- Koha-devel - lists.koha-community.org

POLL : Kohacon11 volunteers followup meeting dates
by Koustubha Kale 09 Jul '11

09 Jul '11

In the last Kohacon11 volunteers meeting on 29th June 2011, we asked people to drive participation, paper submission and review of papers during the next Koha general IRC meeting on 6th July. We decided to hold a followup meeting of Kohacon11 volunteers one week thereafter to review what was discussed during the general meeting. So I am proposing a few dates and times here please make your choice. http://www.doodle.com/bqg2wkifrkvu6gk2 Regards, Koustubha Kale Anant Corporation Contact Details : Address : 103, Armaan Residency, R. W Sawant Road, Nr. Golden Dyes Naka, Thane (w), Maharashtra, India, Pin : 400601. TeleFax : +91-22-21720108, +91-22-21720109 Mobile : +919820715876 Website : http://www.anantcorp.com Blog : http://www.anantcorp.com/blog/?author=2

2 1

GBSD#2 - activity report: wiki & RFC
by Paul Poulain 08 Jul '11

08 Jul '11

Hi all, During this GBSD#2, i haven't done anything on bugzilla. BUT I made a lot of cleaning on the wiki, in the RFC section. Here is a summary of what I did : * added a Submitted_RFC and Implemented_RFC category, sub-category of RFCs * checked the 82 RFC, and moved to Submitted or Implemented or Abandoned those who are no more a RFC (iirc, just 1 has been moved to "Abandoned"). Now, there are 58 RFCs still open. * Updated some RFCs to fit the RFC template. Some are still not using the RFC template, I couldn't finish the cleaning * Updated some categories in some pages to have something more consistent (for example : Serials category was a sub-category of Acquisition, which is wrong. 2nd example: removed the 2.x category) * moved some RFCs to "version 3.4" when applicable. I also removed "expected for 3.4" for RFCs that could not make their way for 3.4. Note that I choose "minor change" for most of those changes, so you should not be overwhelmed by the wiki on your RSS feed. Claire and François, from BibLibre, worked on all what has been signed and is underway at BibLibre. We should submit or update RFCs in the next weeks. You'll see, that's a *lot* of things. Including : * many acquisition improvements (a lot of them already described as RFC, search St Etienne university sponsoring) * many serials improvements * move to solR * kss (a tool to manage a bus being a moving library: the librarian has a laptop with Koha installed, and kss does the synch between the main server and the bus. synch'ing all check-in, check-out, holds, patron management) I'll continue in 2 weeks. Now, i'm OFF for one week of vacation ! See you all on july, 18th PS: next community work for all BibLibre staff : july 22th (reminder: we dedicate half a day every two weeks). This 1st half day was less productive than the next one will be, as we took time to organize a little. -- Paul POULAIN http://www.biblibre.com Expert en Logiciels Libres pour l'info-doc Tel : (33) 4 91 81 35 08

1 0

Re: [Koha-devel] Koha 3.4.02: Date::ICal and SMS::Send Perl modules issue on openSUSE 11.4
by Andi Sugandi 08 Jul '11

08 Jul '11

Hi, On Wed, Jul 6, 2011 at 3:21 PM, Andi Sugandi <andisugandi(a)gmail.com> wrote: > Koha installer *did not see* two Perl modules: the Date::ICal[1] (on > koha's web installer) and SMS::Send[2] (after installed) though those > were already installed from rpm package[3]. I also install SMS::Send Perl module via cpan but unfortunately Koha still does not see it[5] too. [5] https://picasaweb.google.com/lh/photo/y3_qGSkXtxu4FryOXWWPQA?feat=directlink Koha bugs? *I send (cc) this e-mail to koha-devel too, hopefully can get faster feedback.* Best regards, -- Andi Sugandi. openSUSE-id Team, openSUSE Community Member. https://connect.opensuse.org/pg/profile/andisugandi

