Enano CMS (1.1.x): Graph

Clean up that GLOBALS silliness.
2010-07-06, by Dan Fuhry
Default theme can no longer be changed in demo mode
2010-07-06, by Dan Fuhry
DiffieHellman: gracefully handle platforms that fail the sha256 self test, currently only known to be PowerPC. Added support for PHP's built-in hash functions (they were added in 5.1.2) and use them in lieu of the built-in sha256 implementation when available.
2010-07-05, by Dan Fuhry
Fixed the (rather expected) 1.0.x migration issues db revision system
2010-07-01, by Dan Fuhry
First shot at switching to database revision numbers separate from release version number. There are probably bugs, especially related to migration.
2010-07-01, by Dan Fuhry
Tagged release: 1.1.7pl1
2010-07-01, by Dan Fuhry
Integrated XSS patch for 1.1.7 maintenance branch 1.1.7-maintenance 1.1.7pl1
2010-07-01, by Dan Fuhry
Enanium: Added directionality to simple-header
2010-06-28, by Dan Fuhry
Oops, maybe I could set English back to LTR :)
2010-06-28, by Dan Fuhry
Added basic support for right-to-left languages. Set meta_direction to "rtl" in core.json.
2010-06-28, by Dan Fuhry
SECURITY: Multiple XSS in Special:ChangeStyle. Reported by Mesut Timur of Mavituna Security - thanks! Also removed my stand-in for ucfirst().
2010-06-28, by Dan Fuhry
Rewrote category editor. This breaks the JSON API. Also fixed a few bugs with how Wiki Mode is set in $paths. (Hopefully that doesn't cause infinite loops, heh). Fixes issue 20.
2010-06-02, by Dan
Added the ability to trust XFF (X-Forwarded-For) headers.
2010-05-16, by Dan
Test commit to verify that ktulu auto sync works properly
2010-05-15, by Dan
Added a box on Admin:UploadConfig showing the value of upload_max_filesize.
2010-05-02, by Dan
Merged (accidental split)
2010-04-30, by Dan
Fixed typo in that, the parameter that was supposed to go to getConfig was going to htmlspecialchars()
2010-04-30, by Dan
Added an ajax auto check for the path to ImageMagick in Admin:UploadConfig
2010-04-30, by Dan
Reordered wiki render stages so images happen before external links. Fixes a parser bug seen, among other places, on the Donation page.
2010-04-20, by Dan
Fixed some cosmetic bugs in Special:AllPages
2010-04-20, by Dan
Fixed registration admin override with account_activation set to disable.
2010-04-19, by Dan
Made separate methods in sessionManager for static and non-static generate_aes_form(), because PHP (erroneously) always calls that method statically.
2010-04-17, by Dan
Merged
2010-04-06, by Dan
Added Diffie-Hellman crypto support into the installer. Fixes issue 13.
2010-04-06, by Dan
Clarified some edit conflict related strings
2010-04-06, by Dan
Fixed lockout list in ACP under PostgreSQL
2010-04-02, by Dan
Merge in changes about legal marks
2010-04-02, by Neal Gompa
Fixed various legal marks in the strings of the English language pack
2010-04-02, by Neal Gompa
Fixed Gravatars not showing up immediately after save in Avatar UCP
2010-04-02, by Dan
Fixed fread() usage in Request_HTTP not properly handling incomplete responses
2010-04-02, by Dan
Fixed typo in install.json in pgsql "no php extension" error string
2010-04-01, by Neal Gompa
Fixed password_score_field onload in Admin:UserManager
2010-03-30, by Dan
Added selection and popup for <pre> tags within wikitext. Also fixed more bugs found in the HTML paragraph parser (mostly self-closing tags e.g. <hr />).
2010-03-30, by Dan
Renderer: fixed the regex that looks for h-tags in reverse_process_headings so it looks forthe new format #head: IDs.
2010-03-30, by Dan
Fixed "waiting for l10n init" and js error in Admin:UserManager
2010-02-26, by Dan
Search: strip HTML tags from result text (DB pages only). Fixes issue 17.
