You can subscribe to this list here.
| 2000 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(1) |
Jun
(103) |
Jul
(105) |
Aug
(16) |
Sep
(16) |
Oct
(78) |
Nov
(36) |
Dec
(58) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 |
Jan
(100) |
Feb
(155) |
Mar
(84) |
Apr
(33) |
May
(22) |
Jun
(77) |
Jul
(36) |
Aug
(37) |
Sep
(183) |
Oct
(74) |
Nov
(235) |
Dec
(165) |
| 2002 |
Jan
(187) |
Feb
(183) |
Mar
(52) |
Apr
(10) |
May
(15) |
Jun
(19) |
Jul
(43) |
Aug
(90) |
Sep
(144) |
Oct
(144) |
Nov
(171) |
Dec
(78) |
| 2003 |
Jan
(113) |
Feb
(99) |
Mar
(80) |
Apr
(44) |
May
(35) |
Jun
(32) |
Jul
(34) |
Aug
(34) |
Sep
(30) |
Oct
(57) |
Nov
(97) |
Dec
(139) |
| 2004 |
Jan
(132) |
Feb
(223) |
Mar
(300) |
Apr
(221) |
May
(171) |
Jun
(286) |
Jul
(188) |
Aug
(107) |
Sep
(97) |
Oct
(106) |
Nov
(139) |
Dec
(125) |
| 2005 |
Jan
(200) |
Feb
(116) |
Mar
(68) |
Apr
(158) |
May
(70) |
Jun
(80) |
Jul
(55) |
Aug
(52) |
Sep
(92) |
Oct
(141) |
Nov
(86) |
Dec
(41) |
| 2006 |
Jan
(35) |
Feb
(62) |
Mar
(59) |
Apr
(52) |
May
(51) |
Jun
(61) |
Jul
(30) |
Aug
(36) |
Sep
(12) |
Oct
(4) |
Nov
(22) |
Dec
(34) |
| 2007 |
Jan
(49) |
Feb
(19) |
Mar
(37) |
Apr
(16) |
May
(9) |
Jun
(38) |
Jul
(17) |
Aug
(31) |
Sep
(16) |
Oct
(34) |
Nov
(4) |
Dec
(8) |
| 2008 |
Jan
(8) |
Feb
(16) |
Mar
(14) |
Apr
(6) |
May
(4) |
Jun
(5) |
Jul
(9) |
Aug
(36) |
Sep
(6) |
Oct
(3) |
Nov
(3) |
Dec
(3) |
| 2009 |
Jan
(14) |
Feb
(2) |
Mar
(7) |
Apr
(16) |
May
(2) |
Jun
(10) |
Jul
(1) |
Aug
(10) |
Sep
(11) |
Oct
(4) |
Nov
(2) |
Dec
|
| 2010 |
Jan
(1) |
Feb
|
Mar
(13) |
Apr
(11) |
May
(18) |
Jun
(44) |
Jul
(7) |
Aug
(2) |
Sep
(14) |
Oct
|
Nov
(6) |
Dec
|
| 2011 |
Jan
(2) |
Feb
(6) |
Mar
(3) |
Apr
(2) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2012 |
Jan
(11) |
Feb
(3) |
Mar
(11) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(1) |
Nov
(4) |
Dec
|
| 2013 |
Jan
|
Feb
|
Mar
|
Apr
(3) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2014 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(4) |
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(8) |
Dec
(1) |
| 2015 |
Jan
(3) |
Feb
(2) |
Mar
|
Apr
(3) |
May
(1) |
Jun
|
Jul
(1) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(2) |
| 2016 |
Jan
|
Feb
(4) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2017 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
(3) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2018 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(3) |
Jun
(1) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2020 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(3) |
Jun
|
Jul
(5) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2021 |
Jan
|
Feb
(4) |
Mar
|
Apr
|
May
|
Jun
|
Jul
(1) |
Aug
(6) |
Sep
(3) |
Oct
|
Nov
|
Dec
|
| 2022 |
Jan
(11) |
Feb
(2) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2023 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(1) |
Nov
(3) |
Dec
(3) |
| 2024 |
Jan
(7) |
Feb
(2) |
Mar
(1) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2025 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
(1) |
Jun
|
Jul
(3) |
Aug
|
Sep
(5) |
Oct
|
Nov
|
Dec
|
Hi Harold, If the page does not exist, just create it with content: <<SystemInfo all>> For removing a page with a blank name, please see my previous email. Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: none De : Harold Hallikainen <ha...@ha...> Date : jeudi, 4 septembre 2025 à 19:32 À : php...@li... <php...@li...> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and AppendText plugins CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. Thanks! I did not know about SystemInfo . On one of my wikis, I'm seeing 1.6.0, and the other says the page does not exist. I'll watch for your update and try again. How do I remove a page that has no title? I am seeing a recent change of: 3 September 2025 (diff) (hist) . . ; 14:37 . . lxbfYeaa (contribs | new pages) (Created by CreatePage) THANKS! Harold On Thu, September 4, 2025 12:52 am, Marc-Etienne Vargenau \(Nokia\) via Phpwiki-talk wrote: > Hi Harold, > > > The latest version of PhpWiki is 1.6.6. > > > You can see the version you are running by displaying the SystemInfo > page: > https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fphpwiki.demo.free.fr%2Findex.php%2FSystemInfo&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674549518%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=W87GyY7k0yBUddGpUVdiv5t6NJ5gf1eSAQP3xJrxeUA%3D&reserved=0<http://phpwiki.demo.free.fr/index.php/SystemInfo> > > > > In the source code, the version can be found in files Makefile, > lib/prepend.php and all pgsrc files. > > The patches from Christof Meerwald (see below) are not yet in version > 1.6.6, I will publish a new version with them. > > > Best regards, > > > Marc-Etienne > > > > -- > Marc-Etienne Vargenau > mar...@no...<mailto:mar...@no...> > Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE > Mobile: +33 6 24 49 78 68<tel:+33624497868> > > > Senior Specialist Open Source > Planned absence: none > > > De : Harold Hallikainen <ha...@ha...> > Date : mercredi, 3 septembre 2025 à 19:55 > À : Discussion on PhpWiki features, bugs, development. > <php...@li...> > Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and > AppendText plugins > > > > CAUTION: This is an external email. Please be very careful when clicking > links or opening attachments. See the URL nok.it/ext for additional > information. > > > > I've had this update on my list of things to do, but had not yet gotten > to it. This morning, there were a bunch of new blank pages on one of my > wikis. So, I deleted them and did the update. Is there an easy way to > tell what version I have installed to make sure I did it correctly? The > wiki is running, but I'd like to make sure it is running the latest code. > > Also, one of the newly created pages has a title that is blank, and I > cannot delete it through the admin interface. Is there a way to delete it? > > > THANKS! > > > Harold > > > > On Wed, July 30, 2025 12:59 am, Marc-Etienne Vargenau \(Nokia\) via > Phpwiki-talk wrote: > >> Hi Christof, >> >> >> >> Thank you for your patches. >> I have published them in Subversion. >> >> >> >> Best regards, >> >> >> >> Marc-Etienne >> >> >> >> -- >> Marc-Etienne Vargenau >> mar...@no...<mailto:mar...@no...> >> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE >> Mobile: +33 6 24 49 78 68<tel:+33624497868> >> Senior Specialist Open Source >> Planned absence: 4-22 August >> >> >> >> De : Christof Meerwald via Phpwiki-talk >> <php...@li...> >> Date : mardi, 29 juillet 2025 à 23:24 >> À : Phpwiki-talk <php...@li...> >> Cc : Christof Meerwald <cm...@cm...> >> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and >> AppendText plugins >> >> >> >> CAUTION: This is an external email. Please be very careful when >> clicking links or opening attachments. See the URL nok.it/ext for >> additional information. >> >> >> >> On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote: >> >> >>> Noticed that the CreatePage and AppendText plugins let >>> unauthenticated users create pages or let them append text to pages, >>> e.g. >> >> Actually, WikiAdminDeleteAcl is also missing an access check, patch >> attached. >> >> >> Christof >> >> >> >> -- >> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcmeerw%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674573863%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=0EzhOXjdk9sP0ycl43HR80EPYNxEIrGNOrw53dafc3A%3D&reserved=0<https://cmeerw/> >> .o%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb2040 >> 1444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C6389251 >> 89423530808%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjA >> uMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C& >> sdata=OiyIJxyrNr9KpLerPD282%2FaY5pxuOv4YK2Btjw8baCQ%3D&reserved=0<https >> ://cmeerw.o/> >> rg%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e796218c09f47f >> e >> 61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638894210 >> 50 >> 8983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAw >> M >> CIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=w >> % >> 2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=0<https://cm >> e erw.org/> sip:cmeerw at cmeerw.org >> mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org >> _______________________________________________ >> Phpwiki-talk mailing list >> Php...@li... >> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674589719%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=gJXizouUU8B9n6uwUNJfUkIwbvo7b%2FTwQZcjrKtiIjw%3D&reserved=0<https://lists/>. >> sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-e >> tienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717 >> 519675428d917b70f44f9630b0%7C0%7C0%7C638925189423568480%7CUnknown%7CTWF >> pbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIk >> FOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=6Ovckr72RjkaAZq5TDwJV >> zgrc4heKIWvaLqhXIp70h0%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flist&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674606798%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=uXoPd4lywAaVi8kC1LBfNNkEvE50I1bhpleP5HYcfjc%3D&reserved=0 >> s/listinfo/phpwiki-talk> >> >> > > > -- > Not sent from an iPhone. > > > > -- > Not sent from an iPhone. > > > > _______________________________________________ > Phpwiki-talk mailing list > Php...@li... > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.so%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674626815%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=aJZ%2BwpY86ZEEXYcLTbRNflnuQ2%2BjB32vGSJbp88LJlk%3D&reserved=0<https://lists.so/> > urceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etien > ne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675 > 428d917b70f44f9630b0%7C0%7C0%7C638925189423585832%7CUnknown%7CTWFpbGZsb3d > 8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFp > bCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=v7VnGkTGpbMbdsl6Se8FSYmZptpfMw4%2 > F1ZR9hIAnYQc%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fp&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674646623%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=RLEWCkzCCqw97BUvA34cXj7Li%2BfQKF2KtY8wIwSu8I0%3D&reserved=0 > hpwiki-talk> _______________________________________________ > Phpwiki-talk mailing list > Php...@li... > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674666403%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=UiWVcOkXDDMo6IiSf8pvFYOkS11GjIKopDINXSkSNDE%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/phpwiki-talk> > > -- Not sent from an iPhone. _______________________________________________ Phpwiki-talk mailing list Php...@li... https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674686216%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=02DPmJtF1a01%2FTOHyHFLUqDMFoP4RbxZUAt7EYvNQSo%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/phpwiki-talk>
