summaryrefslogtreecommitdiff
path: root/lib/exe/xmlrpc.php
Commit message (Collapse)AuthorAge
* Use md5sum of id and client ip as temporary filename in XML-RPCMichael Hamann2010-03-16
| | | | | | | | | | | | Before this patch the temporary filename was the uncleaned id. This allowed everyone with upload-privileges (on the whole wiki) and XML-RPC privileges on a XML-RPC-enabled DokuWiki to (over)write any file PHP is allowed to write with any content he wants. If you have XML-RPC enabled and users with XML-RPC and upload privileges you don't trust in a way you would allow them to write any file PHP may write, consider this as an important security fix. By default XML-RPC is disabled, so if you don't know what I'm talking about you are probably not affected by the problem.
* Merge branch 'requireall'Andreas Gohr2010-03-12
|\ | | | | | | | | Conflicts: inc/fulltext.php
| * removed require's in lib/exe/*Andreas Gohr2010-02-01
| |
* | Move & rename HTML_PAGE_FROMTEMPLATE to common.phpAdrian Lang2010-03-10
| | | | | | | | | | The new COMMON_PAGE_FROMTEMPLATE is triggered by pageTemplate AFTER the template has been read but before performing the template replacements.
* | added dokuwiki.search XMLRPC call FS#1882Andreas Gohr2010-02-28
|/
* do not trim XMLRPC values FS#1824Andreas Gohr2009-12-19
| | | | | | | | Ignore-this: f43d3f070cfae4040e0e70648d0e541a The XMLRPC backend will not trim whitespaces or newlines from string values anymore. darcs-hash:20091219151652-7ad00-94d6cb26ff6396e09f107cf09dccb5423680c5c9.gz
* Security Fix: do not allow skipacl in XMLRPCAndreas Gohr2009-11-16
| | | | | | | | | | | | | Ignore-this: 517a7546aab86c5370cccf1aa2171490 Parameters passed to dokuwiki.getPagelist and wiki.getAttachments could contain the option "skipacl" which would prevent ACL checking. This could leak information about usually non-readable files (like filenames, sizes and so on). The content of the files was not accessible. XMLRPC is disabled by default. darcs-hash:20091116220523-7ad00-0fa8a9a7a52076619c6836738f9a1f00a6dafe27.gz
* restrict XMLRPC to configurable groups and usersAndreas Gohr2009-05-16
| | | | | | | | | Ignore-this: 1370cee84d44bb35ae7c0c988ed8f1ff This patch adds a config option to define users or groups that may access the XMLRPC API. ACLs are still checked on top of this intial access control. darcs-hash:20090516114351-7ad00-155fb6c74c29f5f84e79544a534369eec0403ff0.gz
* removed debug statementsAndreas Gohr2009-03-08
| | | | | | Ignore-this: c7d706a81320fb2bf80a399e5fcc259a darcs-hash:20090308112249-7ad00-488e7b5cc87ad3727a161b9625892709d4f25fc0.gz
* Support login in XMLRCP and added API version infoAndreas Gohr2009-03-03
| | | | | | | | | | | | A simple version number was added to the XMLRPC API to make it easy for clients to check if the remote endpoint supports certain features. The login function will take credentials and set cookies on successful login. This is useful when HTTP Basic auth is not available. darcs-hash:20090303193608-7ad00-45b1cd7a5165656796df25ed5c4ebc6e8ef7f95a.gz
* Fixed media size in getRecentMediaChanges XML-RPC call.michael2009-02-27
| | | | | | Ignore-this: 6477d59a1da2f51295326537fa8e14bf darcs-hash:20090227220304-074e0-24e77eb6641c0b43c30a941146487facf2f2277f.gz
* streamlined media listingAndreas Gohr2009-02-23
| | | | | | | Some parameters of media_search where changed, parts using this function need to be identified and fixed. darcs-hash:20090223172746-7ad00-d07951739fba17d0c8925b28b947f7cbb7fc7e1a.gz
* XMLRPC lock or unlock a whole bunch of pagesAndreas Gohr2009-02-20
| | | | | | Ignore-this: d7bb2a80532df444e1ee8e60e3a7b653 darcs-hash:20090220184624-7ad00-2ed594f166e29bcc69d7ecbfe017251764981dd8.gz
* additional custom dokuwiki.* methods in XMLRPCAndreas Gohr2009-02-19
