darcs-hash:20081106193732-8bc3f-f839e4c1a2959cf304097d38b3283882c53ff967.gz

darcs-hash:20081031202035-919a1-1155f22a8f5b76b752532e9d5473a8874eadc780.gz

darcs-hash:20081029194117-8bc3f-95a3d3b09d99dbf2d122900c65a30c94979385f7.gz

darcs-hash:20081026220328-919a1-e5585c1bf8239fcdb460c7b8099c635b58f44e2d.gz

darcs-hash:20081026185024-919a1-6f94452d8369b799b9a81f6d909baa3c53a157c9.gz

darcs-hash:20081024195449-ec8b6-46de56759da79ace750ccac2a5647f1c2c9bbb51.gz

darcs-hash:20081023203855-1b343-e28ca98dceb029d046bb9c22e0ea55c26093baea.gz

darcs-hash:20081023203651-f26e5-079f2ac342597cc56e3b7febc93ffcd4f9897eb1.gz

darcs-hash:20081022140209-c07ef-c4d27f3c581ee6ee7cedb886f9e5b2675503b817.gz

darcs-hash:20081022191907-c3d16-19588d7f40797baa600409bd39ece192ac0ef9e8.gz

darcs-hash:20081022191539-c8790-0b7ecc52c0e9c35b6633cded8269bf507c867888.gz

darcs-hash:20081022191348-6e6b8-6932de5e471955f3ab71f41a2ee76da456774314.gz

darcs-hash:20081016212547-71f9a-8d1e8c33ab8f148eab8b662c9f65a7f7da6f8a1b.gz

This prevents browsing the top directories of the lib directory. There is
nothing dangerous in that directory and it needs to be accessible from web,
but making it a bit harder to snopp around is never a bad idea ;-)

darcs-hash:20081016190251-7ad00-453ec37fd9729c5fb57d9ed03101f6ee7d6b2216.gz

darcs-hash:20081014211639-7b4a2-b57f3b24bfafc03eb291290e446d2e26e8ea4d1c.gz

darcs-hash:20081014185611-7ad00-e575d3315c6f135059635dbf8a77be3f7020d6a0.gz

darcs-hash:20081014183410-f6d1c-b5e7a807cfb16f381e0900573dfb5446455be422.gz

darcs-hash:20081012144253-23886-c904f82c559c3ad5477bf921e93cb439a212134d.gz

darcs-hash:20081012113150-7ad00-6408da058bdb6c923159d445e03b76f54b579362.gz

darcs-hash:20081011175430-2b4f5-aa7e9048461324e0362852ef21beff456a03bd9b.gz

darcs-hash:20081011165529-23886-b3e15b6316b57548dc040757d90d397fbb695dd4.gz

darcs-hash:20081011155507-7ad00-c2da8c586fbb8fc954b84770653f8c04244ca809.gz

darcs-hash:20081011133640-23886-b2bc0d25ccc41af3c4c9d1c387eef3efea16689a.gz

darcs-hash:20081011121450-2b4f5-1e3139cc20cea62247be931ebc2749b8fb02c002.gz

darcs-hash:20081010200511-66058-a1cc51ab3dec871054fd93f9a1de97efd38f37a6.gz

darcs-hash:20081008203414-1011c-85b7d515a43f405e8fbc3366b8195881a552d7a3.gz

darcs-hash:20081004205158-ee982-0eb1a31e9ee6045d35224d8e9e81dfd30053e4a8.gz

darcs-hash:20081003123628-5222e-a76b636053ff5d843937e3e2ce9ff5cc48e6c09f.gz

darcs-hash:20081003123326-c8790-69daff2785d2a2cdb5fe2a2cf8a5689181220a5e.gz

darcs-hash:20081003123150-ee982-299c1fb5ca4428fcefac6bfd18eb116e4a146b4a.gz

darcs-hash:20081003122909-ede8f-7cf8938b396615aa41ab9d78db80fa379661aa92.gz

darcs-hash:20080906100647-51399-2f4587b6adbad377fda13aa2f8dd4a10e66c4b6c.gz

At present, DW shows the username on the bottom left under "logged in as", and the login name for "last modified", "locked by" and under
revisions/recent changes. In a corporate environment, particularly when integrated with a Single Sign-On system, the login name may be somewhat
unfriendly. This patch makes the "logged in as" the same as the value used elsewhere and also allows an admin to decide whether it should be the
login name, username or e-mail address that is displayed. The e-mail address may also, optionally, be a mailto: link. E-mail addresses are
obfuscated according to the 'mailguard' setting. The default behaviour is to show the login name which is no change from previous behaviour for the
"last modified"/"locked by"/revisions/"recent changes", but is a change for the "logged in as".

darcs-hash:20081001152914-6ad63-9cd7174068ac55de381f1318a4401f8c51de5b0c.gz

darcs-hash:20080929195948-7ad00-8b29b543f81fcc35907b878d2765240610a172ea.gz

darcs-hash:20080926135507-c8790-a733ebe20ac57b0ee44fff2ae0b96a2533ef5dce.gz

darcs-hash:20080917104357-7ad00-b3a86e2291b72d6494636b7117da178754289f39.gz

darcs-hash:20080915195208-19a6f-3e03e9f0547f62c1407e9f6adf64e5b061da8561.gz

darcs-hash:20080915194813-4f297-cf78dab4c0fa624a76fae42f2e008288e056ae1d.gz

This patch adds the httponly option to the PHP session cookies and DokuWiki's
auth cookie when supported by the PHP version.

It also adds a new config option 'securecookie' which is enabled by default.
It makes sure the browser will not sent a cookie set via HTTPS over a
non-secured connection. This option has to be disabled for wikis that only
protect the login with SSL but not the whole wiki.

darcs-hash:20080912224922-7ad00-d5275147ba9d17a9f6defa8a51ca720da74ba8a0.gz

darcs-hash:20080912210721-7ad00-a8ddb61582f61d28bbed706ff65b8b5d605f501c.gz