[Pmwiki-users] SingleWikiWords implementation (was: Single-WordWikiWords)

[Steven Leite]

What about just running the input through a filter.  For example, make
sure the "word" on the left side is a valid WikiWord (using the existing
$WikiWordPattern to produce a match).  If it is, allow the word to be
used, if it isn't, don't allow it to be used.  This limits what users
can enter on the "left" side .. I'm not sure if that will fix your
problem or not .. you may still have to worry about the "right" side.
I'm sure you can fix it with a bit of thought :)

-S

----- Original Message ----- 
From: "Thomas -Balu- Walter" <list+pmwiki-users at b-a-l-u.de>
To: <pmwiki-users at pmichaud.com>
Sent: Thursday, May 13, 2004 8:04 AM
Subject: Re: [Pmwiki-users] SingleWikiWords implementation (was:
Single-WordWikiWords)


> On Thu, May 13, 2004 at 08:08:12AM -0600, Patrick R. Michaud wrote:
> > With this implementation of SingleWikiWords that it may be possible
for a
> > wiki author to use this feature to execute arbitrary PHP code on the
> > server.  For example, someone could create an entry in the
SingleWikiWords
> > page such as
>
> outch. Okay, as I said before it was a quickshot which needed more
> thinking (which I am not good at at the moment...)
>
> -- Balu
>
> -- 
> Pmwiki-users mailing list
> Pmwiki-users at pmichaud.com
> http://pmichaud.com/mailman/listinfo/pmwiki-users_pmichaud.com
>
>
>