summaryrefslogtreecommitdiff
path: root/conf
Commit message (Collapse)AuthorAge
* removed xref interwiki linkAndreas Gohr2008-10-10
| | | | | | We now handle this through our own plugin darcs-hash:20081010200648-7ad00-f7c94c2d4e7f099c5a9d7e5381423c67e306d73a.gz
* editor_info_patchAndy Webber2008-10-01
| | | | | | | | | | | At present, DW shows the username on the bottom left under "logged in as", and the login name for "last modified", "locked by" and under revisions/recent changes. In a corporate environment, particularly when integrated with a Single Sign-On system, the login name may be somewhat unfriendly. This patch makes the "logged in as" the same as the value used elsewhere and also allows an admin to decide whether it should be the login name, username or e-mail address that is displayed. The e-mail address may also, optionally, be a mailto: link. E-mail addresses are obfuscated according to the 'mailguard' setting. The default behaviour is to show the login name which is no change from previous behaviour for the "last modified"/"locked by"/revisions/"recent changes", but is a change for the "logged in as". darcs-hash:20081001152914-6ad63-9cd7174068ac55de381f1318a4401f8c51de5b0c.gz
* more cookie security FS#1490Andreas Gohr2008-09-13
| | | | | | | | | | | | This patch adds the httponly option to the PHP session cookies and DokuWiki's auth cookie when supported by the PHP version. It also adds a new config option 'securecookie' which is enabled by default. It makes sure the browser will not sent a cookie set via HTTPS over a non-secured connection. This option has to be disabled for wikis that only protect the login with SSL but not the whole wiki. darcs-hash:20080912224922-7ad00-d5275147ba9d17a9f6defa8a51ca720da74ba8a0.gz
* fixed all remaining links to wiki.splitbrain.org and to restructured pagesAnika Henke2008-08-15
| | | | darcs-hash:20080815134211-f7d6d-61f4f4fa1c5f62832d7cc5ad3e3a7a78460d2981.gz
* updated links to the DokuWiki websiteAndreas Gohr2008-08-10
| | | | | | The official wiki is now at www.dokuwiki.org darcs-hash:20080810173029-7ad00-fbd35921ff3c2c5557f33750bedd4553b0abdd70.gz
* fixed an error and added a few entries in acronyms.conf FS#1454 FS#1455Andreas Gohr2008-07-27
| | | | darcs-hash:20080727180710-7ad00-efa9dfa1021e8e5580e28f0d6b791f63296138d8.gz
* release preparationsAndreas Gohr2008-05-05
| | | | darcs-hash:20080505170542-7ad00-93a5ef64ba6eacceecf37921699a63286b02ee48.gz
* release preparationsAndreas Gohr2008-05-04
| | | | darcs-hash:20080504185355-7ad00-c8ac1fa6a50a4226ef17bf7dd8b34065c177276e.gz
* release preparationsAndreas Gohr2008-04-11
| | | | darcs-hash:20080411141012-7ad00-b375248f86301812f1a56758ff2b9e89dea0d19c.gz
* release preparationsAndreas Gohr2008-03-31
| | | | darcs-hash:20080331180649-7ad00-a38029f32d12ab21506ca4ccf3c36f55eaa12962.gz
* Add support for plugin renderers to replace standard renderersChris Smith2008-03-12
| | | | | | | | | | | | | | | | | | | This patch is the fourth in a series aimed at making it easier for DW to allow plugins to modify the standard handling of line-breaks. It adds: - new config setting 'renderer_xhtml', default value 'xhtml' - new renderer method 'reset()' which is used by reusable renderers when used to render second and subsequent data. (*) An extra step has been added to the renderer selection process. - check $conf["renderer_$mode] for renderer name. If it doesn't exist use $mode as the renderer name. (*) It maybe that the 'document_start()' method can be used for this. However the current xhtml does not correctly reset itself for reuse. darcs-hash:20080312005647-f07c6-ff2cb960c05927f5c6f3e916a364fcad470c2ce3.gz
* added config option to enable/disable the XML-RPC interfaceMichael Klier2008-02-27
| | | | darcs-hash:20080227213050-23886-e55353ab04f9d23675ec11a9e97ba6affec719fc.gz
* Superuser and manager now can be comma separated listsGuy Brand2008-02-27
