Ignore-this: 3ef4fafa34a7bbba76435b5db6935b57

There is no need to fight against a privilege stealing attack when the
attacked user has no privileges.

Skipping the check reenables editing without cookies again.

darcs-hash:20090527112243-7ad00-c1acd3161ececf3d922d5842033cb7d3f1910a16.gz

Ignore-this: 9b004a1bec25263f57e5de96b65cd545

darcs-hash:20090526145512-7ad00-5700760363b6f029bbf6269937a83d6445a9175a.gz

Ignore-this: ce01faedc6c3d9370362b0e1e39ded36

This fixes a security hole when register_globals is enabled. An exploit is
in the wild: http://www.milw0rm.com/exploits/8781

darcs-hash:20090526145030-7ad00-c0483e021f47898c8597f3bfbdd26c637f891d86.gz

Ignore-this: 773a7e7293d5f35bb8c9ed9fba2759b5

darcs-hash:20090526140527-7ad00-7bfcadedc56d24c0076209bb4883beace50475c1.gz

Ignore-this: 74d18220baea88b5826d46c78998fa04

darcs-hash:20090526120748-7ad00-b3a0bddc53ba3c6c3b824cfbed15450cc0ec406e.gz

Ignore-this: 57fff85207a352f67a5c5acc9aa7ec99
Since this info now is given at the footer of each page it doesn't make sense
to include it into the released file anymore.

darcs-hash:20090526112917-7ad00-917d3c40c18fa98a61747d766637049d26cae77e.gz

Ignore-this: 9c8cf4530d94d7168e34158c59ee4c66

darcs-hash:20090526104223-8beed-76c3e9ef68cc651518994ce31a0e4dfe566e7020.gz

Ignore-this: 9fa16a2aec98eec2a330a7de9e4a2def

darcs-hash:20090526102411-7ad00-eb2f23abd5c7b169f574cc58cba32be7f7ce0220.gz

Ignore-this: 7611558571da7ac66b9fd5e2b17b1750

darcs-hash:20090526100758-a0ecd-4cbfceba2b396de68856ff95732661f79d6c3d81.gz

Ignore-this: 455792081bedfbe25399d53aa7f93da5

darcs-hash:20090526092917-7ad00-0a96ee9fdf0e80d19efa0adce968d10bc00cc5f3.gz

Ignore-this: 944df9f3682bb7ac8a2d7d4c94455ba

darcs-hash:20090526090130-7ad00-1e38d784623ddf4449e067e9d18ed248e1b4d29b.gz

Ignore-this: 3dc13a990c4b6eadeb02065f08460e09

darcs-hash:20090526084719-50e58-26bad1d1e0cd4bcc4f03bbc40d6bfbdb09a3544a.gz

Ignore-this: 3aee0c821e12117514c856741d7b78c1

darcs-hash:20090526083636-7ad00-91277dee85fb17ac88e53ddae7667db0b55162cd.gz

Ignore-this: 59e4981579f4b071f0802ed6e285f30b

darcs-hash:20090526083317-7ad00-22a49a0e86edf6b7fd7bf90c294583e82f578645.gz

Ignore-this: 19a8e8cbdbafea2268a31a08a65f4e05

This was actually reported [1] as a bug elsewhere, but really should be
fixed in DokuWiki and now is.

