use composer based library for feed creator #1970

handle draftdeletion in draftdel action only

This was the last remaining function in inc/action.php that could be
moved to the actions.

We now have quite the elegant cascade in the action handling.

have all subscription handling in subscribe action

uses the explicit redirect abort on success

introduce a redirect action

Action can now abort to 'redirect' to explicitly trigger a redirect
back to showing the current page. Automatic triggering for post->show is
now only done when a 'show' a

introduce a redirect action

Action can now abort to 'redirect' to explicitly trigger a redirect
back to showing the current page. Automatic triggering for post->show is
now only done when a 'show' action was not explicitly requested.

show more ...

always redirect to correct section

Across workflow 'show - sectionedit - save/cancel' explicitly
transmit header id to the server. So the server can always redirect to
the correct section even if he

always redirect to correct section

Across workflow 'show - sectionedit - save/cancel' explicitly
transmit header id to the server. So the server can always redirect to
the correct section even if headings have the same name. Fixes #1364.

show more ...

allow actions to throw exception that are shown to the user

move draft saving to Preview action

This also removes duplicated code from ajax.php

drafts are for anonymous users, too. fixed Draftdel action

removed unused action methods

fixed typo in methodname

updated GeSHi to 1.0.9.0

refomatted mail tests to use data provider

fixed paging through recent changes

fix error in config manager caused by changes visibility

The internal lang and localized variables of a plugin are no longer
accessible from the outside. This adds a proper setter and also fixes
the

fix error in config manager caused by changes visibility

The internal lang and localized variables of a plugin are no longer
accessible from the outside. This adds a proper setter and also fixes
the type hinting in the config plugin.

show more ...

Continue if there are no attributes

If an entry in the loop at `_tpl_metaheaders_action` has no content, skip this entry.

avoid dependency tests being marked as risky

replaced some more each calls

There are still some left in the DifferenceEngine code

remove deprecated each() call

test constructors need to call parent constructor

this fixes another problem with our tests and phpunit 6.1

use dataprovider in password tests

This fixes a problem with those tests in the most recent version of
phpunit. I thought it was caused by the use of the deprecated var
keyword, but some other weird

use dataprovider in password tests

This fixes a problem with those tests in the most recent version of
phpunit. I thought it was caused by the use of the deprecated var
keyword, but some other weirdness was going on. This way it's more
proper anyway.

show more ...

replace LESS compiler with lesserphp

This is a better maintained fork of lessphp. It seems to be fully
compatible, so this is more or less a drop in replacement.

removed deprecated blowfish class

replace some var keywords

This should fix some tests on PHP 7.1. The work is far from done, we
still have a lot of variables without proper accessibility defined.

translation update

PassHash.class.php: in case of brcrypt, use the most recent variant $2y$

This change breaks compatibility with php 5.3.7, but a standing
requirement for at least php 5.6 is declared in composer.json

PassHash.class.php: in case of brcrypt, use the most recent variant $2y$

This change breaks compatibility with php 5.3.7, but a standing
requirement for at least php 5.6 is declared in composer.json.

If the php documentation is to be believed, this change increases
security against pass-the-hash type attacks. (I do not have the knowledge
to assess the security differences between $2a$ and $2y$).

As a Sidenote: htpasswd shipped with apache2 2.4.10 (and probably,
other versions), when used with the -B (=bcrypt) option, produces hashes
marked with $2y$.

Nonewithstanding the actual support or non-support of $2a$ by the
apache2 'AuthUserFile' directive, the apache 2.4 documentation only
asserts support for the $2y$ bcrypt variant.
Therefore, this commit would make it possible for dokuwiki and apache2
basic authentication to share the same password file, in the case when
bcrypt is used.

show more ...