Loading...
 

Tikiwiki-devel (mailman list mirror)


tiki.org: Unable to register new users...

Greetings,

I'm trying to register as a user in order to file a bug report (a fatal error
in tiki 14.2 and 15 trunk)

But I can't.

On https://dev.tiki.org/Make+a+wish is says:
"Please register at tiki.org if you do not have a login."
"tiki.org" is a link to this URL:
https://tiki.org/tiki-register.php?key=randomstring

Sometimes klicking the link just takes me back to tiki.org

Sometimes it takes me to the registration form.
The registration form however demands of me to enter a Passcode, which I don't
know what would be.

So, how to register, in order to help the project?

Cheers, Johnny :o(

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
___
TikiWiki-devel mailing list
TikiWiki-devel at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel

Hi Johnny, and welcome,

The passcode is meant to be displayed right below the passcode field. It is
supposed to stop robots, not you :-(
It is displayed using javascript, so maybe you have noscript active or some
other anti-adverts software and only see "*Not your password.*".
The solution is to whitelist "tiki.org" in noscript or whatever you are
using (we have no ads :-D ).

I confirm I got from https://dev.tiki.org/Make+a+wish to https://tiki.org (
not https://tiki.org/tiki-register.php?key=randomstring ) also, and then
after once getting on https://tiki.org/tiki-register.php?key=randomstring,
I get there correctly all the time...
This is a different issue. I hope someone has an idea.

Sorry about your trouble, and thanks for reporting on it.
Cheers,
Jyhem

On Tue, Feb 23, 2016 at 1:18 PM, Johnny Nielsen <j_e_n_pub@yahoo.dk> wrote:

> Greetings,
>
> I'm trying to register as a user in order to file a bug report (a fatal
> error
> in tiki 14.2 and 15 trunk)
>
> But I can't.
>
> On https://dev.tiki.org/Make+a+wish is says:
> "Please register at tiki.org if you do not have a login."
> "tiki.org" is a link to this URL:
> https://tiki.org/tiki-register.php?key=randomstring
>
> Sometimes klicking the link just takes me back to tiki.org
>
> Sometimes it takes me to the registration form.
> The registration form however demands of me to enter a Passcode, which I
> don't
> know what would be.
>
> So, how to register, in order to help the project?
>
> Cheers, Johnny :o(
>
>
> ------------------------------------------------------------------------------
> Site24x7 APM Insight: Get Deep Visibility into Application Performance
> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
> Monitor end-to-end web transactions and take corrective actions now
> Troubleshoot faster and improve end-user experience. Signup Now!
> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
> ___
> TikiWiki-devel mailing list
> TikiWiki-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel

posts: 126226 United Kingdom

Hi Jyhem and Johnny

The key=randomstring parameter thing is a pref (called registerKey) i added a few tikis ago as a significant amount of the bandwidth used on my server (which i pay for) was being used up by bots checking to see it tiki-register.php existed, and then if it was trying to register spam accounts automatically.

So i added this (optional) setting so that tiki-register.php could check for a key param and if it's not there redirect to the home page with a 404 not found error, hopefully suggesting to the bots to move onto another victim (and it seemed to work, almost all bot traffic to that on my tiki sites seemed to drop off).

The links that tiki generates to it, like on the login module, will automatically be set properly when using this, but other links in wiki pages etc will need updating, which is why i didn't enable it on the tiki.org. However, during conversations at the last TikiFest with Torsten we did enable it and obviously the task of updating the incoming links wasn't followed up properly, so apologies for that...

Yesterday i fixed as many as i could find but obviously there are still a few to be done, or the pref should be disabled (but i think it's a good thing os think it should remain ;).

So sorry about the inconvenience Johnny, but thanks for persisting and letting us know, and if everyone else can keep an eye out for more (i didn't check themes.t.o for instance) then we can get them all updated quicky-quick.

