Re: Missing access checks in CreatePage and AppendText plugins
"Marc-Etienne Vargenau \(Nokia\) via Phpwiki-talk" <[email protected]> Fri, 5 Sep 2025 16:26:35 +0000
| Newsgroups | gmane.comp.web.wiki.phpwiki.talk |
|---|---|
| Message-ID | <PR3PR07MB8183706427801625CD554E3DAC03A@PR3PR07MB8183.eurprd07.prod.outlook.com> |
--===============8060729251877753889== Content-Language: fr-FR Content-Type: multipart/alternative; boundary="_000_PR3PR07MB8183706427801625CD554E3DAC03APR3PR07MB8183eurp_" --_000_PR3PR07MB8183706427801625CD554E3DAC03APR3PR07MB8183eurp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Harold, If the page does not exist, just create it with content: <<SystemInfo all>> For removing a page with a blank name, please see my previous email. Best regards, Marc-Etienne -- Marc-Etienne Vargenau [email protected]<mailto:marc-etienne.v= [email protected]> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE Mobile: +33 6 24 49 78 68<tel:+33624497868> Senior Specialist Open Source Planned absence: none De : Harold Hallikainen <[email protected]> Date : jeudi, 4 septembre 2025 =E0 19:32 =C0 : [email protected] <[email protected]= t> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and AppendTe= xt plugins CAUTION: This is an external email. Please be very careful when clicking li= nks or opening attachments. See the URL nok.it/ext for additional informati= on. Thanks! I did not know about SystemInfo . On one of my wikis, I'm seeing 1.6.0, and the other says the page does not exist. I'll watch for your update and try again. How do I remove a page that has no title? I am seeing a recent change of: 3 September 2025 (diff) (hist) . . ; 14:37 . . lxbfYeaa (contribs | new pages) (Created by CreatePage) THANKS! Harold On Thu, September 4, 2025 12:52 am, Marc-Etienne Vargenau \(Nokia\) via Phpwiki-talk wrote: > Hi Harold, > > > The latest version of PhpWiki is 1.6.6. > > > You can see the version you are running by displaying the SystemInfo > page: > https://eur03.safelinks.protection.outlook.com/?url=3Dhttp%3A%2F%2Fphpwik= i.demo.free.fr%2Findex.php%2FSystemInfo&data=3D05%7C02%7Cmarc-etienne.varge= nau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70= f44f9630b0%7C0%7C0%7C638926039674549518%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1= hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ= %3D%3D%7C0%7C%7C%7C&sdata=3DW87GyY7k0yBUddGpUVdiv5t6NJ5gf1eSAQP3xJrxeUA%3D&= reserved=3D0<http://phpwiki.demo.free.fr/index.php/SystemInfo> > > > > In the source code, the version can be found in files Makefile, > lib/prepend.php and all pgsrc files. > > The patches from Christof Meerwald (see below) are not yet in version > 1.6.6, I will publish a new version with them. > > > Best regards, > > > Marc-Etienne > > > > -- > Marc-Etienne Vargenau > [email protected]<mailto:[email protected]> > Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE > Mobile: +33 6 24 49 78 68<tel:+33624497868> > > > Senior Specialist Open Source > Planned absence: none > > > De : Harold Hallikainen <[email protected]> > Date : mercredi, 3 septembre 2025 =E0 19:55 > =C0 : Discussion on PhpWiki features, bugs, development. > <[email protected]> > Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and > AppendText plugins > > > > CAUTION: This is an external email. Please be very careful when clicking > links or opening attachments. See the URL nok.it/ext for additional > information. > > > > I've had this update on my list of things to do, but had not yet gotten > to it. This morning, there were a bunch of new blank pages on one of my > wikis. So, I deleted them and did the update. Is there an easy way to > tell what version I have installed to make sure I did it correctly? The > wiki is running, but I'd like to make sure it is running the latest code. > > Also, one of the newly created pages has a title that is blank, and I > cannot delete it through the admin interface. Is there a way to delete it= ? > > > THANKS! > > > Harold > > > > On Wed, July 30, 2025 12:59 am, Marc-Etienne Vargenau \(Nokia\) via > Phpwiki-talk wrote: > >> Hi Christof, >> >> >> >> Thank you for your patches. >> I have published them in