2010-03-29, by Dan
Going ahead with the switch to tabs. This is a major coding standards change! If any unusual parser bugs show up, check this changeset. Converted all .php, .js, .tpl, .css, and .json files and did basic testing.
2010-03-28, by Dan
Introduced configurability for gzip compression. Fixes issue 18.
2010-03-28, by Dan
Replaced (most of) the mini box icons with famfamfam silk icons, they're better looking.
2010-03-28, by Dan
Added https support in Request_HTTP
2010-03-28, by Dan
Fixed "unapproved" status taking precedence over "spam" flag in comment submit and some display related bugs in comments.js
2010-03-20, by Dan
Fixed username not being decoded in Special:ActivateAccount
2010-03-17, by Dan
Merged braches from accidental split
2010-02-08, by Dan
Fixed unescaped ampersands in "&enano_version" cache breaking
2010-02-08, by Dan
URL sanitizer: disabled uppercase letters in URL hex character codes (it was causing conflicts with the Windows/Apache 2.2 alt namespace separator). Thanks Techokami for finding and reporting this bug.
2010-02-07, by Dan
Added var enano_version to installer JS header
2010-02-03, by Dan
Modified paragraph rule to not use recursive parsing; made parsing of code and pre tags much more reliable. Fixes issue 1 (QA: RE-TEST).
2010-02-01, by Dan
Fixed more places where author_uid wasn't right.
2010-02-01, by Dan
Added "days ago" to the Site Started field on admin home
2010-02-01, by Dan
Fixed an example url in install.json pophelp (which may be removed momentarily)
2010-01-19, by Dan
Renamed 1.0.6 -> 1.0.6pl1 upgrade script, migrations from 1.0.6pl1 were broken
2010-01-12, by Dan
Fix: add author_uid in GROUP BY in LogDisplay for PostgreSQL compatibility
2010-01-10, by phirox
Fixed author_uid in activation request insertion
2010-01-10, by Dan
Logins: if the error message string doesn't look like a langstring id, don't prepend "user_err_" to it (some auth plugins are not localized at all, this lets them be without ugly cosmetic bugs)
2010-01-06, by Dan
Somehow I broke automatic localization of special page titles.
2010-01-06, by Dan
End year on Enano copyright dates is dynamic now
2010-01-06, by Dan
DBAL: readded sql_affectedrows(), some plugins were using it
2010-01-06, by Dan
Fixed some bugs with account activation, especially if you're a half-logged-in vegetable.
2010-01-06, by Dan
Sessions: fixed on_critical_page(), it referenced the wrong global; enabled better extensible behavior in the account_active column
2010-01-06, by Dan
Merging scribus and charlie repos
2010-01-05, by Dan
Fixed ENANO_VERSION under databaseless template class
2010-01-05, by Dan
common_cli: Fixed warning with $paths->init() (kind of a hack)
2010-01-05, by Dan
Search: some refinements to algorithm, introduced score promotion for phrase matches and Levenshtein distance based score manipulation
2010-01-05, by Dan
Fixed a bug in getHighestZ() that broke login boxes
2010-01-05, by Dan
Fixed Special:AllPages under PostgreSQL. Thanks phirox from IRC.
2010-01-04, by Dan
Fixed oversanitation of multiple XHTML closing tags in a row
2009-12-28, by Dan
Tagged 1.1.7 as current-unstable
2009-12-28, by Dan
All javascript and css requests now append the version number to the URL to break browser caches and prevent from having to clear the cache upon upgrade
2009-12-27, by Dan
Version bump to 1.1.8
2009-12-27, by Dan
Fixed phrase search, it got really broken somehow
2009-12-27, by Dan
TinyMCE: Bumped to v3.2.7
2009-12-22, by Dan
Fixed two "declaration should be compatible" errors encountered by the BitNami folks. Thanks Neal for reporting.
