Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | translation update | Pietroni | 2015-05-13 |
| | |||
* | translation update | Danny Buckhof | 2015-05-07 |
| | |||
* | Merge pull request #1134 from ptbrown/auth-error-reporting | Andreas Gohr | 2015-05-07 |
|\ | | | | | Refactor error messages from auth plugins. | ||
| * | Fix scrutinizer issues with auth | Patrick Brown | 2015-05-07 |
| | | |||
| * | Error reporting for database auth plugins | Patrick Brown | 2015-05-06 |
| | | |||
| * | Report more meaningful errors when an auth backend fails. closes #1093 | Patrick Brown | 2015-05-06 |
| | | |||
* | | translation update | Johan Wijnker | 2015-05-05 |
|/ | |||
* | Merge branch 'languagecleanup' of git://github.com/ptbrown/dokuwiki into ↵ | Andreas Gohr | 2015-05-02 |
|\ | | | | | | | | | | | | | | | | | | | pull-request-1105 * 'languagecleanup' of git://github.com/ptbrown/dokuwiki: Remove no longer needed language string Delete unused div (Fixes #1098) Remove unused language strings Move language string to authad plugin | ||
| * | Merge branch 'authpwdexpire' into languagecleanup | Patrick Brown | 2015-04-04 |
| |\ | |||
| | * | Move language string to authad plugin | Patrick Brown | 2015-03-31 |
| | | | |||
* | | | translation update | Hudson FAS | 2015-04-28 |
| | | | |||
* | | | translation update | Alex P | 2015-04-24 |
| | | | |||
* | | | 2 typo fixes | Yoven | 2015-04-19 |
| | | | |||
* | | | translation update | Tomas Darius Davainis | 2015-04-17 |
| | | | |||
* | | | translation update | Schplurtz le Déboulonné | 2015-04-14 |
|/ / | |||
* | | Merge pull request #1097 from dokuwiki-translate/lang_update_35 | Andreas Gohr | 2015-04-02 |
|\ \ | | | | | | | Translation update (pt) | ||
| * | | translation update | Romulo Pereira | 2015-03-31 |
| | | | |||
* | | | add plugin groups to config plugin test | Christopher Smith | 2015-04-01 |
| | | | |||
* | | | add more plugin groups to authplain test | Christopher Smith | 2015-04-01 |
|/ / | |||
* | | Merge pull request #1089 from dokuwiki-translate/lang_update_27 | Andreas Gohr | 2015-03-31 |
|\ \ | | | | | | | Translation update (ko) | ||
| * | | translation update | Myeongjin | 2015-03-28 |
| |/ | |||
* | | Merge pull request #1090 from dokuwiki-translate/lang_update_28 | Andreas Gohr | 2015-03-31 |
|\ \ | | | | | | | Translation update (cs) | ||
| * | | translation update | Jaroslav Lichtblau | 2015-03-28 |
| |/ | |||
* / | translation update | Alejandro Nunez | 2015-03-31 |
|/ | |||
* | SECURITY escape user properties in user manager #1081 | Andreas Gohr | 2015-03-18 |
| | | | | | | | | | The user properties (login, real name, etc) where not properly escaped in the user manager's edit form. This allowed a XSS attack on the superuser by registered users. Thanks to Filippo Cavallarin from www.segment.technology for discovering this bug. | ||
* | translation update | Jacob Palm | 2015-03-17 |
| | |||
* | Merge pull request #1073 from sklrrzn/master | Andreas Gohr | 2015-03-16 |
|\ | | | | | Add two config options to authldap | ||
| * | Add english description for new authldap options | Sascha Klopp | 2015-03-16 |
| | | |||
| * | Add description for modPass-Option | Sascha Klopp | 2015-03-13 |
| | | |||
| * | Two new authldap config options: 'userkey' denotes the LDAP | Sascha Klopp | 2015-03-03 |
| | | | | | | | | | | attribute holding the username, 'modPass' allows to disable password changing by the user. | ||
* | | Escape user strings given to adLDAP | Michael Große | 2015-03-12 |
| | | |||
* | | Explain functions in docstrings | Michael Große | 2015-03-12 |
| | | |||
* | | Clean up code, add phpdoc comments, some refactoring, etc. | Michael Große | 2015-03-12 |
| | | |||
* | | Disable the ``last`` button when filtering groups | Michael Große | 2015-03-12 |
| | | | | | | | | | | | | Since we cannot effectively filter for groups and have to work with incremental prefetching, the ``last`` button is mostly broken/buggy. Hence it is disabled in this usecase. | ||
* | | When filtering for group implement prefetching | Michael Große | 2015-03-12 |
| | | |||
* | | Create and use ad search for user, name and email | Michael Große | 2015-03-12 |
| | | |||
* | | Get total number of users in ad, needed for paging | Michael Große | 2015-03-11 |
|/ | |||
* | translation update | Schplurtz le Déboulonné | 2015-02-24 |
| | |||
* | check permissions in ACL plugin's RPC API component. #1056 | Andreas Gohr | 2015-02-24 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security Fix Severity: Medium Type: Remote Priviledge Escalation Remote: yes Vulnerability Details: This fixes a security hole in the ACL plugins remote API component. The plugin failed to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also had permissions to set up their own ACL rules and thus circumventing any existing rules. Risk Assessment: The XMLRPC API in DokuWiki is marked experimental and off by default. It also implements an additional safeguard by giving access to a configured circle of users and groups only. So only a minor number of DokuWiki installations will be affected at all. For affected installations the risk is high if users with access to the API are not to be trusted. Thus the overall severity of medium. Resolution: Installations applying this commit are safe. A hotfix is about to be released. Meanwhile users are advised to disable the XMLRPC API in the config manager. | ||
* | translation update | Álvaro Iradier | 2015-02-13 |
| | |||
* | translation update | lainme | 2015-02-12 |
| | |||
* | Merge pull request #1013 from dokuwiki-translate/lang_update_168 | Andreas Gohr | 2015-02-09 |
|\ | | | | | Translation update (ru) | ||
| * | translation update | Aleksandr Selivanov | 2015-01-25 |
| | | |||
* | | fix referral settings in AuthLDAP. closes #1023 | Andreas Gohr | 2015-02-09 |
| | | |||
* | | fixed method signature #1024 | Andreas Gohr | 2015-02-09 |
| | | |||
* | | translation update | Davor Turkalj | 2015-01-28 |
|/ | |||
* | fixed wrong config check in extension manager #1006 | Andreas Gohr | 2015-01-15 |
| | |||
* | Losslessly reduced PNG images with optipng -o7 -strip all, advdef -z4 -i60, ↵ | KeenRivals | 2015-01-14 |
| | | | | and advpng -z4 -i60. | ||
* | Scrutinizer Auto-Fixes | Scrutinizer Auto-Fixer | 2015-01-10 |
| | | | | This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com | ||
* | translation update | Mijndert | 2015-01-08 |
| |