| | | | | | | | | This patch allows $conf['superuser'] and $conf['manager'] to be lists of values instead of only a single value. So one can put: $conf['superuser'] darcs-hash:20080227142515-19e2d-c160914589f71531583e7ddaab1fc6a81996efa1.gz
* use strftime() instead of date() FS#1335 :!:Andreas Gohr2008-02-23
| | | | | | | | | | | | | | This patch replaces the use of the date() function with the strftime() function. The latter will respect a set locale and will use localized strings for things like month names. Because the format options for strftime differ from the ones used in date, DokuWiki will rest the value of $conf['dformat'] if it contains an old date format string (detected by missing % characters). Plugins or templates using the $conf['dformat'] need to be updated. darcs-hash:20080223124045-7ad00-6afb2b839afc58781463e25577e06adb675fff79.gz
* XMLRPC: added getRecentChanges()Michael Klier2008-01-19
| | | | darcs-hash:20080118230312-23886-acd8758fc95eb64788533feca4afd5fbb207c290.gz
* Spellchecker removedAndreas Gohr2007-11-23
| | | | | | | | With spell checkers available in all modern browsers, having a spell checker in DokuWiki's core code is no longer necessary. This patch removes the spell checking feature. It will be made available as optional plugin. darcs-hash:20071123125840-7ad00-faf7aa4673421dbb3fad904ba5b46b4927a5176d.gz
* X-Sendfile support for fetch.phpAndreas Gohr2007-10-08
| | | | | | | | | | | | This patch enables the use of the X-Sendfile extension offered by certain webservers to deliver static files after running a dynamic script. This combines the flexibility of a PHP file to check for authorization, caching and resizing with the low memory footprint and high performance of static file delivery of the webserver. See http://blog.lighttpd.net/articles/2006/07/02/x-sendfile for details darcs-hash:20071008185019-7ad00-1e6d4768fb60d58955e4253c7786eaf8cf13d0bb.gz
* fix for XSS in spellchecker FS#1195Andreas Gohr2007-07-19
| | | | darcs-hash:20070719122538-7ad00-6c49f72bc490f27718d25f105fd762982631bd7b.gz
* use UTF-8 chars instead of HTML entitiesAndreas Gohr2007-07-18
| | | | darcs-hash:20070718110715-7ad00-5b3ca5a70447306ca92c3a35b9d13dd0cf7afa7a.gz
* improved feed creationAndreas Gohr2007-07-11
| | | | | | | | | The feed now can export diff views (unified and HTML) as well as full HTML page content. Some things might be broken. Everybody please test it! darcs-hash:20070711213624-7ad00-49359417127fdbd6e31374738509110271b6b351.gz
* final release prepsAndreas Gohr2007-06-26
| | | | darcs-hash:20070626182517-7ad00-eedd1d5d52954076d4518235772e6199233d93c2.gz
* some cleanups / release prepsAndreas Gohr2007-06-26
| | | | darcs-hash:20070626173537-7ad00-8a6d2b90ef9413556f8d6dbb6ac2e65619616c48.gz
* make typography option three staged FS#1142Andreas Gohr2007-06-13
| | | | | | | | | | | | | | | | Because correct smart quote parsing with regular expressions is nearly impossible, especially when dealing with quote usage in languages different from english, the typography configuration option was changed. 0 means to completely disable any typography replacements 1 will only handle the multiply entitity and double quotes, this should nearly always work without problems and is the new default 2 will add singlequote parsing. This might break because single quotes and apostrophes are not always easily distinguishable. Especially in languages where single quote openings and apostrophes are different characters you might experience problems. For english it should nearly always work. darcs-hash:20070613184015-7ad00-0cebc3f807f54467d54458075c5c9f651355c5ba.gz
* Partial Fix FS#1085Chris Smith2007-05-28
