Enano CMS (1.1.x): Changelog

Fixed gzip output - no longer depends on ob_gzhandler(), uses gzencode() now with a failsafe available if gzencode() is not available. Public function gzip_output() remains unchanged.

Fixed a few places where page metadata cache should have been purged (there may be a few more commits like this)

Merging nighthawk and scribus branches (now that nighthawk isn't panicked anymore)

First stab at cache management backend. Everything seems to have been tested and working so far, but a number of things require a more specialized cache and can't go through the framework (e.g. user ranks which use references to map usernames to user IDs)

Moved enano_safe_array_merge() to functions.php as comment.php depends on it

First draft of new CacheManager admin page. Backend is yet to be implemented.

Fixed missing require() on math.php in SpecialUserFuncs

Moved all account deactivation notice presentation code to its own method in sessions

Fixed missing randkey() method in rijndael.php

Fixed $use_cache bug in plugins.php

Fixed missing require() on stats.php in pageprocess; made pageprocess update the metadata cache on page rename

Added purge_all_caches() routine to functions.php. Temporary, will be discarded once the new cache code is implemented

Added the theme_is_<themeid> template boolean value to allow conditional template code depending on theme ID (in shared templates, sidebar blocks, etc.)

Added ability to hide or show sidebar blocks based on a {restrict} or {hideif} conditional in the sidebar script

Added failsafe .htaccess files to enable far future Expires and mod_deflate

As promised, dropped in the new librijndael. Benchmarks say about 3 times faster, but more performance testing will be done.

A little more optimization work, client-side this time. I lied, no librijnadel2 here, but it's about to be merged in...

More optimization work. Moved special page init functions to common instead of common_post hook. Allowed paths to cache page metadata on filesystem. Phased out the redundancy in $paths->pages that paired a number with every urlname as foreach loops are allowed now (and have been for some time). Fixed missing includes for several functions. Rewrote str_replace_once to be a lot more efficient.

Another sweep from the optimization monster. template: rewrote parts of tplWikiFormat to do faster validation and less eval()ing template: sidebar is now cached for anonymous users (thanks to Richard Greene for the suggestion) dbal: rewrote SQL query parser, much cruft taken out template: made tplWikiFormat depend more on RenderMan common: moved some lesser-used includes out of main loading sequence Expect a lot of changes to AES code in the next commit!

Made $session->private_key protected and added pk_{en,de}crypt methods for encrypting and decrypting data using the private key

Several optimization changes including getting rid of a few eval()s. Added placeholder functions for the theme manager, which should be working now

[minor] Added password_score_* into placeholder functions

Upgraded TinyMCE to 3.1.0.1. Ported a couple special pages to the componentized JS system.

Oops, scriptPath isn't defined in jsres.php.

Made encryption work in form-based logon again; modified load_component() to fetch compressed versions when possible

Fixed javascript ACL manager and captcha not showing on ajax login lockout_captcha event

Fixed missing table_prefix in generate_rank_sql()

Installer should work with JS componentization now

Majorly reworked Javascript runtime stuff to use on-demand loading. - Runtime reduced to only AJAX library + very common functions, ~50K total - Almost all specific functionality loaded on demand using synchronous XHR - Crypto functions consolidated into crypto.js - Much testing still to be done - ACL editor known not working under firefox - Some other components (autofill, theme/rank managers) not ported yet

Initial progress towards converting auto-completion framework to Spry. Not currently in a very working state.

Fixed SQL syntax error thrown during rank data fetch

Fixed access type warning in discussion button generation in template

Fixed: init_vars double-init check ignored theme changes/reloads

Made template parser remember last initted page_id and namespace to avoid double init; made additional_headers reassign only do so if $template->additional_headers is empty (it's being blanked somehow, need to come up with a backtrace sometime)

Fixed undefined index left over from scope system rewrite a few days ago

Fixed two bugs in paginator: noisy warning when rows run out and empty strings not being treated as valid from formatting functions

Fixed title not being set properly in redirect()

Renamed some functions (that were new in this release anyway) due to compatibility broken with PunBB bridge

Moved some TinyMCE init code to make JS early init work

Got ACL scope logic working again and began enforcing it. Breaking API change: assigning page title with $template->tpl_strings['PAGE_NAME'] will no longer work, use $template->assign_vars(). Workaround may be added later. Test for assign_vars method if compatibility needed. Added namespace processor API (non-breaking change). Several other things tweaked around as well.

Fixed some plugin compatibility issues seen in Nuggie

Updated image tag parser a bit. Handles recursion of brackets properly now, allows custom parameters from plugins, and takes parameters in any order due to new keyword-based parser

A bit of UX improvement to upgrade UI; updated readme for 1.1.4

Actually made the "prevent search indexing" switch work. Needs to be merged with stable.

