plugin manager updates

- add $conf['fmode'] support, fixes bug #939
- fix problem with plugin list not being updated after download

darcs-hash:20061027013208-9b6ab-1a7640b40b5448a7afad42064fd00c2cc

plugin manager updates

- add $conf['fmode'] support, fixes bug #939
- fix problem with plugin list not being updated after download

darcs-hash:20061027013208-9b6ab-1a7640b40b5448a7afad42064fd00c2ccf743af0.gz

show more ...

Traditional Chinese update

darcs-hash:20061026205002-7ad00-70f2acf8203e01d1df93e77ce7d8bdb1f4ddac7b.gz

language updates

darcs-hash:20061019101317-7ad00-c9a5b62a9d1e71c15875a8e39050bc931dbf4d03.gz

French localization update

darcs-hash:20061019083731-c47a2-6d301513c4e313acdbb648e1e22e5b8ef45566da.gz

better check for images in fetch.php

This patch is an enhancement to yesterday's changes. The ability to download
external content could be used for XSS attacks, when faking the sent MIME
type. This

better check for images in fetch.php

This patch is an enhancement to yesterday's changes. The ability to download
external content could be used for XSS attacks, when faking the sent MIME
type. This patch adds a check on the received data for valid images.

darcs-hash:20061018124942-7ad00-4e8bca7d3877e6a10c348b5d45499cf8adf8b087.gz

show more ...

restrict fetch.php's download abilities

This patch changes fetch.php ability to download external files. It now checks
for the returned MIME type and will only download images. For all other
MIME ty

restrict fetch.php's download abilities

This patch changes fetch.php ability to download external files. It now checks
for the returned MIME type and will only download images. For all other
MIME types a redirect is sent back to the browser. This reduces the risc of
being misused as open proxy.

Additionally the download facility is disabled completly by default by setting
the fetchsize option to 0. Users who want the feature need to overwrite the option
in their local.php.

Background: The ability to download external files is needed to resize external
images on the server side. When disabled, a redirect is sent to the browser which
will download the fullsize image and rescale it on the client side which is more
bandwidth and CPU intensive.

darcs-hash:20061017175329-7ad00-cd1b1bfa043a04540c51ca8380d28deaa14147d1.gz

show more ...

multiple language updates

darcs-hash:20061013113521-7ad00-1ab48718ab30e042971a6dd6ef595462185955e6.gz

IT-20060829-patch

- translated new strings in registermail.txt, config e usermanager plugins
- fixed changed parameter in config plugin

darcs-hash:20060829170241-57bea-24bf2cbfb341f25b1461cc7cd4fc4

IT-20060829-patch

- translated new strings in registermail.txt, config e usermanager plugins
- fixed changed parameter in config plugin

darcs-hash:20060829170241-57bea-24bf2cbfb341f25b1461cc7cd4fc442e0f44d511.gz

show more ...

strip controlchars in fetch.php #935

Fixes a header injection/XSS vulnerability

darcs-hash:20061008100523-7ad00-be06a942badb6a2a9ed862be003ee0050504b4b0.gz

remove unused code

This patch removes some commented code fragments and alternative
snippet generators

darcs-hash:20061008090624-7ad00-14bfee2ded6c6c8ef43ad02a4c02a5d95ee9daf7.gz

update config settings for dmode & fmode

- change validation pattern to allow 3 or 4 octal digits and hence
setting of SUID, SGID and sticky bit on systems which support them

darcs-hash:200610052

update config settings for dmode & fmode

- change validation pattern to allow 3 or 4 octal digits and hence
setting of SUID, SGID and sticky bit on systems which support them

darcs-hash:20061005223141-9b6ab-80511ecc4780d6258f15f59087f9bab20d1f1340.gz

show more ...

add comment to tpl_indexerWebBug() call in default template main.php

darcs-hash:20061002203925-9b6ab-ca7c87dc96fbc9572ef92a804d58715b0ab0b3e5.gz

security fixes for fetch.php #924 #962

Fixes a shell injection and a DOS vulnerability

darcs-hash:20060926200551-7ad00-5ef27940dda6e48e7e2f8743fc90fa80b7b5cdff.gz

cache, metadata & purgefile updates

Cache
- add dependency for metadata renderer file
- check metadata for end of page life, "date valid end".

