Transition Technology: Ticket Query

#655: Add social media icons with counters to blogs listings views

ed — Thu, 12 Dec 2013 13:03:11 GMT

Investigate with Rob how to add Social media icons with counters into the /blogs listings views and individual node views.

I suggest starting with just Rob's blogs (/rob-hopkins), separate context for 'Transition Culture section' and then roll it out over other blogs and maybe news content type once the /rob-hopkins has been trialled

Sam to talk with Rob

Also cc-ing Ben as design - theme guy

#645: APC Tuning on Parrot and Penguin

chris — Tue, 10 Dec 2013 10:52:31 GMT

As part of the upgrade from Squeeze to Wheezy, see ticket:535, Munin graphs for APC were added:

There is also more APC info here:

The documentation for the variables which can be set in /etc/php5/mods-available/apc.ini can be found here:

http://php.net/manual/en/apc.configuration.php

This monitoring is generating quite a high volume of warnings about fragmentation and purges and this ticket has been created to try to sort this issue out.

#676: Alternative to Skype for TTech Meetings

chris — Tue, 14 Jan 2014 13:33:51 GMT

Jim has pointed out that:

Skype costs us 15-30 minutes of grinding pain every time we do this!

So what are the alternatives and what are our requirements?

#814: Higher that usual loads on PuffinServer since early September

chris — Wed, 03 Dec 2014 17:12:35 GMT

The following load graph from PuffinServer shows that the load increased substantially in early September 2014, does anyone know why?

When I found I went to Drupal 7.33 and all I got was a slow site I thought that perhaps a Drupal 7 site on the server could be the cause but 7.33 came out on 7th November 2014.

Anyone have any ideas?

#881: Site on ParrotServer with a memory leak?

chris — Fri, 23 Oct 2015 11:19:04 GMT

It appears a site, or application, on ParrotServer might have a memory leak.

#898: Fwd: Access to Drupal

ade — Tue, 26 Jan 2016 17:35:05 GMT

Hi Chris,
The web team at the development agency are requesting access to the
webserver so that they can look at the sites make up.
(Please see below)
Would you please set up an account so that they can get root read access?
I guess this would be done via FTP, but your thoughts greatly appreciated.
best regards
Ade
---------- Forwarded message ----------
From: Ainslie Beattie <ainsliebeattie@transitionnetwork.org>
Date: 26 January 2016 at 17:25
Subject: Fwd: Access to Drupal
To: Sam Rossiter <samrossiter@transitionnetwork.org>, Ade Stuart <
adestuart@transitionnetwork.org>, Yvonne Struthers <yvonne@thisisyoke.com>
Hey both, can you please action this urgently so that Yoke can have access.
Cheers
---------- Forwarded message ----------
From: "Yvonne Struthers" <yvonne@thisisyoke.com>
Date: 26 Jan 2016 10:58
Subject: Access to Drupal
To: <ainsliebeattie@transitionnetwork.org>
Cc:
Hi Ainslie,
Just a quick email as I'm out seeing a client today,but just to say,it
looks like you have only given us access to the database. What we need
please is admin access to the Drupal site and to the code base so that we
can get a sense of how it's all set up.
Thanks in advance!
Yvonne
Sent from my iPhone
--
Ade Stuart
Web Manager - Transition network
07595 331877
The Transition Network is a registered charity
address: 43 Fore St, Totnes, Devon, TQ9 5HN, UK
website: www.transitionnetwork.org
TN company no: 6135675 TN charity no: 1128675

#582: TN.org platform and sites

jim — Mon, 02 Sep 2013 09:30:02 GMT

The TN.org platform and Drupal site updates are to be tracked in this ticket.

Current PROD platform build = P009 Current STG platform build = S010

Updates pending:

SECURITY UPDATE - NO RISK: Pressflow core 6.30 is due, but the security holes fixed do not affect us, low priority. Platforms: present in S010, but not in P009.

#636: Changes to Space.transitionnetwork.org homepage to facilitate user registration

ed — Wed, 27 Nov 2013 17:30:19 GMT

Space currently does not give users who aren't already registered a way in. Anon users can see some of the spaces but when they try to apply for membership, they hit a login page, which they can't complete as they are not registered.

RTFM for OA as to OA best practice - this is billable time. Then leave notes about it in wiki for later developers.

The homepage needs editing to sort this out. Here are some first changes:

2.1. Remove the 'Need the pros' pane (RHS) 2.2 Remove the 'Just getting started' pane (LHS) 2.3 Add a 'Request membership' pane which is basically a user registration form. Make registration 'approval only' for now, approval to be by a site admin (webproject@…)

The /spaces listings view shows the spaces that are publicly viewable, and there is a 'request group membership' button for each of them.

Can you make this into a registration form as well?

#662: Subscriptions' links in text emails breaking

ed — Tue, 17 Dec 2013 15:37:13 GMT

for January - to get Sam and Jim talking - in January

The subs sent out to subscribers: are fine in html but the text version is broken and unsatisfactory. I know we've been through this and it's a known bug etc. etc. but I'm wondering if we can switch all subs to html, or if there are any patches to this problem?

Adding as Jim's ticket with Sam cc-ed

#737: SPF / Emails rejected from the website contact form

sam — Thu, 05 Jun 2014 15:46:13 GMT

We had a user report that they could not send a message via our contact form:

"Yesterday I sent a message to you via the contact form on the website. But obviously something went wrong: for I got a failure notice saying my message could not be delivered. Therefore I'm sending it directly via email (see below) hoping that you're receiving my message this way."

<info@…>: host mx1.spamfiltering.com[72.249.150.158] said:

550 81.95.XX.XX is not allowed to send mail from gmx.de. Please see http://www.openspf.net/Why?scope=mfrom;identity=userXX@gmx.de;ip=81.95.XX.XX (in reply to end of DATA command)

(User details edited as this is publicly archived)

I'm not sure I quite understand what's going on here. Chris indicated in email that this would affect other users whose email provider has set this kind of SPF record.

Can we make an educated guess as to what proportion of email providers set this kind of SPF?

How many messages do we never get to see? Is it a problem? Or a small enough number of users that we just don't worry about it?

Thanks

Sam

#772: new TIs not appearing on staging until caches flushed

annesley — Tue, 05 Aug 2014 09:26:32 GMT

i added a new Mulling transition initiative on staging in Afghanistan and it did not appear on the map... i flushed caches and then it started appearing on the main initiatives map. is this intended? is it a known?

#701: Emails & Telephone calls

paul — Tue, 18 Mar 2014 09:38:24 GMT

#711: Emails & Telephone calls

paul — Tue, 01 Apr 2014 13:47:56 GMT

#727: Change background on block from orange to white

sam — Fri, 16 May 2014 10:02:17 GMT

Hi Ben

Rob wants a list of the themes presented in a block.

I did the block: https://www.transitionnetwork.org/admin/build/block/configure/block/97

But it appears with an orange background. The block is visible towards the bottom of the page (for logged in admins) here: https://www.transitionnetwork.org/blogs/rob-hopkins

If I put the block on other pages it appears with a white background.

I tried to hack it with some inline CSS but failed.

Could you take a look?

Thanks

Sam

#758: * Advisory ID: DRUPAL-SA-CORE-2014-003

paul — Wed, 16 Jul 2014 21:55:29 GMT

View online: https://www.drupal.org/SA-CORE-2014-003

Advisory ID: DRUPAL-SA-CORE-2014-003
Project: Drupal core [1]
Version: 6.x, 7.x
Date: 2014-July-16
Security risk: Critical [2]
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

Multiple vulnerabilities were fixed in the supported Drupal core versions 6 and 7.

.... Denial of service with malicious HTTP Host header (Base system - Drupal 6 and 7 - Critical)

Drupal core's multisite feature dynamically determines which configuration file to use based on the HTTP Host header.

The HTTP Host header validation does not sufficiently check maliciously-crafted header values, thereby exposing a denial of service vulnerability.

.... Access bypass (File module - Drupal 7 - Critical)

The File module included in Drupal 7 core allows attaching files to pieces of content. The module doesn't sufficiently check permission to view the attached file when attaching a file that was previously uploaded. This could allow attackers to gain access to private files.

