140 Commits

Author SHA1 Message Date
Aki Goto
25aa740c2a fix for using with FastCGI servers 2022-09-22 11:14:33 +09:00
Markus Lude
14c06ba45d some preparations for 1.2.1: bump version 2017-12-01 08:25:46 +01:00
Markus Lude
f008b5c0fd cleanup generated HTML code on history page
in DoHistory():
remove unneccessary <tr>

in GetHistoryLine():
close <td>
2017-11-18 01:30:09 +01:00
Markus Lude
ba421c2d6a RSS: fall back to LogoUrl for RssLogoUrl 2017-11-18 00:42:01 +01:00
Markus Lude
291d474327 fix EditHash
in DoPost():
actually check the hash
2017-11-16 08:12:10 +01:00
Markus Lude
4a7553ced4 in GetFooterText():
dont call GetMinimumFooter(), no nested Footer functions
use end_html instead
2017-11-15 19:24:19 +01:00
Markus Lude
acf20ddadd * put <hr> class wikilinerc inside of div for class wikirc 2017-11-15 19:19:12 +01:00
Markus Lude
21ebc21f8e closing div for class wikibody was missing at some places
added </div>
2017-11-15 08:40:39 +01:00
Markus Lude
1d521cdc40 use GetIP() at all relevant places 2017-11-05 21:16:56 +01:00
Markus Lude
2ad2e04c33 some preparations for 1.2.0: bump version 2017-11-05 19:11:55 +01:00
Markus Lude
380be5160c in DoPost():
better use same constant here as in DoEditPrefs()
2017-11-05 18:20:38 +01:00
Markus Lude
ee1e6b9b65 use variable without "" 2017-11-05 16:40:46 +01:00
Markus Lude
b1a6c615cf in InitCookie():
use return value of LoadUserData()
2017-11-05 14:35:34 +01:00
Markus Lude
182fbdd079 in DoLogin():
use return value of LoadUserData()
2017-11-05 14:31:40 +01:00
Markus Lude
d00245b234 in LoadUserData():
add check if uid is too small
return 1 if loading was successful, 0 otherwize
2017-11-05 14:24:19 +01:00
Markus Lude
ba3686996f in InitCookie():
add parameter uid
use parameter uid for check and call of LoadUserData()
2017-11-05 12:39:23 +01:00
Markus Lude
eda0a5ee5a in LoadUserData():
add parameter uid
use parameter uid instead of global variable UserID
2017-11-05 12:29:13 +01:00
Markus Lude
026a769e0a in GetHtmlHeader():
replace "/" with ", " in keywords for subpages
2017-11-05 12:16:47 +01:00
Markus Lude
070ff2c704 use three-argument form of open 2017-11-02 23:56:08 +01:00
Markus Lude
8e3f7824eb no space between function name and left bracket 2017-11-02 23:51:13 +01:00
Markus Lude
d71a118d19 add EditHash 2017-11-02 23:46:12 +01:00
Markus Lude
f14d05103c in GetRemoteHost():
show IP address instead of faked DNS entry on RecentChanges

RecentChanges showed host names which dont make sense like localhost
or all IP addresses in a netblock resolve to the same host name.
The real IP address is lost then (apart from web server logs)

check if REMOTE_ADDR address resolves to a host name
resolve that host name to an IP address
if both ip addresses are the same, then host name is ok to use
2017-11-02 23:40:06 +01:00
Markus Lude
3aa96dd404 fix WikiBugs/CallingKeepFileName
reported by JuanmaMP
2017-11-02 23:36:57 +01:00
Markus Lude
44e500ae44 in KeepFileName():
add parameter name
use $name instead of $OpenPageName

add parameter (= $OpenPageName) to all calls of KeepFileName()
2017-11-02 23:33:34 +01:00
Markus Lude
70488b0c98 added CSS class wikibody to include all except wikiheader and wikifooter
suggested by UngarPeter on ProposalFor1.1
2017-11-02 23:30:33 +01:00
Markus Lude
2950d9a81c re-order entries
first action, then method
2017-11-02 23:24:49 +01:00
Markus Lude
de4e395c6c move favicon related markup 2017-11-02 23:20:14 +01:00
Markus Lude
2883da1bf9 fix markup: close <dd> tags 2017-11-02 23:18:59 +01:00
Markus Lude
c99cad8cc9 fix markup: close <dt> tags 2017-11-02 23:10:41 +01:00
Markus Lude
08687dd8d8 cleanup generated HTML code
use "" around class values
add value to noshade
2017-11-02 23:08:32 +01:00
Markus Lude
418b667f28 add \n after closing div tag 2017-11-02 22:29:25 +01:00
Markus Lude
f94bebe31e removed self closing from tag (<.../>), xml style but we use html 2017-11-02 22:26:16 +01:00
Markus Lude
3a46d68d6f combine splitted /pre tags 2017-11-02 22:23:01 +01:00
Markus Lude
f6c8f13015 use lowercase html tags and attributs 2017-11-02 22:22:23 +01:00
Markus Lude
2214a8175a switch DTD to HTML 4.0.1 Transitional 2017-11-02 22:00:16 +01:00
Markus Lude
b11337d2d6 some preparations for 1.1.0: bump version 2017-10-31 20:58:50 +01:00
Markus Lude
501a7e36f4 remove unused variables 2017-10-31 16:57:38 +01:00
Markus Lude
9474e6789a fix warning:
wiki.pl: Use of uninitialized value within %UseModWiki::SaveNumUrl in numeric gt (>) at /var/www/cgi-bin/wiki.pl line 1926.

