summaryrefslogtreecommitdiff
path: root/lib/plugins
Commit message (Collapse)AuthorAge
* Create and use ad search for user, name and emailMichael Große2015-03-12
|
* Get total number of users in ad, needed for pagingMichael Große2015-03-11
|
* translation updateSchplurtz le Déboulonné2015-02-24
|
* check permissions in ACL plugin's RPC API component. #1056Andreas Gohr2015-02-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security Fix Severity: Medium Type: Remote Priviledge Escalation Remote: yes Vulnerability Details: This fixes a security hole in the ACL plugins remote API component. The plugin failed to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also had permissions to set up their own ACL rules and thus circumventing any existing rules. Risk Assessment: The XMLRPC API in DokuWiki is marked experimental and off by default. It also implements an additional safeguard by giving access to a configured circle of users and groups only. So only a minor number of DokuWiki installations will be affected at all. For affected installations the risk is high if users with access to the API are not to be trusted. Thus the overall severity of medium. Resolution: Installations applying this commit are safe. A hotfix is about to be released. Meanwhile users are advised to disable the XMLRPC API in the config manager.
* translation updateÁlvaro Iradier2015-02-13
|
* translation updatelainme2015-02-12
|
* Merge pull request #1013 from dokuwiki-translate/lang_update_168Andreas Gohr2015-02-09
|\ | | | | Translation update (ru)
| * translation updateAleksandr Selivanov2015-01-25
| |
* | fix referral settings in AuthLDAP. closes #1023Andreas Gohr2015-02-09
| |
* | fixed method signature #1024Andreas Gohr2015-02-09
| |
* | translation updateDavor Turkalj2015-01-28
|/
* fixed wrong config check in extension manager #1006Andreas Gohr2015-01-15
|
* Losslessly reduced PNG images with optipng -o7 -strip all, advdef -z4 -i60, ↵KeenRivals2015-01-14
| | | | and advpng -z4 -i60.
* Scrutinizer Auto-FixesScrutinizer Auto-Fixer2015-01-10
| | | | This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com
* translation updateMijndert2015-01-08
|
* Scrutinizer Auto-FixesScrutinizer Auto-Fixer2015-01-07
| | | | This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com
* fixed search'and'replace fuckup in config pluginAndreas Gohr2015-01-07
|
* Remove error supression for file_exists()Andreas Gohr2015-01-07
| | | | | | | In an older version of PHP a file_exists() call would issue a warning when the file did not exist. This was fixed in later PHP releases. Since we require PHP 5.3 now, there's no need to supress any error here anymore. This might even give a minor performance boost.
* translation updateSchplurtz le Déboulonné2015-01-05
|
* Merge pull request #989 from dokuwiki-translate/lang_update_136Andreas Gohr2015-01-05
|\ | | | | Translation update (cs)
| * translation updateJaroslav Lichtblau2014-12-31
| |
* | translation updateMaciej Helt2015-01-05
|/
* translation updateMarian Banica2014-12-30
|
* Merge pull request #975 from dokuwiki-translate/lang_update_122Andreas Gohr2014-12-27
|\ | | | | Translation update (pt)
| * translation updateGuido Salatino2014-12-18
| |
* | Merge pull request #979 from dokuwiki-translate/lang_update_129Andreas Gohr2014-12-27
|\ \ | | | | | | Translation update (fr)
| * | translation updateYves Grandvalet2014-12-20
| |/
* / translation updateType-kun2014-12-21
|/
* translation updateSatoshi Sahara2014-12-17
|
* translation updateVitaly Filatenko2014-12-15
|
* Merge pull request #964 from dokuwiki-translate/lang_update_94Andreas Gohr2014-12-15
|\ | | | | Translation update (cs)
| * translation updateJaroslav Lichtblau2014-12-13
| |
* | Merge pull request #965 from dokuwiki-translate/lang_update_98Andreas Gohr2014-12-15
|\ \ | | | | | | Translation update (ru)
| * | translation updateType-kun2014-12-13
| |/
* / translation updateMyeongjin2014-12-14
|/
* translation updateType-kun2014-12-12
|
* Merge pull request #957 from dokuwiki-translate/lang_update_83Andreas Gohr2014-12-12
|\ | | | | Translation update (ja)
| * translation updateSatoshi Sahara2014-12-12
| |
* | Merge pull request #959 from dokuwiki-translate/lang_update_87Andreas Gohr2014-12-12
|\ \ | | | | | | Translation update (fi)
| * | translation updateJussi Takala2014-12-12
| |/
* / translation updateJaroslav Lichtblau2014-12-12
|/
* check for SSL support in the extension managerAndreas Gohr2014-12-11
|
* translation updateSøren Birk2014-12-11
|
* Merge pull request #946 from dokuwiki-translate/lang_update_60Andreas Gohr2014-12-10
|\ | | | | Translation update (it)
| * translation updateTorpedo2014-12-09
| |
* | Some PHPDocs media and admin pluginGerrit Uitslag2014-12-10
| |
* | translation updateSøren Birk2014-12-10
|/
* Merge remote-tracking branch 'origin/master' into scrutinizerissuesGerrit Uitslag2014-12-09
|\ | | | | | | | | | | | | | | | | Conflicts: inc/media.php inc/plugin.php inc/template.php lib/plugins/authplain/_test/escaping.test.php lib/plugins/syntax.php
| * translation updateOmid Hezaveh2014-12-08
| |
| * warn about enabled, but not used auth pluginsAndreas Gohr2014-12-03
| |