Security Fix: do not allow skipacl in XMLRPC

Ignore-this: 517a7546aab86c5370cccf1aa2171490

Parameters passed to dokuwiki.getPagelist and wiki.getAttachments could
contain the option "skipacl" which

Security Fix: do not allow skipacl in XMLRPC

Ignore-this: 517a7546aab86c5370cccf1aa2171490

Parameters passed to dokuwiki.getPagelist and wiki.getAttachments could
contain the option "skipacl" which would prevent ACL checking. This
could leak information about usually non-readable files (like filenames,
sizes and so on). The content of the files was not accessible.

XMLRPC is disabled by default.

darcs-hash:20091116220523-7ad00-0fa8a9a7a52076619c6836738f9a1f00a6dafe27.gz

show more ...

restrict XMLRPC to configurable groups and users

Ignore-this: 1370cee84d44bb35ae7c0c988ed8f1ff

This patch adds a config option to define users or groups that may access
the XMLRPC API. ACLs are sti

restrict XMLRPC to configurable groups and users

Ignore-this: 1370cee84d44bb35ae7c0c988ed8f1ff

This patch adds a config option to define users or groups that may access
the XMLRPC API. ACLs are still checked on top of this intial access control.

darcs-hash:20090516114351-7ad00-155fb6c74c29f5f84e79544a534369eec0403ff0.gz

show more ...

removed debug statements

Ignore-this: c7d706a81320fb2bf80a399e5fcc259a

darcs-hash:20090308112249-7ad00-488e7b5cc87ad3727a161b9625892709d4f25fc0.gz

Support login in XMLRCP and added API version info

A simple version number was added to the XMLRPC API to make it
easy for clients to check if the remote endpoint supports certain
features.

The log

Support login in XMLRCP and added API version info

A simple version number was added to the XMLRPC API to make it
easy for clients to check if the remote endpoint supports certain
features.

The login function will take credentials and set cookies on
successful login. This is useful when HTTP Basic auth is not
available.

darcs-hash:20090303193608-7ad00-45b1cd7a5165656796df25ed5c4ebc6e8ef7f95a.gz

show more ...

Fixed media size in getRecentMediaChanges XML-RPC call.

Ignore-this: 6477d59a1da2f51295326537fa8e14bf

darcs-hash:20090227220304-074e0-24e77eb6641c0b43c30a941146487facf2f2277f.gz

streamlined media listing

Some parameters of media_search where changed, parts using this function
need to be identified and fixed.

darcs-hash:20090223172746-7ad00-d07951739fba17d0c8925b28b947f7cbb

streamlined media listing

Some parameters of media_search where changed, parts using this function
need to be identified and fixed.

darcs-hash:20090223172746-7ad00-d07951739fba17d0c8925b28b947f7cbb7fc7e1a.gz

show more ...

XMLRPC lock or unlock a whole bunch of pages

Ignore-this: d7bb2a80532df444e1ee8e60e3a7b653

darcs-hash:20090220184624-7ad00-2ed594f166e29bcc69d7ecbfe017251764981dd8.gz

additional custom dokuwiki.* methods in XMLRPC

darcs-hash:20090219214505-7ad00-c547bfbf1f7c12cf7509e0ea66222980c6fa11bc.gz

Media changelog added

There is a new media changelog now, with the flag RECENTS_MEDIA_CHANGES media changes can be requested from the getRecents()-function or the new getRecentsSince()-function, tha

Media changelog added

There is a new media changelog now, with the flag RECENTS_MEDIA_CHANGES media changes can be requested from the getRecents()-function or the new getRecentsSince()-function, that returns all changes since a given timestamp and optionally before a given timestamp. The media upload and the XML-RPC-server have been changed to use these functions.

Additionally, the event MEDIA_UPLOAD_FINISH has been extended, it has a new $data-attribute (the 5th), that contains a boolean if the file does already exist and will be overwritten.

darcs-hash:20090118154345-074e0-5d9a90d269e86d8c6a156ecce5cf63115c827433.gz

show more ...

Make content-disposition configurable in mime.conf FS#1541

With this patch it is possible to define if a file should be served as download
or be displayed inside the browser (if supported) by config

Make content-disposition configurable in mime.conf FS#1541

With this patch it is possible to define if a file should be served as download
or be displayed inside the browser (if supported) by configuring it in
conf/mime.conf

Mimetypes that should be served with a "Content-Disposition: attachment" header
need to be prefixed with a exclamation mark. All others will be served inline.

This will also fix a Problem with Flash 10.

darcs-hash:20081202210322-7ad00-6e7ef30aff9322cd135311be77809187da121f3b.gz

show more ...

Added perms and size to getRecentChanges in XML-RPC

darcs-hash:20080824100938-fdd0b-c44a74e698eab59347b315881728c6a063e8b740.gz

XMLRPC: Fixed identation, added deleteAttachment, changed params of putAttachment to fit Wiki RPC specs

darcs-hash:20080824100043-2b4f5-4ad6d86abcf6bc816a47bfd902e37684483ff43e.gz

XMLRPC: Fixed lastModified property for getAllPages and getAttachments

darcs-hash:20080824092446-2b4f5-8424c621fcca7f765feaccea88c1e6664ce94209.gz

XMLRPC: new event XMLRPC_CALLBACK_REGISTER

By using this event, action plugins can register their own callback methods
in DokuWikis XML-RPC server, and extend it's functionality. The event data
i

XMLRPC: new event XMLRPC_CALLBACK_REGISTER

By using this event, action plugins can register their own callback methods
in DokuWikis XML-RPC server, and extend it's functionality. The event data
is the server instance. Plugins can also remove already registered
callbacks or replace them with their own methods.

darcs-hash:20080824080457-23886-b49b897592ce6717f0980f6044bae2d51fd73336.gz

show more ...

XMLRPC: extended listPages()

darcs-hash:20080824090633-23886-57dd768012053858ec86eab235698b7f297661ea.gz

XMLRPC: Cleanup in callback registrations

darcs-hash:20080823173152-2b4f5-8aaed82a8122f0901878326fc17a889c22bc1b79.gz

XMLRPC: Return permissions and date of last modification for files

darcs-hash:20080823173120-2b4f5-8efab03fd182909ea192f739a228ffad64938eda.gz

XMLRPC: Added options for recursion and filtering in listAttachments

darcs-hash:20080823140755-2b4f5-f7d4ce991c38cc6a42e0013e738e291a3d134a43.gz

XMLRPC: Added getAttachmentInfo

darcs-hash:20080823140622-2b4f5-cb7dbe63f0142fedf39fdb5cfd1abedb10a6fa56.gz

XMLRPC: Fixed parameter type of listAttachments

darcs-hash:20080823140514-2b4f5-32b2010ecf506250e10ed68704e0c31d99920585.gz

XMLRPC: Added method getAttachment for retrieving a media file from the wiki

darcs-hash:20080823100440-2b4f5-a134b64fe552e5151ac7adce0292e90b62d8c747.gz

XMLRPC: Make getAttachments recursive

darcs-hash:20080823100400-2b4f5-6327f95d079589a33d0e7881df3436fde1db89e1.gz

XMLRPC: run indexer on putPage()

darcs-hash:20080813200614-23886-ad320ca14e120d8206ee5ffdfb4ac087e0aa6929.gz

XML-RPC: added putAttachment()

darcs-hash:20080713165645-23886-2caca899a42016be8df0797b21d1adef70544cc4.gz

XML-RPC: added getAttachments()

darcs-hash:20080713165210-23886-d28593ac62f3471a4dc4a5410263edb0e48986bc.gz