User ACP: redirect to Special:Login on own account deletion

Common: removed cookie_destroy hack

Updated readme for 1.1.7/1.2 series in general

Avatar UCP and ACP: Ported Dynano -> jQuery; merged POST processing code. Added support for IPv6 URLs (avatar UCP and RequestHTTP).

SECURITY: Comments: fix poor sanitization of subject on initial submit

Sessions: whoops, left a debug message in by accident, broke a few redirects

SECURITY: UCP: Added CSRF protection on Profile (unneeded on EmailPassword due to USER_LEVEL_CHPREF requirement)

index: removed that annoying 2-space indent

Fixed some upgrade bugs; added support for choosing one's own date/time formats; rebrand as 1.1.7

Minor fix to SHA256: some indices were not being initted under some circumstances

Added ability for authentication plugins to modify session keys (to allow invalidation when their own authentication data is changed) as well as the ability to disable the built-in password change facility

Blockquote functionality in wikitext parser now allows rendering of other block level elements properly

Login: enabled DiffieHellman on IE8

Login: visual: fixed separator being displayed with only one of 2 checkboxes

Some changes to AJAX login interface, made it a bit more compact with less language, with some Enanium specific modifications to the same.

Made index.php bootstrap smarter and better commented.

More work on rendering engine. Fixed some bugs with paragraph skipping and added (incomplete) support for blockquotes.

Fixed some "declaration should be compatible" errors that showed up under WinXP QA

Sessions: fixed logout() destroying normal session (instead of elevated) if $level = USER_LEVEL_CHPREF. Possible very minor security concern: elevated sessions were not fully destroyed, so if a normal session is opened from the same IP, the elevated one may be reusable for 15 minutes.

Login: Enabled DiffieHellman for iPhone OS 3.0 (it passes unit tests now)

Merged development from Scribus and Charlie

Editor: completely moved wiki edit notice to AJAX fetch, so it's not shipped with the page anymore.

Admin: query string is now preserved on redirect to login

Fixed some formatter engine errors that were exposed through the wiki edit notice

AJAX Login: Fixed all known issues with lockout (and some unknown ones)

Moved User CP profile settings to front page of CP, and changed associated language

Fixed logins with usernames containing Unicode characters

Fixed title formatting in user pages

Tweaked URL sanitizing a bit to make Enanium work better.

Added method add_header_js() to template to allow insertion of code to be run immediately after JS init

Added ability to specify PNG or JPEG as the format of thumbnails/scaled images in Special:DownloadFile

ACL manager: started on IE support; button clicking not working. Other compatibility improvements and bugfixes.

Userpage: rewrite of many CSS rules for better scaling behavior

ACL editor: finally fixed that annoying blank-window bug on rule deletion

Here we go, preload_js() officially added to admin panel. Pray with me.

Renderer: added "smart paragraphs" for templates. <p><b>Foo</b> {bar}</p> where bar is multiline is basically turned into proper XHTML paragraphs.

One word: Internet Explorer 6. This includes a rewrite of $paths->parseAdminTree() that encodes to JSON instead of manually generating JS, so good-bye to stupid parser problems I hope.

AJAX login: fixed lockout string being displayed where it shouldn't be

Enanium: Added some IE6 fixes

Enanium: consolidated jBox and toolbar CSS. Firefox 3.5 did a double-request and it was slowing things down. Thanks YSlow.

Admin theme: fixed onload behavior of collapsible menu

OK, JS preloading on a CDN works perfectly now. I'm sure of it.

Fixed inconsistency in JS component load order between CDN sites and non-CDN sites

Fixed a series of infinite loops with preloading components and placeholders

Enanium: <pre> elements under div.content are now indented

Wiki engine: improved behavior in block level element finding/wrapping algorithm

Template: minor: documented sidebar_widget()

Namespace_Default::bake_cdata() now guesses values for anything missing

jQuery: UI: Upgraded to 1.7.2

Dynano: finally deprecated $() syntax due to jQuery

Fixed one unlocalized string in sidebar editor; fixed sidebar editor jQuery init race condition seen under Firefox and Chromium on 64-bit

SECURITY: Fixed potential XSS in $output->set_title() (introduced: 1.1.6)

History: Fixed missing $q in fetchrow()

Language: fixed improper null return in add_filter()

Fixed decode_unicode_url() trying to parse non-hex %uXXXX sequences

Fixed onload_hooks[] being initted to null after runOnloadHooks() called (should now be initted to an array)

Fixed makeUrl() Javascript version not calling append_sid()

Login and sessions: fixed some improper handling of the config for lockout logic

Wiki formatting: Headings: tolerate spaces after line; added disable_rule method (required for rev. 1029)

SHA256: Fixed broken hashes on 64-bit PHP

Installer: now compatible with new rendering engine

Removed Text_Wiki and Firebug Lite from 3rd party code list

First implementation of new parser; Text_Wiki is now gone. VERY BETA! WiP.

AJAX login: fixed improper run of login_submit_early; fixed failure to redirect if main_page_members == current page

Fixed improper usage of function_exists() in captcha

Merging branches. Revision 2^10! :D

Added support for preloading javascript libs ($template->preload_js()). Updated admin theme and Tigra Tree Menu to support this + JS_{HEADER,FOOTER} variables.

Install: fixed a few bugs that showed up under IE8

Fixed broken javascript magic on Admin:PageGroups

Enabled tiny URL scheme support in installer cli-core

Whoops, plugin upgrades got broken

Minor plugin compatibility fix to Special:Search

Theme selector: fixed disabled themes being displayed

Comments: SECURITY: Fixed IP not recorded in non-JSON submit and a few other non-security issues

Removed Firebug Lite - unused, outdated, and potential licensing issue. All licensing issues should be resolved now.

Fixed missing global $cache; in $plugins->upgrade_plugin();

Set a few queries to buffered due to intermediate queries during fetching

Stats: fixed missing $q in $db->fetchrow()

Comments: fixed failure to supply $q to fetchrow() in JSON fetcher

Clarified some licensing issues from the Fedora project's preliminary review.

Fixed lack of default value in main page field on admin panel

Fixed a PHP warning in Admin:GeneralConfig default theme selection

Disabled Connection: close in AJAX lib (throws error under Chrome 2.0)

JS core: allow setting loaded_components in other scripts

AJAX rdns call now calls is_valid_ip() (security?)

Enanium: bumped top heading down a few px

Class "currentpage" is now added to all internal links, including sidebar buttons, if the link points to the current page.

Whoa! I broke Live Re-Auth, fortunately after the 1.1.6 release.

Sped up AJAX de-auth a little; added a little extra info to login_success JSON responses

Fixed: cache was being used during plugin fetch, so newly placed plugin files were not listed

Fixed two bugs: PluginManager: forgot to import cache; PageManager: now queries pages with buffered query (temporary fix)

Unstable beta release: 1.1.6 (Caoineag beta 1)

Fixed category display not listing entirely

Unstable beta release: 1.1.6 (Caoineag beta 1)

Merged accidental split, we should be ready to push out 1.1.6

Merging from accidental branch split

Plugins: fixed a final system plugin bug

Plugins: fixed a final system plugin bug

Detagged 1.1.6 release - upgrader bug found

Unstable beta release: 1.1.6 (Caoineag beta 1)

Added another word to the CAPTCHA blacklist (thanks Neal).