[1] https://www.projectzero.org/bugzilla/show_bug.cgi?id71

darcs-hash:20090526073013-7ad00-90c0bee83ebc6c9c3e33b2a58b8d0a17d828f748.gz

darcs-hash:20090525212742-f7d6d-e15e46892fb0e7877526a10a002546629e9e26a3.gz

darcs-hash:20090525194435-f7d6d-2def694a053f7e661f88f1636903283bad7c1fa8.gz

Ignore-this: f839ee8f30d4ebf9158d3b1934c22c94

darcs-hash:20090525172137-e545b-202faea4dff2aa62396c1ec3962d35c7c825ab03.gz

Ignore-this: 6ba9ffc7fc360fa651bc6eff42f39862

darcs-hash:20090525171951-3bef5-b34cbfc468c877e410be093f0fc181c308134806.gz

Ignore-this: 939c64e068291798fdf89d9d01a2c091

darcs-hash:20090525171838-3913e-e9e3b03bddd981beb06d25651bb14afe69fb2abb.gz

Ignore-this: 7083042bac15e28defd65b8f12e33345

darcs-hash:20090523101653-00d84-eddc99fbfe1c6e1165c0aa88816226aca8d68cc1.gz

Ignore-this: 4f40b8b124a0f297834237d28ebfdf69

darcs-hash:20090523101531-64b66-a390865280f35247c051e4b6de6d0a9863206b60.gz

Ignore-this: 6b06a58d6b64f15d7f18537545d01ef

darcs-hash:20090523101137-e7bbe-af521e15adcc652d0d7546e897a7374b1b41db22.gz

Ignore-this: de983218cb2332f4b415b998d18ec576

darcs-hash:20090517100609-85bed-7d0966032a797af87529e92e95c85300a03c0b81.gz

darcs-hash:20090516173858-f7d6d-60a553963e6d0428acfeed693797b9abcea87b91.gz

darcs-hash:20090516165345-f7d6d-f70f20cda373bf0119e04a8e8877f4f457bab33f.gz

Ignore-this: 5120879eef36e3c42c724b85b82fcd11

darcs-hash:20090516230648-b5582-87ff4380632f1e1e8dc797f3ca4bfa50de708449.gz

Ignore-this: de708804321143bb34bea0920ec7e30b

darcs-hash:20090516122205-74baf-5c3998082833a6a36067c5a97e31a71d5f3a1a5d.gz

Ignore-this: 8684965a8410468b6fe690b40511a774

darcs-hash:20090516121923-a3a6d-de5dfc3c77dea7a439fdac3bf407236b6a7733f3.gz

Ignore-this: 1370cee84d44bb35ae7c0c988ed8f1ff

This patch adds a config option to define users or groups that may access
the XMLRPC API. ACLs are still checked on top of this intial access control.

darcs-hash:20090516114351-7ad00-155fb6c74c29f5f84e79544a534369eec0403ff0.gz

Ignore-this: 2757dc089bd6c8465e5b0a4c1311cf85

darcs-hash:20090515184406-7ad00-cd124f30cd1c1b5b744e942e2279ff52cad6eb30.gz

Ignore-this: d38dd22b55ddb7ac94d28fa048130672

darcs-hash:20090514155859-074e0-c9a5eecc8295c1de748b67ec517798d88bf4119e.gz

Ignore-this: c1b12d1fbde51ee80e24fcd9b731a161

darcs-hash:20090515101112-7ad00-83140ea1f10f80ee691b4a70c00b8f990119c9c2.gz

darcs-hash:20090514151011-ac091-397ed299016a72545412f3d0cfbc534a65a10992.gz

darcs-hash:20090428172025-9a5f4-adf1e1a58cc35066d019490c1dc8fb9b264e376c.gz

Ignore-this: 5deb81b5d621fb506f9604c5a6c2f938

darcs-hash:20090514204048-7ad00-1b057940cfa367201db16b9230405fdf6678f55d.gz

Ignore-this: e7a1a44a5970faf3b81fef34eb3a306a

darcs-hash:20090514202625-776e1-98c73286d157f11fdba06dcf2a5ebaa5cbc28c6d.gz

Ignore-this: 6aa4641d64b3a43ffa6a4ea1c9091b19

darcs-hash:20090512163424-b5582-fe1da510e2b34fce3ebceaab95b5bd97eb9fd753.gz

darcs-hash:20090506204753-f7d6d-3b6717404d3b26a4201dd69c224a7c2d33a89732.gz

darcs-hash:20090506202433-f7d6d-71f011cb2bc7dce4456ae2f537f71889ccf21077.gz