summaryrefslogtreecommitdiff
path: root/inc/common.php
Commit message (Collapse)AuthorAge
* use HMAC for CSRF security tokens FS#2794Andreas Gohr2013-05-31
|
* use hmac for external ressource hash FS#2794Andreas Gohr2013-05-31
|
* ensure security token is included in media url when resize parameter is ↵Christopher Smith2013-05-06
| | | | passed in string form, e.g. 'w=80'
* make sure loaded text has the right encodingAndreas Gohr2013-05-05
| | | | | | | | When pages contain non-UTF8 chars (eg. when posted through a script or when edited on the filesystem, parts of DokuWiki can break resulting in missing page content. This fixes these problems by forcing the content to UTF-8 on load. This will result in bad characters for input that is not latin1 but contents will at least be visible.
* add a token to fetch urls requiring image resize/crop to prevent external ↵Christopher Smith2013-03-22
| | | | DDOS via fetch
* removed a bunch of functions which were deprecated in 2005/2006Anika Henke2013-02-18
|
* Merge pull request #164 from splitbrain/diff_recent_prefsChristopher Smith2013-02-03
|\ | | | | store choices for recent changes and diff views in cookie
| * ensure getter works with keys & values containing '#'Christopher Smith2013-02-03
| |
| * update for encoded cookie value & using rawurlencodeChristopher Smith2013-02-03
| |
| * some urldecoding also needed in the cookie setterAnika Henke2013-02-03
| |
| * check preferences in cookie against urldecoded keyAnika Henke2013-02-03
| |
| * urldecode DOKU_PREFS cookie valuesAnika Henke2013-02-03
| |
| * Fix set_doku_pref cookie date and valueMichael Hamann2013-01-26
| |
| * fixed setting cookie not workingAnika Henke2013-01-26
| |
| * store choices for recent changes and diff views in cookie (FS#2438 andAnika Henke2013-01-26
| | | | | | | | | | | | | | FS#2700) Note: These changes don't work yet. The cookie is not set and deletes the old one.
* | added comment on use of whitelist vs blacklistAndreas Gohr2013-02-03
| |
* | Updated idfilter() function for IISborekb2013-02-03
|/ | | There is a condition inside idfilter() function that helps Apache on Windows to properly handle colon as a namespace separator by replacing it with semicolon. However, this is not necessary on Microsoft IIS server so the condition was improved.
* removed unused varsAndreas Gohr2013-01-18
|
* moved registration notification to subscription classAndreas Gohr2012-11-30
|
* consolidate more notification code in subscription classAndreas Gohr2012-09-21
| | | | This is untested and probably broken currently
* correctly check if subscriptions are enabledAndreas Gohr2012-08-12
|
* subscription system should work now againAndreas Gohr2012-08-12
| | | | | This readds the last part of the subscription system: the normal "every" subscriptions.
