Enano CMS (1.1.x): Graph

Clean up that GLOBALS silliness.
2010-07-06, by Dan Fuhry
Default theme can no longer be changed in demo mode
2010-07-06, by Dan Fuhry
DiffieHellman: gracefully handle platforms that fail the sha256 self test, currently only known to be PowerPC. Added support for PHP's built-in hash functions (they were added in 5.1.2) and use them in lieu of the built-in sha256 implementation when available.
2010-07-05, by Dan Fuhry
Fixed the (rather expected) 1.0.x migration issues db revision system
2010-07-01, by Dan Fuhry
First shot at switching to database revision numbers separate from release version number. There are probably bugs, especially related to migration.
2010-07-01, by Dan Fuhry
Tagged release: 1.1.7pl1
2010-07-01, by Dan Fuhry
Integrated XSS patch for 1.1.7 maintenance branch 1.1.7-maintenance 1.1.7pl1
2010-07-01, by Dan Fuhry
Enanium: Added directionality to simple-header
2010-06-28, by Dan Fuhry
Oops, maybe I could set English back to LTR :)
2010-06-28, by Dan Fuhry
Added basic support for right-to-left languages. Set meta_direction to "rtl" in core.json.
2010-06-28, by Dan Fuhry
SECURITY: Multiple XSS in Special:ChangeStyle. Reported by Mesut Timur of Mavituna Security - thanks! Also removed my stand-in for ucfirst().
2010-06-28, by Dan Fuhry
Rewrote category editor. This breaks the JSON API. Also fixed a few bugs with how Wiki Mode is set in $paths. (Hopefully that doesn't cause infinite loops, heh). Fixes issue 20.
2010-06-02, by Dan
Added the ability to trust XFF (X-Forwarded-For) headers.
2010-05-16, by Dan
Test commit to verify that ktulu auto sync works properly
2010-05-15, by Dan
Added a box on Admin:UploadConfig showing the value of upload_max_filesize.
2010-05-02, by Dan
Merged (accidental split)
2010-04-30, by Dan
Fixed typo in that, the parameter that was supposed to go to getConfig was going to htmlspecialchars()
2010-04-30, by Dan
Added an ajax auto check for the path to ImageMagick in Admin:UploadConfig
2010-04-30, by Dan
Reordered wiki render stages so images happen before external links. Fixes a parser bug seen, among other places, on the Donation page.
2010-04-20, by Dan
Fixed some cosmetic bugs in Special:AllPages
2010-04-20, by Dan
Fixed registration admin override with account_activation set to disable.
2010-04-19, by Dan
Made separate methods in sessionManager for static and non-static generate_aes_form(), because PHP (erroneously) always calls that method statically.
2010-04-17, by Dan
Merged
2010-04-06, by Dan
Added Diffie-Hellman crypto support into the installer. Fixes issue 13.
2010-04-06, by Dan
Clarified some edit conflict related strings
2010-04-06, by Dan
Fixed lockout list in ACP under PostgreSQL
2010-04-02, by Dan
Merge in changes about legal marks
2010-04-02, by Neal Gompa
Fixed various legal marks in the strings of the English language pack
2010-04-02, by Neal Gompa
Fixed Gravatars not showing up immediately after save in Avatar UCP
2010-04-02, by Dan
Fixed fread() usage in Request_HTTP not properly handling incomplete responses
2010-04-02, by Dan
Fixed typo in install.json in pgsql "no php extension" error string
2010-04-01, by Neal Gompa
Fixed password_score_field onload in Admin:UserManager
2010-03-30, by Dan
Added selection and popup for <pre> tags within wikitext. Also fixed more bugs found in the HTML paragraph parser (mostly self-closing tags e.g. <hr />).
2010-03-30, by Dan
Renderer: fixed the regex that looks for h-tags in reverse_process_headings so it looks forthe new format #head: IDs.
2010-03-30, by Dan
Fixed "waiting for l10n init" and js error in Admin:UserManager
2010-02-26, by Dan
Search: strip HTML tags from result text (DB pages only). Fixes issue 17.
2010-03-29, by Dan
Going ahead with the switch to tabs. This is a major coding standards change! If any unusual parser bugs show up, check this changeset. Converted all .php, .js, .tpl, .css, and .json files and did basic testing.
2010-03-28, by Dan
Introduced configurability for gzip compression. Fixes issue 18.
2010-03-28, by Dan
Replaced (most of) the mini box icons with famfamfam silk icons, they're better looking.
2010-03-28, by Dan
Added https support in Request_HTTP
2010-03-28, by Dan
Fixed "unapproved" status taking precedence over "spam" flag in comment submit and some display related bugs in comments.js
2010-03-20, by Dan
Fixed username not being decoded in Special:ActivateAccount
2010-03-17, by Dan
Merged braches from accidental split
2010-02-08, by Dan
Fixed unescaped ampersands in "&enano_version" cache breaking
2010-02-08, by Dan
URL sanitizer: disabled uppercase letters in URL hex character codes (it was causing conflicts with the Windows/Apache 2.2 alt namespace separator). Thanks Techokami for finding and reporting this bug.
2010-02-07, by Dan
Added var enano_version to installer JS header
2010-02-03, by Dan
Modified paragraph rule to not use recursive parsing; made parsing of code and pre tags much more reliable. Fixes issue 1 (QA: RE-TEST).
2010-02-01, by Dan
Fixed more places where author_uid wasn't right.
2010-02-01, by Dan
Added "days ago" to the Site Started field on admin home
2010-02-01, by Dan
Fixed an example url in install.json pophelp (which may be removed momentarily)
2010-01-19, by Dan
Renamed 1.0.6 -> 1.0.6pl1 upgrade script, migrations from 1.0.6pl1 were broken
2010-01-12, by Dan
Fix: add author_uid in GROUP BY in LogDisplay for PostgreSQL compatibility
2010-01-10, by phirox
Fixed author_uid in activation request insertion
2010-01-10, by Dan
Logins: if the error message string doesn't look like a langstring id, don't prepend "user_err_" to it (some auth plugins are not localized at all, this lets them be without ugly cosmetic bugs)
2010-01-06, by Dan
Somehow I broke automatic localization of special page titles.