Updated KNOWN_BUGS

Added protection against obscene words in CAPTCHAs

User homepage/URL is now displayed on user pages

Fixed undefined indices for user_extra in various places

Installer: payload: fixed two minor PHP errors with .htaccess.new and wrong form field name

GeneralConfig: Fixed failure to import $cache during save

Fixed some PHP warnings with API pages

Added minor edit filter to Special:Log

Fixed some bugs with history viewing and log display (wrong row counts, failing to provide result resource, etc.); added "view" button to edits in log display; fixed underscores in auto generated titles

Fixed redirects before $session init not working; fixed failure to load system plugins

A few safety changes to tolerate no $session when it's not available

Enanium: fixed visited wikilink-nonexistent links

Added cache for installed themes

Cut out two queries per page with plugin loader routine

Paths: System messages are cached in RAM now

Replaced the USE with a mysql_select_db() to cut out one query

Band-Aided user_homepage undefined index error in comments.

Render / Template: No longer does exist checks for wikilinks on sidebar

Fixed behavior of log display and title fetch for nonexistent pages

Comment UI / Special:Memberlist: UI consistency for Send PM/Add Buddy links in Memberlist and comment display UI

ajax: theme selector: no longer lists disallowed themes

SpecialPageFuncs: Removed tag cloud sidebar in the name of cutting out an SQL query. It will go into a plugin.

Fixed a couple bugs with admin avatar settings and getConfig() return types

Enanium: left collapse button same size as jBox bars now

Enanium: fixed failure to load on template_nodb

Wikitext redirects should work again + get_redirect() added to Namespace_* to allow plugins to extend

Enanium: move new memberlist above admin buttons + only show for logged-in

Merging from accidental branch split

Added register_special_page() function, to make it much easier to create special pages. Also, rewrote Special:Memberlist to use more efficient fetch method and not use an unbuffered whole-table query.

Added "About" sidebar block which simply shows the site description.

Enanium: added collapse for left sidebar

Fixed a couple bugs with protection UI; fixed stray <enano:no-opt> in Special:CSS (do people still use that?)

API: Properly handles $title again

Enanium: Set right sidebar as collapsible. Whether I will do the left one I do not know.

Whoops, last commit broke admin stuff.

Made some more changes to the way namespaces are handled, for optimization purposes. This is a bit of a structural reorganization: $paths->pages is obsoleted in its entirety; calculating page existence and metadata is now the job of the Namespace_* backend class. There are many things in PageProcessor that should be reorganized, and page actions in general should really be rethought. This is probably the beginning of a long process that will be taking place over the course of the betas.

Fixed some error display cosmetics in Request_HTTP

Admin: Home: Properly handles Request_HTTP exceptions now

Security log: fixed typo in plugin enable/disable display

Admin theme: Fixed l10n in footer

Enanium: added wikilink-nonexistent

Whoops. LogDisplay sorted by log_id, not time_id.

AJAX: Reset votes: now uses whiteOutMiniPrompt()

Removed "@" from all call_user_func() calls to make debugging special pages and such possible

Renamed smiley conversion script (more descriptive); fixed +x on cli-core.php (both rpmlint warnings, thanks Neal)

Fixed sidebar editor not closing floating windows properly when FX off

Upgrades from stable now skip langimport if it's being done later anyway. Pending testing.

Upgrader: UX: Added welcome page, different between Caoineag and Banshee

DBAL: _die() now detects installation environment and, if present, calls installer UI library for error display chrome

Fixed path to wrong line image in admin CP nav tree

Installer welcome page can tolerate 1.0.x databases again

Fixed session key clearing process, it should work right now.

Made handling of $perms being non-object work properly in template

Cleared up a few discrepancies in page handling, template var init, and how NewsBoy works.

Made upgrades from 1.0.6 work.

Installer: Whoops, moved the start of the main form on sysreqs down too far

Installer: Added recheck button to sysreqs page (thanks Nolan Rollo)

Installer: Form AJAX action no longer fades (too slow!)

Added web.config support for IIS7 URL rewriting.

QA: Schema: fixed urlname in pages was wrong size (both MySQL and PgSQL)

QA: Fixed bad update of user info when user_rank is NULL in Admin:UserManager

Added the indices to the 1.1.5 -> 1.1.6 upgrade schema

Added some more indices to speed some stuff up (MySQL only)

Added the linked-to page of the tutorial (it is, however, a stub at this point)

Installer default content is now modular, and can pivot between starting with a blank site and installing a tutorial site.

Drop-in Enanium as default theme upon install

[QA] User CP: rearranged some things to fix overly tall cells and/or sidescrolling

New primary theme: Enanium

Merging accidental branch split

Fixed log being pushed inwards due to lack of clear: both; before list

Fixed logs not working under postgresql

Removed Special:RecentChanges (phased out)

Fixed division by zero on first day installed.

New, beautiful, rethought Admin:Home. No, really, you'll like it.

Removed unused MIME magic file.

Deletion vote reset is now logged and able to be rolled back

File rollbacks should be all up to date now.

Made Special:Log tolerate literal, unescaped slashes in page names (hack of sorts, but still...)

Meh, finished my half-written-out thought in a FIXME in Special:Log code.

Finished core of log display interface including filter management. There is still a bit of a to-do list, especially regarding rollbacks and reuploads.

Memberlist now shows rank instead of user level in "Title" column. (thanks mm3)

Live Re-Auth is now required for deleting pages, editing ACLs, protecting pages, and clearing logs. Committing in a hurry as a storm is coming in, hope everything is in there.

New page protection UI. Both miniPrompt and failsafe HTML.

Log displayer should support some actions besides edit now

Whoops, page protection code didn't flush page_meta cache

Theme selector: controls height now (limits box to height of screen minus a few px of padding) if there are lots of themes

Cleared up a few warnings that appeared under the Phalanger PHP interpreter.

Work started on Special:Log and associated tools/interfaces. This is far from complete, but the basic functionality is in there.

Index: minor fix-up to code cleanliness under diff loading

Allowed custom processing functions altogether for AJAX login error handling

When changing namespace of a File: page, associated files are now deleted. Also fixed some issues with image scaling.

session: login_process_userdata_json hook should work with more than one installed auth plugin now

UserPage: whoops, wrong name (Namespace_Default::$exists, not ::$page_exists); bumped userpage tabs down by 0.05em to correct an Oxygen bug

Session: additional metadata passed back from auth plugins is passed through to client for optional further parsing

HTTP: now throws exceptions instead of flat-out dying

SpecialUserPrefs: fixed: userprefs_body hook only allowed first loaded plugin to work

Oxygen (and general): cleaned up sidebar CSS, wikitext blocks are now sent through alternate block

Committing string changes associated with new logout interface

Whoops! JSON parser Unicode escape sequence typo.