This vulnerability is mitigated by the fact that the attacker must have permission to create or edit content with a file field.

Note: The Drupal 6 FileField? [3] module is affected by a similar issue (see SA-CONTRIB-2014-071 - FileField? - Access bypass [4]) and requires an update to the current security release of Drupal 6 core in order for the fix released there to work correctly. However, Drupal 6 core itself is not directly affected.

.... Cross-site scripting (Form API option groups - Drupal 6 and 7 - Moderately critical)

A cross-site scripting vulnerability was found due to Drupal's form API failing to sanitize option group labels in select elements. This vulnerability affects Drupal 6 core directly, and likely affects Drupal 7 forms provided by contributed or custom modules.

This vulnerability is mitigated by the fact that it requires the "administer taxonomy" permission to exploit in Drupal 6 core, and there is no known exploit within Drupal 7 core itself.

.... Cross-site scripting (Ajax system - Drupal 7 - Moderately critical)

A reflected cross-site scripting vulnerability was found in certain forms containing a combination of an Ajax-enabled textfield (for example, an autocomplete field) and a file field.

This vulnerability is mitigated by the fact that an attacker can only trigger the attack in a limited set of circumstances, usually requiring custom or contributed modules.

/A CVE identifier [5] will be requested, and added upon issuance, in

accordance with Drupal Security Team processes./

Drupal core 6.x versions prior to 6.32.
Drupal core 7.x versions prior to 7.29.

Install the latest version:

If you use Drupal 6.x, upgrade to Drupal core 6.32. [6]
If you use Drupal 7.x, upgrade to Drupal core 7.29. [7]

Also see the Drupal core [8] project page.

The denial of service vulnerability using malicious HTTP Host headers was

reported by Régis Leroy [9].

The access bypass vulnerability in the File module was reported by Ivan

Ch [10].

The cross-site scripting vulnerability with Form API option groups was

reported by Károly Négyesi [11].

The cross-site scripting vulnerability in the Ajax system was reported by

mani22test [12].

The denial of service vulnerability using malicious HTTP Host headers was

fixed by Régis Leroy [13], and by Klaus Purer [14] of the Drupal Security Team.

The access bypass vulnerability in the File module was fixed by Nate Haug

[15] and Ivan Ch [16], and by Drupal Security Team members David Rothstein [17], Heine Deelstra [18] and David Snopek [19].

The cross-site scripting vulnerability with Form API option groups was

fixed by Greg Knaddison [20] of the Drupal Security Team.

The cross-site scripting vulnerability in the Ajax system was fixed by

Neil Drumm [21] of the Drupal Security Team.

The Drupal Security Team [22]

The Drupal security team can be reached at security at drupal.org or via the contact form at http://drupal.org/contact [23].

Learn more about the Drupal Security team and their policies [24], writing secure code for Drupal [25], and securing your site [26].

Follow the Drupal Security Team on Twitter at https://twitter.com/drupalsecurity [27]

_ Security-news mailing list Security-news@… Unsubscribe at https://lists.drupal.org/mailman/listinfo/security-news

#590: Drupal performance improvements

jim — Fri, 06 Sep 2013 10:27:27 GMT

This ticket is to track the work and changes done within the Drupal sphere in relation to performance enhancements done since #585.

More information is needed and will come when ticket:586 New Relic Monitoring for BOA is completed.

I also note that many of these cleanup operations will also help make the move to D7 smoother and better.

Summary of actions and status

TODO

O) Stop making so many URL aliases for non-relevant pages, clean up url_alias table -- 1/4-1/2 hour, medium reward, only risk is that some already broken links might break... Per chat with Ed, only these will be removed (plus releated tweaks to Pathauto settings):

3,579 entries where src = node/%/feed
1,856 entries where src = user/%/contact
= 5,435 or ~11% of entries in url_alias

L) Review slow query log, explain queries, tweak as necessary/flag poorly behaving modules. 2-4 hours, high reward, low risk... Keep looking at the slow query log and adjust Drupal or find patches as necessary. ALSO related Reduce your server's resource usage by moving MySQL temporary directory to tmpfs... Have opened ticket for this: #591 for Chris.

Done

A) Remove spam taxonomy entries ~~1/2 hour, Low risk, low reward -- See item 8 below. A simple delete from taxo term table where length > 50 is worth doing IMHO, and nothing I saw that would be clobbered is not spam.~~

B) Try a Taxonomy Cleanup: 3 hours, Medium risk, medium reward -- style module to try to merge terms with the same names and clean up the link tables back to nodes. Further, we can remove any taxonomies or relations to certain CTs that don't really add value.

D) Review Views caching ~~1 hour, low risk, high reward -- Utilise Views Content Cache this was done a while back but I think -- done (task 12) in comment 21.~~

F) Force blocks caches to cached appropriately (and be rendered/included only as needed) 1-2 hours, medium reward, low risk -- BOA packages the Block Cache Alter, which makes sure Drupal only renders blocks when needed. Potential small but nice boost quickly in whole site. -- per comment 22, block caching is disabled by other modules so this will have to go on hold for now.

H) Remove CustomError? module all together 1/2 hour, low risk, low reward -- We should take out the PHP code from the 403 section of CustomError? and put it into a simple page entry. See comment 6 below as this has happened for 404s (which need no PHP). We can then remove the CustomError? module all together, saving lots of sessions. I would go ahead and do this but since the 403 page has various displays depending on user type, I wanted to raise it here as it *may* have side effects. Or not...

I) Re-enable block caching. 2-6 hours, high risk, high reward -- Per comment 24, a module (probably Content Access) is stopping Drupal caching blocks, which for some of them means a fair amount of pointless overhead. We need to somehow get around this and get blocks cached if possible. R&D mainly, perhaps with some hacking/patching - but I'd stop short of doing this if so.

K) Add & enable Views Lite Pager on big views. ~~1 hour, low risk, low reward -- Using this module stops a heavy count query on views with pagers -- recommended for large sites.~~

M) Take control of Cron, and maximise time pages are cached for. .25h, high reward, low risk -- Cron is wiping the page cache, so we need to install https://drupal.org/project/elysia_cron so we can clear the page less often, and run other things when we want and the site is quieter. Now need per minute resolution set to get the best, see comment 33 and 34 for more...

N) Replace Admin Menu 1.x with 3.x -- will happen when #590 occurs, marking complete here -- ~~5 mins, high reward, low risk -- done when #582 happens, could be the cause of some load spikes as it occasionally goes made and does 2000-5000 queries~~~~

#596: Captions issue

benj — Mon, 16 Sep 2013 16:58:04 GMT

basically captions are appearing on body inline images and featured images on STG but not PROD and I can't see where the difference is...

The following code addition to the bottom of template.php should be (but isn't) adding the caption class to images such as the one at the top of this page:

https://www.transitionnetwork.org/blogs/ed-mitchell/2013-06/test-blog-test-caption-and-featured-image

Any reason you can think of why not? Or do you know of another easy way of adding the class caption to featured image fields? (I guess the module https://drupal.org/project/semantic_cck - but maybe overkill...)

Adds caption css class to featured images */

function transition2_imagecache_formatter_featured_image_default($element) {

Inside a view $element may contain NULL data. In that case, just return. if (empty($element#item fid?)) {

return ;

}

Extract the preset name from the formatter name. $presetname = substr($element#formatter, 0, strrpos($element#formatter, '_')); $style = 'linked'; $style = 'default';

$item = $element#item; $itemdata?alt? = isset($itemdata?alt?) ? $itemdata?alt? : ; $itemdata?title? = isset($itemdata?title?) ? $itemdata?title? : NULL;

$class = "imagecache imagecache-$presetname imagecache-$style imagecache-{$element#formatter} caption"; return theme('imagecache', $presetname, $itemfilepath?, $itemdata?alt?, $itemdata?title?, array('class' => $class));

}

#638: Question about notifications option for content creators

ed — Thu, 28 Nov 2013 12:32:57 GMT

Content creators (news, Rob's blog, social reporters) struggle with the notifications. the problem is that they forget to click the option to 'do not send notifications for this update' and then notifications are sent out. It is easy for us to think this is easy for them, but when you are bashing stuff out in a hurry, it's easy to forget this fiddly bit.