2010-01-06, by Dan
End year on Enano copyright dates is dynamic now
2010-01-06, by Dan
DBAL: readded sql_affectedrows(), some plugins were using it
2010-01-06, by Dan
Fixed some bugs with account activation, especially if you're a half-logged-in vegetable.
2010-01-06, by Dan
Sessions: fixed on_critical_page(), it referenced the wrong global; enabled better extensible behavior in the account_active column
2010-01-06, by Dan
Merging scribus and charlie repos
2010-01-05, by Dan
Fixed ENANO_VERSION under databaseless template class
2010-01-05, by Dan
common_cli: Fixed warning with $paths->init() (kind of a hack)
2010-01-05, by Dan
Search: some refinements to algorithm, introduced score promotion for phrase matches and Levenshtein distance based score manipulation
2010-01-05, by Dan
Fixed a bug in getHighestZ() that broke login boxes
2010-01-05, by Dan
Fixed Special:AllPages under PostgreSQL. Thanks phirox from IRC.
2010-01-04, by Dan
Fixed oversanitation of multiple XHTML closing tags in a row
2009-12-28, by Dan
Tagged 1.1.7 as current-unstable
2009-12-28, by Dan
All javascript and css requests now append the version number to the URL to break browser caches and prevent from having to clear the cache upon upgrade
2009-12-27, by Dan
Version bump to 1.1.8
2009-12-27, by Dan
Fixed phrase search, it got really broken somehow
2009-12-27, by Dan
TinyMCE: Bumped to v3.2.7
2009-12-22, by Dan
Fixed two "declaration should be compatible" errors encountered by the BitNami folks. Thanks Neal for reporting.
2009-12-21, by Dan
Beta release: Enano CMS 1.1.7 (Caoineag beta 2) (retag #2)
2009-12-19, by Dan
Detagged 1.1.7 1.1.7
2009-12-19, by Dan
Upgrade: added 1.0.6pl1 migration support, tarball repository will need to be updated
2009-12-19, by Dan
Beta release: Enano CMS 1.1.7 (Caoineag beta 2)
2009-12-18, by Dan
Last minute fix to wikitext code tag
2009-12-18, by Dan
Backout from 1.1.7 due to upgrade issue, fixed and retagging
2009-12-18, by Dan
Beta release: Enano CMS 1.1.7 (Caoineag beta 2)
2009-12-18, by Dan
Backed out of ENANO_INSTALLED check in DBAL, it broke CLI installs badly
2009-12-18, by Dan
OK screw that, put the crypto backend check in functions.
2009-12-18, by Dan
Fixed libenanoinstall/CLI double declaration of run_installer_stage()
2009-12-18, by Dan
Forgot table_prefix in the logs table migrator
2009-12-18, by Dan
Fixed no author_uid in PageProcessor::rename_page()
2009-12-18, by Dan
Added an upgrade hook to populate the author_uid column in logs, pending test by Neal
2009-12-18, by Dan
Added ajaxLoginInit to JS load stub list
2009-12-18, by Dan
Added a graceful dead-end for the tutorial; removed the hash symbols from IRC links per a heads-up from Neal.
2009-12-18, by Dan
AJAX login: Fixed error box failure to destroy upon cancel. Fixes issue 8.
2009-12-18, by Dan
Logs: Fully integrated an author_uid column. Logs are now linked by user ID instead of just username, so they survive username changes better. Database is changed. Fixes issue 6.
2009-12-18, by Dan
Wikitext parer: re-added the <code> tag thing
2009-12-18, by Dan
Comments (AJAX): Now paginated server side. Fixes issue 2.
2009-12-18, by Dan
Mod extras: Changed string for RDNS generic failure error
2009-12-18, by Dan
Fixed php_in_pages out-of-scope error in Special:UploadFile; modified RenderMan::preprocess_text() to take a permissions object for any page
2009-12-17, by Dan
ACP: Added lockout management feature
2009-12-17, by Dan
Fixed undefined $score_min in password change. Potential security concern?
2009-12-17, by Dan
Namespace_Default: added a workaround for an inconsistency in SQL. Basically, if you join the same table multiple times under multiple aliases, COUNT() always uses the first instance. Was affecting the comment counter in the "discussion" button.
2009-12-17, by Dan
JSON preparser: fixed corruption of strings that include the exact pattern word, comma, space, word, colon
2009-12-17, by Dan
Merge from accidental split
2009-12-13, by Dan
DBAL: Majorly cleaned up and improved coding standards/documentation
2009-12-13, by Dan
Installer: cleaned up CSS header; updated comments in config.php to not say that passwords are stored with AES (as they are now stored with HMAC-SHA1)
2009-12-12, by Dan
Updated KNOWN_BUGS to point to our issue tracker
2009-12-12, by Dan
Crap, broke page editing. Fixed it.
2009-12-12, by Dan
Drafts saved on nonexistent pages now show up. Fixes issue 7.
2009-12-12, by Dan
Re-merge changes from a2hosting dev
2009-12-12, by Dan
Set up more sensible defaults (UTC, DST off) for timezone preferences. Also modified enano_date() to properly include GMT offsets when timezone characters are used. Fixes issue 4.
2009-12-12, by Dan
CAPTCHA: Added smart autosubmit for registration page. Usability testing was so-so, may back out later.
2009-12-12, by Dan
A couple fixes to permission out-of-scope errors.
2009-12-11, by Dan
Wikitext parser: re-added mailto support
2009-12-11, by Dan
Sessions: Made acl_check_deps() verify scope, so that all of an action's dependencies must apply to the namespace of the given action.
2009-12-07, by Dan
Removed history_rollback_extra action from scope of Special pages, as it's unneeded
2009-12-07, by Dan
PostgreSQL: bugfix in ACL related SQL query
2009-12-07, by Dan
PostgreSQL: Fixed another bug, this time in the log fetch code
2009-12-06, by Dan
Fixed ranks table under PostgreSQL. FIXME, only affects new installations and upgrades, if this bug is encountered in the wild we might want to look at auto-integrating a fix.