Made aclDisableTransitionFX also switch on jQuery.fx.off; made theme switcher work with said jQuery switch

AJAX comments: ranks are now displayed properly in a submitted post.

New logout interface + made DiffieHellman faster by disabling animated GIF

Set textarea in sidebar editor to fixed height of 360px due to webkit bug (thanks Neal)

Major revamp to sidebar editor. Some behavioral changes as well as being based on jQuery UI Sortables. Creation interface remains the same, but better strings merged in from stable.

Better "no thumbnail" theme placeholder image. But not much better.

Live ReAuth: only show "timed out" error if jumping to admin page

jQuery: UI: upgraded to 1.7.1

AJAX: theme selector: explicitly set wrapper div to 0 to prevent sidescrolling

JSON: Properly handles unicode escape sequences (\u####) now

Corrected a few display issues in Postgres DBAL. Thanks Neal.

Merging branches

Silenced check for page_format due to warning thrown when saving new page

Added support for "Tiny URLs" (http://example.com/enano/?/Foo)

Some fixes to paginator (pagination control code moved to separate function)

Whoops, forgot to commit enano-shared from theme selector commit

Added support for Firefox 3.1 beta 3's native JSON.

Resynced version numbers in JSON language files

A few fixes to Windows detection code

Swapped in a new theme selector.

Plugins: Added checks and additional warning for authentication plugins.

Special:About_Enano should be up to date for another 9 months.

Moved gzip and aggressive_optimize_html calls to output.php

Fixed a bug in default namespace handler: referenced global page_id instead of local

New template feature: template hooks (<!-- HOOK foo -->)

Dynano: don't try to destroy MCE if window.tinymce is invalid

SQL parse: fix improper mid-query newline handling

Installer: pgsql main schema: fixed missing page_format in logs

Installer: payload: Minor performance tweak

DBAL: Fixed missing $loc in pgsql die_json()

Removed some stray PunBB CSS files (thanks Neal)

install-cli: Fixed wrong language string id for $driver

Added support for alternate port numbers on database servers. Also in install-cli, merged in new sysreqs functionality.

template: added ability for themes to hide user, tools, and search sidebar blocks

Change to search behavior for heading+link in sidebar collapse code

MessageBox: fixed: load fadefilter when aclDisableTransitionFX on

Added ability for jBox to align submenu position to right of parent button instead of left

Installer: minor: added a box on sysreqs success

Redesigned installer sysreqs page to cover more features, be more comprehensive, and look better

Installer: fixed load of lang_js on finish

jQuery: updated to latest jQuery + jQuery UI

Template: addslashes() around wiki_edit_notice_text (whoops)

http: minor fix to tolerate missing SERVER_SOFTWARE

Plugin backend: bugfix: installing a plugin should now properly import its strings

Set password in userinfo to allow auth plugins to see it (some really do need it)

Plugin manager: system plugins now sorted to last

Added possibility for auth plugins, which can log a user in using non-standard authentication methods.

setConfig() will now delete config values if the second parameter is explicitly set to false

HMAC functions are now standards-compliant (not a security issue). This BREAKS 1.1.6-hg passwords!

Added a basic plugin/hook framework for Javascript

[minor] changed heading format in mainpage-default

Fixed default ACLs

Added color specifications on input fields for admin and oxygen

Blah. Wrong type for those getConfig values.

Fixed: no default values in for avatar upload settings

[Oops] removed debug message in install-cli

Damn, forgot to add the version insertion back into schema

Major redesign of rendering pipeline that separates pages saved with MCE from pages saved with the plaintext editor (full description in long commit message) - Pages are now stored with an extra metadata field called page_format which is "wikitext" or "xhtml" - New $flags parameter + RENDER_* constants added that control RenderMan::render() behavior - Several other changes: * Added a sprite API for Javascript and made editor use sprites when possible * Removed a number of config options from the default install schema, replaced with second parameter to getConfig() calls * MessageBox in editor mostly replaced with miniPrompt * A few bugfixes related to password changes (registration didn't even work) * Rewrote the bitfield compression algorithm used to serialize allowed MIME types * Fixed some typos in language files and strings * Fixed a Text_Wiki bug in Heading parser

Made all page_id and namespace columns consistent

Added Unicode support for usernames and passwords (this is probably best considered a JS crypto bug)

Fixed https urls not allowed in user_extra CPs; fixed nonworking password reset in admin CP

Added a few hooks to Admin:GeneralConfig (didn't I do this already?)

Merging Nighthawk (anti-spam work) and Scribus (AJAX work + debugging + CLI installer) branches

Replaced integer checks that used preg_match() to use ctype_digit() instead

Added (very basic) spam filtering plugin support. Plugins can mark a message as spam by hooking into the spam check API, which is documented in functions.php. No spam checking functionality is built-in.

Login: reauth: window.location.hash is now updated to include the new SID so that page reloads will use it

AJAX core library: possible breaking change, readystatechange functions are now called with the XHR instance as the first parameter, to allow requests to run in parallel. This means much better stability but may break some applets (compatibility hack is included)

Oxygen: synced mint style

PageProcessor: fix not setting page_exists to true after create_page() success (todo: move to Namespace_*?); add $visible parameter to create_page()

Change config.new.php and .htaccess.new to have a single newline according to Fedora project guidelines

Installer: add RewriteBase to .htaccess to work properly under aliased Apache setups (generated 404s in QA)

A few bugfixes in CLI installer related to interactivity

SECURITY: Fix XSS under IE in closing tags (shared sanitizer)

Fixed login form being focused too early (caused page to scroll up)

Deprecated old grab_password_hash() functions in session

Whoops! Fixed an SQL injection vulnerability in the CLI installer. (Not like it's a huge deal because the vulnerability was only introduced last commit and if you make it to that stage you already know the database password)

Added already-installed check to cli-core

Added CLI installer. Supports interactive, command-line, and internal-call installation. Fixed a few bugs related to anti-SQL injection parser and plugin installation.

Added support for live re-auth and de-auth; fully AJAX, no page reload required, plus plugin-usable API.

JS core: whiteOutReportSuccess now has a sister whiteOutReportFailure(); both abstracted to function whiteOutDestroyWithImage(whitey, image_url)

DBAL: Fixed issues with die_json() and multiline responses from {mysql,pg_last}_error()

Plugin manager: added support for having specific install and uninstall blocks per DBMS

Special:Administration: fixed 404 on several Tigra tree menu images

jBox: When an anchor in a menu is clicked, menu is now hidden

Fix undefined variable in special namespace missing function handler

If there's an onlineupgrade.php, installer index.php will link to that instead of upgrade.php (future readiness ;))

Fix version number warning in installer common

Upgrades should work now.

Two big commits in one day I know, but redid password storage to use HMAC-SHA1. Consolidated much AES processing to three core methods in session that should handle everything automagically. Installation works; upgrades should. Rebranded as 1.1.6.

Major underlying changes to namespace handling. Each namespace is handled by its own class which extends Namespace_Default. Much greater customization/pluggability potential, at the possible expense of some code reusing (though code reusing has been avoided thus far). Also a bit better handling of page passwords [SECURITY].

