[Phpwiki-talk] Missing access checks in CreatePage and AppendText plugins

[Christof M. <cm...@cm...>]

Noticed that the CreatePage and AppendText plugins let unauthenticated
users create pages or let them append text to pages, e.g.

https://wikiurl.example.com/CreatePage?s=Test&template=Template/Example&initial_content=Hello

or

https://wikiurl.example.com/AppendText?page=HomePage&s=Test


Patch attached.


Christof

-- 
https://cmeerw.org                             sip:cmeerw at cmeerw.org
mailto:cmeerw at cmeerw.org                   xmpp:cmeerw at cmeerw.org