Re: [Phpwiki-talk] 1.3.9 security fixes and 1.3.7

[Matthew P. <mp...@he...>]

On Mon, May 10, 2004 at 12:32:53PM +0200, Reini Urban wrote:
> Matthew Palmer schrieb:
> >Do any of the fixes in 1.3.9p1 fix security problems which were introduced
> >before or in 1.3.7?  The conglomerate patch provided isn't real easy to 
> >work
> >out.
> 
> No.

Thanks for confirming that.  Had a user who was worried about it, and it's
always better safe than sorry.

> problems fixed with 1.3.9p1 which also affected 1.3.7:
> * set UserPreferences for bool and int fixed
> * dba open problems improved
> * php-4.0.6 support re-enabled (superglobals,array_key_exists)
> * PageGroup support for [links] and subpages
> 
> BTW: As soom as some pending InlineParser problems (still minor ones) 
> are fixed, I'll roll out another release.

I think I'll hold off packaging another phpwiki release until 1.3.10, then.

On the subject of releases (mainly the stable series), has anyone been
working on a translator from the 1.3 series index.php config to the new
INIConfig system?  Manually rewriting bits and pieces of the config file is
probably fairly easy for most situations, but I'd like a (semi) automated
solution for the Debian packaging, if possible.

I'm happy to take this discussion to the list if it's better that way.

- Matt