Skip to content
Snippets Groups Projects
  1. Jan 14, 2009
    • Andreas Gohr's avatar
      Added HTTP check for data directory security · 3b1dfc83
      Andreas Gohr authored
      The ?do
      
      darcs-hash:20090114174724-7ad00-cc45b798d930b7e87c3c820925982fb8201cf7f4.gz
      3b1dfc83
    • Andreas Gohr's avatar
      make HTTP SSO possible for IIS or rewriting · 528ddc7c
      Andreas Gohr authored
      DokuWiki silently attemps to resuse received HTTP auth credentials for
      user logins. Unfortunately these are only passed to PHP when using
      mod_php. IIS provides a HTTP_AUTHORIZATION header which now will
      be decoded and used as well.
      
      This header can also be faked via mod_rewrite:
      
      <IfModule mod_rewrite.c>
      RewriteEngine on
      RewriteRule .* - [E
      
      darcs-hash:20090114153601-7ad00-6c75e8568eda6753834981642eed638b9eb01694.gz
      528ddc7c
  2. Jan 13, 2009
  3. Jan 12, 2009
  4. Jan 05, 2009
  5. Jan 04, 2009
  6. Jan 02, 2009
  7. Dec 29, 2008
    • michael's avatar
      Workaround for a PHP/libxml-bug with entities · 8285d596
      michael authored
      As described on http://bugs.php.net/bug.php?idE996, current versions of libxml (2.7.0/1) lead to the fact that the xml parser of PHP eats predefined entities. As proposed on http://bugs.simplepie.org/issues/show/101 predefined entities are replaced by their numeric equivalents. There is no condition in this patch as there are people reporting it isn't gone in 2.7.2, i can confirm that, and furthermore here PHP is reporting libxml 20632 and the bug exists, too (it is linked to libxml2 though which has version 2.7.2). As soon as there is definite knowledge on which versions are actually concerned and how to detect them in PHP a condition should be added as this patch might decrease the performance of the affected functions.
      
      darcs-hash:20081229213341-074e0-10e0cca836c6599efe4d3dfd45f512d624d0a808.gz
  8. Dec 30, 2008
  9. Dec 26, 2008
  10. Dec 18, 2008
  11. Dec 16, 2008
  12. Dec 13, 2008
  13. Dec 12, 2008
  14. Dec 13, 2008
    • Andreas Gohr's avatar
      don't check for file existance in fullpath() by default · b328697d
      Andreas Gohr authored
      In most (all) calls to fullpath() the existance of the resulting path is not
      important or is checked externally, so checking inside fullpath() is a waste
      of CPU cycles.
      
      darcs-hash:20081213083355-7ad00-4987a85950a13e5d3c527b3b17b1092e0fa1c567.gz
      b328697d
  15. Dec 12, 2008
  16. Dec 10, 2008
  17. Dec 07, 2008
  18. Dec 06, 2008
  19. Dec 05, 2008
Loading