Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Create and use ad search for user, name and email | Michael Große | 2015-03-12 |
| | |||
* | Get total number of users in ad, needed for paging | Michael Große | 2015-03-11 |
| | |||
* | translation update | Schplurtz le Déboulonné | 2015-02-24 |
| | |||
* | check permissions in ACL plugin's RPC API component. #1056 | Andreas Gohr | 2015-02-24 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security Fix Severity: Medium Type: Remote Priviledge Escalation Remote: yes Vulnerability Details: This fixes a security hole in the ACL plugins remote API component. The plugin failed to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also had permissions to set up their own ACL rules and thus circumventing any existing rules. Risk Assessment: The XMLRPC API in DokuWiki is marked experimental and off by default. It also implements an additional safeguard by giving access to a configured circle of users and groups only. So only a minor number of DokuWiki installations will be affected at all. For affected installations the risk is high if users with access to the API are not to be trusted. Thus the overall severity of medium. Resolution: Installations applying this commit are safe. A hotfix is about to be released. Meanwhile users are advised to disable the XMLRPC API in the config manager. | ||
* | translation update | Álvaro Iradier | 2015-02-13 |
| | |||
* | translation update | lainme | 2015-02-12 |
| | |||
* | Merge pull request #1013 from dokuwiki-translate/lang_update_168 | Andreas Gohr | 2015-02-09 |
|\ | | | | | Translation update (ru) | ||
| * | translation update | Aleksandr Selivanov | 2015-01-25 |
| | | |||
* | | fix referral settings in AuthLDAP. closes #1023 | Andreas Gohr | 2015-02-09 |
| | | |||
* | | fixed method signature #1024 | Andreas Gohr | 2015-02-09 |
| | | |||
* | | translation update | Davor Turkalj | 2015-01-28 |
|/ | |||
* | fixed wrong config check in extension manager #1006 | Andreas Gohr | 2015-01-15 |
| | |||
* | Losslessly reduced PNG images with optipng -o7 -strip all, advdef -z4 -i60, ↵ | KeenRivals | 2015-01-14 |
| | | | | and advpng -z4 -i60. | ||
* | Scrutinizer Auto-Fixes | Scrutinizer Auto-Fixer | 2015-01-10 |
| | | | | This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com | ||
* | translation update | Mijndert | 2015-01-08 |
| | |||
* | Scrutinizer Auto-Fixes | Scrutinizer Auto-Fixer | 2015-01-07 |
| | | | | This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com | ||
* | fixed search'and'replace fuckup in config plugin | Andreas Gohr | 2015-01-07 |
| | |||
* | Remove error supression for file_exists() | Andreas Gohr | 2015-01-07 |
| | | | | | | | In an older version of PHP a file_exists() call would issue a warning when the file did not exist. This was fixed in later PHP releases. Since we require PHP 5.3 now, there's no need to supress any error here anymore. This might even give a minor performance boost. | ||
* | translation update | Schplurtz le Déboulonné | 2015-01-05 |
| | |||
* | Merge pull request #989 from dokuwiki-translate/lang_update_136 | Andreas Gohr | 2015-01-05 |
|\ | | | | | Translation update (cs) | ||
| * | translation update | Jaroslav Lichtblau | 2014-12-31 |
| | | |||
* | | translation update | Maciej Helt | 2015-01-05 |
|/ | |||
* | translation update | Marian Banica | 2014-12-30 |
| | |||
* | Merge pull request #975 from dokuwiki-translate/lang_update_122 | Andreas Gohr | 2014-12-27 |
|\ | | | | | Translation update (pt) | ||
| * | translation update | Guido Salatino | 2014-12-18 |
| | | |||
* | | Merge pull request #979 from dokuwiki-translate/lang_update_129 | Andreas Gohr | 2014-12-27 |
|\ \ | | | | | | | Translation update (fr) | ||
| * | | translation update | Yves Grandvalet | 2014-12-20 |
| |/ | |||
* / | translation update | Type-kun | 2014-12-21 |
|/ | |||
* | translation update | Satoshi Sahara | 2014-12-17 |
| | |||
* | translation update | Vitaly Filatenko | 2014-12-15 |
| | |||
* | Merge pull request #964 from dokuwiki-translate/lang_update_94 | Andreas Gohr | 2014-12-15 |
|\ | | | | | Translation update (cs) | ||
| * | translation update | Jaroslav Lichtblau | 2014-12-13 |
| | | |||
* | | Merge pull request #965 from dokuwiki-translate/lang_update_98 | Andreas Gohr | 2014-12-15 |
|\ \ | | | | | | | Translation update (ru) | ||
| * | | translation update | Type-kun | 2014-12-13 |
| |/ | |||
* / | translation update | Myeongjin | 2014-12-14 |
|/ | |||
* | translation update | Type-kun | 2014-12-12 |
| | |||
* | Merge pull request #957 from dokuwiki-translate/lang_update_83 | Andreas Gohr | 2014-12-12 |
|\ | | | | | Translation update (ja) | ||
| * | translation update | Satoshi Sahara | 2014-12-12 |
| | | |||
* | | Merge pull request #959 from dokuwiki-translate/lang_update_87 | Andreas Gohr | 2014-12-12 |
|\ \ | | | | | | | Translation update (fi) | ||
| * | | translation update | Jussi Takala | 2014-12-12 |
| |/ | |||
* / | translation update | Jaroslav Lichtblau | 2014-12-12 |
|/ | |||
* | check for SSL support in the extension manager | Andreas Gohr | 2014-12-11 |
| | |||
* | translation update | Søren Birk | 2014-12-11 |
| | |||
* | Merge pull request #946 from dokuwiki-translate/lang_update_60 | Andreas Gohr | 2014-12-10 |
|\ | | | | | Translation update (it) | ||
| * | translation update | Torpedo | 2014-12-09 |
| | | |||
* | | Some PHPDocs media and admin plugin | Gerrit Uitslag | 2014-12-10 |
| | | |||
* | | translation update | Søren Birk | 2014-12-10 |
|/ | |||
* | Merge remote-tracking branch 'origin/master' into scrutinizerissues | Gerrit Uitslag | 2014-12-09 |
|\ | | | | | | | | | | | | | | | | | Conflicts: inc/media.php inc/plugin.php inc/template.php lib/plugins/authplain/_test/escaping.test.php lib/plugins/syntax.php | ||
| * | translation update | Omid Hezaveh | 2014-12-08 |
| | | |||
| * | warn about enabled, but not used auth plugins | Andreas Gohr | 2014-12-03 |
| | |