2009-12-06, by Dan
Updated default main page with links to the Google Code issue tracker
2009-12-06, by Dan
Improved language for static HTML page delete interface
2009-12-06, by Dan
PostgreSQL: Fixed $session->create_user()
2009-12-06, by Dan
PostgreSQL: Fixed user pages. Also added a columns_in() method to the DBAL to list columns in a table
2009-12-06, by Dan
PostgreSQL: fixed Admin:SecurityLog database error
2009-12-06, by Dan
Plugin block parser: Fixed plugin block parsing for plugin files in CRLF format
2009-12-01, by Dan
Installer sysreqs: Merged all the crypto extensions into one check; altered warnings. Strings are hopefully cleaned up.
2009-12-01, by Dan
common_cli and dbal: Fixed lack of ENANO_INSTALLED check in determining config path
2009-12-01, by Dan
Merge from accidental split
2009-11-30, by Dan
Admin User Manager: When a user with a DB-driven user page is renamed, also change urlname of their user page. Fixes issue 3.
2009-11-30, by Dan
Admin Home: fixed undefined %num_users% in string acphome_msg_inactive_users_plural
2009-11-30, by Dan
Language update for About Enano page ("help achieve" sentence added)
2009-11-27, by Dan
parse_mediawiki: Marked the paragraph bug as non-blocker, delayed until RC1. I have higher priorities than a minor win32 only parsing issue.
2009-11-27, by Dan
Fixed some open_basedir errors in SpecialPageFuncs
2009-11-16, by Dan
Login: Fixed typo that prevented non-DH crypto from working (thanks Keith Schmader)
2009-11-16, by Dan
Added a switch to disable following redirects in Request_HTTP
2009-11-11, by Dan
Hack: temporarily disabled PCRE recursion for Win32 in the paragraph block tag parser until a better parser can be written/adapted
2009-11-11, by dan
which(): added silencer to shut up errors on servers with open_basedir restriction
2009-11-09, by Dan
Logins: reorganized data structures a bit. WiP - needs test routine done.
2009-11-03, by Dan
Another fix to paragraph bypass behavior, for when the same substring appears more than once in the text
2009-10-25, by Dan
OK, I'm done with the preg_replace() in the paragraph parser. It's too buggy. Replaced with preg_match_all()/str_replace_once().
2009-10-13, by Dan
MiniPrompt: [minor] Added short delay before destruction in whiteOutDestroyWithImage().
2009-10-07, by Dan
Merged from accidental split
2009-10-04, by Dan
More parser work: fixed a few bugs with [[intlinks]] in headers, a bug that caused the paragraph parser to return an empty string, and added a warning/backup-and-restore for when a render stage returns an empty string.
2009-10-04, by Dan
Fixed (more) output buffering bugs in Special:EditSidebar
2009-10-01, by Dan
Javascript lib: UX: When whiteOutReportSuccess() is called on a whiteout over a miniPrompt, the miniPrompt and whiteout are now flown out together. Also, a bit of improvement to message box DOM object destruction code; this fixes problems with message boxes appearing below the shade when ajax auth is done 3 or more times in one page load.
2009-09-30, by Dan
Same issue, was doing an empty() check on $page_urlname in Admin:PageManager and not taking both main pages into account
2009-09-26, by Dan
More blank-urlname bugfixes, this time involving internal links
2009-09-26, by Dan
A bit of refinement and consistency to "Powered by Enano" link and associated documentation
2009-09-26, by Dan
Fixed handling of blank urlname as guest main page / other main page for members
2009-09-26, by Dan
Whoops, it's setHook(), not getHook() (Special:Administration JS core)
2009-09-25, by Dan
HTML login: fixed bad submit under IE
2009-09-25, by Dan
Admin panel: added collapsible tables under GeneralConfig, with room for support on other pages.
2009-09-20, by Dan
Login: if return-to specified and already logged in, jump to return-to instead of main page.
2009-09-20, by Dan
Installer: Fixed "RewriteBase /" bug and some improper Dynano use in formutils.js
2009-09-20, by Dan
Functions: fixed HTML sanitizer to properly preprocess <code> one-liners
2009-09-20, by Dan
Fixed (well, implemented) log clearing functionality on uploaded files.
2009-09-15, by Dan
Request_HTTP: Fixed get_response_body(), added HTTP redirect support, and added support for Content-Length.
2009-09-12, by Dan
Scribus <--> Charlie merge
2009-09-11, by Dan
json2: fixed order of exception classes, it threw fits about missing Zend_Exception in ubuntu's latest PHP 5.2.6
2009-08-30, by Dan
Damn it! gzip_output() was not checking for gzip support in the browser, fixed.
2009-09-11, by Dan
Common: renamed global $title to $urlname (it broke the API from non-plugin Enano scripts)
2009-09-11, by Dan
Removed the $userpage parameter from Namespace_Default::error_404(). It screwed up a couple plugins. (Thanks Mazza for discovering the issue)
2009-08-26, by Dan
Enanium: fixed background in tinymce
2009-08-26, by Dan
Wikitext: added horizontal rule support
2009-08-26, by Dan
Fixed RenderMan::render() flags in default namespace XHTML formatter
2009-08-26, by Dan
Tutorial: improved Creating & Editing page a little bit with respect to wiki formatting stuff
2009-08-26, by Dan
Merging in work done on Charlie with upstream
2009-08-25, by Dan
Fixed a couple bugs with read-only mode and protected pages in the AJAX editor
2009-08-25, by Dan
Sessions: Improved inactive account UX; shuffled around a bit of code so that whitelist checks are shared; fixed a bunch of bugs related to ban code and IPv6 addresses
2009-08-21, by Dan
Enanium: custom header now has an <a> floating above it that links to the main page.
2009-08-21, by Dan
A bit of shuffling around code related to determining the page title from the URL. It's done in common now, and $paths becomes more of an information repository rather than an information gatherer. Note: This BREAKS $paths->fullpage/$paths->getParam() in *_preloader!
2009-08-21, by Dan
Made internal links to the Admin namespace much smarter. (They do the login box and stuff.)
2009-08-21, by Dan
A bit of work on tutorial content, more still needed
2009-08-21, by Dan
Wiki formatter: heading IDs are now name based ("head:" . sanitize_page_id($text)) instead of tocN.
