Difference between revisions of "Eagle-rock.org:Community portal"

From eagle-rock.org
 
(71 intermediate revisions by 2 users not shown)
Line 1: Line 1:
''Please add new entries at the '''top''' of a list below the appropriate section, and add a signature with time stamp''
+
''Please add new entries at the '''bottom''' of a thread of the appropriate section, and add your signature with time stamp. You can find older, now obsolete sections and texts in the [http://eagle-rock.org/index.php/Eagle_Rock_Wiki_talk:Community_portal Discussion page].''
  
== Images: needs function to upload images ==
 
* Wikimedia Commons offers many free images, but embedding them here didn't work (yet). Probably needs configuring the server. --John Eagles 09:41, 18 December 2011 (PST)
 
* There seems to be a possibility here: "A group of wikis may have designated one "preferred wiki" to upload files to, with sharing of those files enabled. Among Wikimedia wikis, Wikimedia Commons works for this. If images are uploaded to Wikimedia Commons, they can be used in all Wikimedia wikis." ([http://meta.wikimedia.org/wiki/Help:Images_and_other_uploaded_files Help:Images and other uploaded files]). However, i think we should also create our own upload possibility for files. ----
 
  
* [http://www.mediawiki.org/wiki/Manual:Configuring_file_uploads#Uploading_directly_from_a_URL_.28.22Sideloading.22.29 Manual:Configuring file uploads]. I think this needs to be done by changing settings in the server. --John Eagles 23:44, 17 December 2011 (PST)
 
* This [http://www.mediawiki.org/wiki/Manual:Configuration_settings page] tells more about uploading files --John Eagles 23:46, 17 December 2011 (PST)
 
  
 +
== Open tasks for users ==
 +
: ''I present here some tasks that users can do''
 +
In [[Knowledge base:Gardening]] & [[Gardening courses]] - Almost all of these pages are in a preparatory stage, especially the content in 'Chunks of information.'
 +
# You can help finding '''External links''' for all pages in the knowledge base. Most Wikipedia links have already been added, but for plants you can for example search [http://botanical.com/botanical/mgmh/mgmh.html A modern herbal by Mrs. M. Grieve] and add links to the appropriate page on this site.
 +
# You may also add photos to the '''Gallery''' on each page, provided that you use photos that are your own or free of copyright. When you add photos, please add the 'License' for using the photo. You can use the text of how i license my photos (see [http://eagle-rock.org/index.php/File:Periwinkle_flower.jpg this page]) or pick your own or add the license given with the image in case you got it elsewhere on the internet. I've put all my photos in the public domain but request to add a link to this site to the published photo. In that way we can attract more traffic.
 +
# You can perform minor edits. If the edits are '''major''', please discuss this or propose this in the Discussion that goes with each page and make a note of this on my [[User talk:John]] page.
 +
# You can also add information to the ''''Chunks of information'''' section. Later these bits of info will be used to write the final page.
  
----
+
== Courses we're presently working on ==
 +
: ''Main article: [[Overview of courses]]''
  
*I've asked Steve to make the following changes to configuration files. He says he can have them done by Tuesday morning  : --[[User:Charles|Charles]] 11:48, 18 December 2011 (PST)
+
== Basic structure of this site ==
 +
'''''Training courses + Knowledge base'''''
 +
<p\>I would like this website to be focused on presenting study courses. In addition to a course, a knowledge base can be made to present extra information that is easily accessible. See [[Gardening courses]] for how i do it. I am open for any suggestion to improve this structure. --[[User:John|John Eagles]] 08:36, 24 December 2011 (PST)
  
*'''1. Make sure uploads are enabled in PHP'''
+
== Eagle Rock Wiki:Working with images ==
The following needs to be set in php.ini (which may be located somewhere like /etc/php/php.ini, /etc/php4/php.ini, /etc/php5/cli/php.ini &/etc/php5/apache2/php.ini (openSUSE 11.2), /usr/local/lib/php.ini or on Win32 C:\Windows\php.ini):
+
: ''Main article: [[Eagle Rock Wiki:Working with images]]''
file_uploads = On
 
If this is not set, PHP scripts cannot use the upload functions, and MediaWiki's uploads will not be enabled.
 
