summaryrefslogtreecommitdiff
path: root/inc/plugin.php
Commit message (Collapse)AuthorAge
* CSRF prevention for admin pluginsAndreas Gohr2007-08-29
| | | | | | | | | | | | | | | This patch adds a session based token to all form in the default action plugins. The validity of the token is checked before any administrative function is executed aiming to protect DokuWiki's admin functions from Cross-site request forgery (CSRF) attacks. Another patch will follow to add the same functionality on other, less critical functions. More details on CSRF attacks can be found at http://en.wikipedia.org/wiki/Cross-site_request_forgery darcs-hash:20070829201538-7ad00-d0770224a3351fd8e38968e3a9d8e73520482445.gz
* Typo in plugin.php (FS#1094)Guy Brand2007-03-23
| | | | darcs-hash:20070323075309-19e2d-ec759de766c1ee42e0145e81bea3946aa9f35298.gz
* helper plugin patchEsther Brunner2007-02-27
| | | | darcs-hash:20070227122635-20862-e10e801a5224585fa32d8dc3401fd5eb98d70930.gz
* moved plugin base class to incAndreas Gohr2007-01-20
darcs-hash:20070119233350-7ad00-a8ae733093693a55c2566f5ee698a7b4aa3a833a.gz