| Commit message (Collapse) | Author | Age |
|
|
|
| |
darcs-hash:20061027004117-9b6ab-b7eda08e246e942a1ca4841b94abeda4c2ed722c.gz
|
|
|
|
|
|
|
| |
- add $conf['fmode'] support, fixes bug #939
- fix problem with plugin list not being updated after download
darcs-hash:20061027013208-9b6ab-1a7640b40b5448a7afad42064fd00c2ccf743af0.gz
|
|
|
|
|
|
| |
expire the cache if GeSHi (inc/geshi.php) has been updated since cache creation
darcs-hash:20061027015051-9b6ab-f633dc5130ff23f0eb8871e4f8afb563fff3dc5b.gz
|
|
|
|
| |
darcs-hash:20061026205002-7ad00-70f2acf8203e01d1df93e77ce7d8bdb1f4ddac7b.gz
|
|
|
|
| |
darcs-hash:20061026203942-7ad00-6db8c37c1fba1d274fa6bcdc7cbb245d088325a5.gz
|
|
|
|
| |
darcs-hash:20061023192008-7ad00-c9772b42081c9c7fcc64e37eb90a2ea200b21850.gz
|
|
|
|
| |
darcs-hash:20061023051106-05dcb-cb7c1c24241c7a01b67311dd5aec8eaf4f518905.gz
|
|
|
|
| |
darcs-hash:20061022134224-7ad00-f5c26c5104869719db3bf01e326e137eb8f4c725.gz
|
|
|
|
| |
darcs-hash:20061020164148-7ad00-6bb857729d9004b0f9b865410c1c666e07cc03aa.gz
|
|
|
|
| |
darcs-hash:20061020163625-7ad00-d83f31886b140150ca5baf25cf016ab3af7afcf9.gz
|
|
|
|
| |
darcs-hash:20061019165805-7ad00-1cd724eabd74ecf66734eba35f607ad474fc8374.gz
|
|
|
|
| |
darcs-hash:20061019104917-7ad00-c284fd3336850a18b633bbc3a49375f59edba3c7.gz
|
|
|
|
| |
darcs-hash:20061019103310-7ad00-0de42af92587989d155f55831956480b7976d6e8.gz
|
|
|
|
| |
darcs-hash:20061019101317-7ad00-c9a5b62a9d1e71c15875a8e39050bc931dbf4d03.gz
|
|
|
|
| |
darcs-hash:20061019083731-c47a2-6d301513c4e313acdbb648e1e22e5b8ef45566da.gz
|
|
|
|
| |
darcs-hash:20061018181931-7ad00-2778b83d25e8dcfad4b00710077e44bcef9af699.gz
|
|
|
|
|
|
|
| |
This fixes the getRecent function when multiple edits occured during the same
second.
darcs-hash:20061018181837-7ad00-a09b9b63a4bab86d142bfe1f8cf662b001bda075.gz
|
|
|
|
|
|
|
|
| |
This patch is an enhancement to yesterday's changes. The ability to download
external content could be used for XSS attacks, when faking the sent MIME
type. This patch adds a check on the received data for valid images.
darcs-hash:20061018124942-7ad00-4e8bca7d3877e6a10c348b5d45499cf8adf8b087.gz
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch changes fetch.php ability to download external files. It now checks
for the returned MIME type and will only download images. For all other
MIME types a redirect is sent back to the browser. This reduces the risc of
being misused as open proxy.
Additionally the download facility is disabled completly by default by setting
the fetchsize option to 0. Users who want the feature need to overwrite the option
in their local.php.
Background: The ability to download external files is needed to resize external
images on the server side. When disabled, a redirect is sent to the browser which
will download the fullsize image and rescale it on the client side which is more
bandwidth and CPU intensive.
darcs-hash:20061017175329-7ad00-cd1b1bfa043a04540c51ca8380d28deaa14147d1.gz
|
|
|
|
| |
darcs-hash:20061017091036-7ad00-41df4dbaddb0a20d0f000f7a1bb000aaf2176185.gz
|
|
|
|
| |
darcs-hash:20061009103112-3c565-b3883aadc0875d06ddadcd54a0dab2075e415eef.gz
|
|
|
|
| |
darcs-hash:20061011141043-3c565-9509bda5d864e0fbb42088d04d5b6f337dd18eb7.gz
|
|
|
|
| |
darcs-hash:20061015222040-d5083-afb1c38f5bb2610260bbc51fbff816a8ed2e5f49.gz
|
|
|
|
| |
darcs-hash:20061015222615-d5083-774269139d15c9a12b364e2c88dea46b477c912e.gz
|
|
|
|
| |
darcs-hash:20061013113521-7ad00-1ab48718ab30e042971a6dd6ef595462185955e6.gz
|
|
|
|
|
|
|
| |
- translated new strings in registermail.txt, config e usermanager plugins
- fixed changed parameter in config plugin
darcs-hash:20060829170241-57bea-24bf2cbfb341f25b1461cc7cd4fc442e0f44d511.gz
|
|
|
|
| |
darcs-hash:20061010111646-7ad00-9b0b08b448f0dcadebff784f27f0ec28d49cbc21.gz
|
|
|
|
|
|
|
| |
There were recent reports of exceeded patternsize in the wordblock function
when used with PHP5
darcs-hash:20061009165557-7ad00-f35d44da296caf6fd85431520d600033402d9b2f.gz
|
|
|
|
| |
darcs-hash:20061008103152-7ad00-5a26c285c8d4899ab9b21a84d493671857d77a99.gz
|
|
|
|
|
|
| |
Fixes a header injection/XSS vulnerability
darcs-hash:20061008100523-7ad00-be06a942badb6a2a9ed862be003ee0050504b4b0.gz
|
|
|
|
|
|
|
| |
This patch removes some commented code fragments and alternative
snippet generators
darcs-hash:20061008090624-7ad00-14bfee2ded6c6c8ef43ad02a4c02a5d95ee9daf7.gz
|
|
|
|
| |
darcs-hash:20061008074029-7ad00-8457873dd8ad2f5a36dc8f44eca42a4378e61e93.gz
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch updates p_get_metadata() to utilise the in memory copy
copy of the current page's metadata ($INFO['meta']) when appropriate.
