January 2017 - Aur-dev - lists.archlinux.org

[aur-dev] [PATCH 1/1] Fix for issue FS#49134 - AUR site search includes packages' keywords when searching by name and description
by Nodiv Byzero 10 Jan '17

10 Jan '17

--- web/lib/pkgfuncs.inc.php | 5 +++++ 1 files changed, 5 insertions(+), 0 deletions(-) diff --git a/web/lib/pkgfuncs.inc.php b/web/lib/pkgfuncs.inc.php index 4b0fdba..f61e52c 100644 --- a/web/lib/pkgfuncs.inc.php +++ b/web/lib/pkgfuncs.inc.php @@ -755,6 +755,11 @@ function pkg_search_page($SID="") { $K = "%" . addcslashes($_GET['K'], '%_') . "%"; $q_where .= "AND (Packages.Name LIKE " . $dbh->quote($K) . ") "; } + elseif (isset($_GET["SeB"]) && $_GET["SeB"] == "nd") { + /* Search by name. */ + $K = "%" . addcslashes($_GET['K'], '%_') . "%"; + $q_where .= "AND (Packages.Name LIKE " . $dbh->quote($K) . " OR Packages.Description LIKE " . $dbh->quote($K) . ") "; + } elseif (isset($_GET["SeB"]) && $_GET["SeB"] == "b") { /* Search by package base name. */ $K = "%" . addcslashes($_GET['K'], '%_') . "%"; -- 1.7.3.4

2 4

[aur-dev] Ghost repo?
by Xyne 09 Jan '17

09 Jan '17

Hi, A user wanted to create an AUR package for libpng12 but found that there was already a repo when he tried to push it, even though the package does not appear on the site [1]. The log of the existing git repo contains the author's name and email address but there is no account with either. The last update was May 8, 2016. Is this a bug, perhaps due to a deleted account? I was going to try pushing an update to see if the package re-appears on the site but it's probably better if one of the devs takes a peak to see what's going on. The package is libpng12. Regards, Xyne [1] https://bbs.archlinux.org/viewtopic.php?id=221723

3 4

[aur-dev] [PATCH] Increase minimum password length to 8 characters
by Alex Muller 07 Jan '17

07 Jan '17

Hi, I'm new to AUR so I hope sending a patch like this is the correct thing to do. There are 95 printable ASCII characters which with a minimum length of 4 gives 95^4 or 81 million possible passwords. Increasing the minimum length to 8 increases the number of possible passwords by a factor of about 10^7. I imagine most AUR users have pretty good password practice so they won't be affected by this change, but it will improve security for a subset of users. For a given user I can generate all 4 character passwords on my laptop in under 2 minutes in Python and therefore all 5 character passwords in a few hours. This change makes it much harder (but still nowhere near impossible) to brute force generate passwords. FS#52297 <https://bugs.archlinux.org/task/52297> Cheers, Alex

3 3

[aur-dev] What cgit version does AUR use?
by Nodiv Byzero 04 Jan '17

04 Jan '17

Hello, I'm looking into FS#51968 - 'Atom feed of package repo have non-escaped href' issue. https://bugs.archlinux.org/task/51968?project=2 It looks like it's cgit issue. So, can somebody confirm current running cgit version? Thanks.

2 1