summaryrefslogtreecommitdiff
path: root/inc
Commit message (Collapse)AuthorAge
* more scrutinizer issue improvementsGerrit Uitslag2014-09-29
|
* scrutinizer documentations issuesGerrit Uitslag2014-09-29
|
* Merge pull request #826 from splitbrain/external-video-audioAndreas Gohr2014-09-27
|\ | | | | Added support for external video and audio files
| * fixed scrutinizer issuesAnika Henke2014-08-02
| |
| * added support for external video and audio files, also added return param to ↵Anika Henke2014-08-02
| | | | | | | | externalmedia()
* | Merge pull request #869 from splitbrain/filterAndreas Gohr2014-09-27
|\ \ | | | | | | added filter method to INPUT class
| * | fixed typos in docblock commentsAndreas Gohr2014-09-26
| | |
| * | added filter method to INPUT classAndreas Gohr2014-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the filter() function can be chained between the accessor and the value function to get a filtered value. When no filter allable is given in the filter() function, stripctl() is used to strip all control chars (ASCII<32) Examples: $INPUT->post->filter()->str('foobar'); $INPUT->get->filter('myfilter')->int('baz');
* | | Merge pull request #868 from splitbrain/authcleanAndreas Gohr2014-09-27
|\ \ \ | | | | | | | | clean user credentials from control chars
| * | | do not allow empty passwordsAndreas Gohr2014-09-26
| | | | | | | | | | | | | | | | | | | | When a username but no password is submitted, the login is denied right away instead of relying on the backend to refuse the login.
| * | | clean user credentials from control charsAndreas Gohr2014-09-23
| |/ / | | | | | | | | | | | | | | | This is to prevent zero byte attacks on external auth systems as described in http://www.freelists.org/post/dokuwiki/Fwd-Dokuwiki-maybe-security-issue-Null-byte-poisoning-in-LDAP-authentication
* | | translation updateYuwei Sun2014-09-26
| | |
* | | Merge remote-tracking branch 'origin/auth_getUserData_improvements'Andreas Gohr2014-09-26
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * origin/auth_getUserData_improvements: KISS - remove class constants for REQUIRE_GROUPS & IGNORE_GROUPS and replace with boolean values use $requireGroups constants in auth classes; comments; code improvements fix comment errors, sp. & grammar code styling - add missing braces Allow user info to be retrieved without groups Restore correct public interface of getUserData() for authldap plugin Conflicts: inc/common.php
| * | | KISS - remove class constants for REQUIRE_GROUPS & IGNORE_GROUPS and replace ↵Christopher Smith2014-05-04
| | | | | | | | | | | | | | | | with boolean values
| * | | use $requireGroups constants in auth classes; comments; code improvementsChristopher Smith2014-03-14
| | | |
| * | | Allow user info to be retrieved without groupsChristopher Smith2014-03-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some parts of dokuwiki (e.g. recent changes, old revisions) can requests lots of user info (to provide editor names) without requiring any group information. This change also implements caching of user info by authmysql & authpgsql plugins to avoid repeated querying of the DB to retrieve the same user information.
* | | | Merge pull request #821 from splitbrain/searchnsAndreas Gohr2014-09-26
|\ \ \ \ | | | | | | | | | | improve qsearch suggestions
| * | | | improve qsearch suggestionsGerrit Uitslag2014-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | * support namespaces with more then one level e.g. @your:namespace * support ns:<ns> as well
* | | | | Merge pull request #799 from enricotagliavini/masterAndreas Gohr2014-09-26
|\ \ \ \ \ | | | | | | | | | | | | Adding X-Forwarded-Proto support
| * | | | | adding X-Forwarded-Proto support in is_ssl()Enrico Tagliavini2014-07-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit adds support for X-Forwarded-Proto in case dokuwiki runs behind a reverse (SSL) proxy, but the connection between the proxy and the web server running dokuwki is plain HTTP. If an authenticated user is accidentaly dropped to HTTP from HTTPS the securecookie setting should be honored and the redirection when saving or canceling a page edit should point to the correct protocol. This happens every time a user hits cancel after editing a page, and likely even after saving. If the webserver doesn't enforce HTTPS the coockie might be sent in clear.