  
*'''2. Check for Windows and IIS users'''
+
== Eagle Rock Wiki:Goals and format of the site ==
Set %SystemRoot%\TEMP to have permissions for the Internet Guest Account (IUSR_MachineName, or IUSR for IIS 7+): Read, write and execute;
+
: ''Main article: [[Eagle Rock Wiki:Goals and format of the site]]''
  
*'''3. Check directory security'''
+
== Eagle Rock Wiki:Embedding videos ==
The upload directory needs to be configured so that it is not possible for an end user to upload and execute other scripts, which could then exploit access to your web directory and damage your wiki or web site.
+
* Is this possible? How? I only found this page about it in Wikimedia, which says that embedding of videos is not yet possible, but they are working on it. [http://meta.wikimedia.org/wiki/Multimedia Multimedia]
 +
<blockquote>
 +
"This page discusses how to improve the multimedia content of Wikimedia projects, through content, policies, and improvements to the MediaWiki software. For now, the main focus is audio, but videos may become more common shortly, so they should be borne in mind in any strategy we come up with."
 +
</blockquote>
 +
--John Eagles 21:07, 18 December 2011 (PST)
  
Set the /images folder (or the /uploads folder in previous versions) to have permission "755":
+
===Embedding video===
 +
I have added an extension to the MediaWiki software that allows pages to embed video and I've also created a page http://eagle-rock.org/index.php/Eagle_Rock_Wiki:Embedding_Video with sample codes for various formats.
  
'*''4. Setting uploads on/off'''
+
The extension is called '''EmbedVideo''' (http://www.mediawiki.org/wiki/Extension:EmbedVideo)
MediaWiki version:
 
In MediaWiki version 1.5 and later, the attribute to be set resides in LocalSettings.php and '''$wgEnableUploads''' is set as follows:
 
≥ 1.5
 
'''$wgEnableUploads''' = true; # Enable uploads
 
This enables uploads, as one might expect. To disable them, set the attribute to false:
 
  
*'''5. Upload permissions'''
+
====Security====
Per default, all registered users can upload files. This is the biggest security worry we have so we want to be sure to restrict Normal Users from having upload privileges. To restrict this, you have to change $wgGroupPermissions:
 
To prevent normal users from uploading files:
 
'''$wgGroupPermissions'''['user']['upload'] = false;
 
  
This will give us our private upload folder and set permissions for all but ''regular users'' to upload files there. --[[User:Charles|Charles]] 11:48, 18 December 2011 (PST)
+
This extensions opens a vulnerability to <u>Cross-site scripting attacks</u> that potentially allow the website to be hijacked. The extension creators say the solution is to strictly validate user input and/or apply escaping to all characters that have a special meaning in HTML.
  
== Discussing the goals and format of this site ==
+
I have asked Steve to help with this as he manages security on our server. This page http://www.mediawiki.org/wiki/Cross-site_scripting has a list of escape functions that can be implemented site-wide.
* Here's the outcome of today's prayer and meditation about the purpose of this site:
+
 
I would like to make it entirely a website to present and moderate training courses. That means that it won't just function as a regular encyclopedia. There are several useful encyclopedia already on the internet, for example the Wikipedia, the New World Encyclopedia. This is not just about providing information and knowledge, but it is to help people in their efforts to grow internally, to acquire useful skills and knowledge and to practice it.  
+
This page from the <u>Open Web Application Security Project</u> shows snippets of HTML that render untrusted data harmless https://www.owasp.org/index.php/Abridged_XSS_Prevention_Cheat_Sheet.
All information presented should be part of a study course, or a practical course, or a religious course. There can be several courses and we can invite people to write a course.  
+
 
For example, i know someone who could write a course to learn the craft of cabinet-making. Much information would be needed for that, probably many pages. But besides these pages there has to be a structure to guide a student through the course, probably including tests.  
+
===Using EmbedVideo===
Charles could write a course to make wine.
+
 
Etc.
+
Code with examples for embedding video can be found here: http://eagle-rock.org/index.php/Eagle_Rock_Wiki:Embedding_Video
Of course i shall write courses based on my expertise.
+
 
There could be more than one course in learning the Divine Principle. We can help students to go through such a course using all kinds of learning aids, videos, diagrams, tests, etc. --John Eagles 09:33, 18 December 2011 (PST)
+
--[[User:Charles|Charles]] 18:51, 7 January 2012 (PST)
* My feeling at the moment is to make this a broader encyclopedia-type site, in which i can use certain pages as part of a curriculum. These pages probably need prohibition for free editing. --John Eagles 23:46, 17 December 2011 (PST)
+
 
 +
=== Thanks Charles, it works well!===
 +
But i'll be waiting to use them until we're clear about the security risks. --[[User:John|John Eagles]] 21:36, 7 January 2012 (PST)
  
 
== Logo for this site ==
 
== Logo for this site ==
* Maybe something for you Charles? Eagle + Rock = Heaven + Earth = Spirit world and physical world united --John Eagles 23:50, 17 December 2011 (PST)
+
 
 +
* Eagle + Rock = Heaven + Earth = Spirit world and physical world united --John Eagles 23:50, 17 December 2011 (PST)
 +
* We've chosen for the logo you now see at the top left
  
 
== New pages ==
 
== New pages ==
* Presently most new pages are test pages. Here's where you can find all [http://eagle-rock.org/index.php/Special:NewPages New pages] --John Eagles 00:10, 18 December 2011 (PST)
+
* Here's where you can find all [http://eagle-rock.org/index.php/Special:NewPages New pages]
 