warning on normal page view, page contains BracketUrl ([http://...])
2017-10-29 19:44:14 +01:00
Markus Lude
870e1f7eed fix WikiBugs/PwlistArray
reported and fix contributed by JuanmaMP
2017-10-29 17:31:53 +01:00
Markus Lude
d3b07e925d fix WikiBugs/UnusedVariableDeclaration
reported and fix contributed by JuanmaMP
2017-10-29 16:49:23 +01:00
Markus Lude
110664adb9 fix for taint mode:
wiki.pl: Insecure dependency in unlink while running with -T switch at /var/www/cgi-bin/wiki.pl line 4774.

taint error on page delete

in DoDeletePage():
use new variable $unsafe_id for tainted id
untaint id (page name)
2017-10-29 02:16:49 +02:00
Markus Lude
e80c4cd8d5 fix for taint mode:
wiki.pl: Insecure dependency in open while running with -T switch at /var/www/cgi-bin/wiki.pl line 2946.

taint error on page lock/unlock

in DoPageLock():
use new variable $unsafe_id for tainted id
untaint id (page name)
2017-10-29 02:09:48 +02:00
Markus Lude
f4822aa6e8 in DoLogin():
use new variable $unsafe_uid for tainted user id
untaint uid
2017-10-29 01:56:57 +02:00
Markus Lude
bf012db309 new function SanitizeUserID():
untaints parameter $unsafe_uid
returns uid or 111 in error case
(UserID 111 means invalid UserID)

in InitCookie():
use new variable $unsafe_uid for tainted user id
2017-10-29 01:55:47 +02:00
Markus Lude
a3f1349664 fix for taint mode:
wiki.pl: Insecure dependency in open while running with -T switch at /var/www/cgi-bin/wiki.pl line 2935.

taint error on Preferences page
2017-10-29 01:34:46 +02:00
Markus Lude
cca8fc0aa6 add CREDITS 2017-10-29 01:28:14 +02:00
Markus Lude
59aae67859 simplify SanitizePageName() 2017-10-29 01:23:14 +02:00
Markus Lude
18e2417539 new function SanitizePageName():
untaints parameter $unsafe_id
returns id or "" in error case

in DoPost():
use new variable $unsafe_id for tainted id
2017-10-29 01:21:02 +02:00
Markus Lude
d4ba6323a3 fix for taint mode:
wiki.pl: Insecure dependency in open while running with -T switch at /var/www/cgi-bin/wiki.pl line 2927.

taint error on save on page edit
2017-10-29 01:08:39 +02:00
Markus Lude
15412f6695 enable taint mode (perl -T) 2017-10-29 01:02:35 +02:00
Markus Lude
b175a5b4e5 fix warning:
wiki.pl: Use of uninitialized value $UseModWiki::ConfigError in string ne at /var/www/cgi-bin/wiki.pl line 1471.

warning if no config file present
2017-10-29 00:37:44 +02:00
Markus Lude
0cf89ae446 in WikiToHTML():
initialize global variable $TableOfContents if not initialized yet
2017-10-29 00:33:34 +02:00
Markus Lude
0568007328 in GetHistoryLine():
initialize variable $html
2017-10-29 00:31:14 +02:00
Markus Lude
d40a1b150f fix warnings:
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1392.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1116.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1116.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1123.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1123.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1116.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1116.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1116.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in string at ./wiki.pl line 1501.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1123.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1123.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1116.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1123.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1116.
wiki.pl: Use of uninitialized value $UseModWiki::ScriptName in concatenation (.) or string at ./wiki.pl line 1116.
2017-10-29 00:27:53 +02:00
Markus Lude
7f1c918633 fix warning:
wiki.pl: Use of uninitialized value $ENV{"SCRIPT_NAME"} in string at ./wiki.pl line 414.
2017-10-29 00:26:09 +02:00
Markus Lude
da5eaed40e fix warnings:
wiki.pl: Use of uninitialized value $description in concatenation (.) or string at /var/www/cgi-bin/wiki.pl line 967.
wiki.pl: Use of uninitialized value $authorLink in concatenation (.) or string at /var/www/cgi-bin/wiki.pl line 967.