CAN WE set drupal to NOT send notifications out as standard for some of the content types?

And change it so that the content creators (news, Rob's blog, social reporters) choose to SEND notifications out instead (of NOT sending them) ?

#541: Documentation of the WordPress sites

chris — Wed, 01 May 2013 20:25:57 GMT

These pages have been created for the documentation of the wiki:WordPress sites running on wiki:PenguinServer:

So far they only have a listing on the plugins for each site.

Ideally they would document all the plugins, the theme and the steps that need to be taken to upgrade each site and also any other things that need documenting.

Laura is this something you might be able to help with? I'm happy doing some work on it but you know your way around these sites far better than anyone else.

#587: Puffin MySQL Tuning

chris — Thu, 05 Sep 2013 12:54:47 GMT

This ticket is to track the tuning we do to MySQL on PuffinServer.

See also previous comments on this issue:

#538: intransitionmovie.com checks and updates

chris — Tue, 30 Apr 2013 20:02:03 GMT

The http://www.intransitionmovie.com/ site has been migrated to wiki:ParrotServer, the DNS might not have yet updated for everybody.

Laura -- could you check that the site is working OK if you get a chance, especially the ecommerce elements?

There are some outstanding updates, WordPress is version 3.3.2 need updating to 3.5.1 and there are 12 plugins with updates available:

18 installed plugins:
 UA affiliates
 UA affiliates-woocommerce-light
 UA akismet
  A backupwordpress
 UI bad-behavior
 UA bwp-minify
  A contact-form-7
 UA event-o-matic
  A transposh-translation-filter-for-wordpress
 UA usernoise
  A woocommerce
 UA woocommerce-export-csv
  A woocommerce-currency-converter
 UA woocommerce-dynamic-pricing
  A woocommerce-delivery-notes
 UA woocommerce-shipping-table-rate
 UA wp-customer-reviews
 UI wp-super-cache
Legend: A = Active, I = Inactive, U = Update Available

I'm happy to do all these updates but I wouldn't know what exactly to check to see that the updates don't break anything -- would Laura be able to help with a quick check that updates haven't broken anything?

#648: Edit the contact form reply in January

ed — Thu, 12 Dec 2013 10:49:39 GMT

Ed has edited the contact form replies for webproject@… on the contact form for TN.org which will now reply to users saying this:

"Thank you for getting in touch. Please note that the website support is part time; and between mid-December 2013 and mid-January 2014 we are handing over the website support work as Ed goes on Paternity leave and Sam comes onboard, so please be patient - your replies are likely to take more time than usual. "

https://www.transitionnetwork.org/admin/build/contact

SAM - when you are ready - probably mid-Jan - you will want to edit this back to something more suitable like:

Thank you for getting in touch. Please note that the website support is part time, so while we will get back to you as soon as we can, that may be a few days

#649: Add commenting to /films/ content type in January

ed — Thu, 12 Dec 2013 10:53:16 GMT

seen here:

https://www.transitionnetwork.org/admin/content/node-type/films

https://www.transitionnetwork.org/films https://www.transitionnetwork.org/films/occupy-love

#650: Helping TN strategy consultation with online publishing

ed — Thu, 12 Dec 2013 11:00:08 GMT

Sarah will be working on the TN strategy and this is about the content and comms tactics therein. The guiding principle is to use TN.org as the most suitable place for this material and conversations, and social media and direct mailshots for marketing and communicating it (because Sarah/TN cannot manage multiple conversations in multiple locations atm).

This is work for Sam to do from January onwards

set up a landing page ".../TN-strategy-consultation" with its own RHS block with manual links to different documents and interviews

SAM this can be a normal page with anchor links etc.

Use of blogs
Rob's for outreach - it's got the momentum - for updates/alerts/subscriptions
Sarah's for continuity (and looking back at it) - using tag "fn-strategy-consultation"

other places for comms/engagement
Forums not good; too open to trolls and spam; better in blog comments
webinar? Possibly if suitable
FB, twitter, other marketing channels - for marketing only
online meeting with national hubs - quite possibly

Direct Mail shot to PPOCs
Sarah Let Sam know if this is happening; Sam you'll need to do an export of PPOCs (https://www.transitionnetwork.org/admin/reports/initiatives/primary-contacts), tidy and dump into mail chimp using the standard template

#651: Report for tools content type

ed — Thu, 12 Dec 2013 11:33:22 GMT

For January: set up a report for tools content type:

downloadable in .xls
tool title
URL (must be a hyperlink generated in .csv)
node reference

No tools report exists yet - but lots of others here: https://www.transitionnetwork.org/admin/reports

#652: Report for resource content type

ed — Thu, 12 Dec 2013 11:34:49 GMT

For January: set up a report for tools content type:

downloadable in .xls
resource title
URL (must be a hyperlink generated in .csv)
node reference

you will be able to work from this report: https://www.transitionnetwork.org/admin/reports/resources

#653: Report for ingredients content type

ed — Thu, 12 Dec 2013 11:36:53 GMT

For January: set up a report for ingredients content type:

downloadable in .xls
ingredient title
URL (must be a hyperlink generated in .csv)
node reference

No ingredients report exists yet - but lots of others here: https://www.transitionnetwork.org/admin/reports

#657: Homepage slideshow: can't order the images

ed — Mon, 16 Dec 2013 14:30:49 GMT

Big picture slideshow on TN homepage: Rob can't get it to go in the order he wants - please investigate:

It is this nodequeue: https://www.transitionnetwork.org/admin/content/nodequeue/9/view/8

Made up with these CTs: https://www.transitionnetwork.org/admin/content/node-type/slide

#667: Development handover process

ed — Wed, 08 Jan 2014 16:40:47 GMT

Work by the Ttech team to share Jim's knowledge and tasks around the team before he leaves in early February 2014. Please use this ticket to log your time spent on this.

#680: Mixed content: HTTP content on HTTPS version of site

chris — Mon, 20 Jan 2014 12:28:18 GMT

The front page of the site contains the following elements using HTTP when accessing the site using HTTPS:

  <div class="views-field-field-slide-image-fid">
                <span class="field-content"><img src="http://www.transitionnetwork.org/sites/www.transitionnetwork.org/files/imagecache/slideshow_660/images/slides/capture1.jpg" alt="" title="" width="700" height="306" class="imagecache imagecache-slideshow_660 imagecache-default imagecache-slideshow_660_default"/></span>
  </div>

  <div class="views-field-field-slide-destination-link-url">
                <span class="field-content"><a href="http://www.transitionnetwork.org/about" 0="a:0:{}" class="learn">Learn more about Transition Network »</a></span>
  </div>

  <div class="views-field-field-slide-image-fid">
                <span class="field-content"><img src="http://www.transitionnetwork.org/sites/www.transitionnetwork.org/files/imagecache/slideshow_660/images/slides/clay.jpg" alt="" title="" width="700" height="306" class="imagecache imagecache-slideshow_660 imagecache-default imagecache-slideshow_660_default"/></span>
  </div>

  <div class="views-field-field-slide-destination-link-url">
                <span class="field-content"><a href="http://www.transitionnetwork.org/blogs/rob-hopkins/2014-01/can-earth-building-scale-mainstream-1-clayworks-and-clay-plasters" 0="a:0:{}" class="learn">Read more here »</a></span>
  </div>

  <div class="views-field-field-slide-image-fid">
                <span class="field-content"><img src="http://www.transitionnetwork.org/sites/www.transitionnetwork.org/files/imagecache/slideshow_660/images/slides/frack3.jpg" alt="" title="" width="700" height="306" class="imagecache imagecache-slideshow_660 imagecache-default imagecache-slideshow_660_default"/></span>
  </div>

