Do not allow values for $conf[start] which contain namespaces

darcs-hash:20081011121450-2b4f5-1e3139cc20cea62247be931ebc2749b8fb02c002.gz

Config manager labels

darcs-hash:20080906100647-51399-2f4587b6adbad377fda13aa2f8dd4a10e66c4b6c.gz

editor_info_patch

At present, DW shows the username on the bottom left under "logged in as", and the login name for "last modified", "locked by" and under
revisions/recent changes. In a corporate en

editor_info_patch

At present, DW shows the username on the bottom left under "logged in as", and the login name for "last modified", "locked by" and under
revisions/recent changes. In a corporate environment, particularly when integrated with a Single Sign-On system, the login name may be somewhat
unfriendly. This patch makes the "logged in as" the same as the value used elsewhere and also allows an admin to decide whether it should be the
login name, username or e-mail address that is displayed. The e-mail address may also, optionally, be a mailto: link. E-mail addresses are
obfuscated according to the 'mailguard' setting. The default behaviour is to show the login name which is no change from previous behaviour for the
"last modified"/"locked by"/revisions/"recent changes", but is a change for the "logged in as".

darcs-hash:20081001152914-6ad63-9cd7174068ac55de381f1318a4401f8c51de5b0c.gz

show more ...

more cookie security FS#1490

This patch adds the httponly option to the PHP session cookies and DokuWiki's
auth cookie when supported by the PHP version.

It also adds a new config option 'securecoo

more cookie security FS#1490

This patch adds the httponly option to the PHP session cookies and DokuWiki's
auth cookie when supported by the PHP version.

It also adds a new config option 'securecookie' which is enabled by default.
It makes sure the browser will not sent a cookie set via HTTPS over a
non-secured connection. This option has to be disabled for wikis that only
protect the login with SSL but not the whole wiki.

darcs-hash:20080912224922-7ad00-d5275147ba9d17a9f6defa8a51ca720da74ba8a0.gz

show more ...

added apr1 to the config manager choices of the passcrypt option

darcs-hash:20080810192632-7ad00-96cb5ce703bf5b823f01ca696791bec8e46bea5e.gz

Allow variables for mailfrom option in config manager

darcs-hash:20080504090526-7ad00-e91dd9ba8131faa7818fc8bd5e67331488fa86a6.gz

Update character class for template names to include dash

darcs-hash:20080401194032-f07c6-0ba243a05e6767a381dbacd67fbdc9d2437deeb5.gz

Propritary Nginx X-Accel-Redirect header

Example nginx configuration :
location /var/www/dokuwiki0/ {
internal;
alias /var/www/dokuwiki/dokuwiki0/;
}

darcs-hash:20080315155631-b0461-68c08d68660

Propritary Nginx X-Accel-Redirect header

Example nginx configuration :
location /var/www/dokuwiki0/ {
internal;
alias /var/www/dokuwiki/dokuwiki0/;
}

darcs-hash:20080315155631-b0461-68c08d68660e554c62a748c1954699791decd000.gz

show more ...

Add metadata, settings class and language strings for $conf['renderer_xhtml']

darcs-hash:20080313204505-f07c6-ad0d4b9f155117f6be01925a8bfece1e35efa39f.gz

Make config plugin aware of NS subscriptions and superuser/manager's list

darcs-hash:20080309201527-19e2d-35f2f183214981ee3532e210f68fe8a5d6121c36.gz

added config option to enable/disable the XML-RPC interface

darcs-hash:20080227213050-23886-e55353ab04f9d23675ec11a9e97ba6affec719fc.gz

Spellchecker removed

With spell checkers available in all modern browsers, having a spell checker in
DokuWiki's core code is no longer necessary. This patch removes the spell
checking feature. It wi

Spellchecker removed

With spell checkers available in all modern browsers, having a spell checker in
DokuWiki's core code is no longer necessary. This patch removes the spell
checking feature. It will be made available as optional plugin.

darcs-hash:20071123125840-7ad00-faf7aa4673421dbb3fad904ba5b46b4927a5176d.gz

show more ...

X-Sendfile support for fetch.php

This patch enables the use of the X-Sendfile extension offered by certain
webservers to deliver static files after running a dynamic script. This
combines the flexib

X-Sendfile support for fetch.php

This patch enables the use of the X-Sendfile extension offered by certain
webservers to deliver static files after running a dynamic script. This
combines the flexibility of a PHP file to check for authorization, caching
and resizing with the low memory footprint and high performance of static
file delivery of the webserver.

See http://blog.lighttpd.net/articles/2006/07/02/x-sendfile for details

darcs-hash:20071008185019-7ad00-1e6d4768fb60d58955e4253c7786eaf8cf13d0bb.gz

show more ...