Subversion. >> >> >> >> Best regards, >> >> >> >> Marc-Etienne >> >> >> >> -- >> Marc-Etienne Vargenau >> [email protected]<mailto:[email protected]> >> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE >> Mobile: +33 6 24 49 78 68<tel:+33624497868> >> Senior Specialist Open Source >> Planned absence: 4-22 August >> >> >> >> De : Christof Meerwald via Phpwiki-talk >> <[email protected]> >> Date : mardi, 29 juillet 2025 =E0 23:24 >> =C0 : Phpwiki-talk <[email protected]> >> Cc : Christof Meerwald <[email protected]> >> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and >> AppendText plugins >> >> >> >> CAUTION: This is an external email. Please be very careful when >> clicking links or opening attachments. See the URL nok.it/ext for >> additional information. >> >> >> >> On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote: >> >> >>> Noticed that the CreatePage and AppendText plugins let >>> unauthenticated users create pages or let them append text to pages, >>> e.g. >> >> Actually, WikiAdminDeleteAcl is also missing an access check, patch >> attached. >> >> >> Christof >> >> >> >> -- >> https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fcmee= rw%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e= 482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C6389260396745= 73863%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsI= lAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3D0EzhOX= jdk9sP0ycl43HR80EPYNxEIrGNOrw53dafc3A%3D&reserved=3D0<https://cmeerw/> >> .o%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb204= 0 >> 1444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C6389251 >> 89423530808%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjA >> uMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C& >> sdata=3DOiyIJxyrNr9KpLerPD282%2FaY5pxuOv4YK2Btjw8baCQ%3D&reserved=3D0<ht= tps >> ://cmeerw.o/> >> rg%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e796218c09f4= 7f >> e >> 61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638894210 >> 50 >> 8983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAw >> M >> CIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata= =3Dw >> % >> 2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=3D0<https://= cm >> e erw.org/> sip:cmeerw at cmeerw.org >> mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org >> _______________________________________________ >> Phpwiki-talk mailing list >> [email protected] >> https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flist= s%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e4= 82b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C63892603967458= 9719%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIl= AiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DgJXizou= UU8B9n6uwUNJfUkIwbvo7b%2FTwQZcjrKtiIjw%3D&reserved=3D0<https://lists/>. >> sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=3D05%7C02%7Cmarc-= e >> tienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717 >> 519675428d917b70f44f9630b0%7C0%7C0%7C638925189423568480%7CUnknown%7CTWF >> pbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIk >> FOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3D6Ovckr72RjkaAZq5TDwJ= V >> zgrc4heKIWvaLqhXIp70h0%3D&reserved=3D0<https://eur03.safelinks.protectio= n.outlook.com/?url=3Dhttps%3A%2F%2Flists.sourceforge.net%2Flist&data=3D05%7= C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%= 7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674606798%7CUnknown%7= CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIk= FOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DuXoPd4lywAaVi8kC1LBfNNk= EvE50I1bhpleP5HYcfjc%3D&reserved=3D0 >> s/listinfo/phpwiki-talk> >> >> > > > -- > Not sent from an iPhone. > > > > -- > Not sent from an iPhone. > > > > _______________________________________________ > Phpwiki-talk mailing list > [email protected] > https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flists= .so%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464= e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674= 