Thanks! I did not know about SystemInfo . On one of my wikis, I'm seeing 1.6.0, and the other says the page does not exist. I'll watch for your update and try again. How do I remove a page that has no title? I am seeing a recent change of: 3 September 2025 (diff) (hist) . . ; 14:37 . . lxbfYeaa (contribs | new pages) (Created by CreatePage) THANKS! Harold On Thu, September 4, 2025 12:52 am, Marc-Etienne Vargenau \(Nokia\) via Phpwiki-talk wrote: > Hi Harold, > > > The latest version of PhpWiki is 1.6.6. > > > You can see the version you are running by displaying the SystemInfo > page: > http://phpwiki.demo.free.fr/index.php/SystemInfo > > > > In the source code, the version can be found in files Makefile, > lib/prepend.php and all pgsrc files. > > The patches from Christof Meerwald (see below) are not yet in version > 1.6.6, I will publish a new version with them. > > > Best regards, > > > Marc-Etienne > > > > -- > Marc-Etienne Vargenau > mar...@no...<mailto:mar...@no...> > Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE > Mobile: +33 6 24 49 78 68<tel:+33624497868> > > > Senior Specialist Open Source > Planned absence: none > > > De : Harold Hallikainen <ha...@ha...> > Date : mercredi, 3 septembre 2025 à 19:55 > À : Discussion on PhpWiki features, bugs, development. > <php...@li...> > Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and > AppendText plugins > > > > CAUTION: This is an external email. Please be very careful when clicking > links or opening attachments. See the URL nok.it/ext for additional > information. > > > > I've had this update on my list of things to do, but had not yet gotten > to it. This morning, there were a bunch of new blank pages on one of my > wikis. So, I deleted them and did the update. Is there an easy way to > tell what version I have installed to make sure I did it correctly? The > wiki is running, but I'd like to make sure it is running the latest code. > > Also, one of the newly created pages has a title that is blank, and I > cannot delete it through the admin interface. Is there a way to delete it? > > > THANKS! > > > Harold > > > > On Wed, July 30, 2025 12:59 am, Marc-Etienne Vargenau \(Nokia\) via > Phpwiki-talk wrote: > >> Hi Christof, >> >> >> >> Thank you for your patches. >> I have published them in Subversion. >> >> >> >> Best regards, >> >> >> >> Marc-Etienne >> >> >> >> -- >> Marc-Etienne Vargenau >> mar...@no...<mailto:mar...@no...> >> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE >> Mobile: +33 6 24 49 78 68<tel:+33624497868> >> Senior Specialist Open Source >> Planned absence: 4-22 August >> >> >> >> De : Christof Meerwald via Phpwiki-talk >> <php...@li...> >> Date : mardi, 29 juillet 2025 à 23:24 >> À : Phpwiki-talk <php...@li...> >> Cc : Christof Meerwald <cm...@cm...> >> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and >> AppendText plugins >> >> >> >> CAUTION: This is an external email. Please be very careful when >> clicking links or opening attachments. See the URL nok.it/ext for >> additional information. >> >> >> >> On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote: >> >> >>> Noticed that the CreatePage and AppendText plugins let >>> unauthenticated users create pages or let them append text to pages, >>> e.g. >> >> Actually, WikiAdminDeleteAcl is also missing an access check, patch >> attached. >> >> >> Christof >> >> >> >> -- >> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcmeerw >> .o%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb2040 >> 1444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C6389251 >> 89423530808%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjA >> uMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C& >> sdata=OiyIJxyrNr9KpLerPD282%2FaY5pxuOv4YK2Btjw8baCQ%3D&reserved=0<https >> ://cmeerw.o/> >> rg%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e796218c09f47f >> e >> 61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638894210 >> 50 >> 8983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAw >> M >> CIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=w >> % >> 2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=0<https://cm >> e erw.org/> sip:cmeerw at cmeerw.org >> mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org >> _______________________________________________ >> Phpwiki-talk mailing list >> Php...@li... >> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists. >> sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-e >> tienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717 >> 519675428d917b70f44f9630b0%7C0%7C0%7C638925189423568480%7CUnknown%7CTWF >> pbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIk >> FOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=6Ovckr72RjkaAZq5TDwJV >> zgrc4heKIWvaLqhXIp70h0%3D&reserved=0<https://lists.sourceforge.net/list >> s/listinfo/phpwiki-talk> >> >> > > > -- > Not sent from an iPhone. > > > > -- > Not sent from an iPhone. > > > > _______________________________________________ > Phpwiki-talk mailing list > Php...@li... > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.so > urceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etien > ne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675 > 428d917b70f44f9630b0%7C0%7C0%7C638925189423585832%7CUnknown%7CTWFpbGZsb3d > 8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFp > bCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=v7VnGkTGpbMbdsl6Se8FSYmZptpfMw4%2 > F1ZR9hIAnYQc%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/p > hpwiki-talk> _______________________________________________ > Phpwiki-talk mailing list > Php...@li... > https://lists.sourceforge.net/lists/listinfo/phpwiki-talk > > -- Not sent from an iPhone.