2009-08-21, by Dan
Avatars: fixed animated avatars rejected even when allowed in ACP
2009-08-21, by Dan
Sidebar editor: fixed ob_end_clean() warning
2009-08-21, by Dan
Wiki engine: optimization for empty-text case
2009-08-21, by Dan
Functions: silenced PHP warnings on ob_* functions
2009-08-21, by Dan
JS: MessageBox: Fixed z-index calc
2009-08-21, by Dan
Autofill: fixed missing parameter to $db->fetchrow()
2009-08-21, by Dan
User ACP: redirect to Special:Login on own account deletion
2009-08-21, by Dan
Common: removed cookie_destroy hack
2009-08-21, by Dan
Updated readme for 1.1.7/1.2 series in general
2009-08-21, by Dan
Avatar UCP and ACP: Ported Dynano -> jQuery; merged POST processing code. Added support for IPv6 URLs (avatar UCP and RequestHTTP).
2009-08-21, by Dan
SECURITY: Comments: fix poor sanitization of subject on initial submit
2009-08-21, by Dan
Sessions: whoops, left a debug message in by accident, broke a few redirects
2009-08-20, by Dan
SECURITY: UCP: Added CSRF protection on Profile (unneeded on EmailPassword due to USER_LEVEL_CHPREF requirement)
2009-08-20, by Dan
index: removed that annoying 2-space indent
2009-08-20, by Dan
Fixed some upgrade bugs; added support for choosing one's own date/time formats; rebrand as 1.1.7
2009-08-20, by Dan
Minor fix to SHA256: some indices were not being initted under some circumstances
2009-08-19, by Dan
Added ability for authentication plugins to modify session keys (to allow invalidation when their own authentication data is changed) as well as the ability to disable the built-in password change facility
2009-08-10, by Dan
Blockquote functionality in wikitext parser now allows rendering of other block level elements properly
2009-08-09, by Dan
Login: enabled DiffieHellman on IE8
2009-08-09, by Dan
Login: visual: fixed separator being displayed with only one of 2 checkboxes
2009-08-07, by Dan
Some changes to AJAX login interface, made it a bit more compact with less language, with some Enanium specific modifications to the same.
2009-08-04, by Dan
Made index.php bootstrap smarter and better commented.
2009-08-04, by Dan
More work on rendering engine. Fixed some bugs with paragraph skipping and added (incomplete) support for blockquotes.
2009-08-04, by Dan
Fixed some "declaration should be compatible" errors that showed up under WinXP QA
2009-08-04, by Dan
Sessions: fixed logout() destroying normal session (instead of elevated) if $level = USER_LEVEL_CHPREF. Possible very minor security concern: elevated sessions were not fully destroyed, so if a normal session is opened from the same IP, the elevated one may be reusable for 15 minutes.
2009-08-03, by Dan
Login: Enabled DiffieHellman for iPhone OS 3.0 (it passes unit tests now)
2009-08-03, by Dan
Merged development from Scribus and Charlie
2009-07-31, by Dan
Editor: completely moved wiki edit notice to AJAX fetch, so it's not shipped with the page anymore.
2009-07-17, by Dan
Admin: query string is now preserved on redirect to login
2009-07-17, by Dan
Fixed some formatter engine errors that were exposed through the wiki edit notice
2009-07-17, by Dan
AJAX Login: Fixed all known issues with lockout (and some unknown ones)
2009-07-17, by Dan
Moved User CP profile settings to front page of CP, and changed associated language
2009-07-29, by Dan
Fixed logins with usernames containing Unicode characters
2009-07-29, by Dan
Fixed title formatting in user pages
2009-07-29, by Dan
Tweaked URL sanitizing a bit to make Enanium work better.
2009-07-29, by Dan
Added method add_header_js() to template to allow insertion of code to be run immediately after JS init
2009-07-29, by Dan
Added ability to specify PNG or JPEG as the format of thumbnails/scaled images in Special:DownloadFile
2009-07-29, by Dan
ACL manager: started on IE support; button clicking not working. Other compatibility improvements and bugfixes.
2009-07-17, by Dan
Userpage: rewrite of many CSS rules for better scaling behavior
2009-07-17, by Dan
ACL editor: finally fixed that annoying blank-window bug on rule deletion
2009-07-13, by Dan
Here we go, preload_js() officially added to admin panel. Pray with me.
2009-07-11, by Dan
Renderer: added "smart paragraphs" for templates. <p><b>Foo</b> {bar}</p> where bar is multiline is basically turned into proper XHTML paragraphs.
2009-07-11, by Dan
One word: Internet Explorer 6. This includes a rewrite of $paths->parseAdminTree() that encodes to JSON instead of manually generating JS, so good-bye to stupid parser problems I hope.
2009-07-11, by Dan
AJAX login: fixed lockout string being displayed where it shouldn't be
2009-07-11, by Dan
Enanium: Added some IE6 fixes
2009-07-11, by Dan
Enanium: consolidated jBox and toolbar CSS. Firefox 3.5 did a double-request and it was slowing things down. Thanks YSlow.
2009-07-08, by Dan
Admin theme: fixed onload behavior of collapsible menu
2009-07-08, by Dan
OK, JS preloading on a CDN works perfectly now. I'm sure of it.
2009-07-08, by Dan
Fixed inconsistency in JS component load order between CDN sites and non-CDN sites
2009-07-08, by Dan
Fixed a series of infinite loops with preloading components and placeholders
2009-07-08, by Dan
Enanium: <pre> elements under div.content are now indented
2009-07-08, by Dan
Wiki engine: improved behavior in block level element finding/wrapping algorithm
2009-07-08, by Dan
Template: minor: documented sidebar_widget()
2009-07-08, by Dan
Namespace_Default::bake_cdata() now guesses values for anything missing
2009-07-08, by Dan
jQuery: UI: Upgraded to 1.7.2
2009-07-08, by Dan
Dynano: finally deprecated $() syntax due to jQuery
2009-07-08, by Dan
Fixed one unlocalized string in sidebar editor; fixed sidebar editor jQuery init race condition seen under Firefox and Chromium on 64-bit
2009-07-08, by Dan
SECURITY: Fixed potential XSS in $output->set_title() (introduced: 1.1.6)
2009-07-08, by Dan
History: Fixed missing $q in fetchrow()
2009-07-06, by Dan
Language: fixed improper null return in add_filter()
2009-07-06, by Dan
Fixed decode_unicode_url() trying to parse non-hex %uXXXX sequences
2009-07-06, by Dan
Fixed onload_hooks[] being initted to null after runOnloadHooks() called (should now be initted to an array)
2009-07-05, by Dan
Fixed makeUrl() Javascript version not calling append_sid()
2009-07-05, by Dan
Login and sessions: fixed some improper handling of the config for lockout logic
2009-07-02, by Dan
Wiki formatting: Headings: tolerate spaces after line; added disable_rule method (required for rev. 1029)
2009-07-02, by Dan
SHA256: Fixed broken hashes on 64-bit PHP
2009-07-02, by Dan
Installer: now compatible with new rendering engine
2009-07-02, by Dan
Removed Text_Wiki and Firebug Lite from 3rd party code list
2009-06-21, by Dan
First implementation of new parser; Text_Wiki is now gone. VERY BETA! WiP.
