en Copyright 2025 Java http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#b346670ea2385f3ee7ea5e77ba74a02541a73dda correctly escape comments in user names. fixes #4099 List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Tue, 09 Jan 2024 13:32:22 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#934970207e23db2a3f2112de08a3b42d080fd23d AuthPlain user parsing fix. #3833This removes workarounds we had for old PCRE versions. All modern PHPreleases should be workable with the Regex we have.If splitting the user line results in less than 5 results, we log anerror and pad the result for further use. List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Mon, 13 Feb 2023 15:35:00 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#5f18fdf30e4325978c0fb77c25bf7eff96de9394 authplain: properly clean user namesThe authplain module uses cleanID to clean usernames to make them validpagenames. However namespaces should not be used in usernames.For that cleanUser and cleanGroup replaced columns in given names. Butdepending on the wiki configuration useslash, semicolons and slashes mayalso be used as namespace separators. cleanID would replace those withcolons, reintroducing colons into the names.The problem was reported in a forum post where spammers tried toregister http addresses as user names:https://forum.dokuwiki.org/d/19796-spammers-with-in-their-nameUsers with colons were correctly saved (the colon is escaped in the userfile) but could probably not login (unless using a slash or semicoloninstead of the colon). Since usernames are cleaned in many places inDokuWiki, such a logged in user was probably not recognized correctly.Because of the proper colon escaping when saving the user file, I don'tsee any security issue arising from this. Eg. it was not possible totrip up the user loading mechanism.Note: Previously created users containing colons can not be deleted viathe user manager, because displayed usernames are cleaned again, whichwill remove the colons. List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Tue, 14 Dec 2021 16:44:48 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#1c33cec37215d0c964cf961bdbc49ae7db3657e6 add needed type hints for phpunit8This will break a lot of plugin tests, but can't be avoided List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Thu, 04 Feb 2021 19:41:37 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#fdf613b02b78d6292cbdcd475e1961b66d3e42bc fixed auth plain test List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Fri, 11 May 2018 10:02:55 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#5aa905e95e0f4ee1de1d93da15dbd388e985c134 PSR-2 for authplain plugin List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Fri, 11 May 2018 09:51:54 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#55d675c980db292b64d1806e524ee4d8813433ef add phpdocs List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Wed, 11 May 2016 22:54:27 +0000 Gerrit Uitslag <klapinklapin@gmail.com> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#f8095446e4d8d2bca535087d6e9dbcd20106d21d add more plugin groups to authplain test List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Wed, 01 Apr 2015 18:48:03 +0000 Christopher Smith <chris@jalakai.co.uk> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#276820f70d7e96ee375735c1a15bdc0a8331a5a7 Scrutinizer Auto-FixesThis commit consists of patches automatically generated for this project on https://scrutinizer-ci.com List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Sat, 10 Jan 2015 14:47:51 +0000 Scrutinizer Auto-Fixer <auto-fixer@scrutinizer-ci.com> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#8702de7f7e170bddfdb622c393c3cac3446fd1c5 Merge remote-tracking branch 'origin/master' into scrutinizerissuesConflicts: inc/media.php inc/plugin.php inc/template.php lib/plugins/authplain/_test/escaping.test.php lib/plugins/syntax.php List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Tue, 09 Dec 2014 16:26:28 +0000 Gerrit Uitslag <klapinklapin@gmail.com> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#9d846ff4e2a1d18faa3ce6df15f89425d194dd06 escaping backslash should be included in split items List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Sat, 04 Oct 2014 10:59:42 +0000 Christopher Smith <chris@jalakai.co.uk> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#6c8c1f4632a82459236200e9264c40ecebd4b162 Fix for issues 877 & 885 related to a bug in PCRE 6.6 List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Fri, 03 Oct 2014 16:41:14 +0000 Christopher Smith <chris@jalakai.co.uk> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#7e8500eea1e53b1de0e0f70400664afa442cd08d PHPDocs and some improvements List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Thu, 02 Oct 2014 12:55:24 +0000 Gerrit Uitslag <klapinklapin@gmail.com> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/authplain/_test/escaping.test.php#f95ecbbf8b1de8bc1270d3cf91dfdf055ea5c78c authplain: Escape ':' in any data field as '\:'':' is the field delimiter in the authplain flat textconf/users.auth.php file, but it's also used as an internal delimiterfor the 'mediawiki' password hash format. Currently using this hashformat corrupts the fileThis change escapes ':' as '\:' in any field in the users.auth.phpfile, and any '\' as '\\'.Also adds test cases for escaping modes. List of files: /dokuwiki/lib/plugins/authplain/_test/escaping.test.php Mon, 30 Jun 2014 22:35:07 +0000 Angus Gratton <gus@projectgus.com>