Fix $conf['compression'] setting values (was using 'bzip' instead of 'bz2'); FS#1185

darcs-hash:20070821120916-d26fc-75fbdf68d2a31222b892106229ee84c12c504630.gz

Add checks for supported attic compression methods to config plugin (FS#1185)

darcs-hash:20070805193638-d26fc-aac3910d4dea3cd5539572cce3e73366ed39ab80.gz

improved feed creation

The feed now can export diff views (unified and HTML) as well as full HTML
page content.

Some things might be broken. Everybody please test it!

darcs-hash:20070711213624-7ad

improved feed creation

The feed now can export diff views (unified and HTML) as well as full HTML
page content.

Some things might be broken. Everybody please test it!

darcs-hash:20070711213624-7ad00-49359417127fdbd6e31374738509110271b6b351.gz

show more ...

Show config option names in config manager

This patch outputs the config name in the config manager (instead of using a title
tag) which makes it easier to search (ctrl-f) for a specific option.

da

Show config option names in config manager

This patch outputs the config name in the config manager (instead of using a title
tag) which makes it easier to search (ctrl-f) for a specific option.

darcs-hash:20070629210648-7ad00-0e2a689b04c747298ee50b20bce287069393a84b.gz

show more ...

workaround for PHP bug in config manager FS#1152

Workaround for PHP bug 41773:
http://bugs.php.net/bug.php?idA773

darcs-hash:20070624174903-7ad00-ae406540aca27e20f8fbd2f7c454c079975ebe22.gz

make typography option three staged FS#1142

Because correct smart quote parsing with regular expressions is nearly
impossible, especially when dealing with quote usage in languages different
from en

make typography option three staged FS#1142

Because correct smart quote parsing with regular expressions is nearly
impossible, especially when dealing with quote usage in languages different
from english, the typography configuration option was changed.

0 means to completely disable any typography replacements
1 will only handle the multiply entitity and double quotes, this should
nearly always work without problems and is the new default
2 will add singlequote parsing. This might break because single quotes and
apostrophes are not always easily distinguishable. Especially in languages
where single quote openings and apostrophes are different characters you
might experience problems. For english it should nearly always work.

darcs-hash:20070613184015-7ad00-0cebc3f807f54467d54458075c5c9f651355c5ba.gz

show more ...

Partial Fix FS#1085

This fix adds a new configuration setting, 'auth_security_timeout', which controls the duration (seconds) before authentication
information is rechecked. The default value is se

Partial Fix FS#1085

This fix adds a new configuration setting, 'auth_security_timeout', which controls the duration (seconds) before authentication
information is rechecked. The default value is set to 900 seconds (15 minutes). Wiki installations particularly concerned
about security should set this value to 0.

DokuWiki maintains a copy of the most recent authentication details in both a browser cookie and server session. Normally these
values are compared on each page visit. If the comparison passes the user is accepted. The same data will be used over and
over until either the cookie or the session expires. FS#1085 is concerned with updates to the original authentication data not
being able to affect this comparison. The new 'auth_security_timeout' setting will force expiration of the saved data after the
specified period has elapsed.

Re-authentication may affect page response, especially on systems which use remote authentication systems.

This fix is considered partial and should be reviewed after the next release with a view to extending the authentication class
to allow those mechanisms which are able to control when DW should revoke authentication.

darcs-hash:20070528194747-d26fc-f471004da604eb66f7131c470e446b98c29d801b.gz

show more ...

fixed some xhtml validity issues in config manager

darcs-hash:20070513174719-d5083-4827d529f2d30011a1bb7d3cc09cf15779629c19.gz

Fix for non removable proxy settings in config manager FS#1123

darcs-hash:20070513090309-7ad00-d620a992ce3a014ebc956d20d6b3ee97e2b9fefc.gz

add sneaky_index option

This disables the last patch and adds an option to enable it on demand.

darcs-hash:20070511200235-7ad00-a3ea769bc4965710b7fd261d31e2c9f8a3d9d7f5.gz

soted indexer is now default

darcs-hash:20070226175529-7ad00-4d3d984da1edbf2ded546cfbd7374f97f032d032.gz

Test uploaded files for HTML tags FS#1077

Following the problem with IE's mimetype handling described at
http://www.splitbrain.org/blog/2007-02/12-internet_explorer_facilitates_cross_site_scripting

Test uploaded files for HTML tags FS#1077

Following the problem with IE's mimetype handling described at
http://www.splitbrain.org/blog/2007-02/12-internet_explorer_facilitates_cross_site_scripting
this patch adds a new option (on by default) to check the first 256
bytes of uploaded files against a list of a few HTML tags and denies
the upload of such a file. In rare occasions this may block harmless
and valid files, but that's price we have to pay for Microsoft's
stupidity.

Users who need HTML uploads should disable this check. (Don't do that on
open Wikis!)

darcs-hash:20070224124458-7ad00-0ced616d06f563515b36a0a6871b5ba50229c946.gz

show more ...