darcs-hash:20061019104917-7ad00-c284fd3336850a18b633bbc3a49375f59edba3c7.gz

darcs-hash:20061019103310-7ad00-0de42af92587989d155f55831956480b7976d6e8.gz

darcs-hash:20061019101317-7ad00-c9a5b62a9d1e71c15875a8e39050bc931dbf4d03.gz

darcs-hash:20061019083731-c47a2-6d301513c4e313acdbb648e1e22e5b8ef45566da.gz

darcs-hash:20061018181931-7ad00-2778b83d25e8dcfad4b00710077e44bcef9af699.gz

This fixes the getRecent function when multiple edits occured during the same
second.

darcs-hash:20061018181837-7ad00-a09b9b63a4bab86d142bfe1f8cf662b001bda075.gz

This patch is an enhancement to yesterday's changes. The ability to download
external content could be used for XSS attacks, when faking the sent MIME
type. This patch adds a check on the received data for valid images.

darcs-hash:20061018124942-7ad00-4e8bca7d3877e6a10c348b5d45499cf8adf8b087.gz

This patch changes fetch.php ability to download external files. It now checks
for the returned MIME type and will only download images. For all other
MIME types a redirect is sent back to the browser. This reduces the risc of
being misused as open proxy.

Additionally the download facility is disabled completly by default by setting
the fetchsize option to 0. Users who want the feature need to overwrite the option
in their local.php.

Background: The ability to download external files is needed to resize external
images on the server side. When disabled, a redirect is sent to the browser which
will download the fullsize image and rescale it on the client side which is more
bandwidth and CPU intensive.

darcs-hash:20061017175329-7ad00-cd1b1bfa043a04540c51ca8380d28deaa14147d1.gz

darcs-hash:20061017091036-7ad00-41df4dbaddb0a20d0f000f7a1bb000aaf2176185.gz

darcs-hash:20061009103112-3c565-b3883aadc0875d06ddadcd54a0dab2075e415eef.gz

darcs-hash:20061011141043-3c565-9509bda5d864e0fbb42088d04d5b6f337dd18eb7.gz

darcs-hash:20061015222040-d5083-afb1c38f5bb2610260bbc51fbff816a8ed2e5f49.gz

darcs-hash:20061015222615-d5083-774269139d15c9a12b364e2c88dea46b477c912e.gz

darcs-hash:20061013113521-7ad00-1ab48718ab30e042971a6dd6ef595462185955e6.gz

- translated new strings in registermail.txt, config e usermanager plugins
- fixed changed parameter in config plugin

darcs-hash:20060829170241-57bea-24bf2cbfb341f25b1461cc7cd4fc442e0f44d511.gz

darcs-hash:20061010111646-7ad00-9b0b08b448f0dcadebff784f27f0ec28d49cbc21.gz

There were recent reports of exceeded patternsize in the wordblock function
when used with PHP5

darcs-hash:20061009165557-7ad00-f35d44da296caf6fd85431520d600033402d9b2f.gz

darcs-hash:20061008103152-7ad00-5a26c285c8d4899ab9b21a84d493671857d77a99.gz

Fixes a header injection/XSS vulnerability

darcs-hash:20061008100523-7ad00-be06a942badb6a2a9ed862be003ee0050504b4b0.gz

This patch removes some commented code fragments and alternative
snippet generators

darcs-hash:20061008090624-7ad00-14bfee2ded6c6c8ef43ad02a4c02a5d95ee9daf7.gz

darcs-hash:20061008074029-7ad00-8457873dd8ad2f5a36dc8f44eca42a4378e61e93.gz

This patch updates p_get_metadata() to utilise the in memory copy
copy of the current page's metadata ($INFO['meta']) when appropriate.

The patch also updates p_set_metadata() to synchronise any changes
to the current page's metadata with $INFO['meta'].