2009-06-21, by Dan
AJAX login: fixed improper run of login_submit_early; fixed failure to redirect if main_page_members == current page
2009-06-21, by Dan
Fixed improper usage of function_exists() in captcha
2009-06-21, by Dan
Merging branches. Revision 2^10! :D
2009-06-15, by Dan
Added support for preloading javascript libs ($template->preload_js()). Updated admin theme and Tigra Tree Menu to support this + JS_{HEADER,FOOTER} variables.
2009-06-15, by Dan
Install: fixed a few bugs that showed up under IE8
2009-06-09, by Dan
Fixed broken javascript magic on Admin:PageGroups
2009-06-05, by Dan
Enabled tiny URL scheme support in installer cli-core
2009-06-02, by Dan
Whoops, plugin upgrades got broken
2009-05-31, by Dan
Minor plugin compatibility fix to Special:Search
2009-05-31, by Dan
Theme selector: fixed disabled themes being displayed
2009-05-31, by Dan
Comments: SECURITY: Fixed IP not recorded in non-JSON submit and a few other non-security issues
2009-05-31, by Dan
Removed Firebug Lite - unused, outdated, and potential licensing issue. All licensing issues should be resolved now.
2009-05-30, by Dan
Fixed missing global $cache; in $plugins->upgrade_plugin();
2009-05-29, by Dan
Set a few queries to buffered due to intermediate queries during fetching
2009-05-29, by Dan
Stats: fixed missing $q in $db->fetchrow()
2009-05-29, by Dan
Comments: fixed failure to supply $q to fetchrow() in JSON fetcher
2009-05-29, by Dan
Clarified some licensing issues from the Fedora project's preliminary review.
2009-05-29, by Dan
Fixed lack of default value in main page field on admin panel
2009-05-29, by Dan
Fixed a PHP warning in Admin:GeneralConfig default theme selection
2009-05-27, by Dan
Disabled Connection: close in AJAX lib (throws error under Chrome 2.0)
2009-05-27, by Dan
JS core: allow setting loaded_components in other scripts
2009-05-27, by Dan
AJAX rdns call now calls is_valid_ip() (security?)
2009-05-27, by Dan
Enanium: bumped top heading down a few px
2009-05-27, by Dan
Class "currentpage" is now added to all internal links, including sidebar buttons, if the link points to the current page.
2009-05-27, by Dan
Whoa! I broke Live Re-Auth, fortunately after the 1.1.6 release.
2009-05-27, by Dan
Sped up AJAX de-auth a little; added a little extra info to login_success JSON responses
2009-05-22, by Dan
Fixed: cache was being used during plugin fetch, so newly placed plugin files were not listed
2009-05-16, by Dan
Fixed two bugs: PluginManager: forgot to import cache; PageManager: now queries pages with buffered query (temporary fix)
2009-05-16, by Dan
Unstable beta release: 1.1.6 (Caoineag beta 1)
2009-05-15, by Dan
Fixed category display not listing entirely 1.1.6
2009-05-15, by Dan
Unstable beta release: 1.1.6 (Caoineag beta 1)
2009-05-15, by Dan
Merged accidental split, we should be ready to push out 1.1.6
2009-05-15, by Dan
Merging from accidental branch split
2009-05-16, by Dan
Plugins: fixed a final system plugin bug
2009-05-16, by Dan
Plugins: fixed a final system plugin bug
2009-05-16, by apache
Detagged 1.1.6 release - upgrader bug found
2009-05-15, by Dan
Unstable beta release: 1.1.6 (Caoineag beta 1)
2009-05-15, by Dan
Added another word to the CAPTCHA blacklist (thanks Neal).
2009-05-15, by Dan
Updated KNOWN_BUGS
2009-05-15, by Dan
Added protection against obscene words in CAPTCHAs
2009-05-15, by Dan
User homepage/URL is now displayed on user pages
2009-05-15, by Dan
Fixed undefined indices for user_extra in various places
2009-05-15, by Dan
Installer: payload: fixed two minor PHP errors with .htaccess.new and wrong form field name
2009-05-15, by Dan
GeneralConfig: Fixed failure to import $cache during save
2009-05-15, by Dan
Fixed some PHP warnings with API pages
2009-05-15, by Dan
Added minor edit filter to Special:Log
2009-05-15, by Dan
Fixed some bugs with history viewing and log display (wrong row counts, failing to provide result resource, etc.); added "view" button to edits in log display; fixed underscores in auto generated titles
2009-05-15, by Dan
Fixed redirects before $session init not working; fixed failure to load system plugins
2009-05-15, by Dan
A few safety changes to tolerate no $session when it's not available
2009-05-14, by Dan
Enanium: fixed visited wikilink-nonexistent links
2009-05-13, by Dan
Added cache for installed themes
2009-05-13, by Dan
Cut out two queries per page with plugin loader routine
2009-05-13, by Dan
Paths: System messages are cached in RAM now
2009-05-13, by Dan
Replaced the USE with a mysql_select_db() to cut out one query
2009-05-13, by Dan
Band-Aided user_homepage undefined index error in comments.
2009-05-13, by Dan
Render / Template: No longer does exist checks for wikilinks on sidebar
2009-05-13, by Dan
Fixed behavior of log display and title fetch for nonexistent pages
2009-05-13, by Dan
Comment UI / Special:Memberlist: UI consistency for Send PM/Add Buddy links in Memberlist and comment display UI
2009-05-13, by Dan
ajax: theme selector: no longer lists disallowed themes
2009-05-13, by Dan
SpecialPageFuncs: Removed tag cloud sidebar in the name of cutting out an SQL query. It will go into a plugin.