warnings on RSS page
2017-10-29 00:14:22 +02:00
Markus Lude
5c48d9a789 fix warnings:
wiki.pl: Use of uninitialized value $UseModWiki::UserData{"password"} in join or string at /var/www/cgi-bin/wiki.pl line 3781.
wiki.pl: Use of uninitialized value $UseModWiki::UserData{"stylesheet"} in join or string at /var/www/cgi-bin/wiki.pl line 3781.
wiki.pl: Use of uninitialized value $UseModWiki::UserData{"adminpw"} in join or string at /var/www/cgi-bin/wiki.pl line 3781.
wiki.pl: Use of uninitialized value $UseModWiki::UserData{"username"} in join or string at /var/www/cgi-bin/wiki.pl line 3781.

warnings on Preferences page
2017-10-29 00:08:08 +02:00
Markus Lude
16660d99f9 fix warning:
wiki.pl: Use of uninitialized value $rhost in string eq at /var/www/cgi-bin/wiki.pl line 3120.

warning on page edit
2017-10-29 00:01:12 +02:00
Markus Lude
8d39add40a fix warning:
wiki.pl: Use of uninitialized value in string eq at /var/www/cgi-bin/wiki.pl line 3332.

warning on page edit
2017-10-28 23:59:21 +02:00
Markus Lude
31e4f86676 fix warning:
wiki.pl: Use of uninitialized value in string ne at /var/www/cgi-bin/wiki.pl line 2648.

warning on page history
2017-10-28 21:18:54 +02:00
Markus Lude
a0419ff448 fix warnings:
wiki.pl: Use of uninitialized value $c1 in concatenation (.) or string at /var/www/cgi-bin/wiki.pl line 1076.
wiki.pl: Use of uninitialized value $c2 in concatenation (.) or string at /var/www/cgi-bin/wiki.pl line 1078.

warnings on page history
2017-10-28 21:16:27 +02:00
Markus Lude
da6052adeb fix warning:
wiki.pl: Use of uninitialized value $UseModWiki::QuotedFullUrl in concatenation (.) or string at /var/www/cgi-bin/wiki.pl line 778.

warning on RecentChanges page
2017-10-28 21:13:20 +02:00
Markus Lude
cc41abd92c fix warning:
wiki.pl: Use of uninitialized value $text in concatenation (.) or string at /var/www/cgi-bin/wiki.pl line 1967.

warning on normal page view, page contains <toc>
2017-10-28 19:29:07 +02:00
Markus Lude
8f23adcc7a fix warning:
wiki.pl: Use of uninitialized value $extra in concatenation (.) or string at /var/www/cgi-bin/wiki.pl line 1977.

warning on normal page view, page contains URL
2017-10-28 19:26:13 +02:00
Markus Lude
aff1b8387d fix warning:
wiki.pl: Use of uninitialized value $UseModWiki::UserData{"tzoffset"} in numeric ne (!=) at /var/www/cgi-bin/wiki.pl line 463.

warning on normal page view
2017-10-28 19:09:18 +02:00
Markus Lude
6a64c22e12 fix warnings:
wiki.pl: Use of uninitialized value $UseModWiki::UserID in substitution (s///) at /var/www/cgi-bin/wiki.pl line 450.
wiki.pl: Use of uninitialized value $UseModWiki::UserID in numeric lt (<) at /var/www/cgi-bin/wiki.pl line 451.

warnings on normal page view
2017-10-28 19:06:16 +02:00
Markus Lude
19ad47ff11 fix warning:
wiki.pl: Use of uninitialized value $_ in string ne at /var/www/cgi-bin/wiki.pl line 5189.

warning on normal page view
2017-10-28 19:03:41 +02:00
Markus Lude
9f68448d5f fix warnings:
wiki.pl: length() used on @kplist (did you mean "scalar(@kplist)"?) at /var/www/cgi-bin/wiki.pl line 2571.
wiki.pl: length() used on @kplist (did you mean "scalar(@kplist)"?) at /var/www/cgi-bin/wiki.pl line 2573.
wiki.pl: length() used on @kplist (did you mean "scalar(@kplist)"?) at /var/www/cgi-bin/wiki.pl line 4813.
wiki.pl: length() used on @kplist (did you mean "scalar(@kplist)"?) at /var/www/cgi-bin/wiki.pl line 4815.