2009-12-21, by Dan
Beta release: Enano CMS 1.1.7 (Caoineag beta 2) (retag #2)
2009-12-19, by Dan
Detagged 1.1.7 1.1.7
2009-12-19, by Dan
Upgrade: added 1.0.6pl1 migration support, tarball repository will need to be updated
2009-12-19, by Dan
Beta release: Enano CMS 1.1.7 (Caoineag beta 2)
2009-12-18, by Dan
Last minute fix to wikitext code tag
2009-12-18, by Dan
Backout from 1.1.7 due to upgrade issue, fixed and retagging
2009-12-18, by Dan
Beta release: Enano CMS 1.1.7 (Caoineag beta 2)
2009-12-18, by Dan
Backed out of ENANO_INSTALLED check in DBAL, it broke CLI installs badly
2009-12-18, by Dan
OK screw that, put the crypto backend check in functions.
2009-12-18, by Dan
Fixed libenanoinstall/CLI double declaration of run_installer_stage()
2009-12-18, by Dan
Forgot table_prefix in the logs table migrator
2009-12-18, by Dan
Fixed no author_uid in PageProcessor::rename_page()
2009-12-18, by Dan
Added an upgrade hook to populate the author_uid column in logs, pending test by Neal
2009-12-18, by Dan
Added ajaxLoginInit to JS load stub list
2009-12-18, by Dan
Added a graceful dead-end for the tutorial; removed the hash symbols from IRC links per a heads-up from Neal.
2009-12-18, by Dan
AJAX login: Fixed error box failure to destroy upon cancel. Fixes issue 8.
2009-12-18, by Dan
Logs: Fully integrated an author_uid column. Logs are now linked by user ID instead of just username, so they survive username changes better. Database is changed. Fixes issue 6.
2009-12-18, by Dan
Wikitext parer: re-added the <code> tag thing
2009-12-18, by Dan
Comments (AJAX): Now paginated server side. Fixes issue 2.
2009-12-18, by Dan
Mod extras: Changed string for RDNS generic failure error
2009-12-18, by Dan
Fixed php_in_pages out-of-scope error in Special:UploadFile; modified RenderMan::preprocess_text() to take a permissions object for any page
2009-12-17, by Dan
ACP: Added lockout management feature
2009-12-17, by Dan
Fixed undefined $score_min in password change. Potential security concern?
2009-12-17, by Dan
Namespace_Default: added a workaround for an inconsistency in SQL. Basically, if you join the same table multiple times under multiple aliases, COUNT() always uses the first instance. Was affecting the comment counter in the "discussion" button.
2009-12-17, by Dan
JSON preparser: fixed corruption of strings that include the exact pattern word, comma, space, word, colon
2009-12-17, by Dan
Merge from accidental split
2009-12-13, by Dan
DBAL: Majorly cleaned up and improved coding standards/documentation
2009-12-13, by Dan
Installer: cleaned up CSS header; updated comments in config.php to not say that passwords are stored with AES (as they are now stored with HMAC-SHA1)
2009-12-12, by Dan
Updated KNOWN_BUGS to point to our issue tracker
2009-12-12, by Dan
Crap, broke page editing. Fixed it.
2009-12-12, by Dan
Drafts saved on nonexistent pages now show up. Fixes issue 7.
2009-12-12, by Dan
Re-merge changes from a2hosting dev
2009-12-12, by Dan
Set up more sensible defaults (UTC, DST off) for timezone preferences. Also modified enano_date() to properly include GMT offsets when timezone characters are used. Fixes issue 4.
2009-12-12, by Dan
CAPTCHA: Added smart autosubmit for registration page. Usability testing was so-so, may back out later.
2009-12-12, by Dan
A couple fixes to permission out-of-scope errors.
2009-12-11, by Dan
Wikitext parser: re-added mailto support
2009-12-11, by Dan
Sessions: Made acl_check_deps() verify scope, so that all of an action's dependencies must apply to the namespace of the given action.
2009-12-07, by Dan
Removed history_rollback_extra action from scope of Special pages, as it's unneeded
2009-12-07, by Dan
PostgreSQL: bugfix in ACL related SQL query
2009-12-07, by Dan
PostgreSQL: Fixed another bug, this time in the log fetch code
2009-12-06, by Dan
Fixed ranks table under PostgreSQL. FIXME, only affects new installations and upgrades, if this bug is encountered in the wild we might want to look at auto-integrating a fix.