| | | | darcs-hash:20090219214505-7ad00-c547bfbf1f7c12cf7509e0ea66222980c6fa11bc.gz
* Media changelog addedmichael2009-01-18
| | | | | | | | There is a new media changelog now, with the flag RECENTS_MEDIA_CHANGES media changes can be requested from the getRecents()-function or the new getRecentsSince()-function, that returns all changes since a given timestamp and optionally before a given timestamp. The media upload and the XML-RPC-server have been changed to use these functions. Additionally, the event MEDIA_UPLOAD_FINISH has been extended, it has a new $data-attribute (the 5th), that contains a boolean if the file does already exist and will be overwritten. darcs-hash:20090118154345-074e0-5d9a90d269e86d8c6a156ecce5cf63115c827433.gz
* Make content-disposition configurable in mime.conf FS#1541Andreas Gohr2008-12-02
| | | | | | | | | | | | | With this patch it is possible to define if a file should be served as download or be displayed inside the browser (if supported) by configuring it in conf/mime.conf Mimetypes that should be served with a "Content-Disposition: attachment" header need to be prefixed with a exclamation mark. All others will be served inline. This will also fix a Problem with Flash 10. darcs-hash:20081202210322-7ad00-6e7ef30aff9322cd135311be77809187da121f3b.gz
* Added perms and size to getRecentChanges in XML-RPCMichael Hamann2008-08-24
| | | | darcs-hash:20080824100938-fdd0b-c44a74e698eab59347b315881728c6a063e8b740.gz
* XMLRPC: Fixed identation, added deleteAttachment, changed params of ↵Gina Haeussge2008-08-24
| | | | | | putAttachment to fit Wiki RPC specs darcs-hash:20080824100043-2b4f5-4ad6d86abcf6bc816a47bfd902e37684483ff43e.gz
* XMLRPC: Fixed lastModified property for getAllPages and getAttachmentsGina Haeussge2008-08-24
| | | | darcs-hash:20080824092446-2b4f5-8424c621fcca7f765feaccea88c1e6664ce94209.gz
* XMLRPC: new event XMLRPC_CALLBACK_REGISTERMichael Klier2008-08-24
| | | | | | | | | By using this event, action plugins can register their own callback methods in DokuWikis XML-RPC server, and extend it's functionality. The event data is the server instance. Plugins can also remove already registered callbacks or replace them with their own methods. darcs-hash:20080824080457-23886-b49b897592ce6717f0980f6044bae2d51fd73336.gz
* XMLRPC: extended listPages()Michael Klier2008-08-24
| | | | darcs-hash:20080824090633-23886-57dd768012053858ec86eab235698b7f297661ea.gz
* XMLRPC: Cleanup in callback registrationsGina Haeussge2008-08-23
| | | | darcs-hash:20080823173152-2b4f5-8aaed82a8122f0901878326fc17a889c22bc1b79.gz
* XMLRPC: Return permissions and date of last modification for filesGina Haeussge2008-08-23
| | | | darcs-hash:20080823173120-2b4f5-8efab03fd182909ea192f739a228ffad64938eda.gz
* XMLRPC: Added options for recursion and filtering in listAttachmentsGina Haeussge2008-08-23
| | | | darcs-hash:20080823140755-2b4f5-f7d4ce991c38cc6a42e0013e738e291a3d134a43.gz
* XMLRPC: Added getAttachmentInfoGina Haeussge2008-08-23
| | | | darcs-hash:20080823140622-2b4f5-cb7dbe63f0142fedf39fdb5cfd1abedb10a6fa56.gz
* XMLRPC: Fixed parameter type of listAttachmentsGina Haeussge2008-08-23
| | | | darcs-hash:20080823140514-2b4f5-32b2010ecf506250e10ed68704e0c31d99920585.gz
* XMLRPC: Added method getAttachment for retrieving a media file from the wikiGina Haeussge2008-08-23
| | | | darcs-hash:20080823100440-2b4f5-a134b64fe552e5151ac7adce0292e90b62d8c747.gz
* XMLRPC: Make getAttachments recursiveGina Haeussge2008-08-23
| | | | darcs-hash:20080823100400-2b4f5-6327f95d079589a33d0e7881df3436fde1db89e1.gz
* XMLRPC: run indexer on putPage()Michael Klier2008-08-13
| | | | darcs-hash:20080813200614-23886-ad320ca14e120d8206ee5ffdfb4ac087e0aa6929.gz
