Re: Missing access checks in CreatePage and AppendText plugins

I've had this update on my list of things to do, but had not yet gotten to
it. This morning, there were a bunch of new blank pages on one of my
wikis. So, I deleted them and did the update. Is there an easy way to tell
what version I have installed to make sure I did it correctly? The wiki is
running, but I'd like to make sure it is running the latest code.

Also, one of the newly created pages has a title that is blank, and I
cannot delete it through the admin interface. Is there a way to delete it?

THANKS!

Harold


On Wed, July 30, 2025 12:59 am, Marc-Etienne Vargenau \(Nokia\) via
Phpwiki-talk wrote:
> Hi Christof,
>
>
> Thank you for your patches.
> I have published them in Subversion.
>
>
> Best regards,
>
>
> Marc-Etienne
>
>
> --
> Marc-Etienne Vargenau
> [email protected]<mailto:[email protected]>
> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE
> Mobile: +33 6 24 49 78 68<tel:+33624497868>
> Senior Specialist Open Source
> Planned absence: 4-22 August
>
>
> De : Christof Meerwald via Phpwiki-talk
> <[email protected]>
> Date : mardi, 29 juillet 2025 =E0 23:24
> =C0 : Phpwiki-talk <[email protected]>
> Cc : Christof Meerwald <[email protected]>
> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and
> AppendText plugins
>
>
> CAUTION: This is an external email. Please be very careful when clicking
> links or opening attachments. See the URL nok.it/ext for additional
> information.
>
>
>
> On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote:
>
>> Noticed that the CreatePage and AppendText plugins let unauthenticated
>> users create pages or let them append text to pages, e.g.
>
> Actually, WikiAdminDeleteAcl is also missing an access check, patch
> attached.
>
>
> Christof
>
>
> --
> https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fcmeer=
w.o
> rg%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e796218c09f47=
fe
> 61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C63889421050
> 8983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwM
> CIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3D=
w%
> 2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=3D0<https://c=
me
> erw.org/>                             sip:cmeerw at cmeerw.org
> mailto:cmeerw at cmeerw.org                   xmpp:cmeerw at cmeerw.org
> _______________________________________________
> Phpwiki-talk mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>
>


-- =

Not sent from an iPhone.


-- =

Not sent from an iPhone.