626815%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIs= IlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DaJZ%2= BwpY86ZEEXYcLTbRNflnuQ2%2BjB32vGSJbp88LJlk%3D&reserved=3D0<https://lists.so= /> > urceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=3D05%7C02%7Cmarc-eti= en > ne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675 > 428d917b70f44f9630b0%7C0%7C0%7C638925189423585832%7CUnknown%7CTWFpbGZsb3d > 8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFp > bCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3Dv7VnGkTGpbMbdsl6Se8FSYmZptpfMw4= %2 > F1ZR9hIAnYQc%3D&reserved=3D0<https://eur03.safelinks.protection.outlook.c= om/?url=3Dhttps%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fp&data= =3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddeb= d90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674646623%7CUn= known%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4= zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DRLEWCkzCCqw97BUv= A34cXj7Li%2BfQKF2KtY8wIwSu8I0%3D&reserved=3D0 > hpwiki-talk> _______________________________________________ > Phpwiki-talk mailing list > [email protected] > https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flists= .sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=3D05%7C02%7Cmarc-et= ienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d471751967= 5428d917b70f44f9630b0%7C0%7C0%7C638926039674666403%7CUnknown%7CTWFpbGZsb3d8= eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCI= sIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DUiWVcOkXDDMo6IiSf8pvFYOkS11GjIKopDIN= XSkSNDE%3D&reserved=3D0<https://lists.sourceforge.net/lists/listinfo/phpwik= i-talk> > > -- Not sent from an iPhone. _______________________________________________ Phpwiki-talk mailing list [email protected] https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flists.s= ourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=3D05%7C02%7Cmarc-etie= nne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d47175196754= 28d917b70f44f9630b0%7C0%7C0%7C638926039674686216%7CUnknown%7CTWFpbGZsb3d8ey= JFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsI= ldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3D02DPmJtF1a01%2FTOHyHFLUqDMFoP4RbxZUAt7= EYvNQSo%3D&reserved=3D0<https://lists.sourceforge.net/lists/listinfo/phpwik= i-talk> --_000_PR3PR07MB8183706427801625CD554E3DAC03APR3PR07MB8183eurp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> </head> <body> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> Hi Harold,</div> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> If the page does not exist, just create it with content:</div> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <p dir=3D"ltr" style=3D"line-height: normal; margin: 0px;"><span style=3D"f= ont-family: Menlo; font-size: 11px; color: rgb(0, 0, 0);"><<SystemInf= o all>></span></p> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> For removing a page with a blank name, please see my previous email.</div> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> Best regards,</div> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> Marc-Etienne</div> <div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif;= font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div id=3D"ms-outlook-mobile-signature"> <p style=3D"margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;= "><span style=3D"font-family: "Courier New"; font-size: 10pt; col= or: rgb(33, 33, 33);">-- <br> Marc-Etienne Vargenau </span><span style=3D"font-family: "Courier= New"; font-size: 10pt; color: rgb(0, 120, 215);"><u><a href=3D"mailto= :[email protected]" title=3D"mailto:marc-etienne.vargenau@nok= ia.com" data-outlook-id=3D"4e9a427a-b45a-495b-9d0a-7f87c76d561a" style=3D"m= argin-top: 0px; margin-bottom: 0px;">[email protected]</a></u= ></span><span style=3D"font-family: "Courier New"; font-size: 10p= t; color: rgb(33, 33, 33);"><br> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE<br> Mobile: </span><span style=3D"font-family: "Courier New"; font-si= ze: 10pt; color: rgb(0, 120, 215);"><u><a href=3D"tel:+33624497868" data-ou= tlook-id=3D"f5300059-1445-4c88-b1dc-72c9fb79cf3c" style=3D"margin-top: 0px;= margin-bottom: 0px;">+33 6 24 49 78 68</a></u></span></p> <p