From: <var...@us...> - 2008-09-07 14:48:02
|
Revision: 6246 http://phpwiki.svn.sourceforge.net/phpwiki/?rev=6246&view=rev Author: vargenau Date: 2008-09-07 14:48:12 +0000 (Sun, 07 Sep 2008) Log Message: ----------- Removed history Modified Paths: -------------- trunk/lib/WikiUser.php Modified: trunk/lib/WikiUser.php =================================================================== --- trunk/lib/WikiUser.php 2008-09-07 14:45:58 UTC (rev 6245) +++ trunk/lib/WikiUser.php 2008-09-07 14:48:12 UTC (rev 6246) @@ -758,245 +758,6 @@ } } -// $Log: not supported by cvs2svn $ -// Revision 1.69 2008/02/14 18:32:36 rurban -// signin fixes for !ENABLE_USER_NEW (to overcome php-5.2 recursion login problems) -// -// Revision 1.68 2007/07/14 17:55:30 rurban -// SemanticWeb.php -// -// Revision 1.67 2006/03/19 15:01:01 rurban -// sf.net patch #1333957 by Matt Brown: Authentication cookie identical across all wikis on a host -// -// Revision 1.66 2006/03/07 20:45:44 rurban -// wikihash for php-5.1 -// -// Revision 1.65 2005/06/05 05:38:02 rurban -// Default ENABLE_DOUBLECLICKEDIT = false. Moved to UserPreferences -// -// Revision 1.64 2005/02/08 13:25:50 rurban -// encrypt password. fix strict logic. -// both bugs reported by Mikhail Vladimirov -// -// Revision 1.63 2005/01/21 14:07:50 rurban -// reformatting -// -// Revision 1.62 2004/11/21 11:59:16 rurban -// remove final \n to be ob_cache independent -// -// Revision 1.61 2004/10/21 21:02:04 rurban -// fix seperate page login -// -// Revision 1.60 2004/06/15 09:15:52 rurban -// IMPORTANT: fixed passwd handling for passwords stored in prefs: -// fix encrypted usage, actually store and retrieve them from db -// fix bogologin with passwd set. -// fix php crashes with call-time pass-by-reference (references wrongly used -// in declaration AND call). This affected mainly Apache2 and IIS. -// (Thanks to John Cole to detect this!) -// -// Revision 1.59 2004/06/14 11:31:36 rurban -// renamed global $Theme to $WikiTheme (gforge nameclash) -// inherit PageList default options from PageList -// default sortby=pagename -// use options in PageList_Selectable (limit, sortby, ...) -// added action revert, with button at action=diff -// added option regex to WikiAdminSearchReplace -// -// Revision 1.58 2004/06/04 20:32:53 rurban -// Several locale related improvements suggested by Pierrick Meignen -// LDAP fix by John Cole -// reanable admin check without ENABLE_PAGEPERM in the admin plugins -// -// Revision 1.57 2004/06/04 12:40:21 rurban -// Restrict valid usernames to prevent from attacks against external auth or compromise -// possible holes. -// Fix various WikiUser old issues with default IMAP,LDAP,POP3 configs. Removed these. -// Fxied more warnings -// -// Revision 1.56 2004/06/03 12:36:03 rurban -// fix eval warning on signin -// -// Revision 1.55 2004/06/03 09:39:51 rurban -// fix LDAP injection (wildcard in username) detected by Steve Christey, MITRE -// -// Revision 1.54 2004/04/29 17:18:19 zorloc -// Fixes permission failure issues. With PagePermissions and Disabled Actions when user did not have permission WIKIAUTH_FORBIDDEN was returned. In WikiUser this was ok because WIKIAUTH_FORBIDDEN had a value of 11 -- thus no user could perform that action. But WikiUserNew has a WIKIAUTH_FORBIDDEN value of -1 -- thus a user without sufficent permission to do anything. The solution is a new high value permission level (WIKIAUTH_UNOBTAINABLE) to be the default level for access failure. -// -// Revision 1.53 2004/04/10 05:34:35 rurban -// sf bug#830912 -// -// Revision 1.52 2004/04/10 02:55:48 rurban -// fixed old WikiUser -// -// Revision 1.51 2004/04/06 20:00:10 rurban -// Cleanup of special PageList column types -// Added support of plugin and theme specific Pagelist Types -// Added support for theme specific UserPreferences -// Added session support for ip-based throttling -// sql table schema change: ALTER TABLE session ADD