Enano CMS (1.0.x): Changelog

Corrected licensing issue on YoungPup's DOM-Drag (it is now public domain -> GPLv2+ for Enano); fixed wrongful access denial under specific circumstances (fetch_page_acl() on nonexistent page + wiki mode)

Fixed: $paths->page_id not set when the page doesn't exist; finally fixed garbled page names for IP addresses

Merging in a few stray changes from the MySQL branch

A number of updates to the graphing code (it should actually work now)

Many changes. Installer with PostgreSQL is broken badly and will be for some time.

Set Content-type on AJAX login key request to application/json to hopefully block ad injection

SURPRISE! Preliminary PostgreSQL support added. The required schema file is not present in this commit and will be included at a later date. No installer support is implemented. Also in this commit: several fixes including  was broken in template compiler; set fixed width on included images to prevent the thumbnail box from getting huge; added a much more friendly interface to AJAX responses that are invalid JSON

Stable release: Enano CMS 1.0.3 (Dyrad)

Tagging latest revision for rebrand

Rebrand as 1.0.3 (Dyrad)

SECURITY: CRITICAL: Fix SQL injection in admin CP page editor

Fixed focus of AJAX login form fields in IE; removed stale/unused call to $template->makeParserText() in paginate_array(); added hook page_create_request to possibly help control creation of pages of certain namespaces from plugins; fixed critical bug in user CP that prevented plugins from adding custom CP modules

Improved physical pages: they support comments and have their own dedicated namespace now. Still some consistency fixes to make.

Deprecated debugConsole and removed all calls to it. Added a lot of comments to common.php. Added support for "anonymous pages" that are created when the Enano API is loaded from an external script. Fixed missing border-bottom on Type 2 sidebar blocks in Oxygen.

Fixed: sanitation loop on ampersands in encodeAttribute() (this was MediaWiki's fault)

Stable release: Enano CMS 1.0.2 (Coblynau)

Dummy revision to artificially increment build number

Fix missing dependency on search.php in upgrade script

Detagging release due to stupid upgrade fix

Stable release: Enano CMS 1.0.2 (Coblynau)

How could I forget the TRADEMARK SIGN?

Updated artwork with finalized new/revised logo; finalized upgrade schema

Add installer pop-help topic for URL scheme, in response to http://forum.enanocms.org/viewtopic.php?f=5&t=19

Oops, never merged in updates from ee1fc84f12a8 (240)

Hopefully now all calls to escape() are replaced with ajaxEscape() in response to Tomasz's forum post; remove deprecated version of show_category_info() from functions.php

SECURITY: Tighten default allowed file types; make sure search index rebuild is performed on upgrade

Final development freeze for release: 1.0.2 (Coblynau); only critical bugs fixed until GA

Add warning in installer for PHP < 5.2.0; hopefully fix validation of e-mail addresses with dashes

Nothing special. ksort()ing list of allowed filetypes in the admin panel to make editing the list marginally easier

Added OpenDocument MIME types and extensions; make sql_report page show total time taken for SQL queries

Fixed highlighting in search results; changed search algorithm to give more score for terms found in page title; hopefully (hackishly) fixed login_key_cache getting too long

A couple of minor tweaks to the upgrade schema; tests pending

The template-cache incompatibility bug has finally been isolated, so a function to clear the template cache was added into the upgrade script for 1.0.2

Fixed a few major bugs with the upgrade script and the config file not getting loaded properly due to IN_ENANO_INSTALL

Hopefully once again fix scriptPath detection in dbal.php

Fix missing REPORT_URI variable in template_nodb

Fixed a number of issues with SQL query readability and some undefined index-ish errors; consequently the SQL report feature was added

Changed all urlname/page_id columns to varchar(255) because 63 characters just isn't long enough

Made the username validation regexp in install less picky since it was blacklisting two of the letters in my name. >.<

Feature freezing repository for Coblynau release

Entering feature freeze for Coblynau release

AJAX login box now briefly shows the message "success" when a login is successful

Deprecated and removed Oxygen css-simple/bleu.css

Re-sync Oxygen and Mint and Oxygen simple with Oxygen main; a couple improvements to the redirect-on-no-config code

Re-add search_results hook and changed column type of search_index.word to varchar(64) in installer schema

Merging in new search algo from Scribus

Minor fix for the password meter in Admin:UserManager

Searching sucks, and Enano's search algorithm was complete bullcrap. So I rewrote it. No, it does not use Google search technology. Like they have a patent for using the Arial font on search result pages anyway.

Major fixes to the ban system - large IP match lists don't slow down the server miserably anymore.

Fixed a couple of renaming issues in the installer

Hopefully managed to put enough hacks in there to make renaming the config file the last step, so if it fails, it can be done manually

Removed stray debug message in installer

Well I'm an idiot - the fulltext index on page_text was missing from a default installation. It didn't break searches but probably slowed them down tremendously. Also set engine to MyISAM on page_text to avoid cryptic error messages from MySQL.

Major improvements in the security of the CAPTCHA system (no SQL injection or anything like that); fixed denied form submission due to _af_acting on form object wrongly switched to true

Javascript validation for install DB info form didn't allow dashes

Changed default content for the main page to something a lot more user-friendly and helpful

Rewrote some security code in PageUtils::savepage to accommodate the ACL system better; there was an issue with non-admin users saving pages on which they have edit rights but wiki mode is turned off