* | | | | | Merge remote-tracking branch 'origin/pr/814'Andreas Gohr2014-09-26
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * origin/pr/814: translation update Conflicts: inc/lang/ta/lang.php
| * | | | | | translation updateNaveen Venugopal2014-07-26
| | | | | | |
* | | | | | | Merge pull request #822 from jurrehart/Issue#637Andreas Gohr2014-09-26
|\ \ \ \ \ \ \ | |_|_|_|_|/ / |/| | | | | | Added @ALL handeling in auth_isMember
| * | | | | | Added @ALL handeling in auth_isMemberJurgen Hart2014-07-30
| | | | | | |
* | | | | | | translation updateSyl2014-09-23
| | | | | | |
* | | | | | | translation updateMohamed Belhsine2014-09-22
| | | | | | |
* | | | | | | translation updateJaroslav Lichtblau2014-09-20
| | | | | | |
* | | | | | | translation updateMarcel Eickhoff2014-09-19
| | | | | | |
* | | | | | | translation updateDavor Turkalj2014-09-19
| | | | | | |
* | | | | | | translation updateSchplurtz le Déboulonné2014-09-17
| | | | | | |
* | | | | | | Merge pull request #857 from dokuwiki-translate/lang_update_20Andreas Gohr2014-09-15
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Translation update (zh-tw)
| * | | | | | | translation updateJune-Hao Hou2014-09-13
| | | | | | | |
* | | | | | | | translation updateViktor Zavadil2014-09-15
|/ / / / / / /
* | | | | | | translation updateDavor Turkalj2014-09-10
| | | | | | |
* | | | | | | translation updateMohamad Mehdi Habibi2014-09-10
| | | | | | |
* | | | | | | fr/newpage.txt: translation suggestionProf Gra2014-09-03
| | | | | | | | | | | | | | | | | | | | | autorisations suffisants -> permissions suffisantes
* | | | | | | Merge remote-tracking branch 'origin/master'Gerrit Uitslag2014-09-01
|\ \ \ \ \ \ \
| * | | | | | | translation updatepokesakura2014-08-28
| | | | | | | |
| * | | | | | | translation updateFelipe Castro2014-08-27
| | | | | | | |
| * | | | | | | translation updateHamid2014-08-18
| | | | | | | |
| * | | | | | | sanity check update messageAndreas Gohr2014-08-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This should avoid problems when a WiFi login redirect intercepts the update check. See https://forum.dokuwiki.org/post/45076
| * | | | | | | translation updateFabio2014-08-09
| | | | | | | |
| * | | | | | | translation updateIgor Degraf2014-08-07
| | | | | | | |
| * | | | | | | set canonical URL to root when on start pageAnika Henke2014-08-02
| | |_|_|_|_|/ | |/| | | | |
| * | | | | | translation updateStan2014-08-02
| |/ / / / /
| * | | | | Merge pull request #820 from dokuwiki-translate/lang_update_118Andreas Gohr2014-07-30
| |\ \ \ \ \ | | | | | | | | | | | | | | Translation update (bn)
| | * | | | | translation updateninetailz2014-07-30
| | | |_|/ / | | |/| | |
| * / | | | better NS check in media_deleteAndreas Gohr2014-07-30
| |/ / / / | | | | | | | | | | | | | | | as discussed in 22db8df7a2f043e38437a49bb327354b2a296bf0
* / / / / fix userlink title when no authplugin is available or no user is foundGerrit Uitslag2014-09-01
|/ / / /
* | | | recheck auth in media_deleteAndreas Gohr2014-07-30
| | | | | | | | | | | | | | | | | | | | | | | | Sometime the passed AUTH was not correct. This is a quick fix, but the whole media manager handling is one stining pile of crap that needs a major rewrite.