Hi Harold, Normally, you should not be able to create a page with a blank name. I would be interested to know how to do it if you are able to reproduce. To delete it, the only way I can think of is to go to PhpWikiAdministration, in Page Explorer put a star, then select only the blank page and Purge. Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: none De : Marc-Etienne Vargenau (Nokia) <mar...@no...> Date : jeudi, 4 septembre 2025 à 09:52 À : Discussion on PhpWiki features, bugs, development. <php...@li...> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and AppendText plugins Hi Harold, The latest version of PhpWiki is 1.6.6. You can see the version you are running by displaying the SystemInfo page: http://phpwiki.demo.free.fr/index.php/SystemInfo In the source code, the version can be found in files Makefile, lib/prepend.php and all pgsrc files. The patches from Christof Meerwald (see below) are not yet in version 1.6.6, I will publish a new version with them. Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: none De : Harold Hallikainen <ha...@ha...> Date : mercredi, 3 septembre 2025 à 19:55 À : Discussion on PhpWiki features, bugs, development. <php...@li...> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and AppendText plugins CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. I've had this update on my list of things to do, but had not yet gotten to it. This morning, there were a bunch of new blank pages on one of my wikis. So, I deleted them and did the update. Is there an easy way to tell what version I have installed to make sure I did it correctly? The wiki is running, but I'd like to make sure it is running the latest code. Also, one of the newly created pages has a title that is blank, and I cannot delete it through the admin interface. Is there a way to delete it? THANKS! Harold On Wed, July 30, 2025 12:59 am, Marc-Etienne Vargenau \(Nokia\) via Phpwiki-talk wrote: > Hi Christof, > > > Thank you for your patches. > I have published them in Subversion. > > > Best regards, > > > Marc-Etienne > > > -- > Marc-Etienne Vargenau > mar...@no...<mailto:mar...@no...> > Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE > Mobile: +33 6 24 49 78 68<tel:+33624497868> > Senior Specialist Open Source > Planned absence: 4-22 August > > > De : Christof Meerwald via Phpwiki-talk > <php...@li...> > Date : mardi, 29 juillet 2025 à 23:24 > À : Phpwiki-talk <php...@li...> > Cc : Christof Meerwald <cm...@cm...> > Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and > AppendText plugins > > > CAUTION: This is an external email. Please be very careful when clicking > links or opening attachments. See the URL nok.it/ext for additional > information. > > > > On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote: > >> Noticed that the CreatePage and AppendText plugins let unauthenticated >> users create pages or let them append text to pages, e.g. > > Actually, WikiAdminDeleteAcl is also missing an access check, patch > attached. > > > Christof > > > -- > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcmeerw.o%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638925189423530808%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=OiyIJxyrNr9KpLerPD282%2FaY5pxuOv4YK2Btjw8baCQ%3D&reserved=0<https://cmeerw.o/> > rg%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e796218c09f47fe > 61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C63889421050 > 8983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwM > CIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=w% > 2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=0<https://cme > erw.org/> sip:cmeerw at cmeerw.org > mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org > _______________________________________________ > Phpwiki-talk mailing list > Php...@li... > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638925189423568480%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=6Ovckr72RjkaAZq5TDwJVzgrc4heKIWvaLqhXIp70h0%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/phpwiki-talk> > > -- Not sent from an iPhone. -- Not sent from an iPhone. _______________________________________________ Phpwiki-talk mailing list Php...@li... https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638925189423585832%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=v7VnGkTGpbMbdsl6Se8FSYmZptpfMw4%2F1ZR9hIAnYQc%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/phpwiki-talk>
Hi Harold, The latest version of PhpWiki is 1.6.6. You can see the version you are running by displaying the SystemInfo page: http://phpwiki.demo.free.fr/index.php/SystemInfo In the source code, the version can be found in files Makefile, lib/prepend.php and all pgsrc files. The patches from Christof Meerwald (see below) are not yet in version 1.6.6, I will publish a new version with them. Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: none De : Harold Hallikainen <ha...@ha...> Date : mercredi, 3 septembre 2025 à 19:55 À : Discussion on PhpWiki features, bugs, development. <php...@li...> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and AppendText plugins CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. I've had this update on my list of things to do, but had not yet gotten to it. This morning, there were a bunch of new blank pages on one of my wikis. So, I deleted them and did the update. Is there an easy way to tell what version I have installed to make sure I did it correctly? The wiki is running, but I'd like to make sure it is running the latest code. Also, one of the newly created pages has a title that is blank, and I cannot delete it through the admin interface. Is there a way to delete it? THANKS! Harold On Wed, July 30, 2025 12:59 am, Marc-Etienne Vargenau \(Nokia\) via Phpwiki-talk wrote: > Hi Christof, > > > Thank you for your patches. > I have published them in Subversion. > > > Best regards, > > > Marc-Etienne > > > -- > Marc-Etienne Vargenau > mar...@no...<mailto:mar...@no...> > Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE > Mobile: +33 6 24 49 78 68<tel:+33624497868> > Senior Specialist Open Source > Planned absence: 4-22 August > > > De : Christof Meerwald via Phpwiki-talk > <php...@li...> > Date : mardi, 29 juillet 2025 à 23:24 > À : Phpwiki-talk <php...@li...> > Cc : Christof Meerwald <cm...@cm...> > Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and > AppendText plugins > > > CAUTION: This is an external email. Please be very careful when clicking > links or opening attachments. See the URL nok.it/ext for additional > information. > > > > On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote: > >> Noticed that the CreatePage and AppendText plugins let unauthenticated >> users create pages or let them append text to pages, e.g. > > Actually, WikiAdminDeleteAcl is also missing an access check, patch > attached. > > > Christof > > > -- > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcmeerw.o%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638925189423530808%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=OiyIJxyrNr9KpLerPD282%2FaY5pxuOv4YK2Btjw8baCQ%3D&reserved=0<https://cmeerw.o/> > rg%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e796218c09f47fe > 61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C63889421050 > 8983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwM > CIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=w% > 2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=0<https://cme > erw.org/> sip:cmeerw at cmeerw.org > mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org > _______________________________________________ > Phpwiki-talk mailing list > Php...@li... > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638925189423568480%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=6Ovckr72RjkaAZq5TDwJVzgrc4heKIWvaLqhXIp70h0%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/phpwiki-talk> > > -- Not sent from an iPhone. -- Not sent from an iPhone. _______________________________________________ Phpwiki-talk mailing list Php...@li... https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638925189423585832%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=v7VnGkTGpbMbdsl6Se8FSYmZptpfMw4%2F1ZR9hIAnYQc%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/phpwiki-talk>
I've had this update on my list of things to do, but had not yet gotten to it. This morning, there were a bunch of new blank pages on one of my wikis. So, I deleted them and did the update. Is there an easy way to tell what version I have installed to make sure I did it correctly? The wiki is running, but I'd like to make sure it is running the latest code. Also, one of the newly created pages has a title that is blank, and I cannot delete it through the admin interface. Is there a way to delete it? THANKS! Harold On Wed, July 30, 2025 12:59 am, Marc-Etienne Vargenau \(Nokia\) via Phpwiki-talk wrote: > Hi Christof, > > > Thank you for your patches. > I have published them in Subversion. > > > Best regards, > > > Marc-Etienne > > > -- > Marc-Etienne Vargenau > mar...@no...<mailto:mar...@no...> > Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE > Mobile: +33 6 24 49 78 68<tel:+33624497868> > Senior Specialist Open Source > Planned absence: 4-22 August > > > De : Christof Meerwald via Phpwiki-talk > <php...@li...> > Date : mardi, 29 juillet 2025 à 23:24 > À : Phpwiki-talk <php...@li...> > Cc : Christof Meerwald <cm...@cm...> > Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and > AppendText plugins > > > CAUTION: This is an external email. Please be very careful when clicking > links or opening attachments. See the URL nok.it/ext for additional > information. > > > > On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote: > >> Noticed that the CreatePage and AppendText plugins let unauthenticated >> users create pages or let them append text to pages, e.g. > > Actually, WikiAdminDeleteAcl is also missing an access check, patch > attached. > > > Christof > > > -- > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcmeerw.o > rg%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e796218c09f47fe > 61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C63889421050 > 8983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwM > CIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=w% > 2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=0<https://cme > erw.org/> sip:cmeerw at cmeerw.org > mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org > _______________________________________________ > Phpwiki-talk mailing list > Php...@li... > https://lists.sourceforge.net/lists/listinfo/phpwiki-talk > > -- Not sent from an iPhone. -- Not sent from an iPhone.