2009-05-13, by Dan
Fixed a couple bugs with admin avatar settings and getConfig() return types
2009-05-11, by Dan
Enanium: left collapse button same size as jBox bars now
2009-05-11, by Dan
Enanium: fixed failure to load on template_nodb
2009-05-11, by Dan
Wikitext redirects should work again + get_redirect() added to Namespace_* to allow plugins to extend
2009-05-10, by Dan
Enanium: move new memberlist above admin buttons + only show for logged-in
2009-05-10, by Dan
Merging from accidental branch split
2009-05-10, by Dan
Added register_special_page() function, to make it much easier to create special pages. Also, rewrote Special:Memberlist to use more efficient fetch method and not use an unbuffered whole-table query.
2009-05-10, by Dan
Added "About" sidebar block which simply shows the site description.
2009-05-10, by Dan
Enanium: added collapse for left sidebar
2009-05-10, by Dan
Fixed a couple bugs with protection UI; fixed stray <enano:no-opt> in Special:CSS (do people still use that?)
2009-05-10, by Dan
API: Properly handles $title again
2009-05-05, by Dan
Enanium: Set right sidebar as collapsible. Whether I will do the left one I do not know.
2009-05-05, by Dan
Whoops, last commit broke admin stuff.
2009-05-05, by Dan
Made some more changes to the way namespaces are handled, for optimization purposes. This is a bit of a structural reorganization: $paths->pages is obsoleted in its entirety; calculating page existence and metadata is now the job of the Namespace_* backend class. There are many things in PageProcessor that should be reorganized, and page actions in general should really be rethought. This is probably the beginning of a long process that will be taking place over the course of the betas.
2009-05-05, by Dan
Fixed some error display cosmetics in Request_HTTP
2009-05-04, by Dan
Admin: Home: Properly handles Request_HTTP exceptions now
2009-05-04, by Dan
Security log: fixed typo in plugin enable/disable display
2009-05-04, by Dan
Admin theme: Fixed l10n in footer
2009-05-04, by Dan
Enanium: added wikilink-nonexistent
2009-05-04, by Dan
Whoops. LogDisplay sorted by log_id, not time_id.
2009-05-04, by Dan
AJAX: Reset votes: now uses whiteOutMiniPrompt()
2009-05-04, by Dan
Removed "@" from all call_user_func() calls to make debugging special pages and such possible
2009-05-04, by Dan
Renamed smiley conversion script (more descriptive); fixed +x on cli-core.php (both rpmlint warnings, thanks Neal)
2009-04-26, by Dan
Fixed sidebar editor not closing floating windows properly when FX off
2009-04-19, by Dan
Upgrades from stable now skip langimport if it's being done later anyway. Pending testing.
2009-04-19, by Dan
Upgrader: UX: Added welcome page, different between Caoineag and Banshee
2009-04-19, by Dan
DBAL: _die() now detects installation environment and, if present, calls installer UI library for error display chrome
2009-04-19, by Dan
Fixed path to wrong line image in admin CP nav tree
2009-04-19, by Dan
Installer welcome page can tolerate 1.0.x databases again
2009-04-18, by Dan
Fixed session key clearing process, it should work right now.
2009-04-17, by Dan
Made handling of $perms being non-object work properly in template
2009-04-17, by Dan
Cleared up a few discrepancies in page handling, template var init, and how NewsBoy works.
2009-04-16, by Dan
Made upgrades from 1.0.6 work.
2009-04-16, by Dan
Installer: Whoops, moved the start of the main form on sysreqs down too far
2009-04-16, by Dan
Installer: Added recheck button to sysreqs page (thanks Nolan Rollo)
2009-04-16, by Dan
Installer: Form AJAX action no longer fades (too slow!)
2009-04-16, by Dan
Added web.config support for IIS7 URL rewriting.
2009-04-16, by Dan
QA: Schema: fixed urlname in pages was wrong size (both MySQL and PgSQL)
2009-04-16, by Dan
QA: Fixed bad update of user info when user_rank is NULL in Admin:UserManager
2009-04-16, by Dan
Added the indices to the 1.1.5 -> 1.1.6 upgrade schema
2009-04-16, by Dan
Added some more indices to speed some stuff up (MySQL only)
2009-04-16, by Dan
Added the linked-to page of the tutorial (it is, however, a stub at this point)
2009-04-15, by Dan
Installer default content is now modular, and can pivot between starting with a blank site and installing a tutorial site.
2009-04-15, by Dan
Drop-in Enanium as default theme upon install
2009-04-15, by Dan
[QA] User CP: rearranged some things to fix overly tall cells and/or sidescrolling
2009-04-15, by Dan
New primary theme: Enanium
2009-04-15, by Dan
Merging accidental branch split
2009-04-15, by Dan
Fixed log being pushed inwards due to lack of clear: both; before list
2009-04-15, by Dan
Fixed logs not working under postgresql
2009-04-15, by Dan
Removed Special:RecentChanges (phased out)
2009-04-15, by Dan
Fixed division by zero on first day installed.
2009-04-15, by Dan
New, beautiful, rethought Admin:Home. No, really, you'll like it.
2009-04-15, by Dan
Removed unused MIME magic file.
2009-04-15, by Dan
Deletion vote reset is now logged and able to be rolled back
2009-04-15, by Dan
File rollbacks should be all up to date now.
2009-04-15, by Dan
Made Special:Log tolerate literal, unescaped slashes in page names (hack of sorts, but still...)
2009-04-15, by Dan
Meh, finished my half-written-out thought in a FIXME in Special:Log code.
2009-04-14, by Dan
Finished core of log display interface including filter management. There is still a bit of a to-do list, especially regarding rollbacks and reuploads.
2009-04-14, by Dan
Memberlist now shows rank instead of user level in "Title" column. (thanks mm3)
2009-04-13, by Dan
Live Re-Auth is now required for deleting pages, editing ACLs, protecting pages, and clearing logs. Committing in a hurry as a storm is coming in, hope everything is in there.
2009-04-13, by Dan
New page protection UI. Both miniPrompt and failsafe HTML.