warnings on normal page view
2017-10-28 18:57:29 +02:00
Markus Lude
59fc58fbab enable warnings (perl -w) 2017-10-28 18:54:40 +02:00
Markus Lude
c6ee9ee1ac some preparations for 1.0.6: bump version 2016-11-05 16:43:26 +01:00
Markus Lude
479225d1d9 fixed WikiBugs/SkipMigratingParameterLock
based on fix by GyPark
2016-11-05 16:39:28 +01:00
Markus Lude
c4a95bf817 fixed WikiBugs/CGIStartformAndEndform 2016-11-05 16:17:51 +01:00
Markus Lude
eedbd60ba9 fixed WikiBugs/CookieIgnored 2016-10-26 15:51:22 +02:00
Markus Lude
31361f5c2d some preparations for 1.0.5: bump version 2016-10-25 20:16:59 +02:00
Markus Lude
d50a72c86d UriEscape(): more chars needed in whitelist, pointed out by JuanmaMP 2016-10-25 20:15:12 +02:00
Markus Lude
c0bb6e62c1 small fix, other problems with diff pages for example 2016-10-25 20:09:47 +02:00
Markus Lude
a5eb14d28e UriEscape(): better use white listing than black listing
mostly from GunnarH, mentioned on WikiBugs/NonEnglishRSS
2016-10-25 20:08:45 +02:00
Markus Lude
32a13c5e8b fixed WikiBugs/NonEnglishRSS
fixes contributed by GunnarH
2016-10-25 20:07:57 +02:00
Markus Lude
33bef450e8 GetHtmlHeader(): modified patch RssLinkInHeader:
link to RSS only on normal pages (no action stuff)
2016-10-25 20:06:23 +02:00
Markus Lude
39995d1c0c fixed WikiBugs/TTatDoEditBanned
fix contributed by JuanMtnezPineda
2016-10-25 20:04:07 +02:00
Markus Lude
d521f7011d DoLinks(): backout change from 8429294b5c,
keep extra lines
2016-10-25 20:02:48 +02:00
Markus Lude
c64c3ff54c removed unnecessary hr tag in DoLinks() 2016-10-25 20:01:34 +02:00
Markus Lude
8429294b5c added fix for WikiBugs/ExtraBRAtDoBackLinks
contributed by JuanMtnezPineda (JuanmaMP)
extended it for DoHistory(), DoUpdatePrefs(), DoIndex(), DoSearch(),
DoMaintain(), DoMaintainRc()
removed similar padding in DoLinks()
2016-10-25 20:00:46 +02:00
Markus Lude
21c98985bc fix example in config section, fix spacing 2016-10-25 19:59:22 +02:00
Markus Lude
8814048cfc fixed WikiBugs/NumericDatesNeedZeroPadding
fix contributed by GunnarH
2016-10-25 19:57:54 +02:00
Markus Lude
26037dd0dd Allow "0" as page name if FreeLinks are allowed 2016-10-25 19:56:04 +02:00
Markus Lude
49cec5752d refine last patch, use int flag instead of param value 2016-10-25 19:55:08 +02:00
Markus Lude
78a833233c added WikiPatches/DoPageLockMinorTweak
contributed by JuanMtnezPineda (JuanmaMP)
extended it for DoEditLock() too
2016-10-25 19:54:17 +02:00
Markus Lude
d9a7c35fe7 GetHtmlHeader(): modified patch RssLinkInHeader:
link to RSS only on RecentChanges
2016-10-25 19:51:29 +02:00
Markus Lude
c846f805fb GetHtmlHeader(): use RssDays as intended 2016-10-25 19:50:20 +02:00
Markus Lude
20c51dd9ff added WikiPatches/RssLinkInHeader
contributed by UngarPeter
2016-10-25 19:47:42 +02:00
Markus Lude
932fa71cb5 some preparations for 1.0.4: bump version 2016-10-25 19:43:21 +02:00
Markus Lude
e9341a3ee5 GetPageLockLink, GetAdminBar: move function to allow defered compilation again.
This was already broken in 1.0, possibly since addition of the AdminBar code.
missed in 027da87d33
2016-10-25 19:41:18 +02:00