* more subscription refactoring BROKENAndreas Gohr2012-08-12
| | | | | | | now the actual sending of bulk messages (digest, list) is reimplemented and partially tested. Still not complete
* highlight queries from popular serch engines only FS#2448Andreas Gohr2012-07-28
|
* removed obsolete parameter from script() FS#2365Andreas Gohr2012-07-28
|
* more INPUT wrapper uses: cache purge, sectok, getIDTom N Harris2012-06-27
|
* some code cleanup and php docsAndreas Gohr2012-06-25
|
* empty ID in wl() will be treated as $conf['start']Dominik Eckelmann2012-05-14
|
* added option to disable reverse DNS lookupsAndreas Gohr2012-04-23
|
* Merge branch 'master' into htmlmailAndreas Gohr2012-04-15
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * master: (382 commits) Romanian language update Marathi language update Arabic Language Update when there's not enough space for images, make sure they stay proportional (might be FS#2480) added minimal RTL print styles (part of FS#2185) moved plugins' rtl.css to their style.css counterpart (part of FS#2185) removed all browser-specific gradients as the recently (in 42ff6730) introduced svg makes them unnecessary removed comments from accidentally commented lines in tpl_includeFile() removed obsolete template file added tpl_includeFile() to core Make getTitle method in remote interface public Changed an error code in XML-RPC interface. This error hasn't anything to do with the rest of the -32600 errors. BG: language update Korean language update fixed performance issues with gradient in Firefox (which also added gradient support for IE9) (FS#2447) deleted very old (and unused) images added accidentally removed '<?php' back in (was in 57fc5edd) wrapped X-UA-Compatible meta tag with conditional comments added explanation to todo in _forms.css removed problematic 'overflow: hidden' from lists again ('unfixes' FS#1950) ... Conflicts: inc/auth.php inc/load.php
| * coding style updatesAndreas Gohr2012-03-16
| |
* | add missing table tags for HTML diff mailsAndreas Gohr2012-03-14
| |
* | Add various headers to the mails FS#2247. pull request #83 closedAndreas Gohr2012-03-09
| |
* | use inlinestyles for diffs in HTML mailsAndreas Gohr2012-03-09
| |
* | fixed missing replacement for HTML notify mailsAndreas Gohr2012-03-04
| |
* | allow non-txt extensions when accessing localesAndreas Gohr2011-11-13
| |
* | Make use of new Mailer class in notify()Andreas Gohr2011-11-12
|/ | | | It now uses inline diff format for diff HTML mails
* bind security token to usernameAndreas Gohr2011-10-15
| | | | | | | This makes the security token more robust agains session fixation attacks. A CSRF warning will no longer abort a page save but lead to the preview mode to avoid information loss when a user logs in during editing (eg in another tab).
* allow page unlocking based on session IDs FS#2262Andreas Gohr2011-10-15
|
* Treat a whitespace-only page as empty and delete it FS#2283Andreas Gohr2011-10-15
|
* More mediamanager reworkingAdrian Lang2011-09-24
|
* mergingKate Arzamastseva2011-08-25
|\
| * Don't delete meta files when pages are deleted, fixes FS#2301Michael Hamann2011-08-19
| | | | | | | | | | | | | | | | As we need to keep all core meta files anyway (the only core file that had been deleted but shouldn't be deleted is the .indexed file) and plugins can keep care of their own metadata files using the IO_WIKIPAGE_WRITE event there is no reason for using the expensive metaFiles() function during the deletion of pages.
* | recent changes fixKate Arzamastseva2011-06-10
| |
* | media version saving fixesKate Arzamastseva2011-06-05
| |
* | media revisions in recent changesKate Arzamastseva2011-06-04
|/
* Change when metadata is rendered - only when really neededMichael Hamann2011-05-08
| | | | | | | | | | | | | | | | | | | | | | This changes the cache logic for metadata. It introduces a new mode that tries to avoid rendering the page again for simple requests but still updates the metadata when the page has been changed (but not when the cache timeout has been reached or purge is used). It simply compares the time of the last rendering with the last modified time of the page. The old boolean $render parameter has been changed into an int with three possible values. Compatibility for the old parameter is provided using a check with is_numeric using the following mapping: - false is still don't render (0 is the new value for that) - true is using that new render logic which means that many plugins will still work unchanged even if they request a lot of data using $render=true (1 is the new value for that providing full compatibility in the case 1 has been used instead of true) The default value for p_get_first_heading is now that new simple cache logic, the default value for getting metadata is the cache logic which should be used with care but is the only way to request (rendered) metadata that can change because of plugin installations or upgrades.
* Remove deprecated call-time pass-by-reference in inc/common.phpMichael Hamann2011-04-27
| | | | | The value is still passed by reference as the parameter of the called function is declared as reference.
* Fix namespace template loading (load $data['tplfile'] instead of $data['tpl'])Michael Hamann2011-02-07
|
* handle link local and localhost IPv6 addresses in clientIP FS#2138Andreas Gohr2011-02-06
|