Search the Community

As of today the wikipage Content_Security_Policy is available. It's aim is to give more insight on how to upgrade your website/browser security. The information applies to users aswell as (mod) developers. Feel free to send your comments to @Rob Severijns

On both of my sites I am now getting the message that "This page can't load Google Maps correctly," with a darkened image of the map. I'm not sure where to look for the error with this. Derrick

For those looking for a customized welcome message when approving a request for a user account, the text below might give you some hints. In this example you can choose between the role of Guest or Submitter. Change the text to you own needs and/or translate it into another language if needed. Hello ...., Welcome to the family tree site of the .... family and related families. Your user account has now been activated and your username and password must be known to you. After you have logged in for the first time, you will need to change your password. I wish you a lot of fun during your visit to the website and hope that you will make the necessary new and surprising discoveries. I can recommend that you check out the Privacy & GDPR information (top right of the homepage). You have been given the role of "Guest" by me. This means that you have the following rights/permissions: 1. You have NO right/possibility to add or delete data independently. 2. You will NOT see any data, documents or photos of living individuals. 3. You will NOT see hidden individuals, documents, photos and/or notes. 4. Sending suggestions/comments regarding individuals, families and sources is allowed. 5. Proposed changes will be reviewed by the Administrator/Administrator before any changes are processed. 6. Printing and/or downloading data is not permitted. 7. Creating a so-called GEDCOM file is not allowed. 8. Sharing data via social media platforms is not permitted. 9. You are allowed to update your personal profile. You have been given the role of "Submitter" by me. This means that you have the following rights/permissions: 1. You have NO right/possibility to add or delete data independently. 2. You see data, documents or photos of living individuals. 3. You will NOT see hidden individuals, documents, photos and/or notes. 4. Sending suggestions/comments regarding individuals, families and sources is allowed. 5. Proposed changes will be reviewed by the Administrator/Administrator before any changes are processed. 6. Printing and/or downloading data is not permitted. 7. Creating a so-called GEDCOM file is not allowed. 8. Sharing data via social media platforms is not permitted. 9. You are allowed to update your personal profile. Please let us know if the access to the website was successful. If you have additions, comments or photos, I am highly recommended. For additions, comments or photos, use the pen behind a topic or use the Suggestion tab on the person page. Preferably deliver photos and/or documents in the highest possible resolution and as straight as possible. Preferably with enough space on the sides so that I can still crop well. When submitting photos, please indicate who is in them (from left to right) and the year of when the photo was taken. By the way, there is the possibility to have data, photos, documents, etc. that you provide or that are already in the family tree marked as private. This means that it is invisibly recorded for everyone, except for me as a Site Administrator. I would also like to emphasize the following: Many people provide data and media files with the promise from me that it will be handled with care and that this data will not simply be shared or distributed. Partly for this reason, sharing, copying or in any other way distributing information and/or media files on this site, for personal and/or other use, is not permitted without the prior permission of the site administrator! Failure to act in accordance with the above will irrevocably lead to denial of access to the website. If you would like to have something, please ask me and then I can, possibly in consultation with the person whose data it concerns, see if I can honor your request. By the way, all media files are provided with a so-called watermark, but media files that are freely available via the internet have been provided with a link in sources so that you can download them yourself. No link to the source means that the media file comes from a private collection and these media files will NOT be shared. Once again, have fun poking around in the family tree and hopefully I will see you return regularly. Sincerely, .... Link to your website & description of your website