Markus Lude
4364cd7da3 updated barnesandnoble.com search URL
noted by Oddmuse:FletcherPenny on Oddmuse:Comments_on_Usemod_Markup_Extension
2016-10-25 19:38:50 +02:00
Markus Lude
d71565c85b GetRc, GetRcRss, GetRssRcLine, EmailNotify: added some missing ScriptLinkChar()
instead of "?"
2016-10-25 19:37:25 +02:00
Markus Lude
1275491365 fixed bug: make GotoBars at top and bottom look the same on the edit page
the one at the top was lacking the main page when editing subpages
2016-10-25 19:35:52 +02:00
Markus Lude
027da87d33 GetPageLockLink, GetAdminBar: move function to allow defered compilation again.
This was already broken in 1.0, possibly since addition of the AdminBar code.
2016-10-25 19:34:28 +02:00
Markus Lude
730799f93d QuoteHtml: move function to allow defered compilation again.
This was broken with WikiPatches/XssFix (adding QuoteHtml to Ts/Tss calls)
2016-10-25 19:33:11 +02:00
Markus Lude
54bb8f0f22 fixed WikiBugs/NoDisplayFooterInActionLink
reported and fix contributed by JuanMtnezPineda (JuanmaMP)
2016-10-25 19:31:56 +02:00
Markus Lude
073748c0ca some preparations for 1.0.3: bump version 2016-10-25 19:26:06 +02:00
Markus Lude
920c918c15 typo 2016-10-25 19:23:59 +02:00
Markus Lude
ff1a3762b1 fix WikiBugs/UrlEncoding
fix contributed by StefanTrcek
2016-10-25 19:23:16 +02:00
Markus Lude
2ae7b38813 small fix 2016-10-25 19:21:27 +02:00
Markus Lude
a1cb3d9d76 fixed bug introduced with WikiPatches/XssFix
was already mentioned by Cliff on WikiPatches/XssFixTalk, but missed it somehow
2016-10-25 19:20:06 +02:00
Markus Lude
13c4c7528c added more translation strings 2016-10-25 19:18:21 +02:00
Markus Lude
1f1718b165 fix WikiBugs/MiscTranslation
reported and fix contributed by JuanMtnezPineda (JuanmaMP)
2016-10-25 19:15:14 +02:00
Markus Lude
a70fe404f4 minor tweak 2016-10-25 19:12:59 +02:00
Markus Lude
36ec8e1315 fixed WikiBugs/EmptyTableElements
fix contributed by StefanTrcek
2016-10-25 19:12:10 +02:00
Markus Lude
bebaea5179 fixed WikiBugs/BacklinksMissesSomeFreeLinks
fix contributed by BrianHunter
2016-10-25 19:10:20 +02:00
Markus Lude
677f956db7 reformat different bug names 2016-10-25 19:02:20 +02:00
Markus Lude
e3aa55e96b fixed WikiBugs/AuthenicationFailedNoHeader 2016-10-25 19:01:15 +02:00
Markus Lude
295de1ea38 fixed WikiBugs/IntermapedGifNotInlinedForLink
reported by BrianHunter
2016-10-25 18:58:09 +02:00
Markus Lude
f01d6b2c1a reformat different bug names 2016-10-25 18:56:27 +02:00
Markus Lude
a8c2ccbcbb some preparations for 1.0.2: bump version 2016-10-25 18:50:53 +02:00
Markus Lude
157722644a sort names wiki-like 2016-10-25 18:46:35 +02:00
Markus Lude
2754314be7 fixed WikiBugs/CamelCaseImageUploadCausesProblemsWithDisplay
reported by Ke4roh
fix contributed by ?? with suggestion from DavidClaughton
2016-10-25 18:45:25 +02:00
Markus Lude
650eb5b738 fixed WikiBugs/ImageExtensionsCaseSensitive
aka WikiBugs/UppercaseImageUploadCausesProblemsWithDisplay
reported by TomGries and ??
2016-10-25 18:43:55 +02:00
Markus Lude
fccfe54614 fixed WikiBugs/UploadTranslation
fix contributed by UngarPeter
missed in 349ca3a4c8
2016-10-25 18:39:52 +02:00
Markus Lude
1aefd9bb64 cleanup last fix 2016-10-25 18:35:04 +02:00
Markus Lude
0208201b8d fixed WikiBugs/ActionLinksExistsZeroSubPage aka WikiBugs/RequestedLinks
fix from GyPark and (WikiPatches/RequestedLinks) MikeCastle
2016-10-25 18:30:35 +02:00
Markus Lude
c70790ca85 better use usemod.com mail address 2016-10-25 18:28:45 +02:00
Markus Lude
18d02d4c06 added WikiPatches/RobotsNoFollow
patch contributed by Trent with suggestion by UngarPeter
based on work by TomScanlan and maybe others
2016-10-25 18:27:09 +02:00
Markus Lude
7e6cb67e08 fixed WikiBugs/ClassWikifooterMissing reported by StefanTrcek
was already fixed in c321e01c70
(embed/footer changes)
2016-10-25 18:23:33 +02:00
Markus Lude
349ca3a4c8 fixed WikiBugs/UploadTranslation
fix contributed by UngarPeter
2016-10-25 18:20:21 +02:00
Markus Lude
6d9493aab7 fixed WikiBugs/VariableParseParasYieldsOddOutput reported by StefanTrcek
fix contributed by Trent, simplified
2016-10-25 18:14:59 +02:00
Markus Lude
51a349ea6e add CREDITS and Changelog, sadly forgot this in 1.0.1 2016-10-25 18:08:38 +02:00
Markus Lude
c321e01c70 fixed WikiBugs/ActionEqIndexAndEmbedEqOne reported by StefanTrcek
same problem with other actions and parameter embed
moved CSS class wikilinefooter (for <HR>) inside class wikifooter
2016-10-25 17:47:02 +02:00
Markus Lude
117643908a fixed range which looks wrong to me 2016-10-25 17:46:07 +02:00
Markus Lude
6ab6cb7504 some preparations for 1.0.1: bump version 2016-10-25 11:25:57 +02:00
Markus Lude
c3e4841411 Scalar value @_[0] better written as $_[0] 2016-10-25 11:22:50 +02:00
Markus Lude
92abf6b556 minor formatting 2016-10-25 11:21:53 +02:00
Markus Lude
08bc8db778 cleanup last fix 2016-10-25 11:20:06 +02:00
Markus Lude
3c951c6985 fixed WikiBugs/AmpersandBug
reported and fix (WikiPatches/ProperUriEscaping) contributed by UngarPeter
2016-10-25 11:18:01 +02:00
Markus Lude
1b0c7b8fde fixed WikiBugs/BadHtml
reported and fix contributed by MarkusLude
2016-10-25 11:15:30 +02:00
Markus Lude
38f31ce1a6 fixed WikiBugs/CompareButtonFailsToDiff aka WikiBugs/DoHistory's_Form
reported and fix contributed by BrianHunter and ??
2016-10-25 11:14:18 +02:00
Markus Lude
f9e64f446b fixed WikiBugs/FileUploadManglesFile reported by SamJost
aka WikiBugs/Win32BinaryUpload reported by Robin Rowe rower@movieeditor.com
aka WikiBugs/UploadOnWindowsNeedsBinmode reported by DavidWall
fix from Robin Rowe rower@movieeditor.com and DavidWall
2016-10-25 11:12:07 +02:00
Markus Lude
a54036128e fixed WikiBugs/PossibleToCreatePagesThatCanNotBeEdited
reported by RichardP
fix (WikiPatches/UneditablePageBugFix) by RichardP
2016-10-25 11:10:58 +02:00
Markus Lude
f30a56d744 cleanup fix: use QuoteHtml as suggested on WikiPatches/XssFixTalk 2016-10-25 11:09:23 +02:00
Markus Lude
4abd4e5091 additional fix (WikiPatches/XssFixTalk) by Cliff 2016-10-25 11:03:10 +02:00
Markus Lude
9281a8b24e fixed cross-site scripting vulnerability (CVE-2004-1397)
fix (WikiPatches/XssFix) by ChristophBerg cb@df7cb.de
2016-10-25 11:00:29 +02:00
6 changed files with 874 additions and 417 deletions