2009-04-13, by Dan
Log displayer should support some actions besides edit now
2009-04-13, by Dan
Whoops, page protection code didn't flush page_meta cache
2009-04-13, by Dan
Theme selector: controls height now (limits box to height of screen minus a few px of padding) if there are lots of themes
2009-04-13, by Dan
Cleared up a few warnings that appeared under the Phalanger PHP interpreter.
2009-04-12, by Dan
Work started on Special:Log and associated tools/interfaces. This is far from complete, but the basic functionality is in there.
2009-04-12, by Dan
Index: minor fix-up to code cleanliness under diff loading
2009-04-12, by Dan
Allowed custom processing functions altogether for AJAX login error handling
2009-04-12, by Dan
When changing namespace of a File: page, associated files are now deleted. Also fixed some issues with image scaling.
2009-04-11, by Dan
session: login_process_userdata_json hook should work with more than one installed auth plugin now
2009-04-11, by Dan
UserPage: whoops, wrong name (Namespace_Default::$exists, not ::$page_exists); bumped userpage tabs down by 0.05em to correct an Oxygen bug
2009-04-04, by Dan
Session: additional metadata passed back from auth plugins is passed through to client for optional further parsing
2009-04-04, by Dan
HTTP: now throws exceptions instead of flat-out dying
2009-04-04, by Dan
SpecialUserPrefs: fixed: userprefs_body hook only allowed first loaded plugin to work
2009-04-04, by Dan
Oxygen (and general): cleaned up sidebar CSS, wikitext blocks are now sent through alternate block
2009-04-04, by Dan
Committing string changes associated with new logout interface
2009-04-04, by Dan
Whoops! JSON parser Unicode escape sequence typo.
2009-04-04, by Dan
Made aclDisableTransitionFX also switch on jQuery.fx.off; made theme switcher work with said jQuery switch
2009-04-04, by Dan
AJAX comments: ranks are now displayed properly in a submitted post.
2009-04-04, by Dan
New logout interface + made DiffieHellman faster by disabling animated GIF
2009-04-04, by Dan
Set textarea in sidebar editor to fixed height of 360px due to webkit bug (thanks Neal)
2009-03-22, by Dan
Major revamp to sidebar editor. Some behavioral changes as well as being based on jQuery UI Sortables. Creation interface remains the same, but better strings merged in from stable.
2009-03-22, by Dan
Better "no thumbnail" theme placeholder image. But not much better.
2009-03-22, by Dan
Live ReAuth: only show "timed out" error if jumping to admin page
2009-03-22, by Dan
jQuery: UI: upgraded to 1.7.1
2009-03-22, by Dan
AJAX: theme selector: explicitly set wrapper div to 0 to prevent sidescrolling
2009-03-22, by Dan
JSON: Properly handles unicode escape sequences (\u####) now
2009-03-22, by Dan
Corrected a few display issues in Postgres DBAL. Thanks Neal.
2009-03-21, by Dan
Merging branches
2009-03-21, by Dan
Silenced check for page_format due to warning thrown when saving new page
2009-03-21, by Dan
Added support for "Tiny URLs" (http://example.com/enano/?/Foo)
2009-03-21, by Dan
Some fixes to paginator (pagination control code moved to separate function)
2009-03-21, by Dan
Whoops, forgot to commit enano-shared from theme selector commit
2009-03-20, by Dan
Added support for Firefox 3.1 beta 3's native JSON.
2009-03-20, by Dan
Resynced version numbers in JSON language files
2009-03-20, by Dan
A few fixes to Windows detection code
2009-03-20, by Dan
Swapped in a new theme selector.
2009-03-20, by Dan
Plugins: Added checks and additional warning for authentication plugins.
2009-03-18, by Dan
Special:About_Enano should be up to date for another 9 months.
2009-03-15, by Dan
Moved gzip and aggressive_optimize_html calls to output.php
2009-03-15, by Dan
Fixed a bug in default namespace handler: referenced global page_id instead of local
2009-03-15, by Dan
New template feature: template hooks ()
2009-03-15, by Dan
Dynano: don't try to destroy MCE if window.tinymce is invalid
2009-03-14, by Dan
SQL parse: fix improper mid-query newline handling
2009-03-14, by Dan
Installer: pgsql main schema: fixed missing page_format in logs
2009-03-14, by Dan
Installer: payload: Minor performance tweak
2009-03-14, by Dan
DBAL: Fixed missing $loc in pgsql die_json()
2009-03-14, by Dan
Removed some stray PunBB CSS files (thanks Neal)
2009-03-14, by Dan
install-cli: Fixed wrong language string id for $driver
2009-03-14, by Dan
Added support for alternate port numbers on database servers. Also in install-cli, merged in new sysreqs functionality.
2009-03-14, by Dan
template: added ability for themes to hide user, tools, and search sidebar blocks
2009-03-06, by Dan
Change to search behavior for heading+link in sidebar collapse code
2009-03-06, by Dan
MessageBox: fixed: load fadefilter when aclDisableTransitionFX on
2009-03-06, by Dan
Added ability for jBox to align submenu position to right of parent button instead of left
2009-03-06, by Dan
Installer: minor: added a box on sysreqs success
2009-03-02, by Dan
Redesigned installer sysreqs page to cover more features, be more comprehensive, and look better
2009-03-02, by Dan
Installer: fixed load of lang_js on finish
2009-03-02, by Dan
jQuery: updated to latest jQuery + jQuery UI
2009-03-01, by Dan
Template: addslashes() around wiki_edit_notice_text (whoops)
2009-03-01, by Dan
http: minor fix to tolerate missing SERVER_SOFTWARE
2009-02-28, by Dan
Plugin backend: bugfix: installing a plugin should now properly import its strings
2009-02-26, by Dan
Set password in userinfo to allow auth plugins to see it (some really do need it)
2009-02-26, by Dan
Plugin manager: system plugins now sorted to last
2009-02-26, by Dan
Added possibility for auth plugins, which can log a user in using non-standard authentication methods.
2009-02-26, by Dan
setConfig() will now delete config values if the second parameter is explicitly set to false
2009-02-26, by Dan
HMAC functions are now standards-compliant (not a security issue). This BREAKS 1.1.6-hg passwords!