  <div class="views-field-field-slide-destination-link-url">
                <span class="field-content"><a href="http://www.transitionnetwork.org/blogs/rob-hopkins/2014-01/6-reasons-why-theres-no-community-fracking" 0="a:0:{}" class="learn">Read more here »</a></span>
  </div>

  <div class="views-field-field-slide-image-fid">
                <span class="field-content"><img src="http://www.transitionnetwork.org/sites/www.transitionnetwork.org/files/imagecache/slideshow_660/images/slides/pc1.jpg" alt="" title="" width="700" height="306" class="imagecache imagecache-slideshow_660 imagecache-default imagecache-slideshow_660_default"/></span>
  </div>

  <div class="views-field-field-featured-image-fid">
                <span class="field-content"><a href="/news/2013-12-17/november-and-december-round-what-s-happening-out-world-transition" class="imagecache imagecache-featured_image_thumb imagecache-linked imagecache-featured_image_thumb_linked"><img src="http://www.transitionnetwork.org/sites/www.transitionnetwork.org/files/imagecache/featured_image_thumb/chilesml.jpg" alt="Chile Transition Training" title="Chile Transition Training" width="150" height="101" class="imagecache imagecache-featured_image_thumb"/></a></span>
  </div>

Would it be possible to embed content from the site using URLS like /sites/www.transitionnetwork.org/files/imagecache/featured_image_thumb/chilesml.jpg rather than http://www.transitionnetwork.org/sites/www.transitionnetwork.org/files/imagecache/featured_image_thumb/chilesml.jpg ?

Changing these links would result in the mixed content warnings in browsers going away.

By default Firefox doesn't block HTTP content over HTTPS connections, however you can enable this by entering about:config in the URL bar are searching for mixed_content and then changing security.mixed_content.block_display_content to true if you want to see how the site looks when only secure content is loaded.

I have checked that the site does set the secure flag on the authentication cookie, so the mixed content shouldn't result in the authentication cookie being sent with unencrypted requests.

Further information:

https://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23

#698: intransitionmovie.com returns 405 on submit

sam — Thu, 06 Mar 2014 11:45:39 GMT

http://www.intransitionmovie.com/screenings/share-your-screening/

vid Atcheson (david@…) sent a message using the contact form at https://www.transitionnetwork.org/contact.

I couldn't find any contact info at http://www.intransitionmovie.com/, but am hoping you can help. When I visit http://www.intransitionmovie.com/screenings/share-your-screening/index.html and put in my email address and hit Enter, I get:

Hi I checked this and it returns a 405 error for me too.

http://www.intransitionmovie.com/screenings/share-your-screening/

405 Not Allowed nginx/1.4.4

Hoping this can be fixed so we can let you know about our screening on April 8 at the Hawaii State Capitol auditorium.

Aloha,

David Atcheson, Transition Oahu

I'll do some initial investigation

#699: Update Core & Plugins on transitionculture.org

sam — Mon, 10 Mar 2014 11:46:33 GMT

This site needs an update.

I'll do a database backup then update it.

#702: Attachments not being deleted from Trustees page

ed — Fri, 21 Mar 2014 17:11:14 GMT

I can't remove the attachments from the Trustees page: https://www.transitionnetwork.org/about/people/trustees

please investigate and sort if you can. We need to remove all the attachments apart from those in 2013.

#703: Image not scaling on project

ed — Wed, 26 Mar 2014 13:06:15 GMT

The REconomy logo is not scaling and being re-presented well on the project page: https://www.transitionnetwork.org/projects/reconomy

Is this a theme/design issue or a problem with image re-sizing?

What can we do about it?

#704: Image not scaling on project

ed — Wed, 26 Mar 2014 13:51:48 GMT

The REconomy logo is not scaling and being re-presented well on the project page: https://www.transitionnetwork.org/projects/reconomy

Is this a theme/design issue or a problem with image re-sizing?

What can we do about it?

#705: Create a contents page on TransitionCulture.org Wordpress site

ed — Wed, 26 Mar 2014 15:33:43 GMT

Create a contents page on TC.org to see a listing of all the blog posts. Mike suggests: "use category post list widget to pull in the titles and then use widgetise pages to add widget to a standard page.:

Sam to follow up. MAX time: 1 hour.

#708: Map not showing Indian initiative

sam — Thu, 27 Mar 2014 13:44:29 GMT

https://www.transitionnetwork.org/initiatives/heal-soil-csa-community-supported-agriculture Address is correct, but doesn’t appear. The person who put it there doesn’t appear on the people map either, so wondering what’s afoot.

#728: Re-patch location module

sam — Tue, 20 May 2014 12:53:16 GMT

Bugger just realised that I didn't finish the pull request into the main branch: https://trac.transitionnetwork.org/trac/ticket/681

So the location module patch is not on the live site.

I have now done the patch correctly I think: https://github.com/transitionnetwork/transitionnetwork.org-d6.profile/pull/2

Shall I additionally add the patch to the live site using Drush as I did before?

Thanks

Sam

#751: Email alert changes

ed — Tue, 01 Jul 2014 11:14:42 GMT

Change the email alert template for news items to include the term 'news item' so it is:

"New news item: [title]"

When users click on the subs links at the bottom of their email alerts, and they are not logged in they get the ‘access denied’ screen. This is not good. Please investigate

(a) can this be changed (with small time investment) (b) can we change the access denied blurb to include something human encouraging the user to login to continue the journey:

"We are sorry for the inconvenience, but if you are seeing this screen having followed a link, you will probably need to login to continue with your request" (NB if they are coming from an email link with their id in it, how do we keep that journey so they get to the destinateion they wanted?)

When user clicks on the general subs link at the bottom of an email alert (and is not logged in), they get a 403 forbidden page. Not good - pls investigage

#777: Comments to blog post only showing up when logged in

ed — Mon, 25 Aug 2014 09:18:39 GMT

Most of the comments to this blog post are only showing up when you are logged in: https://www.transitionnetwork.org/blogs/rob-hopkins/2014-07/fiona-ward-learning-celebrate-10000-failure#comment-17492

Logged in: 5 comments Not logged in: 1 comment

Handing this to Sam but happy for it to escalate. Presumably this issue won't be on this one post only - and it is important.

#693: Module security updates: February 2014

sam — Thu, 27 Feb 2014 16:18:04 GMT

Hi Paul

You'll see from this ticket; https://trac.transitionnetwork.org/trac/ticket/582

That the 6.29 > 6.30 core update patches bugs that don't affect us.

However some recent security updates for modules have been released recently; https://www.transitionnetwork.org/admin/reports/updates

Affected modules are;

ctools; https://drupal.org/node/2194547

filefield https://drupal.org/node/2194103

image resizer https://drupal.org/node/2194063

mimemail https://drupal.org/node/2205939

webform https://drupal.org/node/2194181

The ctools & webform ones look like ones we should get on top of soonish, the mimemail one looks like it could be a pain.

Are you up for testing the updates on your local box? We can then figure out how to roll them out to the live site.

Thanks

Sam

#755: Site administrator's file upload capacity: not responding to changes

ed — Tue, 08 Jul 2014 09:21:16 GMT

Rob Hopkins reached the limit for file uploads and could not upload any more images (not good for him as he writes posts with lots of pictures daily).

Sam raised the limit. This change in the limit does not seem to have affected Rob's situation - he still can't upload any images.

Looking at these settings: https://www.transitionnetwork.org/admin/settings/uploads

Rob should be able to upload more - he is a site editor and admin - but he can't.

Please investigate

#769: Locked myself out of puffin again

annesley — Mon, 04 Aug 2014 08:40:53 GMT

really sorry. locked my IP out of puffin again. please could you clear it?

#785: SA-CONTRIB-2014-086 - Custom BreadCrumbs - Cross Site Scripting (XSS)

paul — Thu, 11 Sep 2014 15:54:35 GMT

@Ed Would you check my choice of component; I was looking for maintenance? Should I assign this to me as I create the ticket?

