Dan [Fri, 21 Aug 2009 11:50:22 -0400] rev 330
SECURITY: Comments: fix poor sanitization of subject on initial submit
Dan [Sat, 21 Mar 2009 18:58:41 -0400] rev 329
Merging nighthawk and scribus branches
Dan [Sat, 21 Mar 2009 18:57:34 -0400] rev 328
Fixed typo in function call to check for apache 2.2
Dan [Sun, 18 Jan 2009 18:59:29 -0500] rev 327
Added license block to AmigaLink captcha engine and set this engine as the default; clarified licensing situation for this module in licenses/index.html
Dan [Sun, 18 Jan 2009 18:13:48 -0500] rev 326
Updated current-stable tag
Dan [Sun, 18 Jan 2009 18:11:42 -0500] rev 325
Re-merged 1.0.6 tag
Dan [Sun, 18 Jan 2009 18:10:48 -0500] rev 324
Continuation of previous commit in admin CP; EditSidebar: updated strings to be more accurate (thanks again Vadi)
Dan [Sun, 18 Jan 2009 18:10:21 -0500] rev 323
Pageutils: Also delete page-specific ACL rules when deleting a page (thanks Vadi)
Dan [Sun, 18 Jan 2009 18:09:55 -0500] rev 322
SECURITY: Enforce denied history_view on previous revisions
Dan [Sun, 18 Jan 2009 18:09:08 -0500] rev 321
Removed some crufty CSS classes in enano-shared (thanks Vadi)
Dan [Sat, 17 Jan 2009 12:08:28 -0500] rev 320
Stable release: Enano CMS 1.0.6 (Roane)
Dan [Sat, 17 Jan 2009 11:57:02 -0500] rev 319
Updated readme for Roane
Dan [Sat, 17 Jan 2009 11:51:17 -0500] rev 318
Rebrand as v1.0.6 (Roane)
Dan [Sat, 17 Jan 2009 11:32:52 -0500] rev 317
Merging branches
Dan [Sat, 17 Jan 2009 11:32:18 -0500] rev 316
SECURITY: Fix XSS under IE in closing tags (shared sanitizer)
Dan [Sat, 17 Jan 2009 11:31:45 -0500] rev 315
Minor fix to OS detection in install
Dan [Sat, 29 Nov 2008 22:50:19 -0500] rev 314
Plugins can now register their own custom actions for $_GET["do"]. (Backport from unstable)
Dan [Thu, 27 Nov 2008 10:57:50 -0500] rev 313
Stable release: Enano CMS 1.0.5 (Ferrishyn)
Dan [Thu, 27 Nov 2008 10:38:00 -0500] rev 312
Remove some unused/obsolete release tags
Dan [Thu, 27 Nov 2008 10:26:49 -0500] rev 311
[cosmetic only] lowercase release name in installer splash
Dan [Thu, 27 Nov 2008 10:21:58 -0500] rev 310
Made UX for Windows patch more pleasant including external documentation. Breaking change to dynamic download script.
Dan [Tue, 25 Nov 2008 22:08:00 -0500] rev 309
Updated readme for Ferrishyn
Dan [Fri, 07 Nov 2008 08:56:53 -0500] rev 308
Fixed sanitization of full page IDs with accidental parse of escaped hex character in dirtify_page_id(). Thanks Asterion; see http://forum.enanocms.org/post/20/
Dan [Tue, 16 Sep 2008 08:20:14 -0400] rev 307
Fixed IPv6 address match (the one from phpBB3 did not work)
Dan [Wed, 10 Sep 2008 06:57:54 -0400] rev 306
Fixed SQL parse errors caused by conversion to \r\n by some FTP/zip clients (hackish workaround that isn't Enano's fault)
Dan [Fri, 22 Aug 2008 01:05:42 -0400] rev 305
Forgot to update, merging heads from nighthawk and scribus
Dan [Fri, 22 Aug 2008 01:04:20 -0400] rev 304
Redid tags to match version numbers; only latest release will be tagged as such from now on. Hopefully Mercurial registers this.
Dan [Sun, 17 Aug 2008 08:38:15 -0400] rev 303
Upgrade from 1.0.4 -> 1.0.5 now tolerates errors in user -> user_id transition in tags table
Dan [Tue, 05 Aug 2008 14:02:26 -0400] rev 302
Tagging revision 290 (72ecb951b313) as release, it was never done before.