2009-02-26, by Dan
Added a basic plugin/hook framework for Javascript
2009-02-26, by Dan
[minor] changed heading format in mainpage-default
2009-02-26, by Dan
Fixed default ACLs
2009-02-26, by Dan
Added color specifications on input fields for admin and oxygen
2009-02-26, by Dan
Blah. Wrong type for those getConfig values.
2009-02-25, by Dan
Fixed: no default values in for avatar upload settings
2009-02-25, by Dan
[Oops] removed debug message in install-cli
2009-02-16, by Dan
Damn, forgot to add the version insertion back into schema
2009-02-16, by Dan
Major redesign of rendering pipeline that separates pages saved with MCE from pages saved with the plaintext editor (full description in long commit message)
2009-02-16, by Dan
Made all page_id and namespace columns consistent
2009-02-16, by Dan
Added Unicode support for usernames and passwords (this is probably best considered a JS crypto bug)
2009-02-16, by Dan
Fixed https urls not allowed in user_extra CPs; fixed nonworking password reset in admin CP
2009-02-16, by Dan
Added a few hooks to Admin:GeneralConfig (didn't I do this already?)
2009-01-26, by Dan
Merging Nighthawk (anti-spam work) and Scribus (AJAX work + debugging + CLI installer) branches
2009-01-25, by Dan
Replaced integer checks that used preg_match() to use ctype_digit() instead
2009-01-25, by Dan
Added (very basic) spam filtering plugin support. Plugins can mark a message as spam by hooking into the spam check API, which is documented in functions.php. No spam checking functionality is built-in.
2009-01-25, by Dan
Login: reauth: window.location.hash is now updated to include the new SID so that page reloads will use it
2009-01-25, by Dan
AJAX core library: possible breaking change, readystatechange functions are now called with the XHR instance as the first parameter, to allow requests to run in parallel. This means much better stability but may break some applets (compatibility hack is included)
2009-01-25, by Dan
Oxygen: synced mint style
2009-01-25, by Dan
PageProcessor: fix not setting page_exists to true after create_page() success (todo: move to Namespace_*?); add $visible parameter to create_page()
2009-01-25, by Dan
Change config.new.php and .htaccess.new to have a single newline according to Fedora project guidelines
2009-01-25, by Dan
Installer: add RewriteBase to .htaccess to work properly under aliased Apache setups (generated 404s in QA)
2009-01-23, by Dan
A few bugfixes in CLI installer related to interactivity
2009-01-23, by Dan
SECURITY: Fix XSS under IE in closing tags (shared sanitizer)
2009-01-17, by Dan
Fixed login form being focused too early (caused page to scroll up)
2009-01-16, by Dan
Deprecated old grab_password_hash() functions in session
2009-01-16, by Dan
Whoops! Fixed an SQL injection vulnerability in the CLI installer. (Not like it's a huge deal because the vulnerability was only introduced last commit and if you make it to that stage you already know the database password)
2009-01-16, by Dan
Added already-installed check to cli-core
2009-01-14, by Dan
Added CLI installer. Supports interactive, command-line, and internal-call installation. Fixed a few bugs related to anti-SQL injection parser and plugin installation.
2009-01-14, by Dan
Added support for live re-auth and de-auth; fully AJAX, no page reload required, plus plugin-usable API.
2009-01-11, by Dan
JS core: whiteOutReportSuccess now has a sister whiteOutReportFailure(); both abstracted to function whiteOutDestroyWithImage(whitey, image_url)
2009-01-11, by Dan
DBAL: Fixed issues with die_json() and multiline responses from {mysql,pg_last}_error()
2009-01-11, by Dan
Plugin manager: added support for having specific install and uninstall blocks per DBMS
2009-01-11, by Dan
Special:Administration: fixed 404 on several Tigra tree menu images
2009-01-11, by Dan
jBox: When an anchor in a menu is clicked, menu is now hidden
2009-01-11, by Dan
Fix undefined variable in special namespace missing function handler
2009-01-11, by Dan
If there's an onlineupgrade.php, installer index.php will link to that instead of upgrade.php (future readiness ;))
2009-01-11, by Dan
Fix version number warning in installer common
2009-01-11, by Dan
Upgrades should work now.
2009-01-04, by Dan
Two big commits in one day I know, but redid password storage to use HMAC-SHA1. Consolidated much AES processing to three core methods in session that should handle everything automagically. Installation works; upgrades should. Rebranded as 1.1.6.
2009-01-04, by Dan
Major underlying changes to namespace handling. Each namespace is handled by its own class which extends Namespace_Default. Much greater customization/pluggability potential, at the possible expense of some code reusing (though code reusing has been avoided thus far). Also a bit better handling of page passwords [SECURITY].
2009-01-03, by Dan
Added a couple of hooks for the registration form.
2009-01-03, by Dan
Redid error handler (it was causing some problems with gzip enabled)
2008-12-31, by Dan
Small speed optimization to admin panel loader
2008-12-24, by Dan
Revamped main page default content
2008-12-24, by Dan
Several thematic enhancements to Oxygen including making the main page title an h1
2008-12-24, by Dan
Added support for re-auth on submit to rank manager when session goes bad; still more to come
2008-12-22, by Dan
Added dynamic reload-less re-auth to admin panel, so that if a session is lost it can be recovered without a reload. Support for hooking into form submits will be added in the future.
2008-12-22, by Dan
Updated URLs and strings to point to the new server (ktulu)
2008-12-22, by Dan
Fixed a few bugs with plugin management and importing of old plugin metadata
2008-12-22, by Dan
Added support for upgrades from Ferrishyn
2008-12-22, by Dan
Added paginator_goto() to function reverse map; fixed some missing component loads in pagination code
2008-12-22, by Dan
When will that stupid user -> user_id bug stop REARING ITS UGLY HEAD. DIE! DIE! DIE! DIE! DIE!
2008-12-22, by Dan
Fixed: autocomplete got broken somehow
2008-12-21, by Dan
Unstable alpha release: 1.1.5 (Caoineag alpha 5)
2008-12-21, by Dan
Added ajaxReverseDNS to function-to-script map. 1.1.5
2008-12-21, by Dan
Added spell-checking support for TinyMCE on user request (see: http://forum.enanocms.org/topic/11/)
2008-12-21, by Dan