Added a couple of hooks for the registration form.

Redid error handler (it was causing some problems with gzip enabled)

Small speed optimization to admin panel loader

Revamped main page default content

Several thematic enhancements to Oxygen including making the main page title an h1

Added support for re-auth on submit to rank manager when session goes bad; still more to come

Added dynamic reload-less re-auth to admin panel, so that if a session is lost it can be recovered without a reload. Support for hooking into form submits will be added in the future.

Updated URLs and strings to point to the new server (ktulu)

Fixed a few bugs with plugin management and importing of old plugin metadata

Added support for upgrades from Ferrishyn

Added paginator_goto() to function reverse map; fixed some missing component loads in pagination code

When will that stupid user -> user_id bug stop REARING ITS UGLY HEAD. DIE! DIE! DIE! DIE! DIE!

Fixed: autocomplete got broken somehow

Unstable alpha release: 1.1.5 (Caoineag alpha 5)

Added ajaxReverseDNS to function-to-script map.

Added spell-checking support for TinyMCE on user request (see: http://forum.enanocms.org/topic/11/)

Minor cosmetic change to installer: bumped down Continue button on payload page by 12px

Corrected a few issues with languages and client-side code

Updated KNOWN_BUGS.

A few fixes to the most recently added feature: more efficiency tweaks, tweaked l10n to have beetter fetch-on-demand support to ensure that stubs are never returned

load_component() now accepts an array, and most JS components are loaded all in one request now. Totally modular baby. And failsafe too.

Upgraded TinyMCE to version 3.2.1.1

[Branding] New artwork swapped in for the old. See <http://enanocms.org/News:1228698725>.

Fixed a couple PostgreSQL bugs.

Minor string change to match other string changes in 1.1 installer

Squashed one last typo.

Fixed a couple typos in mod_rewrite detection (I'm really doing this blind, as the source tree used for testing is different than the one for editing)

Fixed: checked for win32 but not winnnt

Merged WINDOWS_MOD_REWRITE_WORKAROUNDS changes from stable.

Fixed timezone preference setting not fully implemented; added ability for users to select their own rank from a list of possible ranks based on group membership and user level

Fixed: update_plugins_cache() is now tolerant of write errors

Fixed: private keys were way too long in EnanoMath

template: Fixed undefined $from_internal in assign_bool(); theme.cfg now require()d on theme load

Added support for IPv6 IP ranges... ehh, not easy.

Removed obsolete JWS code from enano-shared

Updated KNOWN_BUGS.

[Minor] Enabled anonymous user autocompletion in ACL tracer

Fixed: editor state was not unlocked after draft save

Removed the completely obsolete old Special:CreatePage function

External links in sidebar now work with manual port numbers and IPv6 addresses

Plugins can now register their own custom actions for $_GET["do"].

Added additionalwhere option (it was already documented) to custom search API

Fixed PostgreSQL incompatibility in new search API

Added a new search API that allows much easier registration of search results. Basically you give the engine a table, a few columns to look at, and tell it how to format the results and you're done.

Fixed sliders not working right with non-Oxygen themes

[minor] optimized loading comments a little bit

Removed Slide-In-Slide-Out-Ala-Digg, replaced with jQuery

Fixed an onload recursion issue if load_component() is called during global onload

Out with those confusing redistribution terms. That whole clause is much more simple now. (TODO: this needs to be seriously looked over by beta 1)

Fixed: Admin:PageGroups create form did not init properly

Added dependency checking in ACL tracer

Added makeSwitchable Dynano method for textareas; enabled support for makeSwitchable in comment runtime

[minor] snip some debugging code from autofill

Add some performance info to jsres

Added full all-namespace transclusion support in RenderMan

Polished up inline rename in oxygen (todo: make this script shared/core?)

Fixed: Special:Memberlist still used SpryEffects

Fixed DiffieHellman only half-implemented in user admin CP (changing passwords did not work)

Added ability to have alternate main page for members

Moved getElementsByClassName to functions.js (dependency issues)

Fixed minor formatting bug in sidebar editor

load_component() now uses wait cursor on document.body

Fixed exception handling from session->fetch_page_acl() in ACL trace server side

Cleaned up tags

Merging with upstream

Merging branches

Fixed error-out when DiffieHellman not supported and respawn requested (part of OS X QA process)

Made defectivebydesign.org image local

Added config option to grant userpage rights to new users (defaults to on, as it was hardcoded on before)

[minor] fixed non-hidden next button in ACL trace view

Merging in the past three months' work on ACL tracing tools.

[minor] Login box shook too slowly on failure

JSON parse failures should spawn their own darkener layer now instead of reusing the main one if applicable

Upgraded jQuery UI.

Fixed DiffieHellman being included twice when not supported and login fails

Fixed plugin manager not checking for plugin file existence before marking to load

[minor] $template->footer() no longer flushes output buffers, due to headers being sent prematurely

[minor] AboutEnano can detect Mac OS X now

Fixed filename not being sent through sanitize_page_id() during upload. Non-security.

Fixed attempt at gzip compression after headers sent; hopefully safely escape args to scale_image() instead of erroring out

Fixed system table list; added safeguard against twice prefixing the tables in $system_table_list

Fixed issue where login box was not obeying server orders to disable DiffieHellman. Increased quality of error handling for JS errors during login process.

Made template inclusion wikisyntax fully MediaWiki-compatible

Fixed SpecialAdmin setting theme and style way too late (thanks Andrew Kohnken)

Added ability to use hash marks in internal links

Fixed nonworking editor preview due to uninitialized template

Marked Text_Wiki's parse_internal_links() as deprecated.

SECURITY: Changed Diffie-Hellman parameters to prime and generator created through OpenSSL

Added initial support for DST. Rules are defined in constants.php and are extensible.

Fixed IPv6 address match (the one from phpBB3 did not work)

Fixing \r\n bug in SQL parser (see comment on rev. 7a7173c0f62f in stable)

Rewrote sidebar compilation code, caching is more stable now and things were cleaned up/separated into more functions/made plugin-expandable. In theory, plugins can add new sidebar block types now. I'd personally like to see a fully plugin-based sidebar editor that completely overhauls what Enano has now sometime now that this framework is in place.

Fixed userpage events being fired even when the tabs aren't there

Fixed reference to $() which should be $dynano() in SpecialAdmin

Fixed draft controls being shown in view source mode

More work on auto-completion - it auto-scrolls now and limits result divs to 300px height

Fixed minor (non-XSS) sanitization issue for main_page field in Admin:GeneralConfig

Fixed cdnPath being set even if config entry is blank

Autocomplete further stabilized. Made Special:PasswordReset and Special:Register prevent use if logged in.

Re-merging key_type fix from nighthawk

Removed Adobe Spry and replaced with jQuery. Please report any new bugs on the forums or via IRC. In a related note, auto-completion should work now at least for usernames. Still hacking away at page name completion...

