[pmwiki-users] severe bug, but where?

Petko Yotov 5ko at 5ko.fr
Sun Jun 1 06:44:02 CDT 2014


Looks like a bug happening in PHP 5.4 with htmlspecialchars() when you have  
in the page some international character like "ç" in "façon". Are you sure  
that the sectionedit.php file on your server was really updated to its  
latest version?This should have been fixed a year ago.

Petko

jdd writes:
> I just found a severe bug , but I don't know in what component. It may not  
> be in PmWiki.
>
> I just updated my openSUSE from 12.3 to 13.1, may be with a different php.
>
> new is:
>
> php -v
> PHP 5.4.20 (cli)
> Copyright (c) 1997-2013 The PHP Group
> Zend Engine v2.4.0, Copyright (c) 1998-2013 Zend Technologies
>
> the problem I get with pagetoc and sectionedit activated (don't know if it's  
> related).
>
> What I do:
>
> go to any page, edit it and close it immediately let only to activate  
> section edit.
>
> go to any section, for example the last one.
>
> add any text at the end of the section, record the page: the page contain  
> only the section part, that is writing overwrote all the page content
>
> you can test it here (I set this page with @nopass, so you should be able to  
> edit it):
>
> http://dodin.info/wiki/index.php?n=Main.WikiSandbox
>
> this do not occur in short pages. Very last pmwiki, pagetoc and sectionedit  
> (just updated today, but the bug was present in previous version)




More information about the pmwiki-users mailing list