Re: [pmwiki-users] Pagelist conditional: One of two PTV not empty?

2016-02-28 Thread Patrick R. Michaud
On Sun, Feb 28, 2016 at 12:35:32PM -0600, Chuck G wrote: > Petko Yotov <5...@5ko.fr> Wrote in message: > > On 2016-02-27 12:55, Oliver Betz wrote: > >> how can I get a pagelist where at least one of the PTV "foo" or "bar" > >> are not empty? > > > > If the PTV are short one-line strings, you can

Re: [pmwiki-users] Pagelist conditional: One of two PTV not empty?

2016-02-28 Thread Chuck G
Petko Yotov <5...@5ko.fr> Wrote in message: > On 2016-02-27 12:55, Oliver Betz wrote: >> how can I get a pagelist where at least one of the PTV "foo" or "bar" >> are not empty? > > If the PTV are short one-line strings, you can probably use a > conditional in the pagelist template: > >

Re: [pmwiki-users] Custom PageVariables from request strings: critical vulnerability

2016-02-28 Thread DaveG
On 2/28/2016 4:28 AM, Petko Yotov wrote: No, htmlspecialchars() is not vulnerable per se, what is vulnerable is that the string you store in a $FmtPV variable will be evaluated and run by PmWiki as PHP code. So it is a bad idea to store in that variable things that other people wrote on the

Re: [pmwiki-users] Pagelist conditionyl: at least one PTV not empty

2016-02-28 Thread Benjamin Grassineau
I think this parameter should work (:pagelist yourconditions if=" ![ equal '{=$:foo}' '' && equal '{=$:bar}' '' ] " :) Benjamin ___ pmwiki-users mailing list pmwiki-users@pmichaud.com http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Re: [pmwiki-users] Pagelist conditional: One of two PTV not empty?

2016-02-28 Thread Petko Yotov
On 2016-02-27 12:55, Oliver Betz wrote: how can I get a pagelist where at least one of the PTV "foo" or "bar" are not empty? If the PTV are short one-line strings, you can probably use a conditional in the pagelist template: (:template each:) (:if expr ! equal "{=$:PTV1}" "" && ! equal

Re: [pmwiki-users] Custom PageVariables from request strings: critical vulnerability

2016-02-28 Thread Petko Yotov
No, htmlspecialchars() is not vulnerable per se, what is vulnerable is that the string you store in a $FmtPV variable will be evaluated and run by PmWiki as PHP code. So it is a bad idea to store in that variable things that other people wrote on the wiki or in the web forms, or in the URL

[pmwiki-users] sitemap problems

2016-02-28 Thread Carlos AB
Hi list, I have a problem with a sitemap script. The one I use is this: http://www.pmwiki.org/pmwiki/uploads/Cookbook/sitemap.php I found the script trough this page -> http://www.pmwiki.org/wiki/Cookbook/GoogleSitemaps I made pmwiki files from manpages using a bash script and it goes like

[pmwiki-users] Pagelist conditional: One of two PTV not empty?

2016-02-28 Thread Oliver Betz
Hello All, how can I get a pagelist where at least one of the PTV "foo" or "bar" are not empty? TIA, Oliver P.S.: Sorry if this post arrives twice - gmane didn't seem to transport it. ___ pmwiki-users mailing list pmwiki-users@pmichaud.com

[pmwiki-users] Pagelist conditionyl: at least one PTV not empty

2016-02-28 Thread Oliver Betz
Hello All, how can I get a page list of pages where at least one of the PTV "foo" or "bar" are not empty? TIA, Oliver -- Oliver Betz, Munich http://oliverbetz.de/ ___ pmwiki-users mailing list pmwiki-users@pmichaud.com

Re: [pmwiki-users] Custom PageVariables from request strings: critical vulnerability

2016-02-28 Thread Oliver Betz
Petko Yotov wrote 2015-12-19: > > This message concerns you if your wiki creates custom page variables > which get their values from request strings like the URL address of the > page. > > The previously documented recommended way to sanitize such values can > allow PHP code injection in some