View online: https://www.drupal.org/node/2336263

Advisory ID: DRUPAL-SA-CONTRIB-2014-086
Project: Custom Breadcrumbs [1] (third-party module)
Version: 6.x, 7.x
Date: 2014-September-10
Security risk: 16/25 ( Critical)

AC:None/A:User/CI:Some/II:Some/E:Theoretical/TD:All [2]

Vulnerability: Cross Site Scripting

Custom Breadcrumbs allows administrators to set up parametrized breadcrumb trails for different content types, views, panels, taxonomy vocabularies and terms, paths, and a simple API that allows contributed modules to enable custom breadcrumbs for module pages and theme templates.

User input is not properly sanitized in all use cases, opening a Cross Site Scripting (XSS) vulnerability.

The vulnerability is only present when the custom breadcrumb is configured with the special identifier so that some of the breadcrumb items are not links. Typical example is that the last breadcrumb element is showing the current page title but is not a link. The XSS vulnerability is not triggered if all items of the breadcrumb are links and special identifier is not used.

/A CVE identifier [3] will be requested, and added upon issuance, in

accordance with Drupal Security Team processes./

Custom Breadcrumbs 6.x-1.x versions prior to 6.x-1.6
Custom Breadcrumbs 6.x-2.x versions are NOT affected
Custom Breadcrumbs 7.x-2.x versions prior to 7.x-2.0-beta1

Drupal core is not affected. If you do not use the contributed Custom Breadcrumbs [4] module, there is nothing you need to do.

Install the latest version:

If you use the Custom Breadcrumbs module version 1.x for Drupal 6.x,

upgrade to Custom Breadcrumbs 6.x-1.6 [5].

If you use the Custom Breadcrumbs module version 2.x for Drupal 7.x,

upgrade to Custom Breadcrumbs 7.x-2.0-beta1 [6].

Also see the Custom Breadcrumbs [7] project page.

Markus Sipilä [8]

Markus Sipilä [9]
Colan Schwartz [10] the module maintainer

Greg Knaddison [11] of the Drupal Security Team

The Drupal security team can be reached at security at drupal.org or via the contact form at https://www.drupal.org/contact [12].

Learn more about the Drupal Security team and their policies [13], writing secure code for Drupal [14], and securing your site [15].

_ Security-news mailing list Security-news@… Unsubscribe at https://lists.drupal.org/mailman/listinfo/security-news

#786: GitHub Transition: Annesley needs permission to create repositories

annesley — Mon, 15 Sep 2014 07:17:03 GMT

is Paul the owner of Transition GitHub??

#831: Rob is having Image upload issues

ade — Tue, 17 Feb 2015 11:37:09 GMT

Hi Paul, Rob in Totnes is creating a blog post and is getting an error whilst trying to upload an image. Initially I thought it could have been a harddrive full issue, but we can see that we have drive room. Sam and I have had a quick look to see if anything obvious, but we are now stumbling a bit. We can replicate the issue by trying to upload an image to a blog post, but cannot see where to find an event log to see if any logs are being generated that may aid in a diagnosis. Could you have a look and let us know your thoughts please? Rob is currently waiting to post a blog so is quite urgent.

Many thanks Ade

#908: Please enable Google Analytics

sam — Thu, 10 Mar 2016 15:43:56 GMT

Hi all

The web project board has decided to move from Piwik to Google Analytics.

I realise this has significant privacy implications, these were discussed, but it was decided that the move would go ahead.

I have discussed with Ainslie adding an opt out in the form of a link to EFF's Privacy badger: https://www.eff.org/privacybadger This will be added to the cookie pop up bar in the new website.

Could we enable the Google Analytics module on the existing site so I can add in the tracking code.

Thanks

Sam

#487: robots.txt files for development sites

chris — Tue, 29 Jan 2013 13:24:35 GMT

All the sites other than www.transitionnetwork.org on wiki:PuffinServer should have a robots.txt file to exclude them from being crawled and indexed to prevent the development versions of sites being included in search results.

#548: All Admin functions broken on TN.org

ed — Tue, 14 May 2013 07:50:15 GMT

Admins, editors, social reporters cannot create content on TN.org. Choosing to create content leads to homepage. Can't do anything on the admin menu.

Emergency.

#553: Invalid response from server ERROR message

ed — Tue, 28 May 2013 15:13:43 GMT

Trying to add a user. Get error message: "Received an Invalid response from the server" then served a blank screen. Same with project profile:

https://www.transitionnetwork.org/admin/user/user/create https://www.transitionnetwork.org/node/add/project-profile

This has also happened for a user trying to add a project.

Ed can add an event and blog post, ingredient, panel page.

#560: Install drupal-based project management system onto our servers

ed — Tue, 11 Jun 2013 17:00:28 GMT

Please can you install a suitable project management drupal-based tool onto the suitable server? I am thinking of Open Atrium. It's for staff and partners to use for management stuff (ie not a ticketing system or mediawiki).

Open Atrium?

Can you let me know how long it would take to install to a point where I can manage it and get a pilot project up and running?

#562: Users being subscribed to widgets newsletter on registratoin

ed — Mon, 17 Jun 2013 15:11:22 GMT

Ed added new users to system via user-->add user. They are being automatically subscribed to the widget owners newsletter. Please investigate and stop this.

#568: TC blog: can't not send notifications

ed — Mon, 08 Jul 2013 10:20:16 GMT

I can't see how to do a node edit and *not* send a notification - here seen on the Transition Culture blog:

https://www.transitionnetwork.org/node/32863/edit

please advise - there's been some kerfuffle about the TC blog move so swift resolution much appreciated

#570: Notifications: not sending complete URL

ed — Tue, 09 Jul 2013 13:19:57 GMT

Notification for blog post does not include full URL.

URL in notification is:

http://www.transitionnetwork.org/blogs/rob-hopkins/2013-07/transition-th...

URL should be: http://www.transitionnetwork.org/blogs/rob-hopkins/2013-07/transition-thursdays-three-down-three-go

#571: Force HTTP for anonymous, HTTPS for logged in users

jim — Tue, 16 Jul 2013 11:59:54 GMT

To further reduce load and leverage the caching I've changed the Session 443 settings to force anon users to HTTP and logged in to HTTPS. The benefit of allowing a handful of users to choose is tiny compared the downsides of outages, 503s and higher load.

The "User state" setting on the config page is now " Redirect authenticated users to HTTPS and redirect anonymous users to HTTP (with the exception of login/registration pages).", was "Redirect authenticated users to HTTPS and redirect anonymous users on login/registration pages to HTTPS. Anonymous users visiting other pages may use HTTP or HTTPS."

I've also set user and site-wide contact forms, plus the mailchimp subs page force secure-only per the "Additional pages to make secure" setting.

We can see if this makes a difference, and this ticket is to track comments and see if it results in any improvement in performance/stability.

#578: Comments subscriptions: enable user alerts if a user has made a comment

ed — Mon, 12 Aug 2013 13:33:58 GMT

Can we set the email alerts to auto-subscribe users to comments threads that they have made comments on? ie I make a comment to blog post x, then I get email alerts of the new comments made to blog post x.

#581: Remove 'add to newsletter' option for site editors/admins

ed — Mon, 26 Aug 2013 13:24:17 GMT

Please remove the option for site editors/admins to 'add this to the newsletter' (which would send it to the newsletter nodequeue). Please also for now make the newsletter nodequeue non-active.

It's been confusing for staff members, and was for the simmplemail service really, so we're going to trial using a google doc for staff to add their stories to the newsletter instead.

#600: Numbers missing from Initiatives search page

ed — Mon, 30 Sep 2013 11:46:20 GMT

When users do a search on /initiatives we are missing a number which pertains to the results of the report:

It should say "XXX initiatives match your search criteria"

The XXX bit is missing

please check and resolve

#602: RSS problems

ed — Thu, 03 Oct 2013 09:14:43 GMT

Blogs feed not working:

https://www.transitionnetwork.org/blogs/feed/

Rob's blog not working:

https://www.transitionnetwork.org/blogs/feed/rob-hopkins

Getting complaints from users who are getting multiple copies of each blog post. Can't check this as the feed is down, but I've got 2 or 3 complaints in my inbox.