$INFO hash is updated with two new elements:
  'id'

darcs-hash:20061004210030-9b6ab-7eab6f933a775fe350a1fb14d1118ea77d2db919.gz

darcs-hash:20061006113409-23886-166f573a8ae5c897011282ef22a581cea1dbce86.gz

- change validation pattern to allow 3 or 4 octal digits and hence
  setting of SUID, SGID and sticky bit on systems which support them

darcs-hash:20061005223141-9b6ab-80511ecc4780d6258f15f59087f9bab20d1f1340.gz

This patch automatically lowercases the superuser name like DokuWiki will
do itself later on. It also fixes the email check and requires it to have
at least an @ character.

darcs-hash:20061004183516-7ad00-791df13131c2484cb08c840812688d83bdf807fa.gz

Rebind as superuser even on a previous successful bind as normal user, when
superuser credentials are available. LDAP access restrictions may need it.

darcs-hash:20061003153018-7ad00-16a69e99f93433bd9e999086f8757a56f975a1ef.gz

This patch changes the DOKU_COOKIE define to be based on the DOKU_URL define.
DOKU_COOKIE is now used as session key as well, making sessions no longer
dependend on the title option. This should fix problems with multiple
wikis on the same host (using the same title) and wikis accessed through
different URLs.

darcs-hash:20061003121546-7ad00-aea4c256b7752815ed422ce74a659152a601d267.gz

This patch sets the private bound variable back to false if a new connection
is opened.

darcs-hash:20061003104320-7ad00-24370bcdc7beff5db7d7f2e68ea180763699ca5c.gz

darcs-hash:20061002203925-9b6ab-ca7c87dc96fbc9572ef92a804d58715b0ab0b3e5.gz

- add retry button (as suggested by Diego Georgini)
- correct error color, from green to red (spotted by Diego Georgini)
- add utf8_decode and utf8_encode to required function list, when
  mb_string functions are not available.
- remove extra backslash from reported file names.

darcs-hash:20060930170121-9b6ab-d7b4a455b01d28f35b8c69385639439eaca8944e.gz

darcs-hash:20060930143719-05dcb-251992d688e64ed221dbfe3d9c198fae603e2531.gz

updated wwordblock.conf
updated installer checksum
increased msg num

darcs-hash:20060928200451-7ad00-061feb181c7e91f736fb396db224e4ea9660effa.gz

- rework utf8_substr() NOMBSTRING code to always use pcre
- remove work around for utf8_substr() and large strings from ft_snippet()

darcs-hash:20060928165122-9b6ab-0eefc216f07f9d7e7d8eb62ce26605c28ee340fa.gz

- auth_nameencode.test, add teardown code to clear new
  $cache_authname memory cache
- utf8_substr.test, correct expected result for last test

darcs-hash:20060927101118-9b6ab-a72ea443ba67e17946af34d67c274975d563a22f.gz

darcs-hash:20060927091545-c47a2-f706a9e54e7450084ffb929b44c9a1b1707c4eef.gz

darcs-hash:20060927033713-9b6ab-4b35e0a85b6d11d5a3a98858cd2f860b383ff153.gz

Fixes a shell injection and a DOS vulnerability

darcs-hash:20060926200551-7ad00-5ef27940dda6e48e7e2f8743fc90fa80b7b5cdff.gz

The default wordblock.conf provided by the guys at chonqed.org matches agaist
URLS beginning with http. But DokuWiki also links simple www.example.com links.
Spammers used this method to place blacklisted URLs in the Wiki.

This patch constructs full URLs from these shortcut-URLs before applying the
blacklist regexp.

The patch also fixes a problem with the toolbar not appearing when the blacklist
hit and denied saving.

darcs-hash:20060926192420-7ad00-519df90a5953b690428bfa0928de37b3053031b0.gz

rss syntax extended to include a refresh parameter
 <digits><period>  period can be d,h,m for days, hours, minutes respectively
                   if not specified will default to 4 hours
                   dokuwiki imposes a minimum of 10 minutes

metadata now used "date valid age" (seconds) rather than "date valid end"

darcs-hash:20060925201222-9b6ab-c8e6d8e40bb178295bab874fce5147ccff35fbbb.gz

Cache
- add dependency for metadata renderer file
- check metadata for end of page life, "date valid end".

Metadata Renderer
- RSS syntax mode now sets rendered page expiry, "date valid end"
  and includes the feed URL in "relation haspart".

Purgefile
For all wiki installations the purgefile records the earliest
time before which no cache purge (based on data consistency)
is required. Cache files older than this time MAY need to be
purged.
- remove purgeonadd configuration setting

darcs-hash:20060924202157-9b6ab-4531e91411c41914eeab2b6a8160c3d46b001cee.gz