style=3D"text-align: left; margin: 0cm; font-family: Calibri, sans-serif= ; font-size: 11pt;"> <span style=3D"font-family: "Courier New"; font-size: 10pt; color= : rgb(33, 33, 33);">Senior Specialist Open Source<br> Planned absence:</span><span style=3D"font-family: "Courier New";= color: rgb(33, 33, 33);"><b> none</b></span></p> </div> <div id=3D"mail-editor-reference-message-container"> <div class=3D"ms-outlook-mobile-reference-message skipProofing"> <meta name=3D"Generator" content=3D"Microsoft Exchange Server"> </div> <div class=3D"ms-outlook-mobile-reference-message skipProofing" style=3D"te= xt-align: left; padding: 3pt 0in 0in; border-width: 1pt medium medium; bord= er-style: solid none none; border-color: rgb(181, 196, 223) currentcolor cu= rrentcolor; font-family: Aptos; font-size: 12pt; color: black;"> <b>De : </b>Harold Hallikainen <[email protected]><br> <b>Date : </b>jeudi, 4 septembre 2025 =E0 19:32<br> <b>=C0 : </b>[email protected] <phpwiki-talk@lists= .sourceforge.net><br> <b>Objet : </b>Re: [Phpwiki-talk] Missing access checks in CreatePage = and AppendText plugins<br> <br> </div> <div class=3D"PlainText" style=3D"font-size: 11pt;"><br> CAUTION: This is an external email. Please be very careful when clicking li= nks or opening attachments. See the URL nok.it/ext for additional informati= on.<br> <br> <br> <br> Thanks! I did not know about SystemInfo . On one of my wikis, I'm seeing<br= > 1.6.0, and the other says the page does not exist. I'll watch for your<br> update and try again. How do I remove a page that has no title? I am<br> seeing a recent change of:<br> <br> 3 September 2025<br> (diff) (hist) . . ; 14:37 . . lxbfYeaa (contribs | new pages) (Created by<b= r> CreatePage)<br> <br> THANKS!<br> <br> Harold<br> <br> <br> On Thu, September 4, 2025 12:52 am, Marc-Etienne Vargenau \(Nokia\) via<br> Phpwiki-talk wrote:<br> > Hi Harold,<br> ><br> ><br> > The latest version of PhpWiki is 1.6.6.<br> ><br> ><br> > You can see the version you are running by displaying the SystemInfo<b= r> > page:<br> > <a href=3D"http://phpwiki.demo.free.fr/index.php/SystemInfo" data-outl= ook-id=3D"1fd40fca-6f68-4217-bdef-2956586b6cbd"> https://eur03.safelinks.protection.outlook.com/?url=3Dhttp%3A%2F%2Fphpwiki.= demo.free.fr%2Findex.php%2FSystemInfo&data=3D05%7C02%7Cmarc-etienne.var= genau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b= 70f44f9630b0%7C0%7C0%7C638926039674549518%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0e= U1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoy= fQ%3D%3D%7C0%7C%7C%7C&sdata=3DW87GyY7k0yBUddGpUVdiv5t6NJ5gf1eSAQP3xJrxe= UA%3D&reserved=3D0</a><br> ><br> ><br> ><br> > In the source code, the version can be found in files Makefile,<br> > lib/prepend.php and all pgsrc files.<br> ><br> > The patches from Christof Meerwald (see below) are not yet in version<= br> > 1.6.6, I will publish a new version with them.<br> ><br> ><br> > Best regards,<br> ><br> ><br> > Marc-Etienne<br> ><br> ><br> ><br> > --<br> > Marc-Etienne Vargenau<br> > [email protected]<mailto:marc-etienne.vargenau@nokia.= com><br> > Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE<br> > Mobile: +33 6 24 49 78 68<tel:+33624497868><br> ><br> ><br> > Senior Specialist Open Source<br> > Planned absence: none<br> ><br> ><br> > De : Harold Hallikainen <[email protected]><br> > Date : mercredi, 3 septembre 2025 =E0 19:55<br> > =C0 : Discussion on PhpWiki features, bugs, development.<br> > <[email protected]><br> > Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and<br> > AppendText plugins<br> ><br> ><br> ><br> > CAUTION: This is an external email. Please be very careful when clicki= ng<br> > links or opening attachments. See the URL nok.it/ext for additional<br= > > information.<br> ><br> ><br> ><br> > I've had this update on my list of things to do, but had not yet gotte= n<br> > to it. This morning, there were a bunch of new blank pages on one of m= y<br> > wikis. So, I deleted them and did the update. Is there an easy way to<= br> > tell what version I have installed to make sure I did it correctly? Th= e<br> > wiki is running, but I'd like to make sure it is running the latest co= de.