This patch changes fetch.php ability to download external files. It now checks
for the returned MIME type and will only download images. For all other
MIME types a redirect is sent back to the browser. This reduces the risc of
being misused as open proxy.

Additionally the download facility is disabled completly by default by setting
the fetchsize option to 0. Users who want the feature need to overwrite the option
in their local.php.

Background: The ability to download external files is needed to resize external
images on the server side. When disabled, a redirect is sent to the browser which
will download the fullsize image and rescale it on the client side which is more
bandwidth and CPU intensive.

darcs-hash:20061017175329-7ad00-cd1b1bfa043a04540c51ca8380d28deaa14147d1.gz

darcs-hash:20061013113521-7ad00-1ab48718ab30e042971a6dd6ef595462185955e6.gz

darcs-hash:20061008103152-7ad00-5a26c285c8d4899ab9b21a84d493671857d77a99.gz

updated wwordblock.conf
updated installer checksum
increased msg num

darcs-hash:20060928200451-7ad00-061feb181c7e91f736fb396db224e4ea9660effa.gz

Fixes a shell injection and a DOS vulnerability

darcs-hash:20060926200551-7ad00-5ef27940dda6e48e7e2f8743fc90fa80b7b5cdff.gz

Cache
- add dependency for metadata renderer file
- check metadata for end of page life, "date valid end".

Metadata Renderer
- RSS syntax mode now sets rendered page expiry, "date valid end"
  and includes the feed URL in "relation haspart".

Purgefile
For all wiki installations the purgefile records the earliest
time before which no cache purge (based on data consistency)
is required. Cache files older than this time MAY need to be
purged.
- remove purgeonadd configuration setting

darcs-hash:20060924202157-9b6ab-4531e91411c41914eeab2b6a8160c3d46b001cee.gz

darcs-hash:20060923110047-7ad00-b9007f7f656e56656a44b2349c14e7839c1f68ce.gz

darcs-hash:20060923034943-e5a2d-5888ec82ef23d82619522aaf33bee1c4bc1b1099.gz

darcs-hash:20060917183150-7ad00-1672f8ef23dc49b6cdfd43d29338dab6a14a928c.gz

Messages are now displayed to all users if ACL is not enabled. The update-URL
changed to http://update.dokuwiki.org/check/

darcs-hash:20060917145025-7ad00-1d64b90e51c1a49567a28b132caf79ae0f124c8e.gz

This patch adds a feature to let DokuWiki automatically check if updates are
available or any other important messages (like security warnings) and then
display this info to the admin user.

DokuWiki will contact the URL http://www.splitbrain.org/lib/exe/msg.php
with a parameter telling it which messages it already know (read from
conf/msg) - the server side script then will return all new messages.

The messages will be displayed until DokuWiki was upgraded or conf/msg
was updated manually. Messages are cached and only checked once a day.

The messenger URL will probably change before the next release.

darcs-hash:20060916210229-7ad00-7ac592650e171ae4144b0eb47a751a4ca480f031.gz

This patch provides a rewritten changelog system that is designed to run
efficiently on both small and large wikis. The patch includes a plugin to
convert changelogs from the current format. The conversion is
non-destructive and happens automatically. For more information on the new
changelog format see "http://wiki.splitbrain.org/wiki:changelog".

Structure
In short the changelog is now stored in per-page changelog files, with a
recent changes cache. The recent changes cache is kept in
"/data/meta/_dokuwiki.changes" and trimmed daily. The per-page changelogs
are kept in "/data/meta/<ns>/<page_id>.changes" files. To preserve
revision information for revisions stored in the attic, the "*.changes"
files are not removed when their page is deleted. This allows the full
life-cycle of page creation, deletion, and reversion to be tracked.

Format
The changelog line format now uses a general "line type" field in place of
the special "minor" change syntax. There is also an extra field that can
be used to store arbitrary data associated with special line types. The
reverted line type (R) is a good example. There the extra field holds the
revision date used as the source for reverting the page. See the wiki for
the complete syntax description.

Code Notes
The changelog functions have been rewritten to load the whole file only if
it is small. For larger files, the function loads only the relevant
chunk(s). Parsed changelog lines are cached in memory to speed future
function calls.

getRevisionInfo
A binary search is used to locate the chunk expected to contain the
requested revision. The whole chunk is parsed, and adjacent lines are
optimistically cached to speed consecutive calls.

getRevisions
Reads the changelog file backwards (newest first) in chunks until the
requested number of lines have been read. Parsed changelog lines are
cached for subsequent calls to getRevisionInfo. Because revisions are read
from the changelog they are no longer guaranteed to exist in the attic.

(Note: Even with lines of arbitrary length getRevisionInfo and
getRevisions never split changelog lines while reading. This is done by
sliding the "file pointer" forward to the end of a line after each blind
seek.)

isMinor
Removed. To detect a minor edit check the type as follows:
$parsed_logline['type']

darcs-hash:20060830182753-05dcb-1c5ea17f581197a33732a8d11da223d809c03506.gz

- add $conf['compression'] meta data and en lang strings
- remove $conf['usegzip'] meta data and en lang strings

Other language strings will need to be updated.

darcs-hash:20060825223047-9b6ab-b0c8c6af57847690a6d398d0bd98af9a51911c21.gz

darcs-hash:20060823211149-9c1ae-569f295c33dc798a429a373f48cb09122334ea29.gz

darcs-hash:20060728093653-7ad00-fc481b0ae7707516de089bfd88dba3eee0f33f3d.gz

This patch changes the password reset function to a two-stage process.
After requesting a new password a confirmation email is sent first, only
if the link contained in this mail is used the password is changed for real.

This makes sure malicious people can't reset passwords for other users.

darcs-hash:20060714110548-7ad00-c1e23fd51cc2d2f16473914421ebe0f9c3b2ba8c.gz

This patch adds a config option to disable certain internal action commands of
DokuWiki's main dispatcher.

The options resendpasswd and openregister were removed because they can now set
through this new option.

The config plugin needs to be adjusted.

darcs-hash:20060702121622-7ad00-1e80e77bcfb0ae561fe7abd79cfbe1bb158be720.gz

A small patch for dokuwiki which enables dokuwiki to notify the
administrator about new user registrations

darcs-hash:20060615194419-022eb-51630aff3c6d93abc656742fc0bc723b93f97734.gz

This patch adds an option to configure the maximum size for files the fetch.php
will ever download. Setting this to 0 completely turns of the caching of external
media files.

Disadvantages of setting a low or zero fetchsize:

  * fetch.php needs to download images to be able to resize them. When the used
    fetchsize prevents the downloading the images can only be resized by the
    browser which means the browser will need to download the fullsized image first.

  * If the linked external media files vanishes it will no longer display in the
    wiki because it is not cached.

Advantages of setting a low or zero fetchsize:

  * fetch.php may be used for a possible denial of service attack by requesting
    many big external files.

  * The created cache files may take a lot of space on the server

I recommend to leave the setting at 2MB for internal and private wikis and lower
the setting to about 200 to 500 Kb for bigger public Wikis.

Note: the caching of files uploaded through the media manager is not affected by
this setting.

darcs-hash:20060615184847-7ad00-04fc39928f7d72e56f5c5e271013ef265436e6c9.gz

darcs-hash:20060525113648-7ad00-ddc022eea6a5257ba63253a385c1f50b968d0c6e.gz

darcs-hash:20060523191005-7ad00-fcf447b92eb25239e67f3af977e1c6f6031d2f24.gz

This patch adds a completely rewritten media popup. The following noteworthy
changes were made:

- media manager uses a collapsible namespace tree
- media manager uses AJAX if available
- media manager popup can be kept open when selecting a media file
- only one template is used for the media manager :!: Template
- Editable image metadata is configured in conf/mediameta.php now
- The JS cookie mechanism was enhanced to store key/value pairs
- Language strings can be exported to JS in js.php

darcs-hash:20060519165023-7ad00-4932b4553fc919aa4a8b8187958b823acf4f8cee.gz

  - Enables gzip compression of output xhtml for browsers that support it.
    For example the wiki:syntax page takes up 46.80KB raw, but only 9.88KB gzip encoded.
  - Setting is configurable through the config plugin.

darcs-hash:20060516084132-05dcb-d8d1c7911a951b00e166c5a94f46a2cf1cfa5846.gz

  - Adds a jpg quality setting for scaled images
    (Some images were getting too many jpg artifacts
     at the hard-coded compression setting.)
  - Creates a group for the media settings in the
    config plugin.