#605: Can we make the subscriptions management admin view re-order-able?

ed — Thu, 03 Oct 2013 13:35:17 GMT

I use this view when I need to find subscriptions for users who are receiving email alerts to old accounts: https://www.transitionnetwork.org/admin/messaging/subscriptions

I am finding that if a user changes their email address in their user account, it does not update that email address in the subscriptions settings, so they continue to receive alerts to their old address. So I go to this view, dig out the incorrect sub, and kill it.

Which is a PITA.

Can we make it possible to make the 'users' column clickable so I could re-order it alphabetically? That would be really cool.

#609: Videos not showing if added via video link

ed — Tue, 15 Oct 2013 08:33:43 GMT

e.g. of project profile: https://www.transitionnetwork.org/projects/new-forest-transition-school-community-energy-saving-project

none showing on video page: https://www.transitionnetwork.org/video

#610: Aegir database intensive (migrate, clone, restore) tasks hang for larger sites

jim — Tue, 15 Oct 2013 10:18:59 GMT

Large sites (TN.org and variants) will simply not complete their migrate, clone or restore tasks in Aegir.

However, smaller sites are fine, and all tasks work for them.

The process largely completes -- codebase installs, database is cloned, symlinks for sites aliases and files created... BUT the process never completes in Aegir, so the final steps of switching a site's served location never occurs.

Useful links/comments in this issue:

#614: Subscription option for Social Reporters CT

ed — Wed, 06 Nov 2013 16:49:49 GMT

We want a button on the Social Reporters section that enables users to easily subscribe to the Social Reporters' blog posts CT. Offers the option to all types of user:

Users may not be logged in
Users may not be registered

This is a bit like the sub button on Transition Culture section
I can't find it in TRAC but have this memory of enabling email-only subscriptions to not-registered-users from olden days - can you enlighten me about that? I'm not sure it's the answer - we probably want them to register so they can add comments - but this request has brought up that old function

#616: Initiatives map not showing on http

ed — Mon, 11 Nov 2013 09:56:14 GMT

Initiatives Map not showing on http

here error message: This web site needs a different Google Maps API key. A new key can be generated at http://code.google.com/apis/maps/documentation/javascript/v2/introduction.html#Obtaining_Key.

is this related to #615?

#617: Help adding text to account creation email

ed — Mon, 11 Nov 2013 17:16:37 GMT

I want to add a link to the email a user receives following their creation of an account.

this one: Subject: Account details for [user] at Transition Network

Can I do this myself? I've looked in subs, notifications, logintoboggan etc. and can't find the place

is it do-able?

#621: Check and speed up updates to homepage sections: TC and slideshow

ed — Mon, 18 Nov 2013 09:22:59 GMT

Two bits of the homepage are taking ages to update once Rob has made the changes and it's driving him spare. He's waiting up to 30 mins for them to update.

Please speed up the times that it takes the system to update these two parts of the homepage to *instant* if possible:

Slideshow on homepage (AKA: https://www.transitionnetwork.org/admin/build/views/edit/slideshows?destination=newhome#views-tab-panel_pane_1).

Latest Transition Culture Blog pane on Homepage (AKA https://www.transitionnetwork.org/admin/build/views/edit/tc_latest_blog?destination=newhome#views-tab-block_1)

#622: Maps not working on TN.org

ed — Mon, 18 Nov 2013 17:06:59 GMT

https://www.transitionnetwork.org/initiatives/map https://www.transitionnetwork.org/initiatives/exeter-nh-transition-town

please attend

#623: Question about revisions

ed — Mon, 18 Nov 2013 17:21:46 GMT

do we keep any revisions of content? we had this conversation years ago, it came up in a recent social reporters webinar, I can't see any evidence of revisions activity...

#624: Comment handling on pages: particularly Austerity one

ed — Tue, 19 Nov 2013 11:16:02 GMT

Rob is doing an austerity special over 8 days, with a different clip from an interview with NEF every day. I've set up a page here: /austerity-basics

Question:

I know we can handle comments on pages, and I know that I don't get notifications of them. Can we arrange comment notifications for a page - asap - so that commenters get updates?

If not, no problem. I heard about this plan *today* so am not expecting any massive tech leaps.

#627: Users: deleting their own accounts

ed — Wed, 20 Nov 2013 16:08:43 GMT

Can users delete their own accounts? I've looked at user settings and can't find any clues? Can you point me to a user account setting which would enable them to delete their own accounts (and their profiles by proxy)?

#628: Change space notifications email from IJK.co.uk to TN.org

ed — Thu, 21 Nov 2013 16:50:37 GMT

The space notifications are coming from "space.transitionnetwork.org" <jim@…>

can you make them from "space.transitionnetwork.org" and a suitable TN address?

Do I need to set up a suitable TN address? Perhaps

space@…?

Or is there a standard drupal system one in place already?

#658: Check caching on Social Reporters views

ed — Mon, 16 Dec 2013 14:59:38 GMT

The SRs are reporting very slow site updates - is this to do with not switching them over to the new views content caching? please check:

https://www.transitionnetwork.org/admin/build/views/edit/blogs?destination=stories#views-tab-panel_pane_2

https://www.transitionnetwork.org/admin/build/block/configure/views/blogs-block_1?destination=newhome

And elsewhere there may be SR latest views?

#659: Featured story on homepage not updating

ed — Mon, 16 Dec 2013 17:03:41 GMT

Rob cleared the nodequeue for the featured story on the homepage about three hours ago, removed all but one story. No change has been observed. Please investigate:

Nodequeue: https://www.transitionnetwork.org/admin/content/nodequeue/6/view/5

This view: https://www.transitionnetwork.org/admin/build/views/edit/featured_content?destination=newhome#views-tab-panel_pane_1

This is using content cache

#670: Roll back performance customisations and use stock BOA settings where possible

jim — Sat, 11 Jan 2014 20:51:30 GMT

Issue Given so much has changed since the initial issues on the server, I now strongly recommend reverting all settings changes that do not add features back to stock BOA settings after the next BOA release.

These would include all MySQL, PHP, FPM, Redis and other settings that have been for performance reasons, or to combat the situation where there was hardware/IO issues with the underlying server. I'm most interested in FPM and MySQL settings.

The next version of BOA will include some improvements we need (see 629: Upgrades to BOA which should handle load on our server with a lot of CPU cores. With this in place we'll be able to revert more easily to stock settings.

Rationale I'm not talking about rolling back changes that provide us with features or mission-critical capabilities, just the changes to the subsystems I list above for performance reasons.

It's my belief that these enhancements no longer match the needs of the server since the changes to filesystem and underlying hardware fixes have been completed. They also represent an ongoing risk around updates, future planning -- plus it's possible they might mean Puffin's web services need more memory than it otherwise would, costing TN more than it should need to spend on hardware.

Proposed solution

Await the next version of BOA, and setup the enhanced load settings per the documentation.
Revert all other changes to conf files for MySQL, PHP, FPM, Redis that do not add a feature or are not mission-critical.
Review /root/.barracuda.cnf and turn off any overrides and customisations we don't now need as a result of 2).
Run the BOA BOND.sh script to do the tuning of the server appropriate to the memory requirements. This will tune for the current levels on first pass.
Review Munin and site performance. If we need to make any tweaks then we can do a minimal set as required -- keeping an eye on memory usage.
Once a few days have gone by I would hope that the overall memory use will be lower, OR with more cached data. At this point we can either re-run the barracuda installer with the _RESERVED_RAM set to 1-4 Gb, or simply reduce the memory available to Puffin.
Repeat from 4, using BOND.sh to optimise for the new memory footprint.

Clearly, it's possible no memory savings can be made, or just 1Gb or so is sensible. Either way, rolling back the changes made for a system that has changed immensely is worth attempting to compare current (tweaked) performance to the stock system. Since current settings are all documented and can be backed up, we should be able to test this with no risk and the ability to roll back as needed.

Next steps

Chris and Ed to give their thoughts.
Ed to green-light before we proceed in too much detail or take any action.
Chris and Jim to establish the changes and outcomes.
Chris, Jim and whoever to do the new optimisation process.

