Re: [website-dev] Wiki confused?

On 03/30/10 02:53 PM, Nino Novak wrote:
> (plus 274 and 275 [Widget resp Widget talk] from Widgets extension.) 

Ah yes.. right, I forgot about that one.


> I used the api query for this instead. BTW - I was able to use it 
> without being logged in, so there might be a security hole in the 
> installation (ok, I did not try api calls with write permissions - but 
> perhaps this should be tested in detail)

You should be able to query without being logged in since the API 
queries are not really that different from a standard get used to render 
the page.  You should not be able to use the API to put pages back 
without authentication.


> yep. you could try to declare a custom namespace 100/101 and see if the 
> pages would turn accessible then even without the maintenance script 
> being run before.

Too late :-)  the script has already done its job.

I actually don't think the pages would become accessible since they had 
illegal page names.  You cannot create a Wiki page starting with a full 
colon... or at least are not supposed to be able to do this.

C.
-- 
Clayton Cornell       [email protected]
OpenOffice.org Documentation Project co-lead