AES: Fixed wrongfully hardcoded $return_format/$input_format (non-security)

Added conflict resolution for wikitext heading names

Some enhancements to the error handler. It replaces out ENANO_ROOT for security, and if the warning is from dbal.php and ENANO_DEBUG is set, prints out a much more verbose message.

Changed var_export() calls to use "true" as second parameter. Not sure which PHP version it was added in, but I could have sworn it wasn't there last time I checked.

Fixed syntax error in plugins/admin/PageManager.php

Fixed some rather severe issues when changing the urlname of uploaded files

Added FLAC to list of file types. (In other news: I'm an audiophile)

Updated tags

Fixed title[]= too.

Tagged 1.1.8 as current-unstable

Tagged release: 1.1.8

Added a notice to re-import language on 1.1.8 upgrade

Tagged release: 1.1.7pl2

SECURITY: Fix SQL injection in banlist check (1.1.7 branch)

editor: removed extraneous debug info; changed around the order by which the textarea is created and appended to the DOM

Fixed bad language installation docs in common

SECURITY: Fix SQL injection in banlist check

SECURITY: Fix path disclosure in Special:Captcha

common: log Enano upgrades

Added a new "hide-with-mce" CSS class in Dynano; all elements which have it will be hidden when TinyMCE is activated, and re-shown when it is destroyed.

ImageMagick check now notes that only directories in the PATH are checked.

Fixed a table_prefix omission in File namespace code.

Parser updates. Added the "styled" keyword to wikitables to allow them to be styled using the current theme's standard table skinning, and changes to how the image tag parser decides how to display an image (framed, inline or raw).

Added an editor hook that allows plugins to insert their own content right before the editor box.

Fixed a rather major bug with the external link parser: two links in one line now handled gracefully.

Fixed check for iPhone OS 3 - it now returns true on 3.0 or any later version including 4.x

Merged

Fixed password field in HTML login not being focused during >USER_LEVEL_MEMBER auth

Hide the "Create an account" button if registration is disabled (Enanium only, but there is a template boolean called "registration_disabled" so other themes can use it too)

Merged (again)

Converted inlinerename.js in enanium to tabs

So, grinding_halt() now finally uses the new default theme in template_nodb.

Fixed display of username in comments (ranks enabled)

Fixed typo in string acl_inherit_pg_everyone. Fixes issue 22.

Merged from accidental split

Added an API for AJAX file uploads and the monitoring thereof. This is to be used in Snapr and soon core (Special:UploadFile).

Fixed broken handling of password reset response in AJAX login

Fixed some bugs with the change password form when pw_strength_enable is 0.

Fixed some ACL scope warnings

Visual refresh on the textarea in the enanium page editor. Also fixed missing image on the Save Draft button.

Javascript maintenance. Upgraded jQuery; fixed some gzip bugs; added JavascriptCompressor usage to licenses/.

Fixed PHP warning with empty search results

Fixed no plugins showing up in sidebar create block page

Enanium: Link blocks now render properly on the right sidebar, and textual blocks now look good on the left.

Got live reauth working again in the admin cp

Added an icon for Edit Sidebar admin page.

Plugin manager: fixed duplicate removal of whiteout

Experimentally changing how content-length works.

Fixed theme not being loaded in Admin:EditSidebar

Disabled Javascript debugging. That thing has a nasty habit of getting enabled when it shouldn't.

Improved display of comments from foes, and fixed some general issues with the friend and foe lists

Enabled content-length in Special:DownloadFile even when gzip is on. Should probably check the http spec to see if Content-Length should match the decoded or encoded length

Fixed redlinks to special pages + parameters

Files now list what pages use them

ajax.php getpage now cals $template->set_page() so that templates that depend on PAGE_URLNAME etc. will not show errors

Lockouts were displaying separately when they should have been displayed together (incorrect grouping). Possibly breaks Postgres - needs re-test in that environment

Moved sidebar editor into the admin CP. Icon still needs to be added, no Internet right now to go find one. Also fixed a few template related things.

Updated README and KNOWN_BUGS for 1.1.8

jBox now works when horizontally scrolled; fixed case matching inconsistency in autofill

Pending group memberships no longer alter result in rank alterations

Some fixes to autofill with Unicode usernames; fixed a few end user experience pieces of the group CP. Users are now allowed to freely leave GROUP_OPEN and GROUP_REQUEST groups, and must be removed by a group mod for GROUP_CLOSED and GROUP_HIDDEN.

Added template hooks in the JS template compiler. Attach to thook_<template hook name>. Use Echo() to echo HTML; access compiler instance with Template.tpl_{strings,bool}, etc.

Database revision is now shown in ACP home

Added ability for plugins to hook into admin user manager