Merge? o_O

Made upgrades from 1.1.4 -> 1.1.5 work if keyhash is not present

Revamped page deletion interface; fixed bug where page_meta cache was not being cleared upon restoration of deleted page.

Added ENANO_NO_PLUGINS optional switch to common_cli.

Couple of fixes (hacks) for Opera and the aftermath of that z-index change to darken() and enlighten() fadefilters; added ajaxOpenDirectACLRule() to placeholder list

Fixed that exception that was thrown on draft save in fx3

Changed namespace properties (including core identifier) for external pages that load the Enano API to be a uniform "API" namespace and "SystemAPI:" prefix.

Made login forms that use $session->aes_javascript() use new whiteOutForm() function

Fixed ACL_TYPE_PRESET pseudo-rules being shown in rule list

Fixed missing "print page" link in printable theme

Added customizable parameters for session length and the long-missing "remember me" option (or rather, the ability to turn it off and make sessions temporary)

Fixed some stale code in generic autofill schema

Tagging latest revision as rebrand

Rebranded as 1.1.5 (Caoineag alpha 5) and fixed a couple bugs related to CDN support in template_nodb and installerUI. Updated readme.

A few fixes in SpecialUserFuncs: made avatars have a +30-day expiry date and made full login form show encryption blurb even when user_level > USER_LEVEL_MEMBER. Added expanding user-info blocks in memberlist (experimental).

Fixed a couple bugs in the check-for-updates code.

Fixed System pages not being createable even with proper admin rights. This is hackish, it probably needs to have something implemented at the ACL level.

SECURITY: Full query is no longer shown on SQL injection attempt; silenced calls to mysql_unbuffered_query() due to some untraceable yet harmless errors

Fixed minor z-index bug in jBox

Added preliminary support for ACL presets. Yay!

Some tweaks to common, real minor stuff that's been waiting to be committed for a couple weeks at least

Improved miniPrompt and fadefilter to properly overlap parent modal windows. MessageBox() is next. Fixed pref_disable_js_fx not working due to wrong type (number instead of boolean).

Made customizable 404 page have a {STANDARD404} variable available to allow embedding the "default" 404 content.

[Demo Security] Fixed plugin manager ignoring lockdown settings in demo mode

Fixed tooltip in Powered By Enano button on the sidebar. It called $lang->get() without checking to see if languages were initted yet.

Added abutton_img class + supporting properties in miniPromptMessage to allow icons on abuttons

Added tab-based interface to userpage UI. Yes, it is plugin expansible, and yes, it breaks existing plugins that add code to the userpage (but that can be fixed with a "colspan=4")

Added hack to printable theme to allow exporting of a website into static files (thanks vadi for the request); source for this functionality will be released soon

Fixed non-localized buttons in navbar on user CP, top menu trigger buttons should act as links again

Fixed undefined REQUEST_URI/HTTP_HOST in ENANO_CLI mode in template var init

Added ability to have language strings send variables through filter functions. Operates based on predefined filters, expandable with a call to Language::register_filter at the hook lang_init

Fixed improperly set up gzencode() replacement; fixed bad regexp in scale_image() security check

Made cdnPath define conditionally; fixed common_cli not properly loading plugins

Fixed missing PRIMARY KEY definitions in postgresql_stage2

Fixed a couple missing functions in placeholder_list in enano-lib-basic

Separated St. Patty CSS files into color theme and CSS

Made grinding_halt() exit with status 1 for POSIX compatibility; jscompress.php utility now accepts non-CDN websites

Made Admin:LangManager purge caches properly when uninstalling a language

Made Admin:UserManager accept "username" as well as "user" on GET

Fixed unlocalized column names in SecurityLog

Fixed non-localized group names in theme-manager

Made admin theme use jsres instead of JS_{HEADER,FOOTER} because of incompatibilities with Runt

Fixed some unlocalized strings in installer

Fixed unused $admintitle variable in $template->fading_button code generation; fixed missing CDNPATH, JS_HEADER, and JS_FOOTER in template_nodb; localized onpage_lbl_page_external

Made lang.php stop dying due to no strings installed for current language [experimental]

Fixed installer path check in Admin:Home; made admin-menu more compatible with componentized JS

Fixed MiniPrompt message boxes causing the window to scroll up

Improved JSON validation and error interface when validation fails; made rank manager support custom CSS

Added CDN support: a URL to a CDN can now be specified and Enano will load all images, CSS, and javascript (except TinyMCE) from that server

Fixed typo (missing equals sign) in allow_anon param to autofill username

Fixed missing require() on search.php in Special:Autofill (damn, when is this going to end?)

Fixed autofill ignoring existing ID for text box parent node. (yes, again)

Fixed disabled buttons sometimes not being apparent in admin theme

Fixed autofill ignoring existing ID for text box parent node. Note that autofill is still in a nonworking state.

Another dummy commit that Nighthawk insists on

Dummy commit because Mercurial wants to merge.

Damn it, something always gets mixed up!

NOW we can tag the release.

Permissions mix-up on Nighthawk, straightening things out. Unstable alpha release: 1.1.4 (Caoineag alpha 4)

Tagging for latest release

Re-merge of c9ea830a211f (oops)

Unstable alpha release: 1.1.4 (Caoineag alpha 4)

Fixed a few more PostgreSQL bugs with insert_id() and an issue with setting SERIAL columns manually. May break things if installed into a database without first dropping tables.

Fixed up the save routine in PageManager a bit

Final readme revision for release 1.1.4

Made the rank editor actually refresh the ranks cache upon creating/editing/deleting a rank. It's 5 in the morning, I'm going to bed, release is first thing after breakfast and coffee.

Added KNOWN_BUGS file.

Added group_rank option in admin group manager and user_title option in admin user manager

Fixed DiffieHellman in UserManager and added rank selector

Added Gravatar support in UserManager in admin panel

Rank editor is now in a working (beautiful) state. More intuitive than a Mac.

Fixed a few more upgrader glitches and polished things a bit more.

Refined upgrade process a bit. Uses libenanoinstall (incomplete), and post stage added to flush caches and import new strings

Hopefully fixed user_timezone bug in PostgreSQL upgrade

Fixed bad ALTER command in PostgreSQL 1.1.2 -> 1.1.3 upgrade

Fixed language string loading in upgrader

Fixed another bad tinyMCE reference in editor.js

Added Gravatar support! And it's really configurable too.

Added "default" option for getConfig() and made setConfig() only set if the new value is different

Oops, somehow changed mysql_query() to pg_query() in MySQL DBAL

Fixed undefined group_rank_id in sessions

Fixed missing require() on search.php in rebuild_page_index()

Got the installer working. Fixed a few bugs including a nasty-to-debug issue where the lang_id was being hardcoded during installation, resulting in strings being inserted with the wrong lang_id causing an infinfinite loop with fetch() throwing a "no strings" error and using template (which calls fetch()) to complain

Fixed lack of str_replace() to runtime-patch cache_anon_sidebar

Got user registration working with the new componentized JS framework

Completed work (we hope) on CacheManager admin page

Made CLI version of common load cache manager properly

Sprited icons for admin panel applets

Fixed gzip output - no longer depends on ob_gzhandler(), uses gzencode() now with a failsafe available if gzencode() is not available. Public function gzip_output() remains unchanged.

