8c1358ca | 08-Feb-2022 |
Hamp Gábor <gabor.hamp@gmail.com> |
translation update |
fbfe8e90 | 19-Jan-2022 |
pluto00987 <brinel@gmail.com> |
Add ssl/tls req to settings |
a847f473 | 14-Jan-2022 |
pluto00987 <brinel@gmail.com> |
Add update_pass option |
5d2c5d7e | 04-Jan-2022 |
Gerrit Uitslag <klapinklapin@gmail.com> |
reformat code |
2e618646 | 04-Jan-2022 |
Gerrit Uitslag <klapinklapin@gmail.com> |
unittest for loading default and extra default settings in Config manager |
591ebe45 | 04-Jan-2022 |
Gerrit Uitslag <klapinklapin@gmail.com> |
add unittests for loading of defaults, extra defaults, local and protected settings |
95775ac7 | 22-Nov-2020 |
Christoph Ziehr <christoph@christoph-ziehr.de> |
Update Loader.php
The config options are read in the order plugin-standard-values -> template-standard-values -> dokuwiki.php -> local.php -> local.protected.php into DokuWiki.
But when entering th
Update Loader.php
The config options are read in the order plugin-standard-values -> template-standard-values -> dokuwiki.php -> local.php -> local.protected.php into DokuWiki.
But when entering the configuration manger, they options are displayed in the order dokuwiki.php -> plugin-standard-values -> template-standard-values -> local.php -> local.protected.php
This patch fixes the issue, so that the right values are displayed if there are no configs set in local.php or local.protected.php
See also https://forum.dokuwiki.org/d/18489-issues-with-modifying-confdokuwikiphp for further information.
This is a second version of this change, because on the first try, there was unnoticed php-error.
show more ...
|
03ae5b30 | 20-Nov-2020 |
Christoph Ziehr <christoph@christoph-ziehr.de> |
Update Loader.php
The config options are read in the order plugin-standard-values -> template-standard-values -> dokuwiki.php -> local.php -> local.protected.php into DokuWiki.
But when entering th
Update Loader.php
The config options are read in the order plugin-standard-values -> template-standard-values -> dokuwiki.php -> local.php -> local.protected.php into DokuWiki.
But when entering the configuration manger, they options are displayed in the order dokuwiki.php -> plugin-standard-values -> template-standard-values -> local.php -> local.protected.php
This patch fixes the issue, so that the right values are displayed if there are no configs set in local.php or local.protected.php
See also https://forum.dokuwiki.org/d/18489-issues-with-modifying-confdokuwikiphp for further information.
show more ...
|
39ecc3af | 02-Jan-2022 |
Viktor Horváth <horvath.viktor@forrastrend.hu> |
translation update |
8e7694e0 | 02-Jan-2022 |
Andreas Gohr <andi@splitbrain.org> |
authPDO: extend mysql test to ensure multiple groups are read
I noticed that all our tests basically only ever used one group per user. This makes sure multiple groups work as intended. |
f89f8c79 | 31-Dec-2021 |
Mark Prins <mprins@users.sf.net> |
translation update |
bc63eda6 | 28-Dec-2021 |
Schplurtz le Déboulonné <schplurtz@laposte.net> |
translation update |
d8ab8746 | 26-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
Revert "Merge pull request #3039 from takuy/video-attributes"
This reverts commit 408d79f78505248f9ccb44bd2561cedc250ce5a1, reversing changes made to b7c67f83bd81eff3186e4ebd2d9e86cd2c32468d. |
5f18fdf3 | 14-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
authplain: properly clean user names
The authplain module uses cleanID to clean usernames to make them valid pagenames. However namespaces should not be used in usernames.
For that cleanUser and cl
authplain: properly clean user names
The authplain module uses cleanID to clean usernames to make them valid pagenames. However namespaces should not be used in usernames.
For that cleanUser and cleanGroup replaced columns in given names. But depending on the wiki configuration useslash, semicolons and slashes may also be used as namespace separators. cleanID would replace those with colons, reintroducing colons into the names.
The problem was reported in a forum post where spammers tried to register http addresses as user names:
https://forum.dokuwiki.org/d/19796-spammers-with-in-their-name
Users with colons were correctly saved (the colon is escaped in the user file) but could probably not login (unless using a slash or semicolon instead of the colon). Since usernames are cleaned in many places in DokuWiki, such a logged in user was probably not recognized correctly.
Because of the proper colon escaping when saving the user file, I don't see any security issue arising from this. Eg. it was not possible to trip up the user loading mechanism.
Note: Previously created users containing colons can not be deleted via the user manager, because displayed usernames are cleaned again, which will remove the colons.
show more ...
|
54bcc3a6 | 12-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
eck CSRF token in styling plugin. fixes #3560 |
96f679fa | 08-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
check CSRF token enabling/disabling extensions. fixes #3559 |
b9a4556d | 24-Nov-2021 |
Andreas Gohr <andi@splitbrain.org> |
avoid doubling line in logviewer. fixes #3554 |
6a410eb3 | 23-Nov-2021 |
Eduardo Mozart de Oliveira <eduardomozart182@gmail.com> |
translation update |
326bf346 | 15-Nov-2021 |
Spiros Ioannou <sivann@gmail.com> |
much better greek (el) translations |
5c9e31ac | 04-Nov-2021 |
Faramarz Karamizadeh <f.karamizadeh@yahoo.com> |
translation update |
e2170488 | 16-Sep-2021 |
Andreas Gohr <andi@splitbrain.org> |
adjust help text of extension cli
to reflect that extensions can be installed from URLs as well |
75cba7af | 30-Aug-2021 |
David Surroca <davidsurrocaestrada@gmail.com> |
translation update |
5aaea2b0 | 12-Aug-2021 |
Locness <locness3@e.email> |
Do not duplicate the foreach ($installed... |
831ec554 | 08-Aug-2021 |
Axel Kirch <axel@globeglotter.com> |
translation update |
cc16762d | 03-Aug-2021 |
Locness <locness3@e.email> |
Allow installing extenions from URL via the CLI
fixes #3258 |