* XML-RPC: added putAttachment()Michael Klier2008-07-13
| | | | darcs-hash:20080713165645-23886-2caca899a42016be8df0797b21d1adef70544cc4.gz
* XML-RPC: added getAttachments()Michael Klier2008-07-13
| | | | darcs-hash:20080713165210-23886-d28593ac62f3471a4dc4a5410263edb0e48986bc.gz
* XML-RPC: added aclCheck()Michael Klier2008-07-13
| | | | darcs-hash:20080713123837-23886-d2cabfd6bb00928f21a64ca317719831efaec3ae.gz
* FS#1386, replace AUTH_WRITE with AUTH_EDITChris Smith2008-04-17
| | | | darcs-hash:20080417094010-f07c6-383f554d1e06f7fa9946994c5b5b7860b2d5d5db.gz
* XMLRPC: getPage() should honour namespace templatesMichael Klier2008-03-31
| | | | darcs-hash:20080331095402-23886-20331db4e1975c3fbc9c4c59e8688f62d7367390.gz
* XMLRPC: pageVersions() should return the current version tooMichael Klier2008-03-11
| | | | darcs-hash:20080310233733-23886-79cb51e12374a51ac2595298bf331e1525962a2f.gz
* XMLRPC: new function pageVersions()Michael Klier2008-03-05
| | | | | | | This function can be used to retrieve a list of revisions for a given wiki page. darcs-hash:20080305195532-23886-dee2ffff8dcdc21532fb62674edce8a74d6c5525.gz
* XMLRPC: putPage() throw IXR_ERROR when attempting to save a empty new pageMichael Klier2008-03-04
| | | | darcs-hash:20080304215619-23886-14f495ef056aa44d6cf17a04c73822ea1a4f9961.gz
* XMLRPC: putPage() autoset summary on created/deleted pages if no summary was ↵Michael Klier2008-03-04
| | | | | | given darcs-hash:20080304214919-23886-2e443173de79d2d6a4b8fa2ed253c15a64c13a4a.gz
* XMLRPC: removed useless test for missing text in putPage()Michael Klier2008-03-02
| | | | darcs-hash:20080302175105-23886-8f67f9bdfdf69e8cee1f58f60984b53fb8a27ac9.gz
* added config option to enable/disable the XML-RPC interfaceMichael Klier2008-02-27
| | | | darcs-hash:20080227213050-23886-e55353ab04f9d23675ec11a9e97ba6affec719fc.gz
* XMLRPC: use correct date format in getRecentChanges()Michael Klier2008-01-25
| | | | darcs-hash:20080125173529-23886-7f5470cb513b667a8c2acb526edb3df8812070d4.gz
* XMLRC: refactored putPage()Michael Klier2008-01-25
| | | | darcs-hash:20080125171834-23886-090763a4733f72b62c539a3ae2ff4835bd10a040.gz
* XMLRPC: added getRecentChanges()Michael Klier2008-01-19
| | | | darcs-hash:20080118230312-23886-acd8758fc95eb64788533feca4afd5fbb207c290.gz
* added XMLRPC linkList()Michael Klier2007-11-09
| | | | darcs-hash:20071109112720-23886-1ce97b5cc09630c55ef507144c53bbb8aae4f892.gz
* Revert change to DOKU_INC introduced by xmlrpc_putpage patchGuy Brand2007-10-27
| | | | darcs-hash:20071027202616-19e2d-6477ab646496d10203875826e06d923cda32fde2.gz
* xmlrpc_putpageDennis Ploeger2007-10-12
| | | | | | Adds the putpage-method to the xmlrpc-server-code darcs-hash:20071012135930-b8925-1d770de41b3e6aea4c612666194e915dda344647.gz
* don't use fullpath() before initializedAndreas Gohr2007-09-30
| | | | darcs-hash:20070930201133-7ad00-a35a6c40f880116009efd9e50cb002bd75733369.gz
* don't use realpath() anymore (FS#1261 and others)Andreas Gohr2007-09-30
| | | | | | | | | | | The use of realpath() to clean up relative file names caused some trouble in certain setups relying on symlinks or having restricitve file structure setups. This patch replaces all realpath() calls with a PHP only replacement which should solve those problems. darcs-hash:20070930184250-7ad00-512ff04c95f57fc9eaf104f80372237a3c94286f.gz
* experimental XMLRPC supportAndreas Gohr2006-11-25
This adds experimental XMLRPC support to DokuWiki. A subset of the Wiki XMLRPC API v2 [1] is implemented. You need to remove the die() call in lib/exe/xmlrpc.php to use it. [1] http://www.jspwiki.org/wiki/WikiRPCInterface2 darcs-hash:20061124232744-7ad00-fdaccc68787c3b0349b155a94a1a56003560c5d8.gz
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-06 20:47:32 +0000