Made ajaxReset() call the actual requested title instead of effective title; fixed (again) template compiler bug not matching certain tags (probably PCRE bug)

[YSlow experimental] Moved jsres.php include to bottom of the body in oxygen

Updated version number metadata in system plugin files; added some comments and removed unused code from index.php and includes/graphs.php

First test of rank manager interface, not currently capable of doing anything interesting (fills form with placeholder data); strings are in an earlier commit

Got initial CSRF token framework implemented and sample implementation added in Special:Logout; removing Javascript compression engine from aggressive_optimize_html() and instead calling JavascriptCompressor class from js-compressor.php

Removed remaining references to enano.homelinux.org

Added re-import function to plugin manager

[YSlow] Added Expires header on jsres.php

Fixed some GD detection bugs with freecap

Modified $template->init_vars() to pivot to local page metadata and permissions from a PageProcessor object instead of global data from $paths and permissions from $session to allow redirects to affect on-page controls as well as the actual content (only partially complete, protection and several other elements still need to be localized)

More work done on effective permissions API, namely reporting of page group and usergroup names

Added user preference for disabling visual effects in Javascript applets; added re-import button to installed plugins

Revamped some ACL code and added effective permissions calculation code into session manager

Merged in the word_lcase column (finally)

Moved some more images into sprites for Oxygen

Minified some JS files using YUI compressor

Added ability to delete the draft revision; [SECURITY] fixed lack of permission check on draft save; renamed messagebox() constructor to MessageBox() (backward compat. maintained)

Added source and compiled images for Mint's sprites

Re-synced Mint style from the Oxygen theme

Added ETag on TinyMCE gzip; changed ETag format for standard pages so as to include user and login info to control caching when logged in or out

Switched Oxygen to use CSS sprites for faster loading (CSS changes were in a past commit, only adding image files here)

Add standard header comment block and date of changes to tiny_mce_gzip to conform to GPL/LGPL

Added TinyMCE compression support and made some supporting modifications to common.php

Upgraded TinyMCE to version 3.0.8

Added ETag support and increased caching settings to try and speed the system up. Result of a YSlow audit.

Massive commit with various changes. Added user ranks system (no admin interface yet) and ability for users to have custom user titles. Made cron framework accept fractions of hours through floating-point intervals. Modifed ACL editor to use miniPrompt framework for close confirmation box. Made avatar system use a special page as opposed to fetching the files directly for caching reasons.

Added but didn't set up custom_user_title ACL; fixed rebuild_page_index() to use word_lcase

Replaced some confirmation boxes with miniPromptMessage versions. This commit will require a re-langimport and shift-reload.

Merging changes from nighthawk

Added a really simple message box system based on miniPrompts, this will be used for confirmation windows like delete_page, clear_logs, delvote, etc.

Rebrand as 1.1.4 (Caoineag alpha 4)

Fixed selector stage in ACL editor under Safari

Added template_compile_subst hook

Huge improvements to the template_nodb class and surrounding code; moved template compiler core to its own non-classed function to allow code re-use

Finally fixed link coloring settings in Oxygen Bleu; added compatibility wrapper for people that "ajaxLogonInit" over "ajaxLoginInit"

[HIG] Added a little heading and intro message to the top of the plugin manager

Fixed Javascript error in admin-menu with quotes in list items

Implemented security logging for plugin management

Fixed some bad language string references in plugin management API

(Hopefully) finished new plugin manager and implemented the utilization of it. Still HIGHLY experimental.

New plugin manager half-implemented. Most of the UI/frontend code is done. Moved sql_parse.php to /includes/ to allow use after installation - TODO: check installer, etc. for breakage

Merging nighthawk and scribus branches

Pretty much pseudo-commit to make Hg let me merge some stuff in, only change was the "system plugin" key in $plugin_meta in PluginManager

Fixed a jBox issue on the AppleMobile platform

Dramatically improved the page-rename UX and added a miniPrompt API that allows small pop-down prompts as opposed to prompt() or confirm().

Implemented the password-reset redirect _properly_ instead of the hackish direct header() call in sessions.php

Optmized a number of Javascript routines for better speed on pathetic Javascript interpreters.

Started work on the new plugin manager and associated management code. Very incomplete at this point and not usable.

SECURITY: Disabled caching of decrypted DiffieHellman login requests

Fixed bad captcha refresh code on registration page

Added debugging ability to Language::import() for CLI usage

Fixed bad URL interpretation on CGI and Apache wrongly supplying PATH_INFO when directory index requested

Added debugging switch to $lang->import() for help with optimization

AJAX interface for listing ACL rules implemented

ACL: Added API call to edit rule based only on numeric rule ID; to be used later with lister for existing rules and effective permissions viewer

Made some improvements to ACL system including: warning on setting Deny for Everyone on the entire site, added ACL_ALWAYS_ALLOW_ADMIN_EDIT_ACL, and changed behavior as noted in the docs so that Deny for Everyone is no longer able to be overridden

Fixed some bugs in the installer that prevented it from working without mod_rewrite and/or with a table_prefix present

Added a copy of Firebug Lite for debugging purposes. License is uncertain but being treated as MPL. (If is is not MPL then it is under something more permissive that permits relicensing anyway)

Fixed auto-detection of URL scheme, didn't work unless rewriting worked

Fixed some stray version numbers (again!); added support for Diffie-Hellman logins in the normal login form (not AJAX) - even works in IE

Updated tree menu images to fit with the icons

Added icons for the administration panel

Added support for embedding language data into plugins; updated all version numbers on plugin files

[minor] silence errors when closing DB connections

Adding the images for the expander support. (oops)

Added support for an enano:expand=(closed|open) attribute on fieldsets to make them act like GTK expandable widgets; implementation is on Special:CreatePage

Added basic CLI support for the Enano API. Loads automatically, just include common.php as normal. REVISION 500!!! :-D

Fixed some bugs with PostgreSQL and added a word_lcase column to the search_index table because collation is not working under MySQL. TODO: Trigger search index rebuild on upgrade to 1.1.4.