#679: Filter Initiative by Country not working

sam — Fri, 17 Jan 2014 17:15:58 GMT

Filtering the initiatives by country is not working

https://www.transitionnetwork.org/initiatives?themes=All&community_type=All&status_value=All&country=at&field_title_search=

I had a play with the view on stg2.transitionnetwork.org but I couldn't get it working.

It should display only initiatives from the country selected in the filter. It is displaying initiatives from all countries & not respecting the filter.

This view is used a lot by international initiatives.

#683: Create Aegir account for Paul

sam — Wed, 22 Jan 2014 12:42:48 GMT

Hi Jim

It looks like i@… will be joining us to pick up some of your work.

Could you create an Aegir account for him please?

I was also wondering about the Transition Network Github repo, do we need to do anything to hand that over?

Thanks

Sam

#684: Adding Paul and Nick to Transition Network on github.org

chris — Thu, 23 Jan 2014 10:42:23 GMT

It looks like Ed and Jim are the only one with permissions to add members to Transition Network on GitHub as they are listed as owners and the rest of us are members.

Paul and Nick can you post you account names to this ticket so you can be added?

Jim could you make me and/or Ben owners as well so we can add people?

#565: Blogs breadcrumbs incorrect on listings views

ed — Tue, 25 Jun 2013 13:21:56 GMT

Blogs breadcrumbs are wrong at main all blogs view and one author's full list view: https://www.transitionnetwork.org/blog https://www.transitionnetwork.org/blogs/ed-mitchell

Jim can you sort this in under 15 minutes (which is what you have left)

#566: Profile photo does not work

ed — Wed, 26 Jun 2013 14:17:35 GMT

Using this user account: https://www.transitionnetwork.org/users/patricia-benson https://www.transitionnetwork.org/people/patricia-benson

I can't get the photo to sit correctly. I have already deleted her first user account as the first photo she put in was sideways - the system presented that the right size, but sideways. Then I couldn't get the system to forget the original photo so had to delete the account and start again. Now I've tried adding bigger, smaller pictures and they all come out far too big - the system is enlarging them up to wider than the space alloted.

Very odd. Too tired and busy to do this now - will revisit in July after holiday.

#575: User system is blocking everyone - needs fixing urgently

ed — Wed, 31 Jul 2013 14:39:11 GMT

Everyone who registers for the last two weeks is being blocked - check user list and see screengrab. Needs fixing promptly.

#579: Special email alert for Rob Hopkins blog posts on TN.org

ed — Mon, 12 Aug 2013 13:49:30 GMT

Can we create a specific email alert for new blog posts from Rob Hopkins' blog (/blogs/rob-hopkins)?
Can Ed do this?
See below:

Proposed new alert: ~

From: [Rob Hopkins at Transition Network <site@…>] Subject: New blog post from Rob Hopkins' Transition Culture To: [subscriber email] Reply to: [<site@…>]

Hello. I've written a new blog Transition Culture blog post

You can read it and leave comments here: [LINK]

[BLOG POST TITLE] [LINE BREAK - FULL CLEAR LINE] [BLOG POST TEASER] [LINE BREAK - FULL CLEAR LINE]

Best regards, Rob

-- [TN EMAIL SUBSCRIPTION AUTO-BLURB] This is an automatic message from Transition Network To manage your subscriptions, browse to http://www.transitionnetwork.org/user/285/notifications You can unsubscribe at http://www.transitionnetwork.org/notifications/unsubscribe/subscription/...

#585: TTech Meeting 5th September 2013

chris — Thu, 05 Sep 2013 07:47:16 GMT

This ticket has been created for the TTech Skype meeting due to take place today.

#601: TTech Meeting 3rd October 2013

chris — Thu, 03 Oct 2013 09:03:42 GMT

This is a ticket for notes and times for the online meeting held on 3rd October 2013.

The ticket for the last meeting is ticket:585

#611: Adding Trac Account for Alan

chris — Thu, 17 Oct 2013 12:55:21 GMT

Alan, the other sysadmin at Webarchitects is in a better position than me to help with some of the more complex sysadmin issues so I hope it's OK that I have added an account for him here following the wiki:TracUserAdmin notes.

He is looking at helping with these tickets:

ticket:599 Server time drift
ticket:555 Load spikes causing the TN site to be stopped for 15 min at a time
ticket:593 Migrating Puffin to a ZFS file server

I don't expect he will be recording much time, I hope that is OK, he already has sudo access to all the servers.

#615: Move to GMap 6.x-2.x-dev as and get clusterer to work

jim — Sun, 10 Nov 2013 18:14:51 GMT

This is largely done, but the only tasks left are:

Make a patch and add to our makefile so our custom markers appear ok.
Get the clusterer to work per the comments & issues in comment:1 below.

Per an email I got from Google:

As you may be aware, JavaScript? Maps API v2 was scheduled for shutdown on May 19, 2013. After listening to feedback from developers we decided to extend the deprecation timeline by six months, to November 19, 2013 to allow more time for migration to v3 of the API.

On November 19, 2013 we will deploy a JavaScript? wrapper that attempts to automagically turn remaining v2 maps into v3 maps. Though we expect this wrapper to work for most simple maps, we cannot guarantee that your maps will continue to function. We therefore highly recommend that you migrate to v3 before November 19. The good news is that Google Maps JavaScript? API v3 is more robust and feature rich than v2, and we’ve written a guide to assist the migration.

So this ticket is to do the update to the GMap module, testing and tweaking.

Critical as we only have until 19 November for this...

#654: TIs appearing in 'TIs by list' view without a number

ed — Thu, 12 Dec 2013 12:43:12 GMT

Some TIs are appearing in the 'Initiatives by number' view - but don't have numbers:

https://www.transitionnetwork.org/initiatives/by-number

for Sam to invesitage and solve or put to techs in January

#663: De-commission the PSE

ed — Wed, 18 Dec 2013 17:44:43 GMT

We are wrapping up the PSE to simplify our web traffic, codebase and support requirements before we move to TNv3.

Ed has informed all the PSE alpha triallists twice and asked them to remove their widgets. About half have. Others say they will. So we can remove the service any time from now on.

Ed has UNpublished the following pages:

/pse/create
/pse/about
/pse/faq

Jim - time to de-commission the service in a suitable way. Wrap this puppy up and turn it off. Please outline what you are going to do on this ticket and then do it.

Ed suggests this is work for January 2014.

Sam, Chris, fyi and any other changes needed?

#771: cannot access puffin over sftp again

annesley — Tue, 05 Aug 2014 09:24:10 GMT

not sure what happened this time. my connection to other servers is fine. i am using:

sftp://tn.ftp@puffin.transitionnetwork.org/static/transition-network-d6-32-s002-booker/

the password was accepted first time and i successfully navigated to /static

which worked until i tried to get to the transition-network-d6-32-s002-booker directory. now ssh fails also.

when i ssh in i get plenty of warnings and potential lock outs when i try various things. like trying to access /static.

#773: download copy of current TN D6 website

annesley — Wed, 06 Aug 2014 09:58:14 GMT

hi, am trying to get a copy of the current TN.org D6 database and filesystem down to my laptop to develop against. i had pulled from GIT, backed up from Backup&Migrate and got everything working but there are things missing.

so i want to do a file copy. i started a tar operation but the tar size went over 1.3GB and i stopped it because it shouldn't be that big. as always BOA has restricted use of the "du" command so i can't really tell why the tar was so big. and i can't "df" to see if it's a problem

should i let it continue? why is it so big?

#815: Security updates need to be applied for a couple of contributed modules:

paul — Tue, 16 Dec 2014 13:45:16 GMT

DBTNG Hierarchical Select

#207: Logwatch Issues

chris — Fri, 17 Dec 2010 14:19:50 GMT

This is a ticket to track items that show up in the logwatch emails to root and often just take a few mins of reading time and response.

Any issues that look like they might take longer than a few mins should have their own tickets opened.