2 9

Preparing GBSD (friday)
by Paul Poulain 08 Jul '11

08 Jul '11

Hello world, I’m preparing Friday Global Bug Squashing Day, and want to share a bugzilla query with you. I've added a "Patches for GBSD" query that display, Koha module by Koha module, all patches needing a sign-off, failed QA or does not apply. To see it : bugs.koha-community.org > Preferences > saved searches > click "patches for GBSD" I think it's useful to organise the GBSD = it's better to work module by module. At least, at BibLibre, developers will be 2 for a module, working on all kind of patches. Of course, everybody will be on IRC, so the group of 2 can become a group of 3 ;-) -- Paul POULAIN http://www.biblibre.com Expert en Logiciels Libres pour l'info-doc Tel : (33) 4 91 81 35 08

2 4

security question about injection in Zebra
by Frère Sébastien Marie 08 Jul '11

08 Jul '11

Hi, Seeing the patch proposed by Marcel de Rooy for bug 6536, a question arrived in my mind about injection of code in Zebra. Does someone is aware about something like that ? Next an extract of patch (and after my comments): On Thu, Jun 30, 2011 at 01:01:01PM +0000, Marcel de Rooy wrote: > Z3950 Enhancements: SRU search targets, MARC conversion and additional XSLT processing > > diff --git a/C4/Breeding.pm b/C4/Breeding.pm > index 9003f9a..cb04e14 100644 > --- a/C4/Breeding.pm > +++ b/C4/Breeding.pm [...] > +sub build_query { > + my $nterms=0; > + my $title = $input->param('title')||''; > + my $author = $input->param('author')||''; > + my $isbn = $input->param('isbn')||''; > + my $lccall = $input->param('lccall')||''; > + my $subject = $input->param('subject')||''; > + my $dewey = $input->param('dewey')||''; > + my $controlnumber = $input->param('controlnumber')||''; > + my $stdid = $input->param('stdid')||''; > + my $srchany = $input->param('srchany')||''; > + > + if ($isbn) { > + $zquery = "\@or \@attr 1=8 \"$isbn\" \@attr 1=7 \"$isbn\" "; > + $squery = "([isbn]=\"$isbn\" or [issn]=\"$isbn\") and "; > + $nterms++; > + } > + if ($title) { > + utf8::decode($title); > + $zquery .= "\@attr 1=4 \"$title\" "; > + $squery .= "[title]=\"$title\" and "; > + $nterms++; > + } [...] First, some notes about code: - alls variables seems to come from userdata (input query), so are user controlled. - if one contains a double-quote escape in done (and could result invalid query) About zebra possible exploits (untested): - yaz-client (Z39.50 client) permit bang pattern for shell invocation, does the library too ? - does zebra permit anonymous index write ? (resulting index corruption, possible affection of koha for places where data are read from zebra, and use 'as-it') - or connection to another server ? (could expose local network area) - ... If someone have other ideas... If zebra library permit use of placeholders, we should use them. Else perhaps develop a small function for variable escapment before inclusion in zebra query. Thanks. -- Frère Sébastien Marie Abbaye Notre Dame de La Trappe 61380 Soligny-la-Trappe Tél: 02.33.84.17.00 Fax: 02.33.34.98.57 Web: http://www.latrappe.fr/