sess_ip CHAR(15); -// Enhanced postgres schema -// Added DB_Session_dba support -// -// Revision 1.50 2004/02/26 01:32:03 rurban -// fixed session login with old WikiUser object. strangely, the errormask gets corruoted to 1, Pear??? -// -// Revision 1.49 2004/02/15 21:34:37 rurban -// PageList enhanced and improved. -// fixed new WikiAdmin... plugins -// editpage, Theme with exp. htmlarea framework -// (htmlarea yet committed, this is really questionable) -// WikiUser... code with better session handling for prefs -// enhanced UserPreferences (again) -// RecentChanges for show_deleted: how should pages be deleted then? -// -// Revision 1.48 2004/02/01 09:14:11 rurban -// Started with Group_Ldap (not yet ready) -// added new _AuthInfo plugin to help in auth problems (warning: may display passwords) -// fixed some configurator vars -// renamed LDAP_AUTH_SEARCH to LDAP_BASE_DN -// changed PHPWIKI_VERSION from 1.3.8a to 1.3.8pre -// USE_DB_SESSION defaults to true on SQL -// changed GROUP_METHOD definition to string, not constants -// changed sample user DBAuthParams from UPDATE to REPLACE to be able to -// create users. (Not to be used with external databases generally, but -// with the default internal user table) -// -// fixed the IndexAsConfigProblem logic. this was flawed: -// scripts which are the same virtual path defined their own lib/main call -// (hmm, have to test this better, phpwiki.sf.net/demo works again) -// -// Revision 1.47 2004/01/27 23:23:39 rurban -// renamed ->Username => _userid for consistency -// renamed mayCheckPassword => mayCheckPass -// fixed recursion problem in WikiUserNew -// fixed bogo login (but not quite 100% ready yet, password storage) -// -// Revision 1.46 2004/01/26 09:17:48 rurban -// * changed stored pref representation as before. -// the array of objects is 1) bigger and 2) -// less portable. If we would import packed pref -// objects and the object definition was changed, PHP would fail. -// This doesn't happen with an simple array of non-default values. -// * use $prefs->retrieve and $prefs->store methods, where retrieve -// understands the interim format of array of objects also. -// * simplified $prefs->get() and fixed $prefs->set() -// * added $user->_userid and class '_WikiUser' portability functions -// * fixed $user object ->_level upgrading, mostly using sessions. -// this fixes yesterdays problems with loosing authorization level. -// * fixed WikiUserNew::checkPass to return the _level -// * fixed WikiUserNew::isSignedIn -// * added explodePageList to class PageList, support sortby arg -// * fixed UserPreferences for WikiUserNew -// * fixed WikiPlugin for empty defaults array -// * UnfoldSubpages: added pagename arg, renamed pages arg, -// removed sort arg, support sortby arg -// -// Revision 1.45 2003/12/09 20:00:43 carstenklapp -// Bugfix: The last BogoUserPrefs-bugfix prevented the admin from saving -// prefs into his own homepage, fixed broken logic. Tightened up BogoUser -// prefs saving ability by checking for true existance of homepage -// (previously a page revision of 0 also counted as valid, again due to -// somewhat flawed logic). -// -// Revision 1.44 2003/12/06 04:56:23 carstenklapp -// Security bugfix (minor): Prevent BogoUser~s from saving extraneous -// _pref object meta-data within locked pages. -// -// Previously, BogoUser~s who signed in with a (valid) WikiWord such as -// "HomePage" could actually save preferences into that page, even though -// it was already locked by the administrator. Thus, any subsequent -// WikiLink~s to that page would become prefixed with "that nice little" -// UserIcon, as if that page represented a valid user. -// -// Note that the admin can lock (even) non-existant pages as desired or -// necessary (i.e. any DB page whose revision==0), to prevent the -// arbitrary BogoUser from saving preference metadata into such a page; -// for example, the silly WikiName "@qmgi`Vcft_x|" (that is the -// \$examplechars presented in login.tmpl, in case it is not visible here -// in the CVS comments). -// -// http://phpwiki.sourceforge.net/phpwiki/ -// %C0%F1%ED%E7%E9%E0%D6%E3%E6%F4%DF%F8%FC?action=lock -// -// To remove the prefs metadata from a page, the admin can use the -// EditMetaData plugin, enter pref as the key, leave the value box empty -// and then submit the change. For example: -// -// http://phpwiki.sourceforge.net/phpwiki/ -// _EditMetaData?page=%C0%F1%ED%E7%E9%E0%D6%E3%E6%F4%DF%F8%FC -// -// (It seems a rethinking of WikiUserNew.php with its WikiUser and -// UserPreferences classes is in order. Ideally the WikiDB would -// transparently handle such a situation, perhaps BogoUser~s should -// simply be restricted to saving preferences into a cookie until his/her -// e-mail address has been verified.) -// -// Revision 1.43 2003/12/04 19:33:30 carstenklapp -// Bugfix: Under certain PhpWiki installations (such as the PhpWiki at -// SF), the user was unable to select a theme other than the server's -// default. (Use the more robust Theme::findFile instead of PHP's -// file_exists function to detect installed themes). -// -// Revision 1.42 2003/11/30 18:18:13 carstenklapp -// Minor code optimization: use include_once instead of require_once -// inside functions that might not always called. -// -// Revision 1.41 2003/11/21 21:32:39 carstenklapp -// Bugfix: When DEFAULT_LANGUAGE was not 'en', a user's language prefs -// would revert to 'en' when the default <system language> was selected -// in UserPreferences and the user saved his preferences. (Check for -// empty or blank language pref in sanify function of class -// _UserPreference_language and return DEFAULT_LANGUAGE if nothing or -// default selected in UserPreferences.) -// -// Revision 1.40 2003/11/21 16:54:58 carstenklapp -// Bugfix: login.tmpl was always displayed in English despite -// DEFAULT_LANGUAGE set in index.php. (Added call to -// update_locale(DEFAULT_LANGUAGE) before printing login form). -// -// Revision 1.39 2003/10/28 21:13:46 carstenklapp -// Security bug fix for admin password, submitted by Julien Charbon. -// -// Revision 1.38 2003/09/13 22:25:38 carstenklapp -// Hook for new user preference 'noLinkIcons'. -// -// Revision 1.37 2003/02/22 20:49:55 dairiki -// Fixes for "Call-time pass by reference has been deprecated" errors. -// -// Revision 1.36 2003/02/21 22:50:51 dairiki -// Ensure that language preference is a string. -// -// Revision 1.35 2003/02/16 20:04:47 dairiki -// Refactor the HTTP validator generation/checking code. -// -// This also fixes a number of bugs with yesterdays validator mods. -// -// Revision 1.34 2003/02/15 02:21:54 dairiki -// API Change! Explicit $request argument added to contructor for WikiUser. -// -// This seemed the best way to fix a problem whereby the WikiDB -// was being opened twice. (Which while being merely inefficient -// when using an SQL backend causes hangage when using a dba backend.) -// -// Revision 1.33 2003/01/22 03:21:40 zorloc -// Modified WikiUser constructor to move the DB request for the homepage to -// the end of the logic to prevent it from being requested and then dropped. -// Added more phpdoc comments. -// -// Revision 1.32 2003/01/21 07:40:50 zorloc -// Modified WikiUser::_ok() -- Inverted the logic so the default is to return -// false and to return true only in the desired condition. Added phpdoc -// comments -// -// Revision 1.31 2003/01/15 05:37:20 carstenklapp -// code reformatting -// -// Revision 1.30 2003/01/15 04:59:27 carstenklapp -// Bugfix: Previously stored preferences were not loading when user -// signed in. (Fixed... I hope.) -// - // Local Variables: // mode: php // tab-width: 8 @@ -1004,4 +765,4 @@ // c-hanging-comment-ender-p: nil // indent-tabs-mode: nil // End: -?> \ No newline at end of file +?> This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |