Re: [Phpwiki-talk] Missing access checks in CreatePage and AppendText plugins

[Marc-Etienne V. (Nokia) <mar...@no...>]

Hi Harold,

If the page does not exist, just create it with content:


<<SystemInfo all>>

For removing a page with a blank name, please see my previous email.

Best regards,

Marc-Etienne


--
Marc-Etienne Vargenau mar...@no...<mailto:mar...@no...>
Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE
Mobile: +33 6 24 49 78 68<tel:+33624497868>

Senior Specialist Open Source
Planned absence: none

De : Harold Hallikainen <ha...@ha...>
Date : jeudi, 4 septembre 2025 à 19:32
À : php...@li... <php...@li...>
Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and AppendText plugins


CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information.



Thanks! I did not know about SystemInfo . On one of my wikis, I'm seeing
1.6.0, and the other says the page does not exist. I'll watch for your
update and try again. How do I remove a page that has no title? I am
seeing a recent change of:

3 September 2025
(diff) (hist) . . ; 14:37 . . lxbfYeaa (contribs | new pages) (Created by
CreatePage)

THANKS!

Harold


On Thu, September 4, 2025 12:52 am, Marc-Etienne Vargenau \(Nokia\) via
Phpwiki-talk wrote:
> Hi Harold,
>
>
> The latest version of PhpWiki is 1.6.6.
>
>
> You can see the version you are running by displaying the SystemInfo
> page:
> https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fphpwiki.demo.free.fr%2Findex.php%2FSystemInfo&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674549518%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=W87GyY7k0yBUddGpUVdiv5t6NJ5gf1eSAQP3xJrxeUA%3D&reserved=0<http://phpwiki.demo.free.fr/index.php/SystemInfo>
>
>
>
> In the source code, the version can be found in files Makefile,
> lib/prepend.php and all pgsrc files.
>
> The patches from Christof Meerwald (see below) are not yet in version
> 1.6.6, I will publish a new version with them.
>
>
> Best regards,
>
>
> Marc-Etienne
>
>
>
> --
> Marc-Etienne Vargenau
> mar...@no...<mailto:mar...@no...>
> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE
> Mobile: +33 6 24 49 78 68<tel:+33624497868>
>
>
> Senior Specialist Open Source
> Planned absence: none
>
>
> De : Harold Hallikainen <ha...@ha...>
> Date : mercredi, 3 septembre 2025 à 19:55
> À : Discussion on PhpWiki features, bugs, development.
> <php...@li...>
> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and
> AppendText plugins
>
>
>
> CAUTION: This is an external email. Please be very careful when clicking
> links or opening attachments. See the URL nok.it/ext for additional
> information.
>
>
>
> I've had this update on my list of things to do, but had not yet gotten
> to it. This morning, there were a bunch of new blank pages on one of my
> wikis. So, I deleted them and did the update. Is there an easy way to
> tell what version I have installed to make sure I did it correctly? The
> wiki is running, but I'd like to make sure it is running the latest code.
>
> Also, one of the newly created pages has a title that is blank, and I
> cannot delete it through the admin interface. Is there a way to delete it?
>
>
> THANKS!
>
>
> Harold
>
>
>
> On Wed, July 30, 2025 12:59 am, Marc-Etienne Vargenau \(Nokia\) via
> Phpwiki-talk wrote:
>
>> Hi Christof,
>>
>>
>>
>> Thank you for your patches.
>> I have published them in Subversion.
>>
>>
>>
>> Best regards,
>>
>>
>>
>> Marc-Etienne
>>
>>
>>
>> --
>> Marc-Etienne Vargenau
>> mar...@no...<mailto:mar...@no...>
>> Nokia, 12, rue Jean-Bart, 91300 Massy, FRANCE
>> Mobile: +33 6 24 49 78 68<tel:+33624497868>
>> Senior Specialist Open Source
>> Planned absence: 4-22 August
>>
>>
>>
>> De : Christof Meerwald via Phpwiki-talk
>> <php...@li...>
>> Date : mardi, 29 juillet 2025 à 23:24
>> À : Phpwiki-talk <php...@li...>
>> Cc : Christof Meerwald <cm...@cm...>
>> Objet : Re: [Phpwiki-talk] Missing access checks in CreatePage and
>> AppendText plugins
>>
>>
>>
>> CAUTION: This is an external email. Please be very careful when
>> clicking links or opening attachments. See the URL nok.it/ext for
>> additional information.
>>
>>
>>
>> On Tue, Jul 29, 2025 at 11:04:24PM +0200, Christof Meerwald wrote:
>>
>>
>>> Noticed that the CreatePage and AppendText plugins let
>>> unauthenticated users create pages or let them append text to pages,
>>> e.g.
>>
>> Actually, WikiAdminDeleteAcl is also missing an access check, patch
>> attached.
>>
>>
>> Christof
>>
>>
>>
>> --
>> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcmeerw%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674573863%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=0EzhOXjdk9sP0ycl43HR80EPYNxEIrGNOrw53dafc3A%3D&reserved=0<https://cmeerw/>
>> .o%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C3f24d955fb2040
>> 1444b408ddeb1316e7%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C6389251
>> 89423530808%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjA
>> uMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&
>> sdata=OiyIJxyrNr9KpLerPD282%2FaY5pxuOv4YK2Btjw8baCQ%3D&reserved=0<https
>> ://cmeerw.o/>
>> rg%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C4e796218c09f47f
>> e
>> 61f408ddcee6362f%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638894210
>> 50
>> 8983458%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAw
>> M
>> CIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=w
>> %
>> 2B9pGigz7tN%2BhTJYA2nrg%2FgQ34nH6B59h0smjnzcheg%3D&reserved=0<https://cm
>> e erw.org/>                             sip:cmeerw at cmeerw.org
>> mailto:cmeerw at cmeerw.org                   xmpp:cmeerw at cmeerw.org
>>  _______________________________________________
>> Phpwiki-talk mailing list
>> Php...@li...
>> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674589719%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=gJXizouUU8B9n6uwUNJfUkIwbvo7b%2FTwQZcjrKtiIjw%3D&reserved=0<https://lists/>.
>> sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-e
>> tienne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717
>> 519675428d917b70f44f9630b0%7C0%7C0%7C638925189423568480%7CUnknown%7CTWF
>> pbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIk
>> FOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=6Ovckr72RjkaAZq5TDwJV
>> zgrc4heKIWvaLqhXIp70h0%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flist&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674606798%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=uXoPd4lywAaVi8kC1LBfNNkEvE50I1bhpleP5HYcfjc%3D&reserved=0
>> s/listinfo/phpwiki-talk>
>>
>>
>
>
> --
> Not sent from an iPhone.
>
>
>
> --
> Not sent from an iPhone.
>
>
>
> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.so%2F&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674626815%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=aJZ%2BwpY86ZEEXYcLTbRNflnuQ2%2BjB32vGSJbp88LJlk%3D&reserved=0<https://lists.so/>
> urceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etien
> ne.vargenau%40nokia.com%7C3f24d955fb20401444b408ddeb1316e7%7C5d4717519675
> 428d917b70f44f9630b0%7C0%7C0%7C638925189423585832%7CUnknown%7CTWFpbGZsb3d
> 8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFp
> bCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=v7VnGkTGpbMbdsl6Se8FSYmZptpfMw4%2
> F1ZR9hIAnYQc%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fp&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674646623%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=RLEWCkzCCqw97BUvA34cXj7Li%2BfQKF2KtY8wIwSu8I0%3D&reserved=0
> hpwiki-talk> _______________________________________________
> Phpwiki-talk mailing list
> Php...@li...
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674666403%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=UiWVcOkXDDMo6IiSf8pvFYOkS11GjIKopDINXSkSNDE%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/phpwiki-talk>
>
>


--
Not sent from an iPhone.


_______________________________________________
Phpwiki-talk mailing list
Php...@li...
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fphpwiki-talk&data=05%7C02%7Cmarc-etienne.vargenau%40nokia.com%7C6c28ea17549a464e482b08ddebd90c85%7C5d4717519675428d917b70f44f9630b0%7C0%7C0%7C638926039674686216%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=02DPmJtF1a01%2FTOHyHFLUqDMFoP4RbxZUAt7EYvNQSo%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/phpwiki-talk>