<br> ><br> > Also, one of the newly created pages has a title that is blank, and I<= br> > cannot delete it through the admin interface. Is there a way to delete= it?<br> ><br> ><br> > THANKS!<br> ><br> ><br> > Harold<br> ><br> ><br> ><br> > On Wed, July 30, 2025 12:59 am, Marc-Etienne Vargenau \(Nokia\) via<br= > > Phpwiki-talk wrote:<br> ><br> >> Hi Christof,<br> >><br> >><br> >><br> >> Thank you for your patches.<br> >> I have published them in Subversion.<br> >><br> >><br> >><br> >> Best regards,<br> >><br> >><br> >><br> >> Marc-Etienne<br> >><br> >><br> >><br> >> --<br> >> Marc-Etienne Vargenau<br> >> [email protected]<mailto:marc-etienne.vargenau@no= kia.com><br> >> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE<br> >> Mobile: +33 6 24 49 78 68<tel:+33624497868><br> >> Senior Specialist Open Source<br> >> Planned absence: 4-22 August<br> >><br> >><br> >><br> >> De : Christof Meerwald via Phpwiki-talk<br> >> <[email protected]><br> >> Date : mardi, 29 juillet 2025 =E0 23:24<br> >> =C0 : Phpwiki-talk <[email protected]><br> >> Cc : Christof Meerwald <[email protected]><br> >> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and= <br> >> AppendText plugins<br> >><br> >><br> >><br> >> CAUTION: This is an external email. Please be very careful when<br= > >> clicking links or opening attachments. See the URL nok.it/ext for<= br> >> additional information.<br> >><br> >><br> >><br> >> On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote:= <br> >><br> >><br> >>> Noticed that the CreatePage and AppendText plugins let<br> >>> unauthenticated users create pages or let them append text to = pages,<br> >>> e.g.<br> >><br> >> Actually, WikiAdminDeleteAcl is also missing an access check, patc= h<br> >> attached.<br> >><br> >><br> >> Christof<br> >><br> >><br> >><br> >> --<br> >> <a href=3D"https://cmeerw/" data-outlook-id=3D"99e804ea-666c-4d9e-= afa6-85feae8f765e"> https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fcmeerw%= 2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464= e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674= 573863%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIs= IlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3D0= EzhOXjdk9sP0ycl43HR80EPYNxEIrGNOrw53dafc3A%3D&reserved=3D0</a><br> >> .o%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f2= 4d955fb2040<br> >> 1444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C63= 89251<br> >> 89423530808%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOi= IwLjA<br> >> uMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7= C%7C&<br> >> sdata=3DOiyIJxyrNr9KpLerPD282%2FaY5pxuOv4YK2Btjw8baCQ%3D&reser= ved=3D0<https<br> >> ://cmeerw.o/><br> >> rg%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e7= 96218c09f47f<br> >> e<br> >> 61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C6388= 94210<br> >> 50<br> >> 8983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLj= AuMDAw<br> >> M<br> >> CIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&a= mp;sdata=3Dw<br> >> %<br> >> 2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=3D= 0<https://cm<br> >> e erw.org/> &nbs= p; &= nbsp; sip:cmeerw at cmeerw.org<br> >> <a href=3D"mailto:cmeerw" data-outlook-id=3D"62dd15de-2753-42f5-bb= bd-b216eaba1edd"> mailto:cmeerw</a> at cmeerw.org &nb= sp; xmpp:= cmeerw at cmeerw.org<br> >> _______________________________________________<br> >> Phpwiki-talk mailing list<br> >> [email protected]<br> >> <a href=3D"https://lists/" data-outlook-id=3D"16ec26ae-75ad-42f5-9= 7e9-88b7d5b4acd7"> https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flists%2= F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e= 482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C6389260396745= 89719%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsI= lAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DgJ= XizouUU8B9n6uwUNJfUkIwbvo7b%2FTwQZcjrKtiIjw%3D&reserved=3D0</a>.