Thanks, and apologies again,

jonny




> On 23 Feb 2016, at 14:01, Jean-Marc Libs <jeanmarc.libs@gmail.com> wrote:
>
> Hi Johnny, and welcome,
>
> The passcode is meant to be displayed right below the passcode field. It is supposed to stop robots, not you :-(
> It is displayed using javascript, so maybe you have noscript active or some other anti-adverts software and only see "Not your password.".
> The solution is to whitelist "tiki.org" in noscript or whatever you are using (we have no ads :-D ).
>
> I confirm I got from https://dev.tiki.org/Make+a+wish to https://tiki.org ( not https://tiki.org/tiki-register.php?key=randomstring ) also, and then after once getting on https://tiki.org/tiki-register.php?key=randomstring, I get there correctly all the time...
> This is a different issue. I hope someone has an idea.
>
> Sorry about your trouble, and thanks for reporting on it.
> Cheers,
> Jyhem
>
> On Tue, Feb 23, 2016 at 1:18 PM, Johnny Nielsen <j_e_n_pub@yahoo.dk> wrote:
>> Greetings,
>>
>> I'm trying to register as a user in order to file a bug report (a fatal error
>> in tiki 14.2 and 15 trunk)
>>
>> But I can't.
>>
>> On https://dev.tiki.org/Make+a+wish is says:
>> "Please register at tiki.org if you do not have a login."
>> "tiki.org" is a link to this URL:
>> https://tiki.org/tiki-register.php?key=randomstring
>>
>> Sometimes klicking the link just takes me back to tiki.org
>>
>> Sometimes it takes me to the registration form.
>> The registration form however demands of me to enter a Passcode, which I don't
>> know what would be.
>>
>> So, how to register, in order to help the project?
>>
>> Cheers, Johnny :o(
>>
>> ------------------------------------------------------------------------------
>> Site24x7 APM Insight: Get Deep Visibility into Application Performance
>> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
>> Monitor end-to-end web transactions and take corrective actions now
>> Troubleshoot faster and improve end-user experience. Signup Now!
>> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
>> ___
>> TikiWiki-devel mailing list
>> TikiWiki-devel at lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel
>
> ------------------------------------------------------------------------------
> Site24x7 APM Insight: Get Deep Visibility into Application Performance
> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
> Monitor end-to-end web transactions and take corrective actions now
> Troubleshoot faster and improve end-user experience. Signup Now!
> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140___
> TikiWiki-devel mailing list
> TikiWiki-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel


------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
___
TikiWiki-devel mailing list
TikiWiki-devel at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel

posts: 9291 Germany

Hello Jonny,

Tuesday, February 23, 2016, 3:19:55 PM, you wrote:

> The key=randomstring parameter thing is a pref (called registerKey)
> i added a few tikis ago as a significant amount of the bandwidth
> used on my server (which i pay for) was being used up by bots
> checking to see it tiki-register.php existed, and then if it was
> trying to register spam accounts automatically.


On tw.o I use fail2ban on people trying to create tons of logins.

maxretry = 3
findtime = 600
bantime 3600
failregex = ^<HOST> - - .* "POST /tiki-register.php .*" .*$

So it should ban anyone for 1 hour, who calls the register page from the same HOST withing 600 seconds three times or more.

Same for the login page. So if you are drunk and can't type your tiki password correctly, better try at sober time. :P

2016-02-21 08:48:51,116 fail2ban.actions: WARNING tikiregister Ban 95.154.210.99
2016-02-21 09:48:51,713 fail2ban.actions: WARNING tikiregister Unban 95.154.210.99

Cheers,
Oliver



> So i added this (optional) setting so that tiki-register.php could
> check for a key param and if it's not there redirect to the home
> page with a 404 not found error, hopefully suggesting to the bots to
> move onto another victim (and it seemed to work, almost all bot
> traffic to that on my tiki sites seemed to drop off).

> The links that tiki generates to it, like on the login module, will
> automatically be set properly when using this, but other links in
> wiki pages etc will need updating, which is why i didn't enable it
> on the tiki.org. However, during conversations at the last TikiFest
> with Torsten we did enable it and obviously the task of updating the
> incoming links wasn't followed up properly, so apologies for that...

> Yesterday i fixed as many as i could find but obviously there are
> still a few to be done, or the pref should be disabled (but i think
> it's a good thing os think it should remain ;).

> So sorry about the inconvenience Johnny, but thanks for persisting
> and letting us know, and if everyone else can keep an eye out for
> more (i didn't check themes.t.o for instance) then we can get them all updated quicky-quick.

> Thanks, and apologies again,

> jonny




>> On 23 Feb 2016, at 14:01, Jean-Marc Libs <jeanmarc.libs@gmail.com> wrote:
>>
>> Hi Johnny, and welcome,
>>
>> The passcode is meant to be displayed right below the passcode field. It is supposed to stop robots, not you :-(
>> It is displayed using javascript, so maybe you have noscript active or some other anti-adverts software and only see "Not your password.".
>> The solution is to whitelist "tiki.org" in noscript or whatever you are using (we have no ads :-D ).
>>
>> I confirm I got from https://dev.tiki.org/Make+a+wish to https://tiki.org ( not https://tiki.org/tiki-register.php?key=randomstring ) also, and then after once getting on https://tiki.org/tiki-register.php?key=randomstring, I get there correctly all the time...
>> This is a different issue. I hope someone has an idea.
>>
>> Sorry about your trouble, and thanks for reporting on it.
>> Cheers,
>> Jyhem
>>
>> On Tue, Feb 23, 2016 at 1:18 PM, Johnny Nielsen <j_e_n_pub@yahoo.dk> wrote:
>>> Greetings,
>>>
>>> I'm trying to register as a user in order to file a bug report (a fatal error
>>> in tiki 14.2 and 15 trunk)
>>>
>>> But I can't.
>>>
>>> On https://dev.tiki.org/Make+a+wish is says:
>>> "Please register at tiki.org if you do not have a login."
>>> "tiki.org" is a link to this URL:
>>> https://tiki.org/tiki-register.php?key=randomstring
>>>
>>> Sometimes klicking the link just takes me back to tiki.org
>>>
>>> Sometimes it takes me to the registration form.
>>> The registration form however demands of me to enter a Passcode, which I don't
>>> know what would be.
>>>
>>> So, how to register, in order to help the project?
>>>
>>> Cheers, Johnny :o(