2009-12-06, by Dan
Updated default main page with links to the Google Code issue tracker
2009-12-06, by Dan
Improved language for static HTML page delete interface
2009-12-06, by Dan
PostgreSQL: Fixed $session->create_user()
2009-12-06, by Dan
PostgreSQL: Fixed user pages. Also added a columns_in() method to the DBAL to list columns in a table
2009-12-06, by Dan
PostgreSQL: fixed Admin:SecurityLog database error
2009-12-06, by Dan
Plugin block parser: Fixed plugin block parsing for plugin files in CRLF format
2009-12-01, by Dan
Installer sysreqs: Merged all the crypto extensions into one check; altered warnings. Strings are hopefully cleaned up.
2009-12-01, by Dan
common_cli and dbal: Fixed lack of ENANO_INSTALLED check in determining config path
2009-12-01, by Dan
Merge from accidental split
2009-11-30, by Dan
Admin User Manager: When a user with a DB-driven user page is renamed, also change urlname of their user page. Fixes issue 3.
2009-11-30, by Dan
Admin Home: fixed undefined %num_users% in string acphome_msg_inactive_users_plural
2009-11-30, by Dan
Language update for About Enano page ("help achieve" sentence added)
2009-11-27, by Dan
parse_mediawiki: Marked the paragraph bug as non-blocker, delayed until RC1. I have higher priorities than a minor win32 only parsing issue.
2009-11-27, by Dan
Fixed some open_basedir errors in SpecialPageFuncs
2009-11-16, by Dan
Login: Fixed typo that prevented non-DH crypto from working (thanks Keith Schmader)
2009-11-16, by Dan
Added a switch to disable following redirects in Request_HTTP
2009-11-11, by Dan
Hack: temporarily disabled PCRE recursion for Win32 in the paragraph block tag parser until a better parser can be written/adapted
2009-11-11, by dan
which(): added silencer to shut up errors on servers with open_basedir restriction
2009-11-09, by Dan
Logins: reorganized data structures a bit. WiP - needs test routine done.
2009-11-03, by Dan
Another fix to paragraph bypass behavior, for when the same substring appears more than once in the text
2009-10-25, by Dan
OK, I'm done with the preg_replace() in the paragraph parser. It's too buggy. Replaced with preg_match_all()/str_replace_once().
2009-10-13, by Dan
MiniPrompt: [minor] Added short delay before destruction in whiteOutDestroyWithImage().
2009-10-07, by Dan
Merged from accidental split
2009-10-04, by Dan
More parser work: fixed a few bugs with [[intlinks]] in headers, a bug that caused the paragraph parser to return an empty string, and added a warning/backup-and-restore for when a render stage returns an empty string.
2009-10-04, by Dan
Fixed (more) output buffering bugs in Special:EditSidebar
2009-10-01, by Dan
Javascript lib: UX: When whiteOutReportSuccess() is called on a whiteout over a miniPrompt, the miniPrompt and whiteout are now flown out together. Also, a bit of improvement to message box DOM object destruction code; this fixes problems with message boxes appearing below the shade when ajax auth is done 3 or more times in one page load.
2009-09-30, by Dan
Same issue, was doing an empty() check on $page_urlname in Admin:PageManager and not taking both main pages into account
2009-09-26, by Dan
More blank-urlname bugfixes, this time involving internal links
2009-09-26, by Dan
A bit of refinement and consistency to "Powered by Enano" link and associated documentation
2009-09-26, by Dan
Fixed handling of blank urlname as guest main page / other main page for members
2009-09-26, by Dan
Whoops, it's setHook(), not getHook() (Special:Administration JS core)
2009-09-25, by Dan
HTML login: fixed bad submit under IE
2009-09-25, by Dan
Admin panel: added collapsible tables under GeneralConfig, with room for support on other pages.
2009-09-20, by Dan
Login: if return-to specified and already logged in, jump to return-to instead of main page.
2009-09-20, by Dan
Installer: Fixed "RewriteBase /" bug and some improper Dynano use in formutils.js
2009-09-20, by Dan
Functions: fixed HTML sanitizer to properly preprocess <code> one-liners
2009-09-20, by Dan
Fixed (well, implemented) log clearing functionality on uploaded files.
