Joel Uckelman schrieb:
> Thus spake =?iso-8859-1?Q?J=E9r=F4me_WAGNER?=:
>
>>Hello,
>>
>>=20
>>
>>Can someone give me the status of pagename rules in phpwiki ?
>>
>>=20
>>
>>Is is bullet proof to use =93beginner friendly=94 pagenames like
this is the name of my page
>
>
> Yes. Non-wikiwords can be used without problems, so long as you wrap them
> in square brackets.
>
>
>>What is the current phpwiki opinion on this kind of pagenames ?
>
>
> The removal of restrictions on pagenames is a fairly recent developement;
> we're not opposed to it, I guess.
It depends now only on the database backend and those rules:
See lib/stdlib.php:675 WikiPageName::_check()
* Compress internal white-space to single space character.
* On cvs and file delete any control characters.
(typical filesystem restrictions)
* On cvs and file remove ".." and ":" by ''
* Strip leading and trailing white-space.
so that users cannot be easily fooled into wrong pages.
* Leading SUBPAGE_SEPARATOR is disallowed. (e.g. "/Mypage")
* strlen($pagename) > MAX_PAGENAME_LENGTH is disallowed (100)
To restrict get request overflows
Note:
* ";" is allowed since the pagename is urlencoded, so safe from php
arg-delim problems.
For some time during 1.3.11 testing we had problems with "0" and ".",
which should be solved now.
A similar problem are the backend-specific username restrictions,
which we don't use yet. Those isValidName methods have to be written and
tested.
For now usernames are quite generally restrictive.
See _WikiUser::isValidName() in lib/WikiUserNew.php:511
valid if preg_match("/^[\w\.@\-]+$/",$userid)
and strlen($userid) < 32;
--
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/
http://phpwiki.org/
|