I've been doing genealogy research for approximatly 15 years now, which is compared to others, not very long and I've seen a lot of websites that present genealogical data. Sites like MyHeritage, FamilySearch and many of the websites created by the TNG users to name a few. Question is "How reliable is the data they provide?" I would start by saying "Unreliable" and I will explain why this is my opinion and why it should probably be yours too to start with. As an example: Person A: Builds his family tree on the correct facts, but does not mention any of it in his software (he keeps everything in binders or as screenshots on his computer). Person B: Builds his family tree by making up all kinds of things, mentions some sources, but are neither correct nor complete. Person C: Builds his family tree based on facts from the right sources, and mentions them in the right way in his software program. It will be clear that Person C is doing it the correct way and Person B makes a mess of it. But Person A, on the other hand, may well have set up a credible family tree, but did not (correctly) mention the sources in the software. Conclusion: The value of citing sources, what is right and what is wrong, can only be determined if you learn which source you can and cannot trust. And even then, situations can be debatable. This means that whatever data we retrieve from whatever source should be qualified as unreliable unless proven otherwise. Therefore we should examine every piece of data for its quality and whether it is consistent with validated sources. This is something we need to do for ourselves and we cannot just rely on the work others did. All 'n all, to me data quality is more important than data quantity. In my opinion data can be qualified as: Primary source: Original materials created at the time of an event or study, such as diaries, photographs, or official documents, that provide direct evidence or firsthand accounts Secondary source: Any document that draws on one or more primary sources and interprets or analyses them; Also sources such as newspapers whose accuracy is open to question Unreliable source: any source that, at the moment, is not verifiable in any way shape or form Needs review: Any source that hasn't been reviewed yet and therefore doesn't fit in any of the three catogories mentioned above. TNG has an option to qualify the reliability of sources in the "Edit Existing Citation" popup window. You can qualify them with a number (0-3) where the higher number means higher reliability. This reliability score is shown in the sources block on the person page and familygroup page. To me the way TNG presents the reliability is insufficient. How many visitors of my website actualy know what "reliability: 2" means? My quess is none unless they're a TNG user themselves and even then... Just to be clear, the above is my personal opinion and doesn't have to be anyone elses. Taking the above into account, I have started developing a mod that indicates more clearly what the value of the source is to me. The name of the mod will be "Source Reliability" and I hope to publish it before the end of next week. See the screenshots to get a glimpse of what it will change. Any comments regarding the above are welcome and I hope this helps others

Hello, Just a heads up on an TNG15 issue I encountered regarding admin branch creation and branch labels. I have alerted Darrin to the issue and the situation under which it occurs. If you have branch ID's with at least two matching consecutive characters, processing of labels will or might affect both branches instead of the one. In my case, I had two ID's, one was 'ekm' and another 'km'. Once i avoided the matching characters, the processing worked normally. Darrin had said someone else had reported an issue with label creation as well, but this was before I tested and found out what I had to do to avoid the problem. Darrin's response: Ah, thanks Ron. Yes, that's a semi-intentional feature that allows you to grant a user access to more than one branch. In this case it unintentionally bit you though. Sorry about that, but I'm glad you figured it out. Darrin also stated this is not documented anywhere. Ron

I know I'm not a security expert but still hope it's helpfull to some of you. If anyone likes to chime in, feel free to do so. About the topic In TNG you can use the "rel" attribute with hyperlinks in order to add extra security & privacy. See the table below for an explanation of the "rel" attribute or search the internet for more detailed information. Unfortunatly the "rel" attribute can't be used with hyperlinks in citations. To mitigate this you can use the JavaScript code at the end of this topic. What does it do: Detects external links only (not your own domain) Forces them to open in a new tab (target="_blank") Automatically adds secure attributes: rel="noopener noreferrer nofollow" Works for dynamically added links (AJAX, React, etc.) Which gives you: SEO-safe: external links use nofollow Security-safe: prevents tab-nabbing with noopener noreferrer User-friendly: external links open in new tabs Robust: updates automatically as new links appear Just add the script at the bottom of the footer.php in your template folder. BTW TNG doesn't always have the closing </body> tag in footer.php but that fine as long as the script is placed at the bottom of the footer.php it works. If you remove the "nofollow" value from the script you allow search engines to to use the link as a ranking signal. Simply said: Skipping nofollow won’t break anything. It just means you’re passing SEO value to the linked page. Only use nofollow when you don’t fully trust or control that link. The script is shown below. <!-- Add this just before the closing </body> tag --> <script> (() => { const addSafeExternalAttrs = link => { const href = link.getAttribute('href'); if (!href || href.startsWith('#') || href.startsWith('mailto:') || href.startsWith('tel:')) return; const linkUrl = new URL(href, window.location.origin); if (linkUrl.origin === window.location.origin) return; link.setAttribute('target', '_blank'); const existingRel = link.getAttribute('rel') || ''; const relValues = new Set(existingRel.split(/\s+/).filter(Boolean)); ['noopener', 'noreferrer', 'nofollow'].forEach(v => relValues.add(v)); link.setAttribute('rel', Array.from(relValues).join(' ')); }; document.querySelectorAll('a[href]').forEach(addSafeExternalAttrs); const observer = new MutationObserver(mutations => { for (const mutation of mutations) { mutation.addedNodes.forEach(node => { if (node.nodeType === 1) { if (node.tagName === 'A') addSafeExternalAttrs(node); else node.querySelectorAll?.('a[href]').forEach(addSafeExternalAttrs); } }); } }); observer.observe(document.body, { childList: true, subtree: true }); })(); </script> To test if the script works you can do the following: Go to a page with an external hyperlink Rightclick the hyperlink and choose "Inspect" You should see something like this: <a href="https://example.com" target="_blank" rel="noopener noreferrer nofollow">Example</a> If those attributes were missing before but now appear automatically the script works. If they don’t appear, clear the cache or hard refresh with Ctrl+F5 or otherwise check the console for errors (red text)

