Fix for privilege escalation bug #825

This rechecks all ACLs a second time before the template is called,
avoiding similar problems in the future.

darcs-hash:20060606182742-7ad00-375c7989c8357c8a05

Fix for privilege escalation bug #825

This rechecks all ACLs a second time before the template is called,
avoiding similar problems in the future.

darcs-hash:20060606182742-7ad00-375c7989c8357c8a051b4966d06dbfde356bedb5.gz

show more ...

bug#701 - partial fix

This patch resolves issues with how call writers merge their instructions into
the main handler instruction list.
- writeCalls will now only merge instructions into the list of

bug#701 - partial fix

This patch resolves issues with how call writers merge their instructions into
the main handler instruction list.
- writeCalls will now only merge instructions into the list of the next higher
call writer
- all call writers have been given a finalise() method to use when the call
writer needs to be terminated gracefully at the end of parsing when the wiki
markup didn't provide its expected exit syntax.

I have only tested finalise with lists. It still requires testing with wiki markup
which results in improperly closed tables, quotes and preformatted text (it may
not be possible to improperly terminate some of these syntax modes).

darcs-hash:20060606131200-9b6ab-1fcde7e25e173de014e2f99bfdee22279b2d911d.gz

show more ...

msg styles, minor update

add overflow:hidden to the three msg styles. This will allow them
to display neatly adjacent to floated content. At present the background
colour will continue under the f

msg styles, minor update

add overflow:hidden to the three msg styles. This will allow them
to display neatly adjacent to floated content. At present the background
colour will continue under the float (e.g. TOC).

darcs-hash:20060606083232-9b6ab-6c880aa64ed60dc40326a479a2892920a035f76a.gz

show more ...

bug#775, fix access control of resend password page

darcs-hash:20060606083212-9b6ab-b04f08b3fde6baca7ec2a33a38c3f147651c8371.gz

fixed newlines in english texts

darcs-hash:20060605200414-7ad00-1aea6818ca40214b18e974c879bf974790da18a2.gz

fix for serious security bug #823

darcs-hash:20060604175833-7ad00-cd96ba6a7db7211082ff82e189828e2e11a6f566.gz

fix php warning in common.php during getRevisions

A php warning can occur when the page name used in a revision check clashes with
a namespace (sub-directory) in the same directory. The strpos() ca

fix php warning in common.php during getRevisions

A php warning can occur when the page name used in a revision check clashes with
a namespace (sub-directory) in the same directory. The strpos() call generates
the warning as the offset used is longer than the directory name.

darcs-hash:20060601212928-9b6ab-2d9399ba71fbfcae6e797977476e2f5daa50cf7f.gz

show more ...

tidy format patterns

The bug preventing use of '<' & '>' in look ahead patterns was fixed
some time ago. This patch replaces the '\x3C' & '\x3E' in those syntax
pattern where they were still in use

tidy format patterns

The bug preventing use of '<' & '>' in look ahead patterns was fixed
some time ago. This patch replaces the '\x3C' & '\x3E' in those syntax
pattern where they were still in use.

darcs-hash:20060601101231-9b6ab-4ad0d61578710543063a5de053c3d0f2065a7ddf.gz

show more ...

XSS bugfix #820

darcs-hash:20060531191114-7ad00-ee7498f6a9e047fc9eda5f8754f85d9b8a3317d5.gz

fixed parse-error in feed.php

darcs-hash:20060530063009-484ab-4617e68ce72052124027d3baeb901e33a2300848.gz

bug#811

darcs-hash:20060530113123-9b6ab-076ed03543c92413e6317992d9cb2f32534b42c3.gz

bug#808, add RewriteBase to .htaccess.dist

darcs-hash:20060530114718-9b6ab-a8b3fc911a254db30aba00747f876a1be49ac7d6.gz

enhanced getBaseURL()

darcs-hash:20060529154201-484ab-42382d9bd2bac83f84226209027001ca1f6deff0.gz

fixed google sitemap pinging #815

darcs-hash:20060529183003-7ad00-de0e3acac75a9f94f6c27f67651eeabe40411d7a.gz

Use meta data in RSS feed

darcs-hash:20060528133552-7ad00-8281720582dbc448534f35cc978e9c8175b54f0d.gz

usability enhancements for the loginform #803

darcs-hash:20060527185238-7ad00-1593c8b25d7f870c8a0b3017fbcf29c4e047f52c.gz

fixed short open tag problem

darcs-hash:20060527150702-7ad00-40dff996272887fe8636e62ff00f92c5d6e6c722.gz

small improvements on JS compressor (maybe fixes #807)

darcs-hash:20060527140157-7ad00-225a9ba66f658cc279cb44ebb04d483291d567d2.gz

be clever about extensions on upload

This patch makes it possible to enter filenames without an
extension in the upload as field when the uploaded file it
self has a known extension.

It also prints

be clever about extensions on upload

This patch makes it possible to enter filenames without an
extension in the upload as field when the uploaded file it
self has a known extension.

It also prints a warning when an extension was changed by
the user.

darcs-hash:20060527100310-7ad00-cf2abb4b9730e54b96c6ba24b2a999011cfb834a.gz

show more ...

made text in mediamanger more clear

darcs-hash:20060526233349-7ad00-2e73eeae9e8d87ac8ecac4248b1548aa9068711f.gz

mediamanager focus fix

darcs-hash:20060526232000-7ad00-be18aedbc317ad0f285c359200f467a7e42b96f2.gz

fix for sitemap creation #813

darcs-hash:20060526223358-7ad00-2bdfd39a5dd8ca09101288834cc75e5e963afda5.gz

update header test cases 20060526

Also resolves a small p_close anomaly introduced when section edits were
given their own instruction.

darcs-hash:20060526170229-05dcb-9509e939b923fe966b901fe5d90ba

update header test cases 20060526

Also resolves a small p_close anomaly introduced when section edits were
given their own instruction.

darcs-hash:20060526170229-05dcb-9509e939b923fe966b901fe5d90ba499828a56c1.gz

show more ...

resolve darcs conflict 20060526

darcs-hash:20060526144958-05dcb-4e04cb5cc9d9f60180f867a12957ceda9ae963b4.gz

decouple section edit from header in renderer

This patch achieves a partial decoupling of the section edit buttons
from the header syntax. A new 'section_edit' instruction is added to the
instructio

decouple section edit from header in renderer

This patch achieves a partial decoupling of the section edit buttons
from the header syntax. A new 'section_edit' instruction is added to the
instruction list. The default set of these instructions is generated from
the header handler and the _finalize function. A generic 'section_edit'
renderer is now part of the renderer.

To rewrite the section semantics, add, or remove section edit buttons the
header handler and renderer no longer need to be modified. Changes can be
dynamically made to the section edit buttons through the 'PARSER_HANDLER_DONE'
action event. An action plugin that registers this event can then modify
the calls list of the handler object before it is rendered.

In short, this patch makes it possible to change the behavior of the section
edit buttons without having to change unrelated code. This patch should be
entirely transparent to DokuWiki users and cleanly written plugins.

darcs-hash:20060522060004-05dcb-8e6b5215e1b610877f126ca0b9e1e5bc21cc6469.gz

show more ...