The patch also updates p_set_metadata() to synchronise any changes
to the current page's metadata with $INFO['meta'].
$INFO hash is updated with two new elements:
'id'
darcs-hash:20061004210030-9b6ab-7eab6f933a775fe350a1fb14d1118ea77d2db919.gz
|
|
|
|
| |
darcs-hash:20061006113409-23886-166f573a8ae5c897011282ef22a581cea1dbce86.gz
|
|
|
|
|
|
|
| |
- change validation pattern to allow 3 or 4 octal digits and hence
setting of SUID, SGID and sticky bit on systems which support them
darcs-hash:20061005223141-9b6ab-80511ecc4780d6258f15f59087f9bab20d1f1340.gz
|
|
|
|
|
|
|
|
| |
This patch automatically lowercases the superuser name like DokuWiki will
do itself later on. It also fixes the email check and requires it to have
at least an @ character.
darcs-hash:20061004183516-7ad00-791df13131c2484cb08c840812688d83bdf807fa.gz
|
|
|
|
|
|
|
| |
Rebind as superuser even on a previous successful bind as normal user, when
superuser credentials are available. LDAP access restrictions may need it.
darcs-hash:20061003153018-7ad00-16a69e99f93433bd9e999086f8757a56f975a1ef.gz
|
|
|
|
|
|
|
|
|
|
| |
This patch changes the DOKU_COOKIE define to be based on the DOKU_URL define.
DOKU_COOKIE is now used as session key as well, making sessions no longer
dependend on the title option. This should fix problems with multiple
wikis on the same host (using the same title) and wikis accessed through
different URLs.
darcs-hash:20061003121546-7ad00-aea4c256b7752815ed422ce74a659152a601d267.gz
|
|
|
|
|
|
|
| |
This patch sets the private bound variable back to false if a new connection
is opened.
darcs-hash:20061003104320-7ad00-24370bcdc7beff5db7d7f2e68ea180763699ca5c.gz
|
|
|
|
| |
darcs-hash:20061002203925-9b6ab-ca7c87dc96fbc9572ef92a804d58715b0ab0b3e5.gz
|
|
|
|
|
|
|
|
|
|
| |
- add retry button (as suggested by Diego Georgini)
- correct error color, from green to red (spotted by Diego Georgini)
- add utf8_decode and utf8_encode to required function list, when
mb_string functions are not available.
- remove extra backslash from reported file names.
darcs-hash:20060930170121-9b6ab-d7b4a455b01d28f35b8c69385639439eaca8944e.gz
|
|
|
|
| |
darcs-hash:20060930143719-05dcb-251992d688e64ed221dbfe3d9c198fae603e2531.gz
|
|
|
|
|
|
|
|
| |
updated wwordblock.conf
updated installer checksum
increased msg num
darcs-hash:20060928200451-7ad00-061feb181c7e91f736fb396db224e4ea9660effa.gz
|
|
|
|
|
|
|
| |
- rework utf8_substr() NOMBSTRING code to always use pcre
- remove work around for utf8_substr() and large strings from ft_snippet()
darcs-hash:20060928165122-9b6ab-0eefc216f07f9d7e7d8eb62ce26605c28ee340fa.gz
|
|
|
|
|
|
|
|
| |
- auth_nameencode.test, add teardown code to clear new
$cache_authname memory cache
- utf8_substr.test, correct expected result for last test
darcs-hash:20060927101118-9b6ab-a72ea443ba67e17946af34d67c274975d563a22f.gz
|
|
|
|
| |
darcs-hash:20060927091545-c47a2-f706a9e54e7450084ffb929b44c9a1b1707c4eef.gz
|
|
|
|
| |
darcs-hash:20060927033713-9b6ab-4b35e0a85b6d11d5a3a98858cd2f860b383ff153.gz
|
|
|
|
|
|
| |
Fixes a shell injection and a DOS vulnerability
darcs-hash:20060926200551-7ad00-5ef27940dda6e48e7e2f8743fc90fa80b7b5cdff.gz
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The default wordblock.conf provided by the guys at chonqed.org matches agaist
URLS beginning with http. But DokuWiki also links simple www.example.com links.
Spammers used this method to place blacklisted URLs in the Wiki.
This patch constructs full URLs from these shortcut-URLs before applying the
blacklist regexp.
The patch also fixes a problem with the toolbar not appearing when the blacklist
hit and denied saving.
darcs-hash:20060926192420-7ad00-519df90a5953b690428bfa0928de37b3053031b0.gz
|
|
|
|
|
|
|
|
|
|
|
| |
rss syntax extended to include a refresh parameter
<digits><period> period can be d,h,m for days, hours, minutes respectively
if not specified will default to 4 hours
dokuwiki imposes a minimum of 10 minutes
metadata now used "date valid age" (seconds) rather than "date valid end"
darcs-hash:20060925201222-9b6ab-c8e6d8e40bb178295bab874fce5147ccff35fbbb.gz
|