Page MenuHomePhabricator

Portal test tool is broken
Closed, InvalidPublic

Description

The portal test tool at portal-test.mediawiki.org now returns a warning and a
fatal error, instead of a rendering of the Meta-Wiki entry given by the
"template" parameter. The result:

Warning: main(./includes/ProfilerStub.php): failed to open stream: No such file
or directory in /home/wikipedia/common/php-1.5/CommonSettings.php on line 22

Fatal error: main(): Failed opening required './includes/ProfilerStub.php'
(include_path='.:/usr/share/pear') in
/home/wikipedia/common/php-1.5/CommonSettings.php on line 22

This tool is necessary to test changes to the main Wikipedia portal before they
are made live.


Version: unspecified
Severity: normal
URL: http://portal-test.mediawiki.org/extract2.php?template=Www.wikipedia.org_template/temp

Details

Reference
bz4501

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:01 PM
bzimport set Reference to bz4501.
bzimport added a subscriber: Unknown Object (MLST).

I've fixed the problem, however I've also disabled it entirely for the moment as it
appears to be a big fat open security hole.

Right now a workaround is to copy the contents of [[m:Www.wikipedia.org
template/temp]] to http://software.hixie.ch/utilities/cgi/data/data, click
"Generate", and click on the link that is generated. This script simply creates
a data: URL that is local to the user's web browser; Wikimedia's server would
not be affected by any malicious code. Unfortunately, it won't work in Internet
Explorer. It might be possible to create a trimmed-down version of this script
in JavaScript (since we don't need the file upload option), host it at
tools.wikimedia.de as a replacement for the portal-test tool, and close this bug.

Closing INVALID. Whatever portal-test was, it seems to be long since gone. The place to update the Wikimedia project portals is on Meta.

portal-test was for actually updating the portals. It rendered the contents of [[m:Www.wikipedia.org template/temp]] as HTML. That way non-sysops could test changes before Meta sysops pushed the changes live (at [[m:Www.wikipedia.org template]]).