| | | | | | | | | | | | | | | | | | | This fix adds a new configuration setting, 'auth_security_timeout', which controls the duration (seconds) before authentication information is rechecked. The default value is set to 900 seconds (15 minutes). Wiki installations particularly concerned about security should set this value to 0. DokuWiki maintains a copy of the most recent authentication details in both a browser cookie and server session. Normally these values are compared on each page visit. If the comparison passes the user is accepted. The same data will be used over and over until either the cookie or the session expires. FS#1085 is concerned with updates to the original authentication data not being able to affect this comparison. The new 'auth_security_timeout' setting will force expiration of the saved data after the specified period has elapsed. Re-authentication may affect page response, especially on systems which use remote authentication systems. This fix is considered partial and should be reviewed after the next release with a view to extending the authentication class to allow those mechanisms which are able to control when DW should revoke authentication. darcs-hash:20070528194747-d26fc-f471004da604eb66f7131c470e446b98c29d801b.gz
* release preparationsAndreas Gohr2007-05-24
| | | | darcs-hash:20070524172905-7ad00-a3635da93981b1cc6063143b6a4c2883fb0fe8b9.gz
* add sneaky_index optionAndreas Gohr2007-05-11
| | | | | | This disables the last patch and adds an option to enable it on demand. darcs-hash:20070511200235-7ad00-a3ea769bc4965710b7fd261d31e2c9f8a3d9d7f5.gz
* fixed dokubug interwiki linkAndreas Gohr2007-04-11
| | | | darcs-hash:20070411194508-7ad00-e0373de561bdd3c5154a4fc230a143be0e6f8699.gz
* added ellipsis to entities.confAnika Henke2007-03-31
| | | | darcs-hash:20070330225252-d5083-cc2f5e0ad8e5073c10e69d6ba5fa192468a0f1f5.gz
* soted indexer is now defaultAndreas Gohr2007-02-26
| | | | darcs-hash:20070226175529-7ad00-4d3d984da1edbf2ded546cfbd7374f97f032d032.gz
* use dokubug as default interwiki tag for DokuWiki bugs #1045Andreas Gohr2007-02-24
| | | | darcs-hash:20070224144211-7ad00-fc0695dc9290bd5d4192eb9d76ba3cafa2125d8f.gz
* added some comments about new XSS protection to mime.confAndreas Gohr2007-02-24
| | | | darcs-hash:20070224131623-7ad00-cd82685db94b50be942a6d71293010aa8fdabdfa.gz
* Test uploaded files for HTML tags FS#1077Andreas Gohr2007-02-24
| | | | | | | | | | | | | | | Following the problem with IE's mimetype handling described at http://www.splitbrain.org/blog/2007-02/12-internet_explorer_facilitates_cross_site_scripting this patch adds a new option (on by default) to check the first 256 bytes of uploaded files against a list of a few HTML tags and denies the upload of such a file. In rare occasions this may block harmless and valid files, but that's price we have to pay for Microsoft's stupidity. Users who need HTML uploads should disable this check. (Don't do that on open Wikis!) darcs-hash:20070224124458-7ad00-0ced616d06f563515b36a0a6871b5ba50229c946.gz
* Rar mime type addedwingedfox2007-01-11
| | | | darcs-hash:20070111113557-00f02-f868a727d73fa16d4854ad60ff6aff0b59df67bb.gz
* disable text uploads by defaultAndreas Gohr2007-02-11
| | | | | | Spammers suck - see http://forum.dokuwiki.org/post/2213 darcs-hash:20070211201920-7ad00-0023501c73fece94effcc0efb2c0862c9f771bf2.gz
* workaround config for FS#852Andreas Gohr2007-02-08
| | | | | | | | | On certain platforms the ignore_user_abort function does not work as expected, resulting in a non working indexer webbug. Users with such a broken system (IIS+PHP as CGI) can enable this option to work around the problem (resulting in longer load times for the webbug). darcs-hash:20070208195145-7ad00-8fc14f9da535a70fa837066773e15a3926b077c7.gz
* manager user/groupAndreas Gohr2006-12-03
| | | | | | | This patch adds support for a manager option as suggested in http://www.freelists.org/archives/dokuwiki/11-2006/msg00314.html darcs-hash:20061203134104-7ad00-72ff6422bbb4f79be325c7e77255e1eee32d0f6b.gz
* rss_summary_configMarc Mayfield2006-11-01