Metadata Renderer
- RSS syntax mode now sets rendered

cache, metadata & purgefile updates

Cache
- add dependency for metadata renderer file
- check metadata for end of page life, "date valid end".

Metadata Renderer
- RSS syntax mode now sets rendered page expiry, "date valid end"
and includes the feed URL in "relation haspart".

Purgefile
For all wiki installations the purgefile records the earliest
time before which no cache purge (based on data consistency)
is required. Cache files older than this time MAY need to be
purged.
- remove purgeonadd configuration setting

darcs-hash:20060924202157-9b6ab-4531e91411c41914eeab2b6a8160c3d46b001cee.gz

show more ...

japanes language update

darcs-hash:20060925182128-7ad00-99db9371c6986605eb4d990f819f09bf850ffaa1.gz

fixed script error introduced in last patch

darcs-hash:20060924175824-7ad00-f8a6b8e38ef62aab5c6853b1c355df34259ebb7c.gz

progressbar script change

The progressbar script used in the search accessed parts of the DOM before
it was completely parsed which caused problems in IE. This patch moves back
to document.write for

progressbar script change

The progressbar script used in the search accessed parts of the DOM before
it was completely parsed which caused problems in IE. This patch moves back
to document.write for outputting the image.

darcs-hash:20060924170354-7ad00-1e0247b00fc4da4dd30301f4b9389ef727496c4a.gz

show more ...

update to previous changes cache patch

- fix potential array key collisions
- restore ability to keep a minimum number ($conf['recent']) of recent changes
irregardless of date of change

darcs-has

update to previous changes cache patch

- fix potential array key collisions
- restore ability to keep a minimum number ($conf['recent']) of recent changes
irregardless of date of change

darcs-hash:20060924162105-9b6ab-06350f04f9d9ac4c362f13787b682ef70887a1fc.gz

show more ...

fix for sitemap creation with new compression option #919

darcs-hash:20060924100606-7ad00-7e0bc1fa7778669ac352f8d8994acbb7517323cd.gz

fix recent changes cache ordering

This patch fixes a bug in indexer.php which resulted in the order
of the recent changes cache being reversed each time it was trimmed.

It also adds sorting to both

fix recent changes cache ordering

This patch fixes a bug in indexer.php which resulted in the order
of the recent changes cache being reversed each time it was trimmed.

It also adds sorting to both getRecents() and runTrimRecentChanges()
as a defensive measure against the order of the file being corrupted.

darcs-hash:20060923235109-9b6ab-0f4062c1b02449cce9382426174cd22d71387e5a.gz

show more ...

minor bugfix and boring error removal

darcs-hash:20060923203609-9b6ab-ecca679faa254a29772868508050fcf3206b0814.gz

no gzipping in indexer.php

darcs-hash:20060917140718-7ad00-ab1b95974ad63966c770f787112bc7c2e285c394.gz

Update french translation

darcs-hash:20060917075103-c47a2-de10540e0be698e3aeeab00f085bd212891cd750.gz

updatecheck feature

This patch adds a feature to let DokuWiki automatically check if updates are
available or any other important messages (like security warnings) and then
display this info to the

updatecheck feature

This patch adds a feature to let DokuWiki automatically check if updates are
available or any other important messages (like security warnings) and then
display this info to the admin user.

DokuWiki will contact the URL http://www.splitbrain.org/lib/exe/msg.php
with a parameter telling it which messages it already know (read from
conf/msg) - the server side script then will return all new messages.

The messages will be displayed until DokuWiki was upgraded or conf/msg
was updated manually. Messages are cached and only checked once a day.

The messenger URL will probably change before the next release.

darcs-hash:20060916210229-7ad00-7ac592650e171ae4144b0eb47a751a4ca480f031.gz

show more ...

japanese language update

darcs-hash:20060916145219-7ad00-2ca985138204b2547ef9e24d780c226af8073fcb.gz