2009-09-15, by Dan
Request_HTTP: Fixed get_response_body(), added HTTP redirect support, and added support for Content-Length.
2009-09-12, by Dan
Scribus <--> Charlie merge
2009-09-11, by Dan
json2: fixed order of exception classes, it threw fits about missing Zend_Exception in ubuntu's latest PHP 5.2.6
2009-08-30, by Dan
Damn it! gzip_output() was not checking for gzip support in the browser, fixed.
2009-09-11, by Dan
Common: renamed global $title to $urlname (it broke the API from non-plugin Enano scripts)
2009-09-11, by Dan
Removed the $userpage parameter from Namespace_Default::error_404(). It screwed up a couple plugins. (Thanks Mazza for discovering the issue)
2009-08-26, by Dan
Enanium: fixed background in tinymce
2009-08-26, by Dan
Wikitext: added horizontal rule support
2009-08-26, by Dan
Fixed RenderMan::render() flags in default namespace XHTML formatter
2009-08-26, by Dan
Tutorial: improved Creating & Editing page a little bit with respect to wiki formatting stuff
2009-08-26, by Dan
Merging in work done on Charlie with upstream
2009-08-25, by Dan
Fixed a couple bugs with read-only mode and protected pages in the AJAX editor
2009-08-25, by Dan
Sessions: Improved inactive account UX; shuffled around a bit of code so that whitelist checks are shared; fixed a bunch of bugs related to ban code and IPv6 addresses
2009-08-21, by Dan
Enanium: custom header now has an <a> floating above it that links to the main page.
2009-08-21, by Dan
A bit of shuffling around code related to determining the page title from the URL. It's done in common now, and $paths becomes more of an information repository rather than an information gatherer. Note: This BREAKS $paths->fullpage/$paths->getParam() in *_preloader!
2009-08-21, by Dan
Made internal links to the Admin namespace much smarter. (They do the login box and stuff.)
2009-08-21, by Dan
A bit of work on tutorial content, more still needed
2009-08-21, by Dan
Wiki formatter: heading IDs are now name based ("head:" . sanitize_page_id($text)) instead of tocN.
2009-08-21, by Dan
Avatars: fixed animated avatars rejected even when allowed in ACP
2009-08-21, by Dan
Sidebar editor: fixed ob_end_clean() warning
2009-08-21, by Dan
Wiki engine: optimization for empty-text case
2009-08-21, by Dan
Functions: silenced PHP warnings on ob_* functions
2009-08-21, by Dan
JS: MessageBox: Fixed z-index calc
2009-08-21, by Dan
Autofill: fixed missing parameter to $db->fetchrow()
2009-08-21, by Dan
User ACP: redirect to Special:Login on own account deletion
2009-08-21, by Dan
Common: removed cookie_destroy hack
2009-08-21, by Dan
Updated readme for 1.1.7/1.2 series in general
2009-08-21, by Dan
Avatar UCP and ACP: Ported Dynano -> jQuery; merged POST processing code. Added support for IPv6 URLs (avatar UCP and RequestHTTP).
2009-08-21, by Dan
SECURITY: Comments: fix poor sanitization of subject on initial submit
2009-08-21, by Dan
Sessions: whoops, left a debug message in by accident, broke a few redirects
2009-08-20, by Dan
SECURITY: UCP: Added CSRF protection on Profile (unneeded on EmailPassword due to USER_LEVEL_CHPREF requirement)
2009-08-20, by Dan
index: removed that annoying 2-space indent
2009-08-20, by Dan
Fixed some upgrade bugs; added support for choosing one's own date/time formats; rebrand as 1.1.7
2009-08-20, by Dan
Minor fix to SHA256: some indices were not being initted under some circumstances
2009-08-19, by Dan
Added ability for authentication plugins to modify session keys (to allow invalidation when their own authentication data is changed) as well as the ability to disable the built-in password change facility
2009-08-10, by Dan
Blockquote functionality in wikitext parser now allows rendering of other block level elements properly
2009-08-09, by Dan
Login: enabled DiffieHellman on IE8
2009-08-09, by Dan
Login: visual: fixed separator being displayed with only one of 2 checkboxes
2009-08-07, by Dan
Some changes to AJAX login interface, made it a bit more compact with less language, with some Enanium specific modifications to the same.