| | | | | | | | Add a configuration option to control whether or not the edit/revision summary is displayed with the title of RSS feeds. The default is to show the summary, the same as DokuWiki did prior to this addition. darcs-hash:20061101023313-9039d-d067e9bcd7dc0c7cabd57674d1072c5b882ad4e7.gz
* Indexer asian language fixes and speed-upsTom N Harris2006-11-17
| | | | | | | | | Make Chinese and Japanese work better with the new indexer. Some missing punctuation added to utf8_stripspecials. Misc. other changes to make indexing faster. The indexes will expire on backend upgrades, so you don't have to delete *.indexed darcs-hash:20061117123032-6942e-774b38e08234928c49b37e40addba375acf67ac0.gz
* release preparationsAndreas Gohr2006-11-06
| | | | darcs-hash:20061106192948-7ad00-c5f00a6a452e941b6799663d5b73e7e089a376a2.gz
* disable HTML upload by defaultAndreas Gohr2006-11-01
| | | | | | | Spammers use unprotected wikis to upload spammy HTML pages. This disables HTML upload by default darcs-hash:20061101161813-7ad00-11c808965ef80bd042ea3e3586352cfdccb309db.gz
* release preparationsAndreas Gohr2006-10-19
| | | | darcs-hash:20061019165805-7ad00-1cd724eabd74ecf66734eba35f607ad474fc8374.gz
* restrict fetch.php's download abilitiesAndreas Gohr2006-10-17
| | | | | | | | | | | | | | | | | | This patch changes fetch.php ability to download external files. It now checks for the returned MIME type and will only download images. For all other MIME types a redirect is sent back to the browser. This reduces the risc of being misused as open proxy. Additionally the download facility is disabled completly by default by setting the fetchsize option to 0. Users who want the feature need to overwrite the option in their local.php. Background: The ability to download external files is needed to resize external images on the server side. When disabled, a redirect is sent to the browser which will download the fullsize image and rescale it on the client side which is more bandwidth and CPU intensive. darcs-hash:20061017175329-7ad00-cd1b1bfa043a04540c51ca8380d28deaa14147d1.gz
* multiple language updatesAndreas Gohr2006-10-13
| | | | darcs-hash:20061013113521-7ad00-1ab48718ab30e042971a6dd6ef595462185955e6.gz
* release candidate preparationAndreas Gohr2006-10-08
| | | | darcs-hash:20061008103152-7ad00-5a26c285c8d4899ab9b21a84d493671857d77a99.gz
* release candidate preparationsAndreas Gohr2006-09-28
| | | | | | | | updated wwordblock.conf updated installer checksum increased msg num darcs-hash:20060928200451-7ad00-061feb181c7e91f736fb396db224e4ea9660effa.gz
* security fixes for fetch.php #924 #962Andreas Gohr2006-09-26
| | | | | | Fixes a shell injection and a DOS vulnerability darcs-hash:20060926200551-7ad00-5ef27940dda6e48e7e2f8743fc90fa80b7b5cdff.gz
* cache, metadata & purgefile updateschris2006-09-24
| | | | | | | | | | | | | | | | | | | Cache - add dependency for metadata renderer file - check metadata for end of page life, "date valid end". Metadata Renderer - RSS syntax mode now sets rendered page expiry, "date valid end" and includes the feed URL in "relation haspart". Purgefile For all wiki installations the purgefile records the earliest time before which no cache purge (based on data consistency) is required. Cache files older than this time MAY need to be purged. - remove purgeonadd configuration setting darcs-hash:20060924202157-9b6ab-4531e91411c41914eeab2b6a8160c3d46b001cee.gz
* fixed md5 sum for installerAndreas Gohr2006-09-23
| | | | darcs-hash:20060923110047-7ad00-b9007f7f656e56656a44b2349c14e7839c1f68ce.gz
* corrected typoTom Hoover2006-09-23
| | | | darcs-hash:20060923034943-e5a2d-5888ec82ef23d82619522aaf33bee1c4bc1b1099.gz
* disable debugging by defaultAndreas Gohr2006-09-17
| | | | darcs-hash:20060917183150-7ad00-1672f8ef23dc49b6cdfd43d29338dab6a14a928c.gz
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-07 19:12:08 +0000