Ignore-this: 27ea52110bce929b2c61ed8faba67cfc

darcs-hash:20091016205526-c0bf4-35eba4e65d37980a667ba982f7f1ea5b7b07f01c.gz

Ignore-this: de9ef30fc53fbfc1caa74b55f97290a5

This should avoid problems on portbased virtual hosts.
This patch might log you out ;-)

darcs-hash:20090801222159-7ad00-808a91dd29af758ef10d7942888c2c22d8b8b888.gz

Ignore-this: ce01faedc6c3d9370362b0e1e39ded36

This fixes a security hole when register_globals is enabled. An exploit is
in the wild: http://www.milw0rm.com/exploits/8781

darcs-hash:20090526145030-7ad00-c0483e021f47898c8597f3bfbdd26c637f891d86.gz

Ignore-this: 7059284786889a3ead12f5a4b3873bdf

darcs-hash:20090205170449-7ad00-63f9459819a355abc7a154e07b487d8431097614.gz

- Avoid double compression when gzip_output is enabled
- Only compress when gzip_output is enabled
- Do not use x-sendfile for compressed content (content-encoding is not supported)
- Make sure the script terminates after using x-sendfile
- Moved gzip browser support check to init.php

darcs-hash:20090122215010-7ad00-765765d353ff78df5b8704086328c5c699bbe7e0.gz

- add mediameta and license config files into the cascade
- update the cache validity code in cache.php, css.php & js.php to use config_cascade
- redo inclusion of main config files to avoid suppression of errors in config files
- add getConfigFiles($type) function
- minor updates elsewhere to use config_cascade rather than hardcoded config file names

darcs-hash:20090122114457-f07c6-98ad5627fd5df93edf8dd03289b9cf6d81962afe.gz

darcs-hash:20090122081649-f07c6-e7744b1496e1a05ab089812fd7ca3716ecec2290.gz

darcs-hash:20090122080426-f07c6-c2e4cb107f9d07f333a9fe295f5df5bd9d3fb15f.gz

darcs-hash:20090119050218-f07c6-8cb3615ee51fe81ef90b1e54675c359d84a2e57c.gz

This change add the global $config_cascade which holds the list of files to be
read for each configuration setting group.  Dokuwiki adds in its configuration
file values after preload.php, giving preload.php to set its own configuration
cascade.

One side effect of the change is "local.protected.php" is part of the default
cascade, removing the need for it to be included at the bottom of local.php.

darcs-hash:20090118181204-f07c6-fea1c406da1bbdb0a52ab40914f11b835e797728.gz

There is a new media changelog now, with the flag RECENTS_MEDIA_CHANGES media changes can be requested from the getRecents()-function or the new getRecentsSince()-function, that returns all changes since a given timestamp and optionally before a given timestamp. The media upload and the XML-RPC-server have been changed to use these functions.

Additionally, the event MEDIA_UPLOAD_FINISH has been extended, it has a new $data-attribute (the 5th), that contains a boolean if the file does already exist and will be overwritten.

darcs-hash:20090118154345-074e0-5d9a90d269e86d8c6a156ecce5cf63115c827433.gz

darcs-hash:20081212225011-7ad00-dbd829b7c617cc519735525522c3155df506cb2b.gz

In most (all) calls to fullpath() the existance of the resulting path is not
important or is checked externally, so checking inside fullpath() is a waste
of CPU cycles.

darcs-hash:20081213083355-7ad00-4987a85950a13e5d3c527b3b17b1092e0fa1c567.gz

darcs-hash:20081212222614-7ad00-0b69e3b788b8ee3423cbbd9fb32868234ca679ca.gz

darcs-hash:20081012113150-7ad00-6408da058bdb6c923159d445e03b76f54b579362.gz

When act_redirect is executed (post data was received and mode show is called)
all undisplayed messages (from calls to msg()) are saved in the session now.
These messages are then revived in inc/init.php. This makes sure no errors
that occured before the redirect are lost.

darcs-hash:20080929203831-7ad00-d0869fd3093f57c1ea64ccbaf05d7fd98f68c5e1.gz

The fullpath function now correctly handles windows drive letter paths and UNC
paths making sure that those are not destroyed with upper dir .. notation.

Unit tests where added.

darcs-hash:20080914134744-7ad00-9abf5931d910a0b12979b1f69b090e8ecd568c71.gz

This patch adds the httponly option to the PHP session cookies and DokuWiki's
auth cookie when supported by the PHP version.