Dan [Tue, 05 Aug 2008 14:02:18 -0400] rev 301
Backported customizable 404 page from unstable (thanks Vadi); made customizable 404 page have a {STANDARD404} variable available to allow embedding the "default" 404 content.
Dan [Mon, 04 Aug 2008 11:44:20 -0400] rev 300
RNG now uses /dev/urandom instead of /dev/random to fix slowdowns during login. Potentially not as secure, but speed problems on some servers were of blocker severity.
Dan [Thu, 26 Jun 2008 21:00:25 -0400] rev 299
Merging scribus and nighthawk branches
Dan [Thu, 26 Jun 2008 20:59:57 -0400] rev 298
Fixed jBox hover event reference to undefined object
Dan [Thu, 26 Jun 2008 20:59:23 -0400] rev 297
Fixed E_STRICT under PHP 5 and 6 (reference operator in instanciation)
Dan [Thu, 12 Jun 2008 10:58:48 -0400] rev 296
Merging in page['visible'] patch from unstable, pages marked as invisible should now be omitted from searches
Dan [Fri, 09 May 2008 23:33:11 -0400] rev 295
Tagging latest revision as rebrand
Dan [Fri, 09 May 2008 23:32:51 -0400] rev 294
Rebrand as 1.0.5 (Ferrishyn)
Dan [Fri, 09 May 2008 23:32:00 -0400] rev 293
Fixed (again) the user -> user_id transition in enano_tags table
Dan [Sun, 13 Apr 2008 17:03:15 -0400] rev 292
Fixed aclScopeSel control in Safari/KHTML
Dan [Sun, 13 Apr 2008 17:02:42 -0400] rev 291
Added enforced warning about PHP4
Dan [Sun, 16 Mar 2008 21:08:37 -0400] rev 290
Filled and updated out the README for 1.0.4
Dan [Sat, 15 Mar 2008 16:34:28 -0400] rev 289
Backporting cron fixes from unstable
Dan [Sun, 02 Mar 2008 21:34:56 -0500] rev 288
Allowed uppercase characters to be used in the database name (thanks Andrew)
Dan [Sun, 02 Mar 2008 14:52:08 -0500] rev 287
Fixed PHP warning in Rijndael RNG code when open_basedir restriction in effect
Dan [Thu, 28 Feb 2008 12:33:25 -0500] rev 286
Tagging latest revision as rebrand
Dan [Thu, 28 Feb 2008 12:33:01 -0500] rev 285
Rebrand as 1.0.4 (Ellyyllon)
Dan [Fri, 22 Feb 2008 12:46:51 -0500] rev 284
Fixed: RenderMan::getPage() failing with access denial when fetching template and view_source results in deny
Dan [Fri, 01 Feb 2008 22:31:57 -0500] rev 283
Made all captcha fields case-insensitive (thanks pkeating)
Dan [Thu, 31 Jan 2008 22:28:40 -0500] rev 282
Merging scribus and nighthawk branches
Dan [Thu, 31 Jan 2008 22:28:12 -0500] rev 281
Fixed jBox menus failing to appear when window scrolled down
Dan [Thu, 31 Jan 2008 21:52:39 -0500] rev 280
Fixed special pages being returned with subpage information inappropriately from $paths->get_pageid_from_url()
Dan [Mon, 28 Jan 2008 23:07:32 -0500] rev 279
Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)
Dan [Mon, 28 Jan 2008 23:06:38 -0500] rev 278
Re-applying the revision with the comment fix (bad merge a couple revs back)
Dan [Sun, 27 Jan 2008 23:43:24 -0500] rev 277
Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)
Dan [Wed, 23 Jan 2008 19:36:42 -0500] rev 276
Merging in a couple revisions from Nighthawk
Dan [Wed, 23 Jan 2008 19:36:16 -0500] rev 275
Fixed case-sensitive file extensions
Dan [Sun, 20 Jan 2008 23:18:03 -0500] rev 274
Fixed broken regenCaptcha() in Special:Register
Dan [Sat, 19 Jan 2008 00:47:52 -0500] rev 273
Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.
Dan [Fri, 18 Jan 2008 10:35:33 -0500] rev 272
Removed all PostgreSQL support from the installer as per http://enanocms.org/News:1200114064; installer support for Postgres is available in the 1.1 branch now
Dan [Wed, 09 Jan 2008 22:23:09 -0500] rev 271
PHP4 fix: sidebar missing in installer UI: problem was wrongly named constructor for templateIndividualSafe