January 2010 - Koha-bugs - lists.koha-community.org

[Bug 4042] New: Public OPAC search can fall prey to web crawlers
by bugzilla-daemon＠kohaorg.ec2.liblime.com 15 Jan '10

15 Jan '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4042 Summary: Public OPAC search can fall prey to web crawlers Product: Koha Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: OPAC AssignedTo: jmf(a)liblime.com ReportedBy: rick(a)praxis.com.au Estimated Hours: 0.0 Change sponsored?: --- The OPAC search and OPAC advanced searches are accessible by the public from the Koha OPAC home page. Consequently, an over zealous web crawler indexing the site using the opac-search.pl script can impact the performance of the Koha system. In the extreme, an under- resourced system can experience a DoS when the number of searches exceeds the capacity of the system. Proposed Solution: modify the opac-search.pl script in the following manner: (A) Only allow queries using the POST method; otherwise if GET is used return a simple page with "No search result found". (B) Exception: do allow GET queries but only if the HTTP_REFERER matches the SERVER_NAME. This allows all the searches to work via web site links. (C) Make this behavior optional by adding a new flag to the system prefs. Here is the small code segment added to opac-search.pl, immediately after the BEGIN block: if ($ENV{HTTP_REFERER} !~ /$ENV{SERVER_NAME}/ && $ENV{REQUEST_METHOD} ne "POST") { print "Content-type: text/html\n\n"; print "<h1>Search Results</h1>Nothing found.\n"; exit; } CAVEAT: This solution does not allow one to paste an "opac_search.pl" link into the browser and have it work as previously expected. But this was the cause of the problem in the first place. A better solution is to require a user to login to the OPAC before allowing a search. Addendum: also install a robots.txt file at the following location in the Koha source tree to stop web crawlers from using the OPAC search. opac/htdocs/robots.txt The robots.txt file should contain the following contents, which deny all access to indexing engines. You can learn more about robots.txt on the web, and configure it to allow some indexing if you wish. ----------------------------- User-agent: * Disallow: / ----------------------------- -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 10

[Bug 4046] New: Misc SQL Syntax Errors
by bugzilla-daemon＠kohaorg.ec2.liblime.com 15 Jan '10

15 Jan '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4046 Summary: Misc SQL Syntax Errors Product: Koha Version: HEAD Platform: All OS/Version: All Status: ASSIGNED Severity: blocker Priority: PATCH-Sent Component: Installation (web-based installer) AssignedTo: cnighswonger(a)foundations.edu ReportedBy: cnighswonger(a)foundations.edu Estimated Hours: 0.0 Change sponsored?: --- There are several ALTER TABLE sytnax errors in the updatedatabase.pl file causing some tables not to update properly. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 2

[Bug 4044] New: subscription without stardate
by bugzilla-daemon＠kohaorg.ec2.liblime.com 14 Jan '10

14 Jan '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4044 Summary: subscription without stardate Product: Koha Version: unspecified Platform: PC OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Serials AssignedTo: nahuel.angelinetti(a)biblibre.com ReportedBy: nahuel.angelinetti(a)biblibre.com Estimated Hours: 0.0 Change sponsored?: --- If a subscription doesn't have a start date, scripts will go to fatal error. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 1

[Bug 4041] New: Address Format as a I18N/L10N system preference
by bugzilla-daemon＠kohaorg.ec2.liblime.com 13 Jan '10

13 Jan '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4041 Summary: Address Format as a I18N/L10N system preference Product: Koha Version: HEAD Platform: PC OS/Version: All Status: NEW Severity: minor Priority: P5 Component: System Administration AssignedTo: paul.poulain(a)biblibre.com ReportedBy: nengard(a)gmail.com CC: oleonard(a)myacpl.org Estimated Hours: 0.0 Change sponsored?: --- In America addresses go 'street number' 'street name' 'street type' -- in France it goes 'street number' 'street type' 'street name' -- in Spain it goes 'street type' 'street name' 'street number'. This is coming across as a display problem on the patron records. So I'm wondering if there is a way that we can set up the templates to display the address in the way that the librarian chooses. Right now there are a few bugs related to the fact that the street number and/order street type doesn't even display - when I went to fix them I realize (with Owen's help) that I might be causing some internationalization issues. There are only 6 ( factorial(3) ) possibilities. A drop-down menu on system preferences? (I18N/L10N?) This is both a bug and an enhancement request I guess - so I don't know how to categorize it. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 2

[Bug 3056] Search term highlighting fails broken by 'span' and 'class'
by bugzilla-daemon＠kohaorg.ec2.liblime.com 12 Jan '10

12 Jan '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3056 Owen Leonard <oleonard(a)myacpl.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |oleonard(a)myacpl.org Status|ASSIGNED |RESOLVED Resolution| |FIXED -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 4038] New: borrowers reports and birth date
by bugzilla-daemon＠kohaorg.ec2.liblime.com 12 Jan '10

12 Jan '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4038 Summary: borrowers reports and birth date Product: Koha Version: unspecified Platform: PC OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Reports AssignedTo: nahuel.angelinetti(a)biblibre.com ReportedBy: nahuel.angelinetti(a)biblibre.com Estimated Hours: 0.0 Change sponsored?: --- The birth date filter only work with ISO dates, it must work for all date types. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 1

[Bug 4034] New: Checking out an item on hold for that patron (but not waiting) results in incorrect message
by bugzilla-daemon＠kohaorg.ec2.liblime.com 11 Jan '10

11 Jan '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4034 Summary: Checking out an item on hold for that patron (but not waiting) results in incorrect message Product: Koha Version: HEAD Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Circulation AssignedTo: gmcharlt(a)gmail.com ReportedBy: oleonard(a)myacpl.org Estimated Hours: 0.0 Change sponsored?: --- Steps to reproduce: - Item is on hold for a patron, but item has not been made waiting - Check the item out to that patron An message will appear: "Please Confirm Checkout * Item is on reserve for [this patron]" The message implies that you're checking out something that is on hold for a *different* patron. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 1909] Cannot delete repeatable marc fields in editor.
by bugzilla-daemon＠kohaorg.ec2.liblime.com 08 Jan '10

08 Jan '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=1909 José Miguel Parrella Romero <joseparrella(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #15 from José Miguel Parrella Romero <joseparrella(a)gmail.com> 2010-01-08 18:47:52 --- This is working OK on latest Koha 3.0 releases. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 2534] Table truncated
by bugzilla-daemon＠kohaorg.ec2.liblime.com 07 Jan '10

07 Jan '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=2534 --- Comment #9 from Owen Leonard <oleonard(a)myacpl.org> 2010-01-07 16:12:10 --- Created an attachment (id=1463) --> (http://bugs.koha.org/cgi-bin/bugzilla3/attachment.cgi?id=1463) Screenshot showing inline edit/delete menu Clicking anywhere in a table row will bring up the edit/delete links. This means that even if you scrolled the table all the way to the right you can still access the edit/delete function without having to scroll all the way back. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 2534] Table truncated
by bugzilla-daemon＠kohaorg.ec2.liblime.com 07 Jan '10

07 Jan '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=2534 --- Comment #8 from Owen Leonard <oleonard(a)myacpl.org> 2010-01-07 16:10:35 --- Created an attachment (id=1462) --> (http://bugs.koha.org/cgi-bin/bugzilla3/attachment.cgi?id=1462) Proposed change This patch implements the inline add/edit screen as described in my blog post linked above. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0