2009-08-04, by Dan
Made index.php bootstrap smarter and better commented.
2009-08-04, by Dan
More work on rendering engine. Fixed some bugs with paragraph skipping and added (incomplete) support for blockquotes.
2009-08-04, by Dan
Fixed some "declaration should be compatible" errors that showed up under WinXP QA
2009-08-04, by Dan
Sessions: fixed logout() destroying normal session (instead of elevated) if $level = USER_LEVEL_CHPREF. Possible very minor security concern: elevated sessions were not fully destroyed, so if a normal session is opened from the same IP, the elevated one may be reusable for 15 minutes.
2009-08-03, by Dan
Login: Enabled DiffieHellman for iPhone OS 3.0 (it passes unit tests now)
2009-08-03, by Dan
Merged development from Scribus and Charlie
2009-07-31, by Dan
Editor: completely moved wiki edit notice to AJAX fetch, so it's not shipped with the page anymore.
2009-07-17, by Dan
Admin: query string is now preserved on redirect to login
2009-07-17, by Dan
Fixed some formatter engine errors that were exposed through the wiki edit notice
2009-07-17, by Dan
AJAX Login: Fixed all known issues with lockout (and some unknown ones)
2009-07-17, by Dan
Moved User CP profile settings to front page of CP, and changed associated language
2009-07-29, by Dan
Fixed logins with usernames containing Unicode characters
2009-07-29, by Dan
Fixed title formatting in user pages
2009-07-29, by Dan
Tweaked URL sanitizing a bit to make Enanium work better.
2009-07-29, by Dan
Added method add_header_js() to template to allow insertion of code to be run immediately after JS init
2009-07-29, by Dan
Added ability to specify PNG or JPEG as the format of thumbnails/scaled images in Special:DownloadFile
2009-07-29, by Dan
ACL manager: started on IE support; button clicking not working. Other compatibility improvements and bugfixes.
2009-07-17, by Dan
Userpage: rewrite of many CSS rules for better scaling behavior
2009-07-17, by Dan
ACL editor: finally fixed that annoying blank-window bug on rule deletion
2009-07-13, by Dan
Here we go, preload_js() officially added to admin panel. Pray with me.
2009-07-11, by Dan
Renderer: added "smart paragraphs" for templates. <p><b>Foo</b> {bar}</p> where bar is multiline is basically turned into proper XHTML paragraphs.
2009-07-11, by Dan
One word: Internet Explorer 6. This includes a rewrite of $paths->parseAdminTree() that encodes to JSON instead of manually generating JS, so good-bye to stupid parser problems I hope.
2009-07-11, by Dan
AJAX login: fixed lockout string being displayed where it shouldn't be
2009-07-11, by Dan
Enanium: Added some IE6 fixes
2009-07-11, by Dan
Enanium: consolidated jBox and toolbar CSS. Firefox 3.5 did a double-request and it was slowing things down. Thanks YSlow.
2009-07-08, by Dan
Admin theme: fixed onload behavior of collapsible menu
2009-07-08, by Dan
OK, JS preloading on a CDN works perfectly now. I'm sure of it.
2009-07-08, by Dan
Fixed inconsistency in JS component load order between CDN sites and non-CDN sites
2009-07-08, by Dan
Fixed a series of infinite loops with preloading components and placeholders
2009-07-08, by Dan
Enanium: <pre> elements under div.content are now indented
2009-07-08, by Dan
Wiki engine: improved behavior in block level element finding/wrapping algorithm
2009-07-08, by Dan
Template: minor: documented sidebar_widget()
2009-07-08, by Dan
Namespace_Default::bake_cdata() now guesses values for anything missing
2009-07-08, by Dan
jQuery: UI: Upgraded to 1.7.2
2009-07-08, by Dan
Dynano: finally deprecated $() syntax due to jQuery
2009-07-08, by Dan