Re: Missing access checks in CreatePage and AppendText plugins

Thanks! I did not know about SystemInfo . On one of my wikis, I'm seeing
1.6.0, and the other says the page does not exist. I'll watch for your
update and try again. How do I remove a page that has no title? I am
seeing a recent change of:

3 September 2025
(diff) (hist) . . ; 14:37 . . lxbfYeaa (contribs | new pages) (Created by
CreatePage)

THANKS!

Harold


On Thu, September 4, 2025 12:52 am, Marc-Etienne Vargenau \(Nokia\) via
Phpwiki-talk wrote:
> Hi Harold,
>
>
> The latest version of PhpWiki is 1.6.6.
>
>
> You can see the version you are running by displaying the SystemInfo
> page:
> http://phpwiki.demo.free.fr/index.php/SystemInfo
>
>
>
> In the source code, the version can be found in files Makefile,
> lib/prepend.php and all pgsrc files.
>
> The patches from Christof Meerwald (see below) are not yet in version
> 1.6.6, I will publish a new version with them.
>
>
> Best regards,
>
>
> Marc-Etienne
>
>
>
> --
> Marc-Etienne Vargenau
> [email protected]<mailto:[email protected]>
> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE
> Mobile: +33 6 24 49 78 68<tel:+33624497868>
>
>
> Senior Specialist Open Source
> Planned absence: none
>
>
> De : Harold Hallikainen <[email protected]>
> Date : mercredi, 3 septembre 2025 =E0 19:55
> =C0 : Discussion on PhpWiki features, bugs, development.
> <[email protected]>
> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and
> AppendText plugins
>
>
>
> CAUTION: This is an external email. Please be very careful when clicking
> links or opening attachments. See the URL nok.it/ext for additional
> information.
>
>
>
> I've had this update on my list of things to do, but had not yet gotten
> to it. This morning, there were a bunch of new blank pages on one of my
> wikis. So, I deleted them and did the update. Is there an easy way to
> tell what version I have installed to make sure I did it correctly? The
> wiki is running, but I'd like to make sure it is running the latest code.
>
> Also, one of the newly created pages has a title that is blank, and I
> cannot delete it through the admin interface. Is there a way to delete it?
>
>
> THANKS!
>
>
> Harold
>
>
>
> On Wed, July 30, 2025 12:59 am, Marc-Etienne Vargenau \(Nokia\) via
> Phpwiki-talk wrote:
>
>> Hi Christof,
>>
>>
>>
>> Thank you for your patches.
>> I have published them in Subversion.
>>
>>
>>
>> Best regards,
>>
>>
>>
>> Marc-Etienne
>>
>>
>>
>> --
>> Marc-Etienne Vargenau
>> [email protected]<mailto:[email protected]>
>> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE
>> Mobile: +33 6 24 49 78 68<tel:+33624497868>
>> Senior Specialist Open Source
>> Planned absence: 4-22 August
>>
>>
>>
>> De : Christof Meerwald via Phpwiki-talk
>> <[email protected]>
>> Date : mardi, 29 juillet 2025 =E0 23:24
>> =C0 : Phpwiki-talk <[email protected]>
>> Cc : Christof Meerwald <[email protected]>
>> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and
>> AppendText plugins
>>
>>
>>
>> CAUTION: This is an external email. Please be very careful when
>> clicking links or opening attachments. See the URL nok.it/ext for
>> additional information.
>>
>>
>>
>> On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote:
>>
>>
>>> Noticed that the CreatePage and AppendText plugins let
>>> unauthenticated users create pages or let them append text to pages,
>>> e.g.
>>
>> Actually, WikiAdminDeleteAcl is also missing an access check, patch
>> attached.
>>
>>
>> Christof
>>
>>
>>
>> --
>> https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fcmee=
rw
>> .o%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb2040
>> 1444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C6389251
>> 89423530808%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjA
>> uMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&
>> sdata=3DOiyIJxyrNr9KpLerPD282%2FaY5pxuOv4YK2Btjw8baCQ%3D&reserved=3D0<ht=
tps
>> ://cmeerw.o/>
>> rg%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e796218c09f4=
7f
>> e
>> 61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638894210
>> 50
>> 8983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAw
>> M
>> CIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=
=3Dw
>> %
>> 2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=3D0<https://=
cm
>> e erw.org/>                             sip:cmeerw at cmeerw.org
>> mailto:cmeerw at cmeerw.org                   xmpp:cmeerw at cmeerw.org
>>  _______________________________________________
>> Phpwiki-talk mailing list
>> [email protected]
>> https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flist=
s.
>> sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=3D05%7C02%7Cmarc-e
>> tienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717
>> 519675428d917b70f44f9630b0%7C0%7C0%7C638925189423568480%7CUnknown%7CTWF
>> pbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIk
>> FOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3D6Ovckr72RjkaAZq5TDwJV
>> zgrc4heKIWvaLqhXIp70h0%3D&reserved=3D0<https://lists.sourceforge.net/list
>> s/listinfo/phpwiki-talk>
>>
>>
>
>
> --
> Not sent from an iPhone.
>
>
>
> --
> Not sent from an iPhone.
>
>
>
> _______________________________________________
> Phpwiki-talk mailing list
> [email protected]
> https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flists=
.so
> urceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=3D05%7C02%7Cmarc-eti=
en
> ne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675
> 428d917b70f44f9630b0%7C0%7C0%7C638925189423585832%7CUnknown%7CTWFpbGZsb3d
> 8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFp
> bCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3Dv7VnGkTGpbMbdsl6Se8FSYmZptpfMw4=
%2
> F1ZR9hIAnYQc%3D&reserved=3D0<https://lists.sourceforge.net/lists/listinfo=
/p
> hpwiki-talk> _______________________________________________
> Phpwiki-talk mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/phpwiki-talk
>
>


-- =

Not sent from an iPhone.