Hi Christof, Thank you for your patches. I have published them in Subversion. Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: 4-22 August De : Christof Meerwald via Phpwiki-talk <php...@li...> Date : mardi, 29 juillet 2025 à 23:24 À : Phpwiki-talk <php...@li...> Cc : Christof Meerwald <cm...@cm...> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and AppendText plugins CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote: > Noticed that the CreatePage and AppendText plugins let unauthenticated > users create pages or let them append text to pages, e.g. Actually, WikiAdminDeleteAcl is also missing an access check, patch attached. Christof -- https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcmeerw.org%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e796218c09f47fe61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638894210508983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=w%2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=0<https://cmeerw.org/> sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote: > Noticed that the CreatePage and AppendText plugins let unauthenticated > users create pages or let them append text to pages, e.g. Actually, WikiAdminDeleteAcl is also missing an access check, patch attached. Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
Noticed that the CreatePage and AppendText plugins let unauthenticated users create pages or let them append text to pages, e.g. https://wikiurl.example.com/CreatePage?s=Test&template=Template/Example&initial_content=Hello or https://wikiurl.example.com/AppendText?page=HomePage&s=Test Patch attached. Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
Hi Christof, Thank you for the report. I have created a new release of PhpWiki https://sourceforge.net/p/phpwiki/news/2025/05/-phpwiki-166-released-/ Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: 8 May De : Christof Meerwald via Phpwiki-talk <php...@li...> Date : dimanche, 20 avril 2025 à 16:15 À : php...@li... <php...@li...> Cc : Christof Meerwald <cm...@cm...> Objet : [Phpwiki-talk] Missing space for 'ORDER BY' in PDO.php CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. ORDER BY clause needs a space to get valid SQL, patch attached. Christof --
ORDER BY clause needs a space to get valid SQL, patch attached. Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
Hello, PhpWiki 1.6.4 has been published. You can download it at: https://sourceforge.net/projects/phpwiki/ * Upgrade PEAR to release 1.10.14, PEAR DB to release 1.12.1 * Check for "shell_exec" before using it (Christof Meerwald) * Improve RSS (Christof Meerwald) * Add support for SQLite in PDO, add support for SQLite3 in PEAR (Christof Meerwald) Big thanks to Christof Meerwald for the patches he provided. Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68 Senior Specialist Open Source Planned absence: none
Thank you Christof. I have implemented your patch in Subversion. Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: none De : Christof Meerwald via Phpwiki-talk <php...@li...> Date : samedi, 17 février 2024 à 17:47 À : php...@li... <php...@li...> Cc : Christof Meerwald <cm...@cm...> Objet : [Phpwiki-talk] Uncaught TypeError: Cannot access offset of type string on string in phpwiki/lib/stdlib.php:172 CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. This one can be triggered by going to PageHistory and then clicking on "RSS" (note that "RSS2" or "Atom" don't generate a page-specific history there, but that's another issue). The second argument to WikiURL should definitely be an array and not a string, patch attached. Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
This one can be triggered by going to PageHistory and then clicking on "RSS" (note that "RSS2" or "Atom" don't generate a page-specific history there, but that's another issue). The second argument to WikiURL should definitely be an array and not a string, patch attached. Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
Hi Christof, Thank you for the report. I have fixed the test, now testing against "array()" instead of "false". Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: none De : Christof Meerwald via Phpwiki-talk <php...@li...> Date : dimanche, 21 janvier 2024 à 19:57 À : php...@li... <php...@li...> Cc : Christof Meerwald <cm...@cm...> Objet : [Phpwiki-talk] FileFinder.php default path logic CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. I don't think it makes sense to check if the member has already been set in the constructor. And having the default argument "array()", but then comparing against "false" means we never get into the then branch. Patch is attached (so we only use the _get_include_path if FileFinder has been called with no argument specified, which I think is the intention here). Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
"shell_exec" might have been disabled in the PHP configuration, this will result in a hard error when trying to use ` (shell_exec), so check for it. (btw, there is another use in Units.php, but that can be disabled with DISABLE_UNITS=1, so didn't bother to patch that one) Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
There is a _HttpAuthPassUser::_fake_auth in WikiUser.php, so those methods should probably be static, patch attached. Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
