On Sun, Feb 28, 2016 at 12:35:32PM -0600, Chuck G wrote:
> Petko Yotov <5...@5ko.fr> Wrote in message:
> > On 2016-02-27 12:55, Oliver Betz wrote:
> >> how can I get a pagelist where at least one of the PTV "foo" or "bar"
> >> are not empty?
> >
> > If the PTV are short one-line strings, you can
Petko Yotov <5...@5ko.fr> Wrote in message:
> On 2016-02-27 12:55, Oliver Betz wrote:
>> how can I get a pagelist where at least one of the PTV "foo" or "bar"
>> are not empty?
>
> If the PTV are short one-line strings, you can probably use a
> conditional in the pagelist template:
>
>
On 2/28/2016 4:28 AM, Petko Yotov wrote:
No, htmlspecialchars() is not vulnerable per se, what is vulnerable is
that the string you store in a $FmtPV variable will be evaluated and run
by PmWiki as PHP code. So it is a bad idea to store in that variable
things that other people wrote on the
I think this parameter should work
(:pagelist yourconditions if=" ![ equal '{=$:foo}' '' && equal '{=$:bar}'
'' ] " :)
Benjamin
___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users
On 2016-02-27 12:55, Oliver Betz wrote:
how can I get a pagelist where at least one of the PTV "foo" or "bar"
are not empty?
If the PTV are short one-line strings, you can probably use a
conditional in the pagelist template:
(:template each:)
(:if expr ! equal "{=$:PTV1}" "" && ! equal
No, htmlspecialchars() is not vulnerable per se, what is vulnerable is
that the string you store in a $FmtPV variable will be evaluated and run
by PmWiki as PHP code. So it is a bad idea to store in that variable
things that other people wrote on the wiki or in the web forms, or in
the URL
Hi list,
I have a problem with a sitemap script. The one I use is this:
http://www.pmwiki.org/pmwiki/uploads/Cookbook/sitemap.php
I found the script trough this page ->
http://www.pmwiki.org/wiki/Cookbook/GoogleSitemaps
I made pmwiki files from manpages using a bash script and it goes like
Hello All,
how can I get a pagelist where at least one of the PTV "foo" or "bar"
are not empty?
TIA,
Oliver
P.S.: Sorry if this post arrives twice - gmane didn't seem to transport it.
___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
Hello All,
how can I get a page list of pages where at least one of the PTV "foo"
or "bar" are not empty?
TIA,
Oliver
--
Oliver Betz, Munich http://oliverbetz.de/
___
pmwiki-users mailing list
pmwiki-users@pmichaud.com
Petko Yotov wrote 2015-12-19:
>
> This message concerns you if your wiki creates custom page variables
> which get their values from request strings like the URL address of the
> page.
>
> The previously documented recommended way to sanitize such values can
> allow PHP code injection in some
10 matches
Mail list logo