darcs-hash:20080309211804-19e2d-4e81cf2b81572a6edf2d96d0d6f02223c3dad789.gz

darcs-hash:20080217172914-7ad00-400fed6d7ca8844ef214081724cd5c280344f0e5.gz

darcs-hash:20080213214113-19e2d-391868917a440be7f11a0b6e2a8955cb083d5f4c.gz

darcs-hash:20080213204325-7ad00-392f8f23f8035f0a74ac11601e64c27859a3b026.gz

darcs-hash:20080130222205-7ad00-76b123c78c1e3d758b1627ec09fafb25b96b4ada.gz

darcs-hash:20080125101516-7ad00-2a4afebf8719c3452bdedc2862e8384da5a1da65.gz

darcs-hash:20080122185359-7ad00-bdf569d4d6a1c1d8c5113f7c0c5b12ed3fa155ba.gz

darcs-hash:20080122185140-7ad00-0ff0feaa401db1fb01880c4b323b0019d2663fe1.gz

darcs-hash:20080114173625-7ad00-e53b8ee34aff334ef95c8e1276a93893efbedc7f.gz

darcs-hash:20080107204755-7ad00-9213dd89e13a706b7e764aad2065278f12552356.gz

darcs-hash:20080106201511-7ad00-65789bd4c5b8ed1238aaffb4a96c59631d0fd4cd.gz

darcs-hash:20080104143832-7ad00-705fa397a4fedaf21cbff8b7fedabcadaec02ea1.gz

darcs-hash:20080104141457-7ad00-f2ffae5e2d53b6d3018e9a5ad85264b557626b53.gz

darcs-hash:20080104140951-7ad00-8c563cb30ca014d5ce5f373f660d88204ed70632.gz

darcs-hash:20080104140733-7ad00-e60bf288ff2d3c22b010e3e509c009c3af339b65.gz

darcs-hash:20071210190648-7ad00-61f6b7ce8ac35e09fc963d84ec8638a7884797ae.gz

darcs-hash:20071204202246-7ad00-5ddd212cd7ff6aad243218b3f7e1ca99cb3b8af5.gz

darcs-hash:20071203204115-7ad00-a3acb23f33d5e5bfe99e1424df349d196543570e.gz

... but with this patch DokuWiki will not break completely when left out for
trustExternal() auth backends

darcs-hash:20071203201532-7ad00-72dbc2d16e4c8c09cca9558286164f4d858c19ce.gz

darcs-hash:20071203183011-7ad00-ac36914f25ae71842551fb49bfdadb9ebf0aaba6.gz

darcs-hash:20071130233509-7ad00-6c6a262533c0e49af763bd45854e34cf33ba13cb.gz

darcs-hash:20071130233302-7ad00-9cbdf61a70e1a0771bb4ee1a77fc82c3b64dffa1.gz

darcs-hash:20071121203902-7ad00-bb88d1124d181b56152f22da892d6d3eccf1161c.gz

darcs-hash:20071118105953-7ad00-a93b7707b09890fe3c184bb233238ee4df8e4ffe.gz

darcs-hash:20071117214220-7ad00-744a12e693c8107fd4c8cca12ec3bb7208739511.gz

This patch replaces the old ACL manager plugin with a new, completely
rewritten one.

The ACL manager is now independent of the page from which it was called,
instead all pages and namespaces are selectable from an AJAX enhanced
list similar to the one used in the media manager. This should take care
of a major complain by new users.

Another major confusion was that the old manager only showed relevant
rules. This new manager always shows *all* defined ACL rules.

darcs-hash:20071117155740-7ad00-1de71e396d5dbc117bf5788fb5667af828d5c20f.gz

darcs-hash:20071102181710-7ad00-3e239b6f0a9be465e33f283c1ed56958289f3dae.gz

darcs-hash:20071026110711-b9abf-3c57eaea66fb90636e51fa9aa03dc7928824fb6f.gz

darcs-hash:20071007191109-7ad00-80a395519238428c32d20b5d8b9738908c25da05.gz

darcs-hash:20070908192004-7ad00-f7ed26c8afd03db706acd90d38367bf13dfc2266.gz

darcs-hash:20070908142300-7ad00-ecb0aa5d77f6451b33988e6008e0297bd4425948.gz

This patch adds a session based token to all form in the default action plugins.
The validity of the token is checked before any administrative function is
executed aiming to protect DokuWiki's admin functions from Cross-site request
forgery (CSRF) attacks.

Another patch will follow to add the same functionality on other, less critical
functions.

More details on CSRF attacks can be found at
http://en.wikipedia.org/wiki/Cross-site_request_forgery

darcs-hash:20070829201538-7ad00-d0770224a3351fd8e38968e3a9d8e73520482445.gz

darcs-hash:20070821173805-7ad00-49900167ab4babede6acebb595faf005b28ce18e.gz

darcs-hash:20070818222029-7ad00-490d6e1e53a9753c4951ee8a9a9882d3cbdcfdb0.gz

darcs-hash:20070816182508-7ad00-a6107d7ae873a1473444c8fcfc02cf59172b0d8b.gz

darcs-hash:20070813220053-7ad00-db53d44215d74c091c10e0423b8152dec302127a.gz

darcs-hash:20070808214818-7ad00-48bb7ceff4e2144512bb7ad217700c63c9d4bb94.gz

darcs-hash:20070808180825-7ad00-63a8a7c23769cd92cccde54c3df267e94214eaae.gz

darcs-hash:20070807221400-7ad00-c67b347e0528709a4eae84f3740c34d12f9e1bba.gz

darcs-hash:20070730164939-7ad00-43323188e904f45153062bb2e5c3550a1ea4ce4d.gz