On Sun, Jan 24, 2010 at 6:55 AM, Randy Brown <ra...@brownragfilms.com>
 wrote:

> I assume there is a way for my directive to support any page name without
> introducing a security hole. I probably only need to support a page Name,
> rather than Group.Name, but for future reference it would be good to know
> how to support either.
>
> from pmwiki.php ResolvePageName():

"/^($GroupPattern)[.\\/]($NamePattern)$/i"

$GroupPattern and $NamePattern are defined as this:

$GroupPattern = '[[:upper:]][\\w]*(?:-\\w+)*';
$NamePattern = '[[:upper:]\\d][\\w]*(?:-\\w+)*';

-Peter
_______________________________________________
pmwiki-devel mailing list
pmwiki-devel@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-devel

Reply via email to