darcs-hash:20060516062321-05dcb-a175b0de3264322a335cf60d8ee96317f7b03144.gz

darcs-hash:20060417164547-7ad00-7270f4d88b027d179b1f600fc347eea8db8a8f83.gz

  - Gives the wiki administrator control over how often the RSS feed is regenerated.
  - The RSS feed now handles conditional requests and returns HTTP '304 Not Modified'
    responses when possible.

darcs-hash:20060324133315-05dcb-3b814e28523f2a0717222a4940d6fbbb28576cf5.gz

DokuWiki now automatically creates a draft file of the currently edited
page. In case of an editing interuption (eg. Browsercrash) the draftfile
can be continued later.

darcs-hash:20060311200148-7ad00-919337a51e001136178d175a1755cd26122e9726.gz

darcs-hash:20060305140026-7ad00-498d21dbef19baf2b760d3c49edbf55125f6acc3.gz

This patch simpliefies the configuration of the file and directory creation
modes. There is no need to set the umask anymore. Only the wanted permissions
for files and directories are set. An init function compares the wanted modes
with the ones that would be choosen by the system automatically (consulting
the system's umask) and sets the modes for chmod when needed.

darcs-hash:20060304154038-7ad00-5ef1db3a87e42563a602f9d050c681d2ea74682f.gz

darcs-hash:20060304001433-7ad00-51931e5a0eccec14b63ef215b0fa535bb2484a29.gz

darcs-hash:20060303204706-19e2d-d7f95669aa1b703c31db1fe36e08b7368a49d337.gz

darcs-hash:20060303224553-7ad00-89da1f7b672f34fd5acbcb06914f3907ed34bab2.gz

Using the target attribute is considered bad practice. This patch removes
the default targets from dokuwiki.conf and fixes the footer.html of the
default template accordingly

darcs-hash:20060302134306-6e07b-cae2e54472687abb50f7cb97bd6c479b7c7d97d7.gz

darcs-hash:20060302105634-6e07b-217c0dfad45ce76f5d4ba155379947c41f5216f5.gz

Some auth backends allow special chars like whitespaces in user and group
names. This made problems with the existing ACL checks and ACL manager.
This patch makes the ACL system work with these cases by (url)encoding all
special chars below 128.

darcs-hash:20060302101850-6e07b-14bda9dbdb3528904325419b35bb9eddb0d1dde3.gz

Fix umask bug and do a code cleanup of chmod/mkdir usage so set the correct permissions, this should also fix problems with dokuwiki making setuid files on some umasks.

  * Don't set the umask() anymore, this is not good form and we don't really know what is it in the old code anyway as it was not done properly.
  * Retire the dmask config option introduce 2 new ones called fmode and dmode, this is more in line with posix and should make more sense.
  * Use chmod for setting the correct permissions but only if it's needed.
  * Set changing of permissions off by default as i should work properly in most Apache setups without and it does not make sense on windows anyway.

darcs-hash:20060224211655-ee6b9-68f7bb59417d6f0033cfd3764146923daa4dcf1b.gz

darcs-hash:20060218183251-ee6b9-798ab2994526311b1e58f04e7684b39b51426887.gz

darcs-hash:20060224185810-7ad00-b992f75bc356b68746963260f80ed50ac97d4d5e.gz

This patch adds optional hierarchical breadcrumbs. This was discussed last
december in http://www.freelists.org/archives/dokuwiki/12-2005/msg00112.html
and followups. Many people where in favour of this.

darcs-hash:20060224155631-21b7e-10f25b7bdf60120ec99850afefd4d1662c5b87aa.gz

This patch addes basic romanization support to the utf-8 library. It
converts non-latin languages to ASCII.

The transliteration tables used where gathered from various places
on the net. I do not speak any of those languages so I can't say how
good they are. Any recommendations and fixes are welcome!

This can be enabled for ID cleaning by setting the deaccent option to 2.
It is also used in the XHTML renderer to generate section ids based
on the header titles. Leading digits and any remaining non-ASCII chars
are removed as well. This is the first step to make section ID always
XHTML compatible. Making sure they are unique is not implemented yet.

darcs-hash:20060210200627-7ad00-61a633563bb92a00ef4a3f699d73117139cbf367.gz