Fixed a few places where page metadata cache should have been purged (there may be a few more commits like this)

Merging nighthawk and scribus branches (now that nighthawk isn't panicked anymore)

First stab at cache management backend. Everything seems to have been tested and working so far, but a number of things require a more specialized cache and can't go through the framework (e.g. user ranks which use references to map usernames to user IDs)

Moved enano_safe_array_merge() to functions.php as comment.php depends on it

First draft of new CacheManager admin page. Backend is yet to be implemented.

Fixed missing require() on math.php in SpecialUserFuncs

Moved all account deactivation notice presentation code to its own method in sessions

Fixed missing randkey() method in rijndael.php

Fixed $use_cache bug in plugins.php

Fixed missing require() on stats.php in pageprocess; made pageprocess update the metadata cache on page rename

Added purge_all_caches() routine to functions.php. Temporary, will be discarded once the new cache code is implemented

Added the theme_is_<themeid> template boolean value to allow conditional template code depending on theme ID (in shared templates, sidebar blocks, etc.)

Added ability to hide or show sidebar blocks based on a {restrict} or {hideif} conditional in the sidebar script

Added failsafe .htaccess files to enable far future Expires and mod_deflate

As promised, dropped in the new librijndael. Benchmarks say about 3 times faster, but more performance testing will be done.

A little more optimization work, client-side this time. I lied, no librijnadel2 here, but it's about to be merged in...

More optimization work. Moved special page init functions to common instead of common_post hook. Allowed paths to cache page metadata on filesystem. Phased out the redundancy in $paths->pages that paired a number with every urlname as foreach loops are allowed now (and have been for some time). Fixed missing includes for several functions. Rewrote str_replace_once to be a lot more efficient.

Another sweep from the optimization monster. template: rewrote parts of tplWikiFormat to do faster validation and less eval()ing template: sidebar is now cached for anonymous users (thanks to Richard Greene for the suggestion) dbal: rewrote SQL query parser, much cruft taken out template: made tplWikiFormat depend more on RenderMan common: moved some lesser-used includes out of main loading sequence Expect a lot of changes to AES code in the next commit!

Made $session->private_key protected and added pk_{en,de}crypt methods for encrypting and decrypting data using the private key

Several optimization changes including getting rid of a few eval()s. Added placeholder functions for the theme manager, which should be working now

[minor] Added password_score_* into placeholder functions

Upgraded TinyMCE to 3.1.0.1. Ported a couple special pages to the componentized JS system.

Oops, scriptPath isn't defined in jsres.php.

Made encryption work in form-based logon again; modified load_component() to fetch compressed versions when possible

Fixed javascript ACL manager and captcha not showing on ajax login lockout_captcha event

Fixed missing table_prefix in generate_rank_sql()

Installer should work with JS componentization now

Majorly reworked Javascript runtime stuff to use on-demand loading. - Runtime reduced to only AJAX library + very common functions, ~50K total - Almost all specific functionality loaded on demand using synchronous XHR - Crypto functions consolidated into crypto.js - Much testing still to be done - ACL editor known not working under firefox - Some other components (autofill, theme/rank managers) not ported yet

Initial progress towards converting auto-completion framework to Spry. Not currently in a very working state.

Fixed SQL syntax error thrown during rank data fetch

Fixed access type warning in discussion button generation in template

Fixed: init_vars double-init check ignored theme changes/reloads

Made template parser remember last initted page_id and namespace to avoid double init; made additional_headers reassign only do so if $template->additional_headers is empty (it's being blanked somehow, need to come up with a backtrace sometime)

Fixed undefined index left over from scope system rewrite a few days ago

Fixed two bugs in paginator: noisy warning when rows run out and empty strings not being treated as valid from formatting functions

Fixed title not being set properly in redirect()

Renamed some functions (that were new in this release anyway) due to compatibility broken with PunBB bridge

Moved some TinyMCE init code to make JS early init work

Got ACL scope logic working again and began enforcing it. Breaking API change: assigning page title with $template->tpl_strings['PAGE_NAME'] will no longer work, use $template->assign_vars(). Workaround may be added later. Test for assign_vars method if compatibility needed. Added namespace processor API (non-breaking change). Several other things tweaked around as well.

Fixed some plugin compatibility issues seen in Nuggie

Updated image tag parser a bit. Handles recursion of brackets properly now, allows custom parameters from plugins, and takes parameters in any order due to new keyword-based parser

A bit of UX improvement to upgrade UI; updated readme for 1.1.4

Actually made the "prevent search indexing" switch work. Needs to be merged with stable.

Made ajaxReset() call the actual requested title instead of effective title; fixed (again) template compiler bug not matching certain tags (probably PCRE bug)

[YSlow experimental] Moved jsres.php include to bottom of the body in oxygen

Updated version number metadata in system plugin files; added some comments and removed unused code from index.php and includes/graphs.php

First test of rank manager interface, not currently capable of doing anything interesting (fills form with placeholder data); strings are in an earlier commit

Got initial CSRF token framework implemented and sample implementation added in Special:Logout; removing Javascript compression engine from aggressive_optimize_html() and instead calling JavascriptCompressor class from js-compressor.php

Removed remaining references to enano.homelinux.org

Added re-import function to plugin manager

[YSlow] Added Expires header on jsres.php

Fixed some GD detection bugs with freecap

Modified $template->init_vars() to pivot to local page metadata and permissions from a PageProcessor object instead of global data from $paths and permissions from $session to allow redirects to affect on-page controls as well as the actual content (only partially complete, protection and several other elements still need to be localized)

More work done on effective permissions API, namely reporting of page group and usergroup names

Added user preference for disabling visual effects in Javascript applets; added re-import button to installed plugins

Revamped some ACL code and added effective permissions calculation code into session manager

Merged in the word_lcase column (finally)

Moved some more images into sprites for Oxygen

Minified some JS files using YUI compressor

Added ability to delete the draft revision; [SECURITY] fixed lack of permission check on draft save; renamed messagebox() constructor to MessageBox() (backward compat. maintained)

Added source and compiled images for Mint's sprites

Re-synced Mint style from the Oxygen theme

Added ETag on TinyMCE gzip; changed ETag format for standard pages so as to include user and login info to control caching when logged in or out

Switched Oxygen to use CSS sprites for faster loading (CSS changes were in a past commit, only adding image files here)

Add standard header comment block and date of changes to tiny_mce_gzip to conform to GPL/LGPL

Added TinyMCE compression support and made some supporting modifications to common.php

Upgraded TinyMCE to version 3.0.8

Added ETag support and increased caching settings to try and speed the system up. Result of a YSlow audit.

Massive commit with various changes. Added user ranks system (no admin interface yet) and ability for users to have custom user titles. Made cron framework accept fractions of hours through floating-point intervals. Modifed ACL editor to use miniPrompt framework for close confirmation box. Made avatar system use a special page as opposed to fetching the files directly for caching reasons.