It also adds a new config option 'securecookie' which is enabled by default.
It makes sure the browser will not sent a cookie set via HTTPS over a
non-secured connection. This option has to be disabled for wikis that only
protect the login with SSL but not the whole wiki.

darcs-hash:20080912224922-7ad00-d5275147ba9d17a9f6defa8a51ca720da74ba8a0.gz

darcs-hash:20080912212311-7ad00-26249ceb7fb08a442888942072ef2dd8279ab3d2.gz

darcs-hash:20080824085653-7ad00-44925f90b286493b9b55d1ace59136a676786faf.gz

This patch readds the possibilities previously gained by the DOKUWIKI_INIT event
by adding support for including a file named inc/preload.php. When available, it
will be included before any defines for dokuwiki are set.

darcs-hash:20080627222629-7ad00-a663ded7ac08369f011e1f63e1c60fa81ec05b51.gz

darcs-hash:20080627214831-7ad00-d6eee0ddd406c972455871da75d04c5f5fc8a307.gz

	This patch adds a new event DOKUWIKI_INIT to the event system. The event is
	triggered in inc/init.php right after DOKU_INC has been defined and allows
	action plugins to interfere with DokuWiki s init process.

darcs-hash:20080622144154-23886-5153094bd78c2cea7f97e24c7b41cac6c641f49f.gz

This patch fixes use of UNC path in $conf['savedir'] and calling of /bin/ scripts.

darcs-hash:20080412124628-51399-9f85214fa4d787d5ad3a3b3c1ca655a29efc07e4.gz

Update GetBaseURL() to avoid multiple consecutive slashes in absolute return values (incl. test cases)

darcs-hash:20080418101946-f07c6-615691fab5d4b5714134634b38567ca8422a0aa0.gz

This should avoid problems with larger pages on newer PHP versions.
See http://www.freelists.org/archives/dokuwiki/04-2008/msg00049.html

darcs-hash:20080409181615-7ad00-de4f7a0602692b28e048d215c2e2b9657f96b81c.gz

darcs-hash:20080227215640-23886-606fc55ada5d6c3c80f14967746ec6aa0a4b3321.gz

This patch replaces the use of the date() function with the strftime()
function. The latter will respect a set locale and will use localized
strings for things like month names.

Because the format options for strftime differ from the ones used in date,
DokuWiki will rest the value of $conf['dformat'] if it contains an old
date format string (detected by missing % characters).

Plugins or templates using the $conf['dformat'] need to be updated.

darcs-hash:20080223124045-7ad00-6afb2b839afc58781463e25577e06adb675fff79.gz

darcs-hash:20080124211231-7ad00-5d9f8e834be5d7d3abc772ad7c956455258dad59.gz

darcs-hash:20070930214958-7ad00-bc8ca26f86ea4c9e68ea2b8f3cacc2a598543122.gz

The use of realpath() to clean up relative file names caused some
trouble in certain setups relying on symlinks or having restricitve
file structure setups.

This patch replaces all realpath() calls with a PHP only replacement
which should solve those problems.

darcs-hash:20070930184250-7ad00-512ff04c95f57fc9eaf104f80372237a3c94286f.gz

darcs-hash:20070819211952-7ad00-a1a321178ef3c5a85b2e422a01eda8066eb10588.gz

This patch introduces a tpl_toc() function which can be used to freely place
the Table of Contents in a template. When used, tpl_content should be called
with a parameter of false to supress the automatic TOC placement.

Note: if tpl_toc() us run *before* tpl_content(), TOCs will not work in the
preview. A work around is to run tpl_content() in a output buffer first.

This patch also adds a getTOC() function for admin plugins which allows plugin
authors to put create their own TOC which will be placed correctly in the
template. A convenience function html_mktocitem() is available.

The config manager was adjusted to make ue of this new feature, but some bugs
might remain.

darcs-hash:20070805132405-7ad00-77d2c3cdf66cc62b2d408cc6580f938636a109af.gz

Introduces a DOKU_REL constant always pointing to the DokuWiki directory regardless
of the used canonical setting.

darcs-hash:20070603191451-7ad00-a5227a3632b3337f5da90551d3166d9b5db56638.gz

darcs-hash:20070514165529-7ad00-bf2cd39a2e34b03aa8d10dd8ca943b0b27127e79.gz

darcs-hash:20070514164557-7ad00-7a40f60658af5e626698b4a262f5e70168c5c896.gz

darcs-hash:20070513181524-7ad00-20cb0328fc1b2881120d825f74ec032a5171f782.gz

darcs-hash:20070424211611-19e2d-ae76695e8114a064b5cebc2cad6fd55e7030e096.gz

darcs-hash:20070326180948-7ad00-c35eeabfe0d77e9decfd4fc6d776eaaa72be219c.gz

if a subdir is not setup properly, then init_paths() in inc/init.php will use
the pretty name ("datadir" instead of "pages"; "olddir" instead of "attic").
attached patch simply includes the actual directory name in the output so
people dont have to look it up in the source
code.

darcs-hash:20061211194244-5224c-2d22eeb08d770108d1d993783e95d11bef0e8855.gz