Skip to content
Snippets Groups Projects
  1. Sep 02, 2017
  2. Aug 27, 2017
  3. Aug 01, 2017
  4. Mar 31, 2017
  5. Mar 01, 2017
  6. Feb 10, 2017
  7. Feb 05, 2017
  8. Feb 04, 2017
  9. Jan 31, 2017
  10. Jan 21, 2017
  11. Jan 01, 2017
    • Michael Hamann's avatar
      Fix typo in saveWikiText that could lead to wrong changelog entries · 2d69eb44
      Michael Hamann authored
      This fixes saving the actually saved timestamp for deleted revisions in
      the change log. Before this, the change log got 0  as timestamp and
      therefore used the current time - which might be wrong if the current
      second changed in between touching the page and adding the entry to the
      changelog.
      2d69eb44
  12. Oct 21, 2016
  13. Sep 21, 2016
    • Michael Große's avatar
      Fix save content modified in COMMON_WIKIPAGE_SAVE · 33d979e7
      Michael Große authored
      The event COMMON_WIKIPAGE_SAVE offers the opportunity to save the content by modifying $data['newContent']. However saveWikiText still saves the original $text variable instead of the possibly modified $svdta['newContent'].
      33d979e7
  14. Jul 01, 2016
  15. Jun 14, 2016
  16. May 22, 2016
  17. Mar 31, 2016
    • Andreas Gohr's avatar
      avoid HTTP Response Splitting attacks via redirects #1513 · 98ca30d2
      Andreas Gohr authored
      The header() method of PHP is vulnerable to HTTP Response Splitting
      attacks.
      
      This change makes sure the URL passed to send_redirect (and thus to
      header()) does not contain any control characters that would be needed
      to execute such an attack.
      
      Cleaning input is recommended anyway.
      98ca30d2
  18. Mar 19, 2016
    • Satoshi Sahara's avatar
      remove fullpath() call · 317a04c4
      Satoshi Sahara authored
      fullpath processing here seems unnecessary, wikiFN($ID) returns a valid filepath for the page text file.
      317a04c4
  19. Mar 18, 2016
  20. Mar 15, 2016
  21. Feb 19, 2016
    • Andreas Gohr's avatar
      removed isset() from blank() function · 67234204
      Andreas Gohr authored
      As discussed in #1471, an uninitialized variable will always be
      implicitly created when passed to the blank() function. Calling isset()
      is thus a no-op. A warning about this behavior has been added to the
      function comment.
      67234204
  22. Feb 18, 2016
    • Andreas Gohr's avatar
      refactor page saving and introduce COMMON_WIKIPAGE_SAVE · b24d9195
      Andreas Gohr authored
      This makes the saveWikiText() function a little easier to read and moves
      external edit handling to its own function. Behavior stays the same
      (tests are unchanged).
      
      In addition a new event COMMON_WIKIPAGE_SAVE is introduced that makes
      intercepting and acting on page saves much easier than possible before.
      
      Developers can:
      
      * prevent saves by either preventing the default action or overwriting
        the contentChanged field in a BEFORE hook
      * enforce saves even when no content changed by overwriting the
        contentChanged field in a BEFORE hook
      * Adjust the saved content by modifying the newContent field in a BEFORE
        hook
      * Adjust the stored change log information (summary, type, extras) in an
        AFTER hook
      * Easily know if a page was deleted, created or edited by inspecting the
        changeType field
      * what ever they want before or after a wiki page is saved
      b24d9195
  23. Sep 25, 2015
  24. Sep 02, 2015
  25. Aug 21, 2015
  26. May 03, 2015
  27. Jan 07, 2015
  28. Dec 17, 2014
  29. Oct 02, 2014
  30. Oct 01, 2014
  31. Sep 29, 2014
  32. Sep 28, 2014
  33. Sep 01, 2014
  34. Jul 15, 2014
Loading