Added but didn't set up custom_user_title ACL; fixed rebuild_page_index() to use word_lcase

Replaced some confirmation boxes with miniPromptMessage versions. This commit will require a re-langimport and shift-reload.

Merging changes from nighthawk

Added a really simple message box system based on miniPrompts, this will be used for confirmation windows like delete_page, clear_logs, delvote, etc.

Rebrand as 1.1.4 (Caoineag alpha 4)

Fixed selector stage in ACL editor under Safari

Added template_compile_subst hook

Huge improvements to the template_nodb class and surrounding code; moved template compiler core to its own non-classed function to allow code re-use

Finally fixed link coloring settings in Oxygen Bleu; added compatibility wrapper for people that "ajaxLogonInit" over "ajaxLoginInit"

[HIG] Added a little heading and intro message to the top of the plugin manager

Fixed Javascript error in admin-menu with quotes in list items

Implemented security logging for plugin management

Fixed some bad language string references in plugin management API

(Hopefully) finished new plugin manager and implemented the utilization of it. Still HIGHLY experimental.

New plugin manager half-implemented. Most of the UI/frontend code is done. Moved sql_parse.php to /includes/ to allow use after installation - TODO: check installer, etc. for breakage

Merging nighthawk and scribus branches

Pretty much pseudo-commit to make Hg let me merge some stuff in, only change was the "system plugin" key in $plugin_meta in PluginManager

Fixed a jBox issue on the AppleMobile platform

Dramatically improved the page-rename UX and added a miniPrompt API that allows small pop-down prompts as opposed to prompt() or confirm().

Implemented the password-reset redirect _properly_ instead of the hackish direct header() call in sessions.php

Optmized a number of Javascript routines for better speed on pathetic Javascript interpreters.

Started work on the new plugin manager and associated management code. Very incomplete at this point and not usable.

SECURITY: Disabled caching of decrypted DiffieHellman login requests

Fixed bad captcha refresh code on registration page

Added debugging ability to Language::import() for CLI usage

Fixed bad URL interpretation on CGI and Apache wrongly supplying PATH_INFO when directory index requested

Added debugging switch to $lang->import() for help with optimization

AJAX interface for listing ACL rules implemented

ACL: Added API call to edit rule based only on numeric rule ID; to be used later with lister for existing rules and effective permissions viewer

Made some improvements to ACL system including: warning on setting Deny for Everyone on the entire site, added ACL_ALWAYS_ALLOW_ADMIN_EDIT_ACL, and changed behavior as noted in the docs so that Deny for Everyone is no longer able to be overridden

Fixed some bugs in the installer that prevented it from working without mod_rewrite and/or with a table_prefix present

Added a copy of Firebug Lite for debugging purposes. License is uncertain but being treated as MPL. (If is is not MPL then it is under something more permissive that permits relicensing anyway)

Fixed auto-detection of URL scheme, didn't work unless rewriting worked

Fixed some stray version numbers (again!); added support for Diffie-Hellman logins in the normal login form (not AJAX) - even works in IE

Updated tree menu images to fit with the icons

Added icons for the administration panel

Added support for embedding language data into plugins; updated all version numbers on plugin files

[minor] silence errors when closing DB connections

Adding the images for the expander support. (oops)

Added support for an enano:expand=(closed|open) attribute on fieldsets to make them act like GTK expandable widgets; implementation is on Special:CreatePage

Added basic CLI support for the Enano API. Loads automatically, just include common.php as normal. REVISION 500!!! :-D

Fixed some bugs with PostgreSQL and added a word_lcase column to the search_index table because collation is not working under MySQL. TODO: Trigger search index rebuild on upgrade to 1.1.4.

Fixed some display issues with breadcrumbs (thanks Manoj)

Updated upgrade/migration schemas to handle user_timezone column properly

[Minor] Added a nice little link on upgrade success.

Fixed undefined variable ($row['is_regex'] instead of $is_regex) in sessions.php

Added support for upgrading arbitrary previous 1.0.x versions (very experimental)

Fixed the TinyMCE save bug.

Tagging last revision as it should be tagged (again)

Aww crap. NOW it should be together.

Tagging last revision as it should be tagged

Unstable alpha release (reprise): 1.1.3 (Caoineag alpha 3)

Oops: fixed broken template loader in upgrader for 1.0.x and 1.1.1

Unstable alpha release: 1.1.3 (Caoineag alpha 3)

Oops - had unneeded debug message in installer

[Security] made session manager have some degree of IP validation for session keys and upgrades

Fixed session validation bug in upgrade script; fixed non-object reference in template_nodb

Added safety against re-defining constants in dbal

Update readme for imminent 1.1.3 release

Hopefully completed rewrite and localization of rollback backend and interface

Added a cron task to sessions.php that deletes old admin keys once a week

Added $no_wrapper parameter to die_semicritical, useful for some upcoming PageProcessor tweaks.

Localized some remaining login bits

Fixed bad style update during theme uninstall.

Upgraded to TinyMCE 3.0.3; made editor auto-init again but only on Safari

Fixed $db->die_json(), should now produce standards-compliant output.

Changed TinyMCE init to run only on demand. Highly experimental.

Added modal dialog support for page editor; added customizability for breadcrumbs (thanks to Manoj for idea)

Implemented password reset (albeit hackishly) into the new login API; added dummy window.console object to hopefully reduce errors when Firebug isn't around; fixed the longstanding ACL dismiss/close button bug; fixed a couple undefined variables in mailer; fixed PHP error on attempted opening of /dev/(u)random in rijndael.php; clarified documentation for PageProcessor::update_page(); fixed some logic problems in theme ACL code; disabled CAPTCHA debug

Implemented all security features on theme disabling and ACLs; added clean_key mode to login API to clean unused encryption keys

[minor] fix version number on license block comment in common.php

Oops. Forgot to add the themepreview.png file which is a dummy icon for themes that don't include screenshots. Also in last commit several changes weren't documented, including: Moved several page manipulation functions from PageUtils to PageProcess. Fixed debug message in l10n.js. Started switchover to new rollback API and log_id column replacing time_id as key.

Fixed the fact that cron just didn't work at all (brain fart that day or something)

Modifed EnanoMath layer by segregating it into its own file; got support for big_int PHP extension backend working

Fixed improper serializing of IP that could allow reusing of key from multiple IP addresses.

Finished theme manager to the point where it's in a working state in Firefox and hopefully IE.

Documented includes/plugins.php to try and help plugin developers a little.

Fixed some bugs with $paths->getParam() and $paths->get_pageid_from_url() when slashes are in the namespace prefix. Result of testing on Windows Vista + Apache 2.2. Using TortoiseHG

Minor standards-compliance fix in Request_HTTP

Fixed a number of IE6 bugs

Merging in changes from Nighthawk

Upgraded tinyMCE to 3.0.1 in hopes of fixing IE race conditions. Fixed a couple minor syntax errors in Javascript objects declared in various places.