I'm currently rewriting all my citations in order to make them APA-7 compliant. APA-7 states that there shouldn't be a period behind the hyperlink but TNG adds this period to a citation by default. Anyone an idea how to remove the period at the end of the hyperlink? I will also address this to Darrin for a possible update in the next TNG version

Can anyone confirm this issue I ran into. My site is multilingual (English & Dutch). When looking at the the person page, while the language is set to Dutch, all dates are translated correct, but when I look at the admin_editperson.php or admin_editfamily.php the dates are still presented in English. Not sure if this applies to other languages too.

I'm unable to login with the known usernames and passwords for all the accounts I have. I'm unable to reset passwords. I looked in my phpadmin to check for user accounts. It shows only my admin account. I tried resetting the password with the email and username shown in myphpadmin. It says no known account with that email. I was able to login this a.m. without any issues. I haven't touched the code in several weeks. I'm stumped as to why all my user accounts aren't showing in myphpadmin or why I can't get a password reset. I'm using TNG 12.1 if I recall correctly since I can't log into my account to verify. Mac OS Sequoia 15.5.

Today, I have uploaded Unused_media_v15.0.2.2 to the TNG Wiki. The changes are to update the style to match TNG v15 (new icons, larger form fields), and the ability to select an item for addition to TNG. I have tested it on my site, but feedback from other users would be useful. Thanks for any comments. Regards, Warren

Hello diligent developers I just want to remind you that I will always be happy to translate texts in MODs into Danish language. (This is a small thank you for the help I receive on this site).

I have tried to add an Event type to a People record and the drop-down menu only displays a tick. I would like to add an ADDR field, but cannot see how to do it any other way? Any ideas please. Geoff

As of today there is an Installation & Setup instruction for TNG available in Dutch. It's intended for TNG15 but will work for earlier versions of TNG too. You can find them at the TNG Download page under TNG Extras. Any comments or remarks are welcome.

Hello all. I just did a new install of myPHPGuestbook. I can open it from TNG fine and I can get into the admin side fine, but after that, whatever changes I make in the admin control panel, I get the 403 Forbidden error, but the change would be saved. But the 403 error needs to go away. The guestbook is setup with the default permissions and is on my live site at Carolina Clans I know there's a few of you guys out there using this script, so if you know anything about this, please help a brother out! Another issue is: When testing the guestbook the entry is fine, but when I get the email from admin about the new guestbook entry it look like this: You have a new guestbook entry<br /><br />Posted on: 31.01.2025, 05:47<br /><br />Name: John<br />Place: <br />Country: <br />E-mail: jpjones55@gmail.com<br />Homepage: <br />Website rating: 0<br /><br />Posted entry:<br />-----------------------------------------------------------<br />Subject: Test<br /><br />Testing the guestbook<br /><br />-----------------------------------------------------------<br /><br />Block the guestbook entry? => <a href="https://carolinaclans.com/myPHPGuestbook/index.php?action=deactivate_entry&sperr_code=887eb42114fc7569b9e428dad4f93fb9">Click!</a><br /><br />

When I add a child to a family, Save+Stay on the page and relaoad it, the child has dissapeared from the family. If I search the child among Persons, I find it and it sort of has a family but without id. If I try to find the family under Families, there is none to be found. Föräldrar = Parents Familj = Family TNG is installed on a local server, version 14.0.6. Installed from scratch in december. So far I have added 2100 people and it is only recently the problem has occured sometimes- but more and more frequently. Lately it is almost every person I try. It doesn't help to add a new person and browse to add. Usually I manage to add the person after some tries (about 2-5) by removing empty parents from person. Anyone else had the same problem and/or an idea how to solve this?

I'm just re-installing TNG v14.05 on my local Wampserver and am getting this error when importing media. Any help with this? Never had this issue. The media does import tho.... Now when I go into Admin -> Media get this. I've done this a 100 times or more. WTF am I doing wrong? Using php v 8.1.13.........

Can anyone confirm this before I address Darin? I installed the TNG 14 Patch2 and I noticed that the map is no longer showing on the media edit page. The admin_editmedia.php was updated with the patch2 but I'm not sure if that is the cause of the issue. I'm using OSM and on the person page the map shows just fine.

Recently I've been getting a lot of visits from: When I use Whois IP the following information is given: It looks like Alibaba is visiting my website. I tried blocking the mentioned IP range in .htaccess but so far without succes. My .htaccess looks like this. Also using the Bot-Trap mod and RIP prevention mod. Any ideas on the cause, what I'm doing wrong and/or how to block Alibaba from accessing my site?

