined index: modified in /handler/page/show.php on line 71 Undefined index: user_name in /handler/page/show.php on line 72 Undefined index: page_lang in /class/wacko.php on line 4023 Undefined index: page_id in /handler/page/show.php on line 114 Undefined index: body_r in /handler/page/show.php on line 133 Undefined index: latest in /handler/page/show.php on line 137 Undefined index: body in /handler/page/show.php on line 138 Undefined index: page_id in /handler/page/show.php on line 138 Undefined index: latest in /handler/page/show.php on line 199 Undefined index: latest in /theme/_common/_header.php on line 19 Undefined index: description in /class/wacko.php on line 1032 Undefined index: page_id in /theme/default/appearance/header.php on line 83 Undefined index: page_id in /theme/default/appearance/header.php on line 166 Undefined index: modified in /theme/default/appearance/footer.php on line 20 Undefined index: comment_on_id in /theme/default/appearance/footer.php on line 46 Undefined index: page_id in /action/hashid.php on line 21 Undefined index: page_id in /action/hashid.php on line 27 Undefined index: handler in /class/wacko.php on line 4626 Undefined index: footer_comments in /class/wacko.php on line 6441 Undefined index: footer_files in /class/wacko.php on line 6441 Undefined index: footer_rating in /class/wacko.php on line 6441 Undefined index: hide_toc in /class/wacko.php on line 6441 Undefined index: hide_index in /class/wacko.php on line 6441 Undefined index: tree_level in /class/wacko.php on line 6441 Undefined index: allow_rawhtml in /class/wacko.php on line 6441 Undefined index: disable_safehtml in /class/wacko.php on line 6441 Undefined index: theme in /class/wacko.php on line 6441 Undefined index: page_id in /class/wacko.php on line 6451 Undefined index: modified in /class/wacko.php on line 6461 Undefined index: comment_on_id in /class/wacko.php on line 6476 Uninitialized string offset: 0 in /formatter/class/wackoformatter.php on line 330 Uninitialized string offset: 0 in /formatter/class/wackoformatter.php on line 440 Undefined offset: 3 in /formatter/class/wackoformatter.php on line 874 Invalid argument supplied for foreach() in /lib/Text_Highlighter/Highlighter/Renderer/Html.php on line 310
bugs:237 -> set in config/constants.php 2. Unscheduled
2.1. Most Annoying Bugs
2.2. Core
config['hide_comments'] == true surpresses also recentycommented action what is not intended if you only want hide the comment panel
2.3. Cache
2.4. Themes
2.5. Actions
2.6. Handlers
AND owner_id='".quote($this->dblink, $this->get_user_id())."'
2.7. Formatters
file: links and formatter options (hl php ...)2.8. Installer
create a robot.txt with the installer
this makes only sense if the file is located behind the first slash
/ in the url else it will be ignored===Getting Help===
To get help with WackoWiki, visit the Documentation - the wiki and forums are excellent resources.
2.8.1. Upgrade
2.9. Database
2.10. Admin Panel
2.11. Privacy Policy
2.12. Testing
$this->load_all/load_single($sql, $cache); $cache = [0|1] -> bugs:308
2.13. Debugging
2.14. PHP Notices and Warnings
define('PHP_ERROR_REPORTING', 5); // PHP error reporting: 0 - off, 5 - all
and / or check \apache\logs\error.log
2.15. Translation
- Translate English placeholders
3. Documentation
- update documentation?
- config
- actions
- syntax
- SQL cache -> info config / howto
- robots.txt
- useragents disabled by default
- location of robots.txt
4. Requests
- add function InviteGroup (allow/deny add/remove)
- Admin can upload unlimited
- Mediawiki and other wiki converter
- Mediawiki supports wackowiki but wackowiki cant import mediawiki!!!. Some media wiki themes recommended.
- Support for mediawiki.
- [formatting="default|wacko|html|simplebr"]
- make GUI elements optional via the user settings [GUI] [] bookmarks [] breadcrumbs [] etc.
- add new db field
'menu_tag' and'sef_tag' for each page - add options to turn off features like categories, referrers, ...
- receive all messages combined in one digest
- daily at
- once per week on
- once per month, on the day number
- option for allowed actions in comments
- move antispam.conf as badword to config
- SHA digest of page content (body)