23
CREDITS Normal file
View File

@@ -0,0 +1,23 @@
Users which contributed patches added to versions after 1.0:
* BrianHunter
* Christoph Berg (cb@df7cb.de)
* CliffordAdams
* DavidClaughton
* DavidWall
* GunnarH
* GyPark
* JuanMtnezPineda
* MarkIrons
* MikeCastle
* RichardP
* Robin Rowe (rower@movieeditor.com)
* StefanTrcek
* TomScanlan
* Trent
* UngarPeter
If I've forgotten someone, please leave a note on UseMod:MarkusLude or
send mail to usemod@usemod.com.

124
Changelog Normal file
View File

@@ -0,0 +1,124 @@
Changes for bugfix release 1.2.1 (December 01, 2017):
* closing div for class wikibody was missing at some places, added
* put <hr> class wikilinerc inside of div for class wikirc
* fix EditHash
* RSS: fall back to LogoUrl for RssLogoUrl
* cleanup generated HTML code on history page
Changes for release 1.2.0 (November 05, 2017):
* switch DTD to HTML 4.0.1 Transitional
* cleanup generated HTML code
* added CSS class wikibody to include all except wikiheader and wikifooter
suggested by UngarPeter
* fixed bug CallingKeepFileName
with suggestion from JuanMtnezPineda
* show IP address instead of faked DNS entry on RecentChanges
* add EditHash
Changes for release 1.1.0 (October 31, 2017):
* enable warnings (perl -w)
* fix warnings
* enable taint mode (perl -T)
* fixes for taint mode
based on work by MarkIrons
* fixed bug UnusedVariableDeclaration
fix contributed by JuanMtnezPineda
* fixed bug PwlistArray
fix contributed by JuanMtnezPineda
* remove unused variables
Changes for bugfix release 1.0.6 (November 05, 2016):
* fixed bug CookieIgnored
* fixed bug CGIStartformAndEndform
* fixed bug SkipMigratingParameterLock
based on fix by GyPark
Changes for bugfix release 1.0.5 (August 28, 2009):
* added patch RssLinkInHeader (but only for normal pages)
contributed by UngarPeter
* added patch DoPageLockMinorTweak
contributed by JuanMtnezPineda
* Allow "0" as page name if FreeLinks are allowed
* fixed bug NumericDatesNeedZeroPadding
fix contributed by GunnarH
* fixed bug ExtraBRAtDoBackLinks
fix contributed by JuanMtnezPineda
* fixed bug TTatDoEditBanned
fix contributed by JuanMtnezPineda
* fixed bug NonEnglishRSS
fixes contributed by GunnarH
Changes for bugfix release 1.0.4 (December 1, 2007):
* fixed bug NoDisplayFooterInActionLink
fix contributed by JuanMtnezPineda
* QuoteHtml, GetPageLockLink, GetAdminBar: move function to allow defered
compilation again
* fixed bug: make GotoBars at top and bottom look the same on the edit page
* added some missing ScriptLinkChar() instead of "?"
* updated barnesandnoble.com search URL
Changes for bugfix release 1.0.3 (September 12, 2007):
* fixed bug IntermapedGifNotInlinedForLink
* fixed bug AuthenicationFailedNoHeader
* fixed bug BacklinksMissesSomeFreeLinks
fix contributed by BrianHunter
* fixed bug EmptyTableElements
fix contributed by StefanTrcek
* fixed bug MiscTranslation
fix contributed by JuanMtnezPineda
* added more translation strings
* DoRC: when using rcidonly text was quoted too much
noticed by CliffordAdams (bug was introduced with XssFix in 1.0.1)
* fixed bug UrlEncoding
fix contributed by StefanTrcek
Changes for bugfix release 1.0.2 (August 26, 2007):
* added CREDITS and Changelog (forgot them in 1.0.1)
* make .zip distribution for Windows users again (forgot it for 1.0.1)
* fixed range in SplitUrlPunct()
* fixed bug ActionEqIndexAndEmbedEqOne
same problem with other actions and parameter embed
* moved CSS class wikilinefooter (for <hr>) inside class wikifooter
* fixed bug ClassWikifooterMissing
* fixed bug VariableParseParasYieldsOddOutput
fix contributed by Trent, simplified
* fixed bug UploadTranslation
fix contributed by UngarPeter
* added patch RobotsNoFollow version D
contributed by Trent with suggestion by UngarPeter
based on work by TomScanlan
* fixed bug ActionLinksExistsZeroSubPage
aka bug RequestedLinks
based on fix by GyPark and MikeCastle
* fixed bug ImageExtensionsCaseSensitive
aka bug UppercaseImageUploadCausesProblemsWithDisplay
* added ico/tif/tiff to ImageExtensions
* fixed bug CamelCaseImageUploadCausesProblemsWithDisplay
with suggestion from DavidClaughton
Changes for bugfix release 1.0.1 (July 9, 2007):
* SECURITY: fix cross-site scripting vulnerability (CVE-2004-1397)
fix contributed by Christoph Berg (cb@df7cb.de)
* fixed bug PossibleToCreatePagesThatCanNotBeEdited
fix contributed by RichardP
* fixed bug FileUploadManglesFile
aka bug Win32BinaryUpload
aka bug UploadOnWindowsNeedsBinmode
fix contributed by Robin Rowe (rower@movieeditor.com) and DavidWall
* fixed bug CompareButtonFailsToDiff
aka bug DoHistory's_Form
fix contributed by BrianHunter and ??
* fixed bug BadHtml
* fixed bug AmpersandBug
fix contributed by UngarPeter
If I've forgotten something or someone, please leave a note on
UseMod:MarkusLude or send mail to usemod@usemod.com.

4
README
View File

@@ -1,5 +1,5 @@
README for UseModWiki 1.0
Last updated: August 1, 2003
README for UseModWiki 1.0.6
Last updated: August 28, 2009
Release notes:

