Fixes a shell injection and a DOS vulnerability

darcs-hash:20060926200551-7ad00-5ef27940dda6e48e7e2f8743fc90fa80b7b5cdff.gz

- fix potential array key collisions
- restore ability to keep a minimum number ($conf['recent']) of recent changes
  irregardless of date of change

darcs-hash:20060924162105-9b6ab-06350f04f9d9ac4c362f13787b682ef70887a1fc.gz

darcs-hash:20060924100606-7ad00-7e0bc1fa7778669ac352f8d8994acbb7517323cd.gz

This patch fixes a bug in indexer.php which resulted in the order
of the recent changes cache being reversed each time it was trimmed.

It also adds sorting to both getRecents() and runTrimRecentChanges()
as a defensive measure against the order of the file being corrupted.

darcs-hash:20060923235109-9b6ab-0f4062c1b02449cce9382426174cd22d71387e5a.gz

darcs-hash:20060917140718-7ad00-ab1b95974ad63966c770f787112bc7c2e285c394.gz

Suppress any errors from set_time_limit,
unlink, and file_exists functions.
see: http://www.freelists.org/archives/dokuwiki/09-2006/msg00004.html

darcs-hash:20060908193433-05dcb-013617431870ab5bfb2ce8c6e99ba5af13493228.gz

This patch provides a rewritten changelog system that is designed to run
efficiently on both small and large wikis. The patch includes a plugin to
convert changelogs from the current format. The conversion is
non-destructive and happens automatically. For more information on the new
changelog format see "http://wiki.splitbrain.org/wiki:changelog".

Structure
In short the changelog is now stored in per-page changelog files, with a
recent changes cache. The recent changes cache is kept in
"/data/meta/_dokuwiki.changes" and trimmed daily. The per-page changelogs
are kept in "/data/meta/<ns>/<page_id>.changes" files. To preserve
revision information for revisions stored in the attic, the "*.changes"
files are not removed when their page is deleted. This allows the full
life-cycle of page creation, deletion, and reversion to be tracked.

Format
The changelog line format now uses a general "line type" field in place of
the special "minor" change syntax. There is also an extra field that can
be used to store arbitrary data associated with special line types. The
reverted line type (R) is a good example. There the extra field holds the
revision date used as the source for reverting the page. See the wiki for
the complete syntax description.

Code Notes
The changelog functions have been rewritten to load the whole file only if
it is small. For larger files, the function loads only the relevant
chunk(s). Parsed changelog lines are cached in memory to speed future
function calls.

getRevisionInfo
A binary search is used to locate the chunk expected to contain the
requested revision. The whole chunk is parsed, and adjacent lines are
optimistically cached to speed consecutive calls.

getRevisions
Reads the changelog file backwards (newest first) in chunks until the
requested number of lines have been read. Parsed changelog lines are
cached for subsequent calls to getRevisionInfo. Because revisions are read
from the changelog they are no longer guaranteed to exist in the attic.

(Note: Even with lines of arbitrary length getRevisionInfo and
getRevisions never split changelog lines while reading. This is done by
sliding the "file pointer" forward to the end of a line after each blind
seek.)

isMinor
Removed. To detect a minor edit check the type as follows:
$parsed_logline['type']

darcs-hash:20060830182753-05dcb-1c5ea17f581197a33732a8d11da223d809c03506.gz

Allows action plugins to support custom ajax calls.
The event data is the call name from $_POST['call'].
When handling a custom ajax call, remember to use
$event->preventDefault();
to avoid having the
'AJAX call <call> unknown!'
message appended to the output.

darcs-hash:20060809194501-05dcb-0082e4f2a83fc8657fc7cdcf32d44aac8d1a6b99.gz

darcs-hash:20060807205738-7ad00-5492ba5fe3e854f9dc233254535e4e897847353c.gz

This fixes a problem with escaped backslashes in single and double quote
strings.

darcs-hash:20060731223008-7ad00-ebae61a00115b7f32c12eb9355059a1ecf467cd3.gz

This patch now assigns the needed proprietary CSS attributes for the spellchecker
through JavaScript. This makes the CSS valid again (at least it appears to be ;-))
I also fixed a problem with leading single spaces in IE

darcs-hash:20060731192807-7ad00-b82bdcae9a0c8cf063c3a1e985dbfd1dfdee7b06.gz

Fixing undefined variable notices and sometimes
the underlying error that produced them.

darcs-hash:20060710114655-05dcb-073948171847f1f43f153e96c8382abd421da36a.gz

Adds page and namespace events:
  IO_WIKIPAGE_READ
  IO_WIKIPAGE_WRITE
  IO_NAMESPACE_CREATED
  IO_NAMESPACE_DELETED

The namespace events are purely advisory,
while the wikipage events allow page content
to be modified between DokuWiki and the disk.

