If you want better random initialization and more control over the
password strength install the passpolicy plugin.

This is needed to replace the password generator by a plugin
implementation. Related to PR #166 and FS#2147

No need for HMAC here because there's no length attack vector here. We
only care for the existance of the file and each reset request is
completely (random) independent from each other.

The resize token was broken because fetch.php cleans the id before the token calculation, while ml() uses the raw id

ensure security token is included in media url when resize parameter is passed in string form, e.g. 'w=80'

The code that is removed in this commit has either never been used
(listIndexLenghts) or was completely broken (cacheIndexDir) and was
introduced in the indexer rewrite in 2010. The idea of the rewrite was
to update the readdir cache after every index change instead of on demand.
What the code actually did was removing every updated index from the
cache as it used a wrong if condition. Simply fixing the condition
wouldn't fix the problem as then only updated indexes would be added to
the cache and furthermore the rewrite simply ignored the readdircache
setting. For now the safest solution seems to be removing the code. It
could be added again in a changed form in a future version.

The suffix parameter is only for the word length in the word index and
not for the metadata index.

When pages contain non-UTF8 chars (eg. when posted through a script or
when edited on the filesystem, parts of DokuWiki can break resulting in
missing page content. This fixes these problems by forcing the content
to UTF-8 on load. This will result in bad characters for input that is
not latin1 but contents will at least be visible.

thanks @Klap-in

This reverts commit ba09710a.

Conflicts:
	lib/plugins/authad/lang/de/settings.php

FS#2748, fix double encoding of html entities in subscription email diffs (updates subscription.php for changes to Diff class introduced in PR#179)