#208: Dblog Issues

chris — Fri, 17 Dec 2010 14:53:29 GMT

"The dblog module monitors your website, capturing system events in a log to be reviewed by an authorized individual at a later time. The dblog log is simply a list of recorded events containing usage data, performance data, errors, warnings and operational information. It is vital to check the dblog report on a regular basis as it is often the only way to tell what is going on."

https://www.transitionnetwork.org/admin/reports/dblog

This is a ticket to be used to flag up issues that are not going to take up enough time that they justify their own ticket -- if an issue is raised in a comment on this ticket that does look like it's going to take some significant time then best start a new ticket for it.

#218: Debian upgrades and updates

chris — Thu, 06 Jan 2011 13:34:16 GMT

This is a ticket to track debian upgrades to the wiki:PuffinServer, wiki:PenguinServer and wiki:ParrotServer the time they take.

See:

These updates are generally done using the wiki:AptitudeUpdateScript and this records all the changes in the /root/Changelog and then the contents of the Changelog are pasted into the ticket to document the upgrade.

This ticket was was originally used for the ~~wiki:DevelopmentServer~~ and the ~~wiki:NewLiveServer~~.

#371: Piwik Hosting

chris — Mon, 05 Dec 2011 21:34:51 GMT

Another option to consider for Piwik would be be to use a instance on another server, and there happens to be one here that could be used:

https://stats.webarch.net/

Could this be considered?

#382: Measurement and tracking requirements for TN and PSE

ed — Tue, 13 Dec 2011 04:57:12 GMT

to list the measurement and tracking requirements for TN and PSE so that we can assess piwik vs google and decide which way to go.

#470: Penguin install and configuration

chris — Sat, 15 Dec 2012 16:05:16 GMT

penguin.webarch.net is a new 2GB RAM virtual server which will replace NewLiveServer and DevelopmentServer for running all non-Drupal sites and is due to go live in early 2013. Drupal sites from the old servers will be migrated to PuffinServer.

This ticket has been created for tracking time and tasks done during the install.

See https://tech.transitionnetwork.org/trac/wiki/PenguinServer and also the corresponding PuffinServer.

#483: Nginx 502 Bad Gateway Errors with BOA

chris — Mon, 28 Jan 2013 11:23:45 GMT

The Barracuda Octopus Aegir server on puffin.webarch.net is getting generating a lot of Nginx 502 Bad Gateway errors, see ticket:466#comment:31 and ticket:466#comment:38

The Nginx logs contain 58 502 errors:

cd /var/log/nginx
grep " 502 " * | wc -l
58

I expect the cause of these is Nginx asking PHP-FPM for a page and not getting one, an answer might be to either speed up PHP-FPM response time or adjust the Nginx settings so that it waits longs for a response from PHP-FPM.

There are several threads about this on http://groups.drupal.org/ but none of them have any useful suggestions (eg 1 2 3 4).

#494: Email account for TRAC

ed — Thu, 21 Feb 2013 10:16:37 GMT

Set up: 'trac@…' Password: going to Chris separately Secure SSL/TLS Settings Username: trac@… Password: Use the email account’s password. Incoming Server: mail.xssl.net IMAP: Port 993 POP3: Port 995 Outgoing Server: mail.xssl.net SMTP: Port 465 Authentication is required for IMAP, POP3, and SMTP.

#495: Replace Google Analytics with Piwki

ed — Thu, 21 Feb 2013 10:20:25 GMT

Unless we see any issue, turn GA off on 01/03/13. Use Piwik instead.

#499: MySQL backup dump error on puffin

chris — Tue, 26 Feb 2013 01:26:53 GMT

Warnings from /etc/backup.d/20.mysql :

Warning: mysqldump: Got error: 1142: "SELECT,LOCK TABL command denied to user 'root'@'localhost' for table 'cond_instances'" when using LOCK TABLES
Warning: Failed to dump mysql databases performance_schema

#502: patterns sub-domain for transitionresearchnetwork.org, was: Setting up specific pointer for URL

ed — Wed, 27 Feb 2013 07:10:03 GMT

Can we set this URL:
www.transitionresearchnetwork.org/research-guidelines
to point to this location:
https://cldstr.com/docs/configure-dns
While this URL:
www.transitionresearchnetwork.org/
Still points to the current location.
~~~~
Ed Mitchell: Transition Network Web manager
web: http://transitionnetwork.org
project blog: http://transitionnetwork.org/blogs/ed-mitchell
mobile: +44 (0)7807 141 828
office hours: Mon, Tues, Wed, Thurs
company no. 6135675  charity no. 1128675
Subscribe to Transition news: http://tinyurl.com/transitionregister
~~~~

Transition Technology: Ticket Query

#655: Add social media icons with counters to blogs listings views

#645: APC Tuning on Parrot and Penguin

#676: Alternative to Skype for TTech Meetings

#814: Higher that usual loads on PuffinServer since early September

#881: Site on ParrotServer with a memory leak?

#898: Fwd: Access to Drupal

#582: TN.org platform and sites

#636: Changes to Space.transitionnetwork.org homepage to facilitate user registration

#662: Subscriptions' links in text emails breaking

#737: SPF / Emails rejected from the website contact form

#772: new TIs not appearing on staging until caches flushed

#701: Emails & Telephone calls

#711: Emails & Telephone calls

#727: Change background on block from orange to white

#758: * Advisory ID: DRUPAL-SA-CORE-2014-003

#590: Drupal performance improvements

Summary of actions and status

TODO

Done

#596: Captions issue

#638: Question about notifications option for content creators

#541: Documentation of the WordPress sites

#587: Puffin MySQL Tuning

#538: intransitionmovie.com checks and updates

#648: Edit the contact form reply in January

#649: Add commenting to /films/ content type in January

#650: Helping TN strategy consultation with online publishing

#651: Report for tools content type

#652: Report for resource content type

#653: Report for ingredients content type

#657: Homepage slideshow: can't order the images

#667: Development handover process

#680: Mixed content: HTTP content on HTTPS version of site

#698: intransitionmovie.com returns 405 on submit

#699: Update Core & Plugins on transitionculture.org

#702: Attachments not being deleted from Trustees page

#703: Image not scaling on project

#704: Image not scaling on project

#705: Create a contents page on TransitionCulture.org Wordpress site

#708: Map not showing Indian initiative

#728: Re-patch location module

#751: Email alert changes

#777: Comments to blog post only showing up when logged in

#693: Module security updates: February 2014

#755: Site administrator's file upload capacity: not responding to changes

#769: Locked myself out of puffin again

#785: SA-CONTRIB-2014-086 - Custom BreadCrumbs - Cross Site Scripting (XSS)

#786: GitHub Transition: Annesley needs permission to create repositories

#831: Rob is having Image upload issues

#908: Please enable Google Analytics

#487: robots.txt files for development sites

#548: All Admin functions broken on TN.org

#553: Invalid response from server ERROR message

#560: Install drupal-based project management system onto our servers

#562: Users being subscribed to widgets newsletter on registratoin

#568: TC blog: can't *not* send notifications

#570: Notifications: not sending complete URL

#571: Force HTTP for anonymous, HTTPS for logged in users

#578: Comments subscriptions: enable user alerts if a user has made a comment

#581: Remove 'add to newsletter' option for site editors/admins

#600: Numbers missing from Initiatives search page

#602: RSS problems

#605: Can we make the subscriptions management admin view re-order-able?

#609: Videos not showing if added via video link

#610: Aegir database intensive (migrate, clone, restore) tasks hang for larger sites

#614: Subscription option for Social Reporters CT

#616: Initiatives map not showing on http

#617: Help adding text to account creation email

#621: Check and speed up updates to homepage sections: TC and slideshow

#622: Maps not working on TN.org

#623: Question about revisions

#624: Comment handling on pages: particularly Austerity one

#627: Users: deleting their own accounts

#628: Change space notifications email from IJK.co.uk to TN.org

#658: Check caching on Social Reporters views

#659: Featured story on homepage not updating

#670: Roll back performance customisations and use stock BOA settings where possible

#679: Filter Initiative by Country not working

#683: Create Aegir account for Paul

#568: TC blog: can't not send notifications

#575: User system is blocking everyone - needs fixing urgently