Oliver


------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
___
TikiWiki-devel mailing list
TikiWiki-devel at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel


posts: 4

Thank you all,

I have now succeeded in registering :o)

My passcode problem is because of something in my browser settings, I know not
what.

I think it is a good idea to have the key=randomstring on, when it helps
avoiding spam registrations.

But I don't understand what could be the reason that at some time it seemed
random whether I would get to the registration form, or being sent back to
tiki.org
Now it seems stable, always sending me to the registration form.

The rest is just about my browser settings, so you can skip it if you have
better to do :o)

After prodding around in my browser settings, I must conlude that some
"unknown" setting in my daily browser profile must be the reason that the
passcode is not displayed.

Even when I disable all types of blocking, and allow everything that seems to
have anything to do with the matter, the passcode still doesn't show. That's
why I thought it had something to do with tiki.org — because I had disabled
all blocking to allow whatever tiki.org needed.

I only succeded by creating a new browser profile, and leaving it at its
default settings, but I have no idea what difference between the profiles
makes the difference to the passcode display. I will have to examine the
profile settings in rigorous detail :o/

Thanks again for the help :o)

tirsdag den 23. februar 2016 13.18.12 CET skrev Johnny Nielsen:
> Greetings,
>
> I'm trying to register as a user in order to file a bug report (a fatal
> error in tiki 14.2 and 15 trunk)
>
> But I can't.
>
> On https://dev.tiki.org/Make+a+wish is says:
> "Please register at tiki.org if you do not have a login."
> "tiki.org" is a link to this URL:
> https://tiki.org/tiki-register.php?key=randomstring
>
> Sometimes klicking the link just takes me back to tiki.org
>
> Sometimes it takes me to the registration form.
> The registration form however demands of me to enter a Passcode, which I
> don't know what would be.
>
> So, how to register, in order to help the project?
>
> Cheers, Johnny :o(
>
> ----------------------------------------------------------------------------
> — Site24x7 APM Insight: Get Deep Visibility into Application Performance
> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
> Monitor end-to-end web transactions and take corrective actions now
> Troubleshoot faster and improve end-user experience. Signup Now!
> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
> ___
> TikiWiki-devel mailing list
> TikiWiki-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel



------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
___
TikiWiki-devel mailing list
TikiWiki-devel at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel

Hi Johnny,

It's nice that you registered.

On Tue, Feb 23, 2016 at 9:57 PM, Johnny Nielsen <j_e_n_pub@yahoo.dk> wrote:

>
> The rest is just about my browser settings, so you can skip it if you have
> better to do :o)
>
> After prodding around in my browser settings, I must conlude that some
> "unknown" setting in my daily browser profile must be the reason that the
> passcode is not displayed.
>
> Even when I disable all types of blocking, and allow everything that seems
> to
> have anything to do with the matter, the passcode still doesn't show.
> That's
> why I thought it had something to do with tiki.org — because I had
> disabled
> all blocking to allow whatever tiki.org needed.
>
> I only succeded by creating a new browser profile, and leaving it at its
> default settings, but I have no idea what difference between the profiles
> makes the difference to the passcode display. I will have to examine the
> profile settings in rigorous detail :o/
>

Some info before you waste too much time on this:
When I switch noscript on and off, I also
delete the cookies related to the specific Tiki website, since Tiki does
some JS
capability detection and then it remembers it.



>
> Thanks again for the help :o)
>


You are welcome,
Jyhem

posts: 4

> > I only succeded in registering by creating a new browser profile, and
> > leaving it at its default settings ... I will have to examine my
> > browser
profile settings in rigorous detail :o/
>
> Some info before you waste too much time on this:
> When I switch noscript on and off, I also delete the cookies related to the
> specific Tiki website, since Tiki does some JS capability detection and then
> it remembers it.

Indeed, deleting all tiki cookies seems to be the solution.

Thank you very much Jyhem :o)

I think this thread can die now :o)

Cheers, Johnny :o)

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
___
TikiWiki-devel mailing list
TikiWiki-devel at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel


Why Register?

Register at tiki.org and you'll be able to use the account at any *.tiki.org site, thanks to the InterTiki feature. A valid email address is required to receive site notifications and occasional newsletters. You can opt out of these items at any time.