17
config
View File

@@ -1,5 +1,5 @@
# == Configuration =======================================================
# Original version from UseModWiki 1.0
# == Configuration =====================================================
# Original version from UseModWiki 1.2.1
$CookieName = "Wiki"; # Name for this wiki (for multi-wiki sites)
$SiteName = "Wiki"; # Name of site (used for titles)
@@ -11,7 +11,7 @@ $ScriptTZ = ""; # Local time zone ("" means do not print)
$RcDefault = 30; # Default number of RecentChanges days
@RcDays = qw(1 3 7 30 90); # Days for links on RecentChanges
$KeepDays = 14; # Days to keep old revisions
$SiteBase = ""; # Full URL for <BASE> header
$SiteBase = ""; # Full URL for <base> header
$FullUrl = ""; # Set if the auto-detected URL is wrong
$RedirType = 1; # 1 = CGI.pm, 2 = script, 3 = no redirect
$AdminPass = ""; # Set to non-blank to enable password(s)
@@ -38,17 +38,19 @@ $DiffColor2 = '#cfffcf'; # Background color of new/added text
$FavIcon = ''; # URL of bookmark/favorites icon, or ''
$RssDays = 7; # Default number of days in RSS feed
$UserHeader = ''; # Optional HTML header additional content
$UserBody = ''; # Optional <BODY> tag additional content
$UserBody = ''; # Optional <body> tag additional content
$StartUID = 1001; # Starting number for user IDs
$UploadDir = ''; # Full path (like /foo/www/uploads) for files
$UploadUrl = ''; # Full URL (like http://foo.com/uploads)
@ImageSites = qw(); # Url prefixes of good image sites: ()=all
$Salt = 'pepper'; # Salt for generating an EditHash,
# please choose something other here!
# Major options:
$UseSubpage = 1; # 1 = use subpages, 0 = do not use subpages
$UseCache = 0; # 1 = cache HTML pages, 0 = generate every page
$EditAllowed = 1; # 1 = editing allowed, 0 = read-only
$RawHtml = 0; # 1 = allow <HTML> tag, 0 = no raw HTML in pages
$RawHtml = 0; # 1 = allow <html> tag, 0 = no raw HTML in pages
$HtmlTags = 0; # 1 = "unsafe" HTML tags, 0 = only minimal tags
$UseDiff = 1; # 1 = use diff features, 0 = do not use diff
$FreeLinks = 1; # 1 = use [[word]] links, 0 = LinkPattern only
@@ -63,6 +65,7 @@ $ReplaceFile = 'ReplaceFile'; # 0 = disable, 'PageName' = indicator tag
$TableSyntax = 1; # 1 = wiki syntax tables, 0 = no table syntax
$NewFS = 0; # 1 = new multibyte $FS, 0 = old $FS
$UseUpload = 0; # 1 = allow uploads, 0 = no uploads
$UseEditHash = 0; # 1 = use EditHash, 0 = no EditHash
# Minor options:
$LogoLeft = 0; # 1 = logo on left, 0 = logo on right
@@ -96,7 +99,7 @@ $MaskHosts = 0; # 1 = mask hosts/IPs, 0 = no masking
$LockCrash = 0; # 1 = crash if lock stuck, 0 = auto clear locks
$HistoryEdit = 0; # 1 = edit links on history page, 0 = no edit links
$OldThinLine = 0; # 1 = old ==== thick line, 0 = ------ for thick line
$NumberDates = 0; # 1 = 2003-6-17 dates, 0 = June 17, 2003 dates
$NumberDates = 0; # 1 = 2003-06-17 dates, 0 = June 17, 2003 dates
$ParseParas = 0; # 1 = new paragraph markup, 0 = old markup
$AuthorFooter = 1; # 1 = show last author in footer, 0 = do not show
$AllUpload = 0; # 1 = anyone can upload, 0 = only editor/admins
@@ -110,7 +113,7 @@ $BracketImg = 1; # 1 = [url url.gif] becomes image link, 0 = no img
# Names of sites. (The first entry is used for the number link.)
@IsbnNames = ('bn.com', 'amazon.com', 'search');
# Full URL of each site before the ISBN
@IsbnPre = ('http://shop.barnesandnoble.com/bookSearch/isbnInquiry.asp?isbn=',
@IsbnPre = ('http://search.barnesandnoble.com/booksearch/isbninquiry.asp?isbn=',
'http://www.amazon.com/exec/obidos/ISBN=',
'http://www.pricescan.com/books/BookDetail.asp?isbn=');
# Rest of URL of each site after the ISBN (usually '')

View File

@@ -91,6 +91,24 @@ Database is stored in temporary directory %s
Config file error:
Administration
Unlock page
Lock page
Delete this page
Edit Banned List
Run Maintenance
Edit/Rename pages
Unlock site
Lock site
Search:
Go!
@@ -431,13 +449,17 @@ This operation is restricted to site editors only...
This operation is restricted to administrators only...
Set or Remove global edit lock
Set global edit lock
Remove global edit lock
Edit lock created.
Edit lock removed.
Set or Remove page edit lock
Set page edit lock
Remove page edit lock
Missing page id to lock/unlock...
@@ -445,36 +467,54 @@ Lock for %s created.
Lock for %s removed.
Editing Banned list
Updating Banned list
Empty banned list or error.
Resubmit with at least one space character to remove.
Removed banned list
Updated banned list
Editing Links
UpdateLinksList could not get main lock
Updating Links
Administration
Empty command list or error.
Unlock page
Finished command list.
Lock page
Could not open %s log file:
Delete this page
Error was:
Edit Banned List
Delete-Page: page %1 is invalid, error is: %2
Run Maintenance
Rename-Text: old page %1 is invalid, error is: %2
Edit/Rename pages
Rename-Text: new page %1 is invalid, error is: %2
Unlock site
Rename: old page %1 is invalid, error is: %2
Lock site
Rename: new page %1 is invalid, error is: %2
Confirm Delete %s
Rename: new page %s already exists--not renamed.
Rename: old page %s does not exist--nothing done.
Displaying Wiki Version
Delete %s
Confirm deletion of %s by following this link:
Confirm Delete
Delete %s
%s can not be deleted.
%s can not be deleted because it is locked.
@@ -487,6 +527,8 @@ The current upload size limit is %s.
Change the %s variable to increase this limit.
File to Upload:
Upload Finished
The wiki link to your file is:

1053
wiki.pl

File diff suppressed because it is too large Load Diff