<br> >> sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=3D05%7C= 02%7Cmarc-e<br> >> tienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5= d4717<br> >> 519675428d917b70f44f9630b0%7C0%7C0%7C638925189423568480%7CUnknown%= 7CTWF<br> >> pbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zM= iIsIk<br> >> FOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3D6Ovckr72Rj= kaAZq5TDwJV<br> >> zgrc4heKIWvaLqhXIp70h0%3D&reserved=3D0<https://eur03.safeli= nks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flists.sourceforge.net%2Flis= t&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e= 482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C6389260396746= 06798%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsI= lAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DuX= oPd4lywAaVi8kC1LBfNNkEvE50I1bhpleP5HYcfjc%3D&reserved=3D0<br> >> s/listinfo/phpwiki-talk><br> >><br> >><br> ><br> ><br> > --<br> > Not sent from an iPhone.<br> ><br> ><br> ><br> > --<br> > Not sent from an iPhone.<br> ><br> ><br> ><br> > _______________________________________________<br> > Phpwiki-talk mailing list<br> > [email protected]<br> > <a href=3D"https://lists.so/" data-outlook-id=3D"ebdf3341-a2fb-47b3-83= 72-c8bd582fbe62"> https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flists.s= o%2F&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a4= 64e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C6389260396= 74626815%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMC= IsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata= =3DaJZ%2BwpY86ZEEXYcLTbRNflnuQ2%2BjB32vGSJbp88LJlk%3D&reserved=3D0</a><= br> > urceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=3D05%7C02%7Cm= arc-etien<br> > ne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519= 675<br> > 428d917b70f44f9630b0%7C0%7C0%7C638925189423585832%7CUnknown%7CTWFpbGZs= b3d<br> > 8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiT= WFp<br> > bCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3Dv7VnGkTGpbMbdsl6Se8FSYmZ= ptpfMw4%2<br> > F1ZR9hIAnYQc%3D&reserved=3D0<https://eur03.safelinks.protection= .outlook.com/?url=3Dhttps%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%= 2Fp&data=3D05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a46= 4e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C63892603967= 4646623%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCI= sIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3D= RLEWCkzCCqw97BUvA34cXj7Li%2BfQKF2KtY8wIwSu8I0%3D&reserved=3D0<br> > hpwiki-talk> _______________________________________________<br> > Phpwiki-talk mailing list<br> > [email protected]<br> > <a href=3D"https://lists.sourceforge.net/lists/listinfo/phpwiki-talk" = data-outlook-id=3D"cb429c4d-a2d1-4693-83b1-8b32e40487f1"> https://eur03.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flists.s= ourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=3D05%7C02%7Cmarc-= etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519= 675428d917b70f44f9630b0%7C0%7C0%7C638926039674666403%7CUnknown%7CTWFpbGZsb3= d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpb= CIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DUiWVcOkXDDMo6IiSf8pvFYOkS11GjI= KopDINXSkSNDE%3D&reserved=3D0</a><br> ><br> ><br> <br> <br> --<br> Not sent from an iPhone.<br> <br> <br> _______________________________________________<br> Phpwiki-talk mailing list<br> [email protected]<br> <a href=3D"https://lists.sourceforge.net/lists/listinfo/phpwiki-talk" data-= outlook-id=3D"fbd88ea1-5b37-4423-b0c9-8e7fdc4fce2b">https://eur03.safelinks= .protection.outlook.com/?url=3Dhttps%3A%2F%2Flists.sourceforge.net%2Flists%= 2Flistinfo%2Fphpwiki-talk&data=3D05%7C02%7Cmarc-etienne.vargenau%40noki= a.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0= %7C0%7C0%7C638926039674686216%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRyd= WUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0= %7C%7C%7C&sdata=3D02DPmJtF1a01%2FTOHyHFLUqDMFoP4RbxZUAt7EYvNQSo%3D&= reserved=3D0</a><br> </div> </div> </body> </html> --_000_PR3PR07MB8183706427801625CD554E3DAC03APR3PR07MB8183eurp_-- --===============8060729251877753889== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============8060729251877753889== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Phpwiki-talk mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/phpwiki-talk --===============8060729251877753889==--