I don't think it makes sense to check if the member has already been set in the constructor. And having the default argument "array()", but then comparing against "false" means we never get into the then branch. Patch is attached (so we only use the _get_include_path if FileFinder has been called with no argument specified, which I think is the intention here). Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
Another patch to fix atom feeds:
PHP Fatal error: Uncaught TypeError: Illegal offset type in isset or empty in phpwiki/lib/RssWriter.php:191
Stack trace:
#0 phpwiki/lib/RssWriter.php(175): RssWriter->__uniquify_uri(Array)
#1 phpwiki/lib/RssWriter.php(269): RssWriter->__node('feed', Array, Array)
#2 phpwiki/lib/plugin/RecentChanges.php(1147): AtomFeed->feed(Array)
Christof
--
https://cmeerw.org sip:cmeerw at cmeerw.org
mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
attached a patch to make defaultPerms and accessTypes static so they can be called from (static) dotPerms. Can be triggered by opening a page whose name starts with a "." Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
Hi Christof, Thank you for your report and patches. I will test them and integrate them. I must say that there are some issues with PDO. "DATABASE_TYPE = SQL" (PEAR DB) has been more tested than PDO, and it is what I use. Best wishes for the new year 2024. Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: 1-7 January De : Christof Meerwald via Phpwiki-talk <php...@li...> Date : samedi, 30 décembre 2023 à 20:15 À : php...@li... <php...@li...> Cc : Christof Meerwald <cm...@cm...> Objet : [Phpwiki-talk] PDO sqlite backend CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. So far I have been using phpwiki with the dba backend, but web hosters don't always make dba available, so been investigating using SQLite as the backend. Anyway, tried to use PDO, but ran into a few issues - I have attached a patch that makes it work (at least for me). BTW, not really sure what that "$date > 1588437560" check was all about (1588437560 corresponds to "Sat May 2 18:39:20 2020"). Also not entirely sure what that "else" branch in PDO.php was trying to do with the database dsn - I am just passing the DATABASE_DSN to PDO there now (e.g. DATABASE_DSN = "sqlite:/path/to/file.db") Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
So far I have been using phpwiki with the dba backend, but web hosters don't always make dba available, so been investigating using SQLite as the backend. Anyway, tried to use PDO, but ran into a few issues - I have attached a patch that makes it work (at least for me). BTW, not really sure what that "$date > 1588437560" check was all about (1588437560 corresponds to "Sat May 2 18:39:20 2020"). Also not entirely sure what that "else" branch in PDO.php was trying to do with the database dsn - I am just passing the DATABASE_DSN to PDO there now (e.g. DATABASE_DSN = "sqlite:/path/to/file.db") Christof -- https://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
Hello Harold, >From the wiki itself, you can check the SystemInfo page. For example: http://phpwiki.demo.free.fr/index.php/SystemInfo In the source code, you have it in file ./lib/prepend.php:define('PHPWIKI_VERSION', '1.6.3'); Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: none De : Harold Hallikainen <ha...@ha...> Date : dimanche, 24 décembre 2023 à 19:46 À : php...@li... <php...@li...> Objet : [Phpwiki-talk] How to determine installed PhpWiki version? CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. Is there an easy way to determine what version I have installed? Thanks! Harold _______________________________________________ Phpwiki-talk mailing list Php...@li... https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
Is there an easy way to determine what version I have installed? Thanks! Harold
Hi Marc-Etienne - I've installed 1.6.3 and confirm it's working. Thanks a lot, Thom. On Thursday, 16 November 2023 at 15:57, Marc-Etienne Vargenau (Nokia) <mar...@no...> wrote: > Hi Thom, > > I have just published PhpWiki 1.6.3 with a fix for your issue. > > You can download it at: https://sourceforge.net/projects/phpwiki/ > > Thank you again for your bug report. > > Best regards, > > Marc-Etienne > > -- > Marc-Etienne Vargenau mar...@no... > Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE > Mobile: [+33 6 24 49 78 68](tel:+33624497868) > > Senior Specialist Open Source > Planned absence: none > > De : Marc-Etienne Vargenau (Nokia) <mar...@no...> > Date : mercredi, 8 novembre 2023 à 19:55 > À : Discussion on PhpWiki features, bugs, development. <php...@li...> > Cc : Thom Jeera <tho...@pr...> > Objet : Re: [Phpwiki-talk] TypeError in ExternalReferrer under php8 > > Hi Thom, > > Thank you for the report. > > I will test and provide a fix. > > Is your Phpwiki internal or available on the Internet? > > Best regards, > > Marc-Etienne > > -- > Marc-Etienne Vargenau mar...@no... > Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE > Mobile: [+33 6 24 49 78 68](tel:+33624497868) > > Senior Specialist Open Source > Planned absence: none > > De : Thom Jeera via Phpwiki-talk <php...@li...> > Date : mardi, 24 octobre 2023 à 21:35 > À : php...@li... <php...@li...> > Cc : Thom Jeera <tho...@pr...