Re: [Phpwiki-talk] status on pagenames and wikinames

[Reini U. <ru...@x-...>]

Joel Uckelman schrieb:

> Thus spake =?iso-8859-1?Q?J=E9r=F4me_WAGNER?=:
> 
>>Hello,
>>
>>=20
>>
>>Can someone give me the status of pagename rules in phpwiki ?
>>
>>=20
>>
>>Is is bullet proof to use =93beginner friendly=94 pagenames like 
this is the name of my page
> 
> 
> Yes. Non-wikiwords can be used without problems, so long as you wrap them
> in square brackets.
>  
> 
>>What is the current phpwiki opinion on this kind of pagenames  ?
> 
> 
> The removal of restrictions on pagenames is a fairly recent developement;
> we're not opposed to it, I guess.

It depends now only on the database backend and those rules:
See lib/stdlib.php:675 WikiPageName::_check()

* Compress internal white-space to single space character.
* On cvs and file delete any control characters.
   (typical filesystem restrictions)
* On cvs and file remove ".." and ":" by ''
* Strip leading and trailing white-space.
   so that users cannot be easily fooled into wrong pages.
* Leading SUBPAGE_SEPARATOR is disallowed. (e.g. "/Mypage")
* strlen($pagename) > MAX_PAGENAME_LENGTH is disallowed (100)
   To restrict get request overflows

Note:
* ";" is allowed since the pagename is urlencoded, so safe from php
   arg-delim problems.

For some time during 1.3.11 testing we had problems with "0" and ".", 
which should be solved now.

A similar problem are the backend-specific username restrictions,
which we don't use yet. Those isValidName methods have to be written and 
tested.
For now usernames are quite generally restrictive.
See _WikiUser::isValidName() in lib/WikiUserNew.php:511
   valid if preg_match("/^[\w\.@\-]+$/",$userid)
            and strlen($userid) < 32;

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/
http://phpwiki.org/