| Tue, 12 Jul 2011 22:37:21 -0400 |
Dan Fuhry |
Release prep 1.0.6pl4
1.0.6pl4
|
file |
diff |
annotate
|
| Tue, 12 Jul 2011 22:13:37 -0400 |
Dan Fuhry |
SECURITY: Fixed several XSS vulns reported by Secunia, mostly in Private Messaging. Also backported CSRF protection API from 1.1.x, and protected Private Messaging and logout functions.
|
file |
diff |
annotate
|
| Mon, 28 Dec 2009 16:52:41 -0500 |
Dan |
Fixed a couple non-security sanitizer and editor bugs
|
file |
diff |
annotate
|
| Sat, 22 Aug 2009 13:31:09 -0400 |
Dan |
Fixed lockup on unclosed HTML tags in wikiformat_process_block()
1.0.6pl1
|
file |
diff |
annotate
|
| Sat, 22 Aug 2009 13:30:39 -0400 |
Dan |
Version bumped to v1.0.6pl1
|
file |
diff |
annotate
|
| Sat, 17 Jan 2009 11:51:17 -0500 |
Dan |
Rebrand as v1.0.6 (Roane)
|
file |
diff |
annotate
|
| Sat, 17 Jan 2009 11:32:18 -0500 |
Dan |
SECURITY: Fix XSS under IE in closing tags (shared sanitizer)
|
file |
diff |
annotate
|
| Fri, 07 Nov 2008 08:56:53 -0500 |
Dan |
Fixed sanitization of full page IDs with accidental parse of escaped hex character in dirtify_page_id(). Thanks Asterion; see http://forum.enanocms.org/post/20/
|
file |
diff |
annotate
|
| Tue, 16 Sep 2008 08:20:14 -0400 |
Dan |
Fixed IPv6 address match (the one from phpBB3 did not work)
|
file |
diff |
annotate
|
| Fri, 09 May 2008 23:32:51 -0400 |
Dan |
Rebrand as 1.0.5 (Ferrishyn)
|
file |
diff |
annotate
|
| Thu, 28 Feb 2008 12:33:01 -0500 |
Dan |
Rebrand as 1.0.4 (Ellyyllon)
|
file |
diff |
annotate
|
| Sun, 27 Jan 2008 23:43:24 -0500 |
Dan |
Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)
|
file |
diff |
annotate
|
| Wed, 19 Dec 2007 17:15:48 -0500 |
Dan |
Fixed: $paths->page_id not set when the page doesn't exist; finally fixed garbled page names for IP addresses
|
file |
diff |
annotate
|
| Tue, 18 Dec 2007 23:44:55 -0500 |
Dan |
Many changes. Installer with PostgreSQL is broken badly and will be for some time.
|
file |
diff |
annotate
|
| Sat, 15 Dec 2007 18:10:14 -0500 |
Dan |
SURPRISE! Preliminary PostgreSQL support added. The required schema file is not present in this commit and will be included at a later date. No installer support is implemented. Also in this commit: several fixes including <!-- SYSMSG ... --> was broken in template compiler; set fixed width on included images to prevent the thumbnail box from getting huge; added a much more friendly interface to AJAX responses that are invalid JSON
|
file |
diff |
annotate
|
| Wed, 12 Dec 2007 21:37:23 -0500 |
Dan |
Rebrand as 1.0.3 (Dyrad)
|
file |
diff |
annotate
|
| Tue, 11 Dec 2007 19:15:26 -0500 |
Dan |
Fixed focus of AJAX login form fields in IE; removed stale/unused call to $template->makeParserText() in paginate_array(); added hook page_create_request to possibly help control creation of pages of certain namespaces from plugins; fixed critical bug in user CP that prevented plugins from adding custom CP modules
|
file |
diff |
annotate
|
| Mon, 03 Dec 2007 17:36:25 -0500 |
Dan |
Deprecated debugConsole and removed all calls to it. Added a lot of comments to common.php. Added support for "anonymous pages" that are created when the Enano API is loaded from an external script. Fixed missing border-bottom on Type 2 sidebar blocks in Oxygen.
|
file |
diff |
annotate
|
| Wed, 28 Nov 2007 14:47:42 -0500 |
Dan |
Oops, never merged in updates from ee1fc84f12a8 (240)
|
file |
diff |
annotate
|
| Wed, 28 Nov 2007 14:46:03 -0500 |
Dan |
Hopefully now all calls to escape() are replaced with ajaxEscape() in response to Tomasz's forum post; remove deprecated version of show_category_info() from functions.php
|
file |
diff |
annotate
|
| Sun, 25 Nov 2007 19:23:50 -0500 |
Dan |
Nothing special. ksort()ing list of allowed filetypes in the admin panel to make editing the list marginally easier
|
file |
diff |
annotate
|
| Wed, 21 Nov 2007 20:14:14 -0500 |
Dan |
Re-sync Oxygen and Mint and Oxygen simple with Oxygen main; a couple improvements to the redirect-on-no-config code
|
file |
diff |
annotate
|
| Wed, 21 Nov 2007 15:10:57 -0500 |
Dan |
Searching sucks, and Enano's search algorithm was complete bullcrap. So I rewrote it. No, it does not use Google search technology. Like they have a patent for using the Arial font on search result pages anyway.
|
file |
diff |
annotate
|
| Sun, 18 Nov 2007 18:44:55 -0500 |
Dan |
Major fixes to the ban system - large IP match lists don't slow down the server miserably anymore.
|
file |
diff |
annotate
|
| Thu, 15 Nov 2007 18:00:39 -0500 |
Dan |
Merging in all changes from revision 185 (90b7a52bea45)
|
file |
diff |
annotate
|
| Sat, 03 Nov 2007 18:26:24 -0400 |
Dan |
Fix PHP4 compatibility (function def. of password_score)
|
file |
diff |
annotate
|
| Sat, 03 Nov 2007 14:15:14 -0400 |
Dan |
Alternate scaling using GD is implemented now; images will be scaled with ImageMagick if enabled and working; else, GD will be used. No UI changes to speak of, but a check in the installer will be added in a later commit
|
file |
diff |
annotate
|
| Sat, 20 Oct 2007 21:51:26 -0400 |
Dan |
Merging in changes from db8a849ad4c9
|
file |
diff |
annotate
|
| Fri, 19 Oct 2007 21:39:33 -0400 |
Dan |
Added a cron framework. Currently tasks will not be run; will implement into templates in next commit
|
file |
diff |
annotate
|
| Fri, 12 Oct 2007 14:41:51 -0400 |
Dan |
Replaced autocompleting username with a much more efficient algorithm and caching system
|
file |
diff |
annotate
|