These events are primarily intended to simplify
keeping other tools in sync with the semantic
structure of a DokuWiki site. As an added benefit,
the events allow plugins to conduct automated
processing of raw wiki page content.

The namespace events cover the separate namespace
trees for both pages and media. The "name" of the
tree that the event belongs to is included in the
event data.

darcs-hash:20060705105652-05dcb-f44024e852a2adf1a14b8a7d69c46db067e72307.gz

darcs-hash:20060701120325-7ad00-07efe9cacd51043ad95d8d2d71d8680036721286.gz

darcs-hash:20060628094419-484ab-148d62ec3e29deb7ca9fa9b787c238a1d73bc4e3.gz

- correct begin/end comment, plugin filename wasn't being used
- add file exists check, to avoid bloating js with comments for non-existent plugin js.
  Many (most?) plugins don't have javascript.

darcs-hash:20060619104613-9b6ab-08a570cdbb0d6441f1caa71766d4c59c73828835.gz

This patch improves the way the window.oninit JavaScript function is
called. This function is used to initialiaze all JavaScript funcions
attached to the DOM so it needs to be executed **after** the full DOM
was parsed by the browser. Unfortunately currently only Mozilla supports
a DOMContentLoaded event. In all other browsers we had to wait for
the window.onload event which will only be called after **all** content
(including images) was loaded - this caused a visible delay on all
JavaScript generated content (like the toolbar) in non-Mozilla browsers.

Dean Edwards now presented a solution [1] which will work for all the bigger
Browsers and is used in this patch.

The following browsers now should fire the init event right after parsing
the DOM:

All Mozilla based browsers
Internet Explorer
Safari
Opera >

darcs-hash:20060616104539-7ad00-db70d31fcb21cb812cf4982fe80a7d649e2daa1c.gz

This patch adds an option to configure the maximum size for files the fetch.php
will ever download. Setting this to 0 completely turns of the caching of external
media files.

Disadvantages of setting a low or zero fetchsize:

  * fetch.php needs to download images to be able to resize them. When the used
    fetchsize prevents the downloading the images can only be resized by the
    browser which means the browser will need to download the fullsized image first.

  * If the linked external media files vanishes it will no longer display in the
    wiki because it is not cached.

Advantages of setting a low or zero fetchsize:

  * fetch.php may be used for a possible denial of service attack by requesting
    many big external files.

  * The created cache files may take a lot of space on the server

I recommend to leave the setting at 2MB for internal and private wikis and lower
the setting to about 200 to 500 Kb for bigger public Wikis.

Note: the caching of files uploaded through the media manager is not affected by
this setting.

darcs-hash:20060615184847-7ad00-04fc39928f7d72e56f5c5e271013ef265436e6c9.gz

darcs-hash:20060604175833-7ad00-cd96ba6a7db7211082ff82e189828e2e11a6f566.gz

darcs-hash:20060529183003-7ad00-de0e3acac75a9f94f6c27f67651eeabe40411d7a.gz

darcs-hash:20060527185238-7ad00-1593c8b25d7f870c8a0b3017fbcf29c4e047f52c.gz

darcs-hash:20060527140157-7ad00-225a9ba66f658cc279cb44ebb04d483291d567d2.gz

darcs-hash:20060526223358-7ad00-2bdfd39a5dd8ca09101288834cc75e5e963afda5.gz

darcs-hash:20060525175501-7ad00-eebd033af344904eab32fe70ba5acfb77b94eada.gz

This fixes some styling issues, the cookie handling and a bug in the
JavaScript caching mechanism.

darcs-hash:20060525144000-7ad00-2f0b673d4f747c979f460e4e927a50eeeae81ec1.gz

darcs-hash:20060520172118-7ad00-ad605bf51c8774d734012ece0071f70e6624788a.gz

darcs-hash:20060519212751-7ad00-ace54b61706fdf4f1b7c2abdbabee215a1e256ab.gz

This patch adds a completely rewritten media popup. The following noteworthy
changes were made:

- media manager uses a collapsible namespace tree
- media manager uses AJAX if available
- media manager popup can be kept open when selecting a media file
- only one template is used for the media manager :!: Template
- Editable image metadata is configured in conf/mediameta.php now
- The JS cookie mechanism was enhanced to store key/value pairs
- Language strings can be exported to JS in js.php

darcs-hash:20060519165023-7ad00-4932b4553fc919aa4a8b8187958b823acf4f8cee.gz

  - Adds a jpg quality setting for scaled images
    (Some images were getting too many jpg artifacts
     at the hard-coded compression setting.)
  - Creates a group for the media settings in the
    config plugin.

darcs-hash:20060516062321-05dcb-a175b0de3264322a335cf60d8ee96317f7b03144.gz

The background indexer now gathers info on contributors and modification
dates from the changelog when adding the missing meta info.

A new io_grep function was added which might be useful for other parts in
the Wiki as well.

darcs-hash:20060511191450-7ad00-baba1b48ea03b823c88a480862c612316f159b5a.gz

darcs-hash:20060507165308-7ad00-3526c8c4e5d8c10a8e003068008e2344e94e1739.gz

This removes the meta instruction again in favour of the new meta renderer.
Most tests work now again, a few tweaks were done on the header handler
to render certain headers as it did in earlier versions.

darcs-hash:20060507153113-7ad00-bd299fbe1762482c72d109f9bca776f12bcea7c8.gz

darcs-hash:20060506215440-7ad00-a04d6ebb428816b534b7b3636f050885bc02f266.gz

darcs-hash:20060430182156-7ad00-1548636dbfaa9fc0b25c26e4121f763a485c2f9c.gz

This adds meta data rendering to the indexer process to build missing meta data
in the background.

p_get_first_heading was adjusted to make use of the new meta data mechanisms

A problem with unitialized arrays in p_set_metadata and PHP5 was fixed (I think)

darcs-hash:20060430181740-7ad00-8952fa6beb4fadf6b4321627998442d34febfc8d.gz

The HTTP Cache-Control header output now respects the Dokuwiki media parameters
'cache', 'recache', and 'nocache'.
  - cache: cachetime or one hour (which ever is larger)
  - recache: remaining cachetime + 10 seconds so the newly recached media is used
  - nocache: no caching

Notes:
  - 'proxy-revalidate' should ensure that public caches always revalidate, this
    will keep caches from (accidentally) ignoring Dokuwiki's ACL rules.
  - 'no-transform' should keep media from being modified in transit by caches.

Impact:
Speeds up page layout/display by browsers when they already have the media
in their [memory] cache. For example the 2nd time a page is viewed. This
also reduces server load by eliminating most of the overhead needed to
return '304 Not Modified' responses each time an image is viewed.

darcs-hash:20060421025424-05dcb-23ff26c5cb410bcd166299a840f4c500fa0d112e.gz

Fixes a major bug in fetching remote media with 'recache' and improves
the efficiency of 'nocache'.

Recache:
  - Used to reload the remote media on EVERY request.
  - Now it behaves as intended and only reloads the remote media
    into the Dokuwiki cache every $conf['cachetime'] time.

Nocache:
  - No longer stores remote media in the Dokuwiki cache.
  - No longer loads, saves, and forwards remote media -- just redirects.
  - No longer resizes images on the server because the cached results
    can not be reused.
Overall this is faster for Dokuwiki. The bandwidth usage for
the 3rd party server is the same (less for Dokuwiki). Page loading
should also be faster because data is not being forwarded through
Dokuwiki (and the 3rd part server's cache control headers will be
respected automatically).

darcs-hash:20060421012210-05dcb-a6029baa0fad218ace28e0e3c2f442b1ca645a99.gz

Does client-side rewriting of accesskey tooltip text so that it will be
more OS and browser specific. Dokuwiki should output all accesskey tooltips
as [ALT+<key>] because this patch matches on "[ALT+".

darcs-hash:20060428015158-05dcb-0102a1b2068c053e81dd21ad3927c78b6c9f349e.gz

darcs-hash:20060417003153-a90f0-4792fd7b946f62d3696b979f8debfa73587d353a.gz

Tells standards compliant browsers that conditional requests for
CSS and JS need only be made once an hour. This should reduce page
display latency on some browsers.

Originated from the comment in this thread:
http://www.freelists.org/archives/dokuwiki/03-2006/msg00590.html

darcs-hash:20060410012723-05dcb-eccb42aefe85c9dbb4f35fdf03a9635561cf5710.gz