> > Objet : [Phpwiki-talk] TypeError in ExternalReferrer under php8 > > CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. > > Hi - I'm running phpwiki-1.6.2 on php 8.2.11. > > I saw an error when someone clicked a phpwiki link from within a gmail app - see bottom of email. The 'google.' in the referer triggers the external referrer code, which breaks under php8 (seems ok in php5 - I couldn't recreate it against phpwiki.demo.free.fr for instance). > > Something like this would trigger it under php8: > > curl -H 'referer: android-app://com.google.android.gm/' http://phpwiki.demo.free.fr/index.php/SandBox > > The code here in ExternalReferrer.php looks inconsistent - if there is no query string (ie the tested value IS empty), then $url is still an array when it gets passed into stristr, hence the error. > > if (!empty($url["query"])) { > $url = $url["query"]; > } > > if ($query1 and @stristr($url, $query1)) { > > The behaviour is present but the error gets suppressed under earlier versions of php. > > Suggested fix: add "else return false;" after the !empty test ? > > Reported error: > > Got error 'PHP message: PHP Fatal error: Uncaught TypeError: stristr(): > Argument #1 ($haystack) must be of type string, array given in /syshome/webchris/html/phpwiki-1.6.1/lib/ExternalReferrer.php:129 > Stack trace: > #0 /syshome/webchris/html/phpwiki-1.6.1/lib/ExternalReferrer.php(129): stristr() > #1 /syshome/webchris/html/phpwiki-1.6.1/lib/stdlib.php(1890): SearchEngines->parseSearchQuery() > #2 /syshome/webchris/html/phpwiki-1.6.1/lib/display.php(324): isExternalReferrer() > #3 /syshome/webchris/html/phpwiki-1.6.1/lib/main.php(1069): displayPage() > #4 /syshome/webchris/html/phpwiki-1.6.1/lib/main.php(816): WikiRequest->action_browse() > #5 /syshome/webchris/html/phpwiki-1.6.1/lib/main.php(1451): WikiRequest->handleAction() > #6 /syshome/webchris/html/phpwiki-1.6.1/lib/main.php(1475): main() > #7 /syshome/webchris/html/phpwiki-1.6.1/index.php(60): include('...') > #8 {main} > thrown in /syshome/webchris/html/phpwiki-1.6.1/lib/ExternalReferrer.php on line 129', referer: android-app://com.google.android.gm/ > > Regards, > Thom. > > _______________________________________________ > Phpwiki-talk mailing list > Php...@li... > https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
Hi Thom, I have just published PhpWiki 1.6.3 with a fix for your issue. You can download it at: https://sourceforge.net/projects/phpwiki/ Thank you again for your bug report. Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: none De : Marc-Etienne Vargenau (Nokia) <mar...@no...> Date : mercredi, 8 novembre 2023 à 19:55 À : Discussion on PhpWiki features, bugs, development. <php...@li...> Cc : Thom Jeera <tho...@pr...> Objet : Re: [Phpwiki-talk] TypeError in ExternalReferrer under php8 Hi Thom, Thank you for the report. I will test and provide a fix. Is your Phpwiki internal or available on the Internet? Best regards, Marc-Etienne -- Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: none De : Thom Jeera via Phpwiki-talk <php...@li...> Date : mardi, 24 octobre 2023 à 21:35 À : php...@li... <php...@li...> Cc : Thom Jeera <tho...@pr...> Objet : [Phpwiki-talk] TypeError in ExternalReferrer under php8 CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information. Hi - I'm running phpwiki-1.6.2 on php 8.2.11. I saw an error when someone clicked a phpwiki link from within a gmail app - see bottom of email. The 'google.' in the referer triggers the external referrer code, which breaks under php8 (seems ok in php5 - I couldn't recreate it against phpwiki.demo.free.fr for instance). Something like this would trigger it under php8: curl -H 'referer: android-app://com.google.android.gm/' http://phpwiki.demo.free.fr/index.php/SandBox The code here in ExternalReferrer.php looks inconsistent - if there is no query string (ie the tested value IS empty), then $url is still an array when it gets passed into stristr, hence the error. if (!empty($url["query"])) { $url = $url["query"]; } if ($query1 and @stristr($url, $query1)) { The behaviour is present but the error gets suppressed under earlier versions of php. Suggested fix: add "else return false;" after the !empty test ? Reported error: Got error 'PHP message: PHP Fatal error: Uncaught TypeError: stristr(): Argument #1 ($haystack) must be of type string, array given in /syshome/webchris/html/phpwiki-1.6.1/lib/ExternalReferrer.php:129 Stack trace: #0 /syshome/webchris/html/phpwiki-1.6.1/lib/ExternalReferrer.php(129): stristr() #1 /syshome/webchris/html/phpwiki-1.6.1/lib/stdlib.php(1890): SearchEngines->parseSearchQuery() #2 /syshome/webchris/html/phpwiki-1.6.1/lib/display.php(324): isExternalReferrer() #3 /syshome/webchris/html/phpwiki-1.6.1/lib/main.php(1069): displayPage() #4 /syshome/webchris/html/phpwiki-1.6.1/lib/main.php(816): WikiRequest->action_browse() #5 /syshome/webchris/html/phpwiki-1.6.1/lib/main.php(1451): WikiRequest->handleAction() #6 /syshome/webchris/html/phpwiki-1.6.1/lib/main.php(1475): main() #7 /syshome/webchris/html/phpwiki-1.6.1/index.php(60): include('...') #8 {main} thrown in /syshome/webchris/html/phpwiki-1.6.1/lib/ExternalReferrer.php on line 129', referer: android-app://com.google.android.gm/ Regards, Thom. _______________________________________________ Phpwiki-talk mailing list Php...@li... https://lists.sourceforge.net/lists/listinfo/phpwiki-talk