 
== Help for editing ==
 
* For the time being i put some links to pages in the common Mediawiki manual here: [[Help:Editing]] --John Eagles 00:44, 18 December 2011 (PST)
 
  
 
== Edit toolbar ==
 
== Edit toolbar ==
 
* More buttons can be included, such as for tables. See [http://meta.wikimedia.org/wiki/Help:Edit_toolbar Help:Edit toolbar] --John Eagles 01:50, 18 December 2011 (PST)
 
* More buttons can be included, such as for tables. See [http://meta.wikimedia.org/wiki/Help:Edit_toolbar Help:Edit toolbar] --John Eagles 01:50, 18 December 2011 (PST)
 +
 +
== See also ==
 +
* [[Help:Editing]] I collected several links to pages that will help you on the way to learn writing or editing a page. --[[User:John|John Eagles]] 08:38, 24 December 2011 (PST)
 +
 +
 +
 +
[[Category:ERW community]]
 +
[[Category:Editing]]

Latest revision as of 03:39, 16 January 2014

Please add new entries at the bottom of a thread of the appropriate section, and add your signature with time stamp. You can find older, now obsolete sections and texts in the Discussion page.


Open tasks for users

I present here some tasks that users can do

In Knowledge base:Gardening & Gardening courses - Almost all of these pages are in a preparatory stage, especially the content in 'Chunks of information.'

  1. You can help finding External links for all pages in the knowledge base. Most Wikipedia links have already been added, but for plants you can for example search A modern herbal by Mrs. M. Grieve and add links to the appropriate page on this site.
  2. You may also add photos to the Gallery on each page, provided that you use photos that are your own or free of copyright. When you add photos, please add the 'License' for using the photo. You can use the text of how i license my photos (see this page) or pick your own or add the license given with the image in case you got it elsewhere on the internet. I've put all my photos in the public domain but request to add a link to this site to the published photo. In that way we can attract more traffic.
  3. You can perform minor edits. If the edits are major, please discuss this or propose this in the Discussion that goes with each page and make a note of this on my User talk:John page.
  4. You can also add information to the 'Chunks of information' section. Later these bits of info will be used to write the final page.

Courses we're presently working on

Main article: Overview of courses

Basic structure of this site

Training courses + Knowledge base <p\>I would like this website to be focused on presenting study courses. In addition to a course, a knowledge base can be made to present extra information that is easily accessible. See Gardening courses for how i do it. I am open for any suggestion to improve this structure. --John Eagles 08:36, 24 December 2011 (PST)

Eagle Rock Wiki:Working with images

Main article: Eagle Rock Wiki:Working with images

Eagle Rock Wiki:Goals and format of the site

Main article: Eagle Rock Wiki:Goals and format of the site

Eagle Rock Wiki:Embedding videos

  • Is this possible? How? I only found this page about it in Wikimedia, which says that embedding of videos is not yet possible, but they are working on it. Multimedia

"This page discusses how to improve the multimedia content of Wikimedia projects, through content, policies, and improvements to the MediaWiki software. For now, the main focus is audio, but videos may become more common shortly, so they should be borne in mind in any strategy we come up with."

--John Eagles 21:07, 18 December 2011 (PST)

Embedding video

I have added an extension to the MediaWiki software that allows pages to embed video and I've also created a page http://eagle-rock.org/index.php/Eagle_Rock_Wiki:Embedding_Video with sample codes for various formats.

The extension is called EmbedVideo (http://www.mediawiki.org/wiki/Extension:EmbedVideo)

Security

This extensions opens a vulnerability to Cross-site scripting attacks that potentially allow the website to be hijacked. The extension creators say the solution is to strictly validate user input and/or apply escaping to all characters that have a special meaning in HTML.

I have asked Steve to help with this as he manages security on our server. This page http://www.mediawiki.org/wiki/Cross-site_scripting has a list of escape functions that can be implemented site-wide.

This page from the Open Web Application Security Project shows snippets of HTML that render untrusted data harmless https://www.owasp.org/index.php/Abridged_XSS_Prevention_Cheat_Sheet.

Using EmbedVideo

Code with examples for embedding video can be found here: http://eagle-rock.org/index.php/Eagle_Rock_Wiki:Embedding_Video

--Charles 18:51, 7 January 2012 (PST)

Thanks Charles, it works well!

But i'll be waiting to use them until we're clear about the security risks. --John Eagles 21:36, 7 January 2012 (PST)

Logo for this site

  • Eagle + Rock = Heaven + Earth = Spirit world and physical world united --John Eagles 23:50, 17 December 2011 (PST)
  • We've chosen for the logo you now see at the top left

New pages

Edit toolbar

  • More buttons can be included, such as for tables. See Help:Edit toolbar --John Eagles 01:50, 18 December 2011 (PST)

See also

  • Help:Editing I collected several links to pages that will help you on the way to learn writing or editing a page. --John Eagles 08:38, 24 December 2011 (PST)