I think I know what this is for, now ;)

+1

Please share? :)

Some of the ideas that have been suggested in the past:

• Tech Support tracker (submit support ticket - only you and admins can view it)
• Keeping private notes (e.g. one page per user on the site, viewable only to them)

If this were enacted, then it would be completely impossible to crack James' PVS. No one would be able to go to the page that associates the key and password and hence the only way someone could get around the system is by a password leak.

Private categories aren't perfect - you can still view the contents of any page you want even if you don't technically have view permissions for it.

Edit: But yes, it makes the password tool so much more secure :)

How would you do that without CSI's? I know James already blocked his site from those. Is it something to do with API?

Nope, not the API. As tsangk mentioned, this used to work but does not any more. You must be a member of the site & have API access enabled in site manager before you can do anything with the API.

I wasn't referring to the ListPages module or CSIs though, either.

You can use javascript to view the source code of a page. Just paste the same code that the "View Source" link uses into your address bar. This works on private categories too.
Actually, no it doesn't. I just tried it then and it shows the source code for the _public page instead now. Seems it was fixed since I last tried it :)

Oh, I see how it works now. Boy, now I realize that a lot of my sort-of private stuff aren't so private after all :P

Correction: If you have write permission to any non-data form page¹ :D

Ah, true. But keep in mind that this isn't 100% secure. It's possible generate modules on-the-fly using some Javascript without write permission to any page. If the site is open or closed, page content can still be accessed by any user (even anonymous users).

From what I've tested, the built-in Wikidot JavaScripts to "view source", "history" or "edit" don't work for anonymous users with bookmarklets - We get informed that we don't have appropriate permissions.

If you're talking about more complex usage of Wikidot JavaScript modules, then it sounds like a Wikidot security hole, not a PVS one.

Ahuh, none of the javascript bookmarklets will work… but yes, a complex usage of javascript modules will work… but I wouldn't call it a security hole.

cool… I see you already used it for the application for community sites

OMGGGGG….. THANK YOUUUUU!

Thanks TeRq! Just noticed that it's being used on the main Wikidot.com site now. Glad to see this implemented & will be looking at ways to make use of it immediately! :)

This is AWESOME!

I've already implemented this in the PVS and it's now 100% secure! That's right, 100% bullet proof!