3 2

Bug in the wiki (galen ?) / playing with RFCs
by Paul Poulain 08 Jul '11

08 Jul '11

Hello all, For the GBSD#2, I'm working on the wiki, to clean RFCs. At the moment, the page : http://wiki.koha-community.org/wiki/Category:RFCs display 82 entries. many of them are related to features now included in Koha, some of them are related to features submitted and waiting for inclusion, some of them are related to features still to develop (sponsored or not) That's why i've created 2 sub-categories: * Implemented_RFC => this is no more a RFC, this is a feature in Koha * Submitted_RFC => this is no more a RFC, this is a feature submitted to the dev team, that is waiting for sign-off/QA/... What I wanted to do was to REMOVE the category RFC to all Implemented_RFC and Submitted_RFC, to have, in the RFC page, just what is really a RFC. And, of course add the Implemented or Submitted sub-category. I can't remove the RFCs category, and magnus tells me it's a bug, and that "we should all go sit on gmcharlt until he at least disables the plugin that is messing with the categories ;-) " So, galen, could you do something for this ? Once it's done, I will be able to remove "RFCs" category for pages that are no more a RFC. That will make the RFC page much more useful, it will display only RFCs ! -- Paul POULAIN http://www.biblibre.com Expert en Logiciels Libres pour l'info-doc Tel : (33) 4 91 81 35 08

1 1

Problem installing Koha on Centos 5.6
by Edisnel C. C. 08 Jul '11

08 Jul '11

Hi, I have a problem with the installation, the log archive contain this: [Fri Jul 01 10:54:54 2011] [error] [client 10.x.x.x] [Fri Jul 1 10:54:54 2011] LibXSLT.pm: Warning: XML::LibXSLT compiled against libxslt 10118, but runtime libxslt is older 10117, referer.... we have tried to install the perl-XML-libxslt-1.70 ... but has dependencies on libxslt, libxml and others, we try to compile but without good results, they also have other dependencies. I have to use(mandatory?) version 1.70 of XML-LibXSLT in Koha 3.0.6, or I can use a previous version? Waiting for your help, thanks ------- "¿Quieres subir? Comienza por descender. Planeas una torre que atravesará las nubes? Coloca primero el fundamento de la humildad." ~ San Agustín ----- Mensaje original ----- De: "Tomas Cohen Arazi" <tomascohen(a)gmail.com> Para: "Edisnel Carrazana Castro" <ecarrazana(a)uci.cu> CC: koha-devel(a)lists.koha-community.org Enviados: Jueves, 3 de Febrero 2011 12:17:55 (GMT-0500) Auto-Detected Asunto: Re: [Koha-devel] Save user visits in Opac On Thu, Feb 3, 2011 at 1:48 PM, Edisnel Carrazana Castro <ecarrazana(a)uci.cu> wrote: > > I want to register in a table the user visits to the site after logged in. In wich place of the source code of Koha can I do that? > > I push the function to insert the visit in a page [in opac-user.pl] , but several insertions occur > whenever this page is accessed. What can I do? If I was you, I would rather enable the apache's access log and process it from the outside with some specialized tool like awstats. That way you can be sure you count several visits as different ones and such. If you want to do it visit-then-insert-into-table, the I would create a page (the language you prefer) and call it from a javascript function in 'opacuserjs' configuration variable. You can even use Google Analytics the same way. To+

2 1

Problem with XML::LibXSLT
by Adnier Rosello Carrazana 07 Jul '11

07 Jul '11

my greetings, I have this problem in my koha 3.0.6 over centOS 5.6, this is the koha log: Warning: XML::LibXSLT compiled against libxslt 10118, but runtime libxslt is older 10117, any suggestion?

2 1

IP for es.koha-community.org
by Tomas Cohen Arazi 05 Jul '11

05 Jul '11

Hi there, we are setting our spanish-speaking community server to go online soon. We need the FQDN es.koha-community.org to point to IP 200.16.16.170. Regards To+

2 2

KohaCon11 - Programme Ideas wanted
by Joann Ransom 04 Jul '11

04 Jul '11

Hi all, We are calling for help for KohaCon11. Occurs to some of us that people might not realise that what they 'do' might be interesting to the rest of us. So, to that end, we are inviting people to submit ideas of presentatins they'd like to see at KohaCon11 in the hope that the rest of you clever people will think "I can talk about that" and step forward and submit abstracts for presentations. The full post can be found here: http://koha-community.org/kohacon11-programme-ideas-wanted/ Cheers Jo. -- Joann Ransom RLIANZA Head of Libraries, Horowhenua Library Trust.

2 1