Tuesday, March 13, 2007, 7:02:26 PM, Hans wrote:
> More info:
> With the default array $FoxNameFmt in Fox and PmWiki 2.2.0 beta 35
> it is possible to post to anywhere, despite the prohibited pagename
> patterns in the array. So this does not work at all for security
> reasons.
More info:
echo (boolean)MatchPageNames('Site.Test', '-Site.* -PmWiki.*');
this returns nothing in beta31, but 1 in beta35.
echo (boolean)MatchPageNames('Site.Test', '-Site.* ');
also returns nothing in beta31, but 1 in beta35.
but
echo (boolean)MatchPageNames('Site.Test', '-Site.*');
return nothing in both versions. Note the space at the end.
And function MatchPageNames looks identical!!
Hans
_______________________________________________
pmwiki-users mailing list
[email protected]
http://www.pmichaud.com/mailman/listinfo/pmwiki-users