Merging fixes and updates from stable branch

Fixed: RenderMan::getPage() failing with access denial when fetching template and view_source results in deny

Made all captcha fields case-insensitive (thanks pkeating)

Merging scribus and nighthawk branches

Fixed special pages being returned with subpage information inappropriately from $paths->get_pageid_from_url()

Fixed jBox menus failing to appear when window scrolled down

Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)

Re-applying the revision with the comment fix (bad merge a couple revs back)

Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)

Merging in a couple revisions from Nighthawk

Fixed broken regenCaptcha() in Special:Register

Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.

Removed all PostgreSQL support from the installer as per http://enanocms.org/News:1200114064; installer support for Postgres is available in the 1.1 branch now

Fixed case-sensitive file extensions

PHP4 fix: sidebar missing in installer UI: problem was wrongly named constructor for templateIndividualSafe

Fix undefined E_STRICT under PHP 4; add PHP 4 deprecation notice in admin panel

Installer works again now (for MySQL only)

Adding a few stray files and removing the no-longer-needed Creative Commons Attribution 2.0 license (no more libraries under that license are included with Enano); adding hooks pageprocess_render_{head,tail} to be run before and after the final page render, respectively.

Integrating patch for PHP 6.0-dev compatibility

Fixed wrong images being used in installer formutils

Fixed broken installer due to bad $plugins object

Enabled strong compression on pwstrength.js as it causes problems otherwise in Opera

Added support for Diffie-Hellman key exchange during login. w00t!

And might as well add theme-manager.js while I'm at it.

Merging a stray change from Nighthawk (probably release tagging)

Can't believe I forgot to add ThemeManager.php.

[retag] Unstable alpha release: 1.1.2 (Caoineag alpha 2)

Detagging last release revision to merge in theme manager from Scribus

Started (but disabled) work on the new theme manager, 1.1.2 is being released with this thing halfway done.

Unstable alpha release: 1.1.2 (Caoineag alpha 2)

Updated readme file for 1.1.2 release

Merging Nighthawk and Scribus branches

Modernized Special:CreatePage.

Fixed typo in ban logic

Some memory usage improvements, I think. PHP is being weird to me.

Merging changes from scribus

Fixed user -> user_id transition for enano_tags table

Optimized JS aggressive-compression list a little more

Re-enabled, debugged, and optimized Javascript compression code

Unsuccessful attempt at fixing "dismiss"/"close manager" buttons in ACL editor; non-breaking change to template API to allow plugins to add "normal" sidebar widgets in addition to the special "raw" block type, specified as the third parameter to $template->sidebar_widget(). Defaults to false, which is old behavior; new behavior (enabled by passing TRUE as the 3rd param) means that the content of the block is primarily block-level links.

Fixed version-set on migration code (see the comments in the source for why) and added post-upgrade hooks.

Edit summary should now be carried over when a draft is restored

[Minor] Fixed obsolete trigger upon attempt at page save after draft autosave

OOPS: forgot to add the "save draft" icon

Added "is_draft != 1" where appropriate in SQL queries to prevent drafts from being treated as real revisions.

Added autosave functionality and resurrected the old toolbar code that was added about a year ago but never uesd.

Tagging latest revision as rebrand

Rebrand as 1.1.2; made upgrade framework functional

Added upgrade schema files for 1.1.1 -> current (1.1.2-dev)

Removed unused schema files

Modified editor and rename functions to go through the API when rolling back. This causes rollbacks to be logged.

Mass-fixed all AJAX functions to also check the HTTP status code before parsing the response

Added some basic timezone support; DST support is still to come.

[minor] re-enabled ENANO_DANGEROUS on install.php (oops!); made textarea in page editor focus automatically

Made the form validation icons (check/X/?) more visually appealing. IE-friendliness is still on the TODO list.

Started on a Special:RecentChanges page, more to come.

Fixed some captcha bugs and made all captcha fields case-insensitive

Implemented a new CAPTCHA API; the frontend ($session->{make,get}_captcha) is API-compatible but the backend (the captcha class) is deprecated.

A few hacks to make the 1.1 demo plugin work

Cosmetic improvements to page editor; added demo mode checks in Admin:LangManager

Fixed some MySQL installation schema bugs, thanks to rainmain on the forums.

Added a heading "editing page" in page editor for visual appeal; removed use of alternate <?= ?> syntax in installer as it was causing problems on Win2k3 + PHP/FastCGI. (Experimentally using TortoiseHG's hgtk to commit)

Fixed some stray undefined-variable problems revealed as a result of testing on Windows Server '03, IIS6, PHP/FastCGI, and PostgreSQL 8.2.5.

Fixed splitting bug (really the same issue from stable) in get_pageid_from_url(); upgraded TinyMCE to version 3.0-stable

Fixed jBox menus failing to appear when window scrolled down

Unstable alpha release (1.1.1)

Updated readme file for 1.1.1

Localization is FINISHED, DAMN IT HELLAH YEAH! OVER WITH! Man, it feels to get that off my chest. Release is in under 48 hours, folks. And we're ready for it.

Fixed JSON parser error in installer (caused by magic_quotes_gpc, wouldn't you know) and re-enabled server-side l10n debugging

Merging Nighthawk and Scribus branches (and Scribus is back, yay!)

Localized stray string "list of registered members" in UCP

Rebranded source code as 1.1.1; added TinyMCE ACL rule as per Vadi's request: http://forum.enanocms.org/viewtopic.php?f=7&t=54

Fixed contentPath getting messed up because I forgot a slash or two in payload

payload.php stg_language_setup() should set default language now

Fixed bad column count in MySQL payload

Fixed SYSMSG tag in templates causing problems; commented out ENANO_DEBUG; fixed bad table prefix in installer payload logic

Profiling enabled for RenderMan's wikiformat routine; [minor] made HTML from profiler more pretty

Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)

Updated acledit and comment templates on themes, as they weren't in sync with Oxygen; fixed some undefined index errors in SpecialAdmin and paths

Minor and hopefully non-breaking change to plugin loader to possibly double performance at hook points

Got Enano to load even if there are no plugins; added caching for decrypted session keys to significantly improve performance (in theory at least)

Removed stray debugging info from ACL editor success notification; added ability for guests to set language on URI (?lang=eng); added html_in_pages ACL type and separated from php_in_pages so HTML can be embedded but not PHP; rewote portions of the path manager to better abstract URL input; added Zend Framework into list of BSD-licensed libraries; localized some remaining strings; got the migration script working, but just barely; fixed display bug in Special:Contributions; localized Main Page button in admin panel

Finished (or nearly finished) the admin language CP

[minor] Trying to be a little more careful with values from users_extra in validate_session()

[minor] silenced errors to mysql_free_result() and pg_free_result()

[minor] silenced errors to ob_gzhandler()

A number of scattered changes. Profiler added and only enabled in debug mode (currently on), but awfully useful for fixing performance in the future. Started work on Admin:LangManager

Improved compatibility with PostgreSQL and fixed a number of installer bugs; fixed missing "meta" category declaration in language files

Localized registration errors and activation/COPPA e-mails

Localized the 404 page, w00