I would like for users to be presented a different page after logging into the site. Right now, the only things that change upon successful login is the Main Menu bar. The page itself is still the front page (Home Page) which has verbiage to register.. All family members are welcome to use the site by logging in above. Don't have a login? Register for New User Account I think the best solution is to redirect to a different page upon successful login, which will probably be a mirror of the Home page without the above verbiage, or maybe redirect to What's New. I suspect that this is simple and I just am missing it somewhere.

Hi Fellow TNG members, There is a research link mod and a research tools mod available for TNG users. We all do our research and somehow document what we researched when and where (or maybe some do not) TNG has the possibility to add these research notes to the different notes fields and hide them if needed. What I'm looking for is a something different. I'm looking for a research log mod. The intention is that on the persons page an extra tab is made available (just before the edit tab) with the name Research Log The content can be a simple text field that allows us to enter research done and research to do items but it could also be a table. It should be able to handle dates, hyperlinks and text formatting. That way like we have an overview of all research done & to do related to that specific person. The new Research tab should only be available to Admin accounts. Hope someone can find the time to create something like this if there is enough "need" for this in the community.

I have had a TNG site since circa 2009 - www.zausmerforest.com. I have always kept the site private in every sense that I can think of - using the three methods listed below. Now I would like to soften the privacy just a little, but am unsure which method/rule to change and how. 1) - The site requires a log-in, and I will not change this requirement. 2) - I have a robots.txt file that includes the following text User-agent: * Disallow: / I understand that this guides "bots" and crawlers not to index my site (thanks to Ken Roy for explaining this), which means that pages behind the home page may remain hidden. 3) - I also have an .htaccess file that includes: Options All -Indexes I understand that stops the bad bots that might otherwise not follow the "disallow" provided in the robots.txt file. Until now, these methods have worked to keep the site very private. Even entering site:zausmerforest.com into Google gives only the info provided in the image below. How can I soften the privacy such that: a) Google and other Search engines will show the home page information? b) And if possible (but I think it won't be), is there a way to achieve search engines showing my home page in the results when an internet user searches for someone whose name is contained anywhere in my site, but without indexing the site? I don't want search engines/bots/crawlers sharing or displaying any page or media or family information that is not shown on the home page. I don't know that I fully understand the concepts of "indexing" and being able to "search" or "share" a site, so I hope this makes sense. Thank you.

Hi all, My genealogy website is private and for now I want to keep it that way. I'm trying to prevent robots/crawlers etc from indexing, following and using my data. In order to achieve that I was thinking of modifying my .htaccess file by adding the followig: <FilesMatch ".(docx|pdf|png|jpeg|jpg|gif|mp4)$"> Header add X-robots-tag "noindex, nofollow, noimageindex, noarchive, nocache, notranslate, nosnippet, noyaca" </FilesMatch> Is this the correct way to do it? Do I still need to adjust my robots.txt / tngrobots.txt file too? I suppose that if the robots.txt / tngrobots.txt are set to follow and index this is blocked by the .htaccess settings or am I wrong? Is it still usefull to adjust my genlib.php with: <meta name="robots" content="noindex,nofollow" /> or a slightly different code? I'm also using rel=”noopener noreferrer nofollow” in my hyperlinks <a rel=”noopener noreferrer nofollow” href=”https://www.example.nl/” >Example</a> in cases where I need to link, but don’t want to be associated with the link target. I have read the articles in Security too and that's why I was looking into this. I know these are a lot of questions but hopefully relevant to other users too. Any comments and/or advise is welcome here. Rob

Good morning fellow TNG users. I just did a fresh full install of TNG v. 14.02 and while importing media, I see there is Nno Generate Thumbnails option in admin -> media -> thumbnails. What's the deal with that? Anyone else run into this?

First post. After searching the forum not finding an answer I am still looking for a solution. I imported from gedcom. Individuals started from I0000 and go up to I00276 (or something). Now I added a new individual (not too many yet) and found out that I now have an individual I0001 and I1; I0002 and I2 (up to I15 or something). Syntactically, I1 and I0001 differ. Semantically they are the same. What is the best way to solve this? Renumber the whole database? Write my own SQL? Resquence ID's in the utilities menu did not solve anything.

I updated my TNG from V12.x to V14.x because my domain hosting went from PHP 7.4 to PHP 8.0 and above. I have followed the update manual carefully, but now when I click on my administrator page (admin.php) the page remains white and there is nothing to read or to click. My homepage itself seems to display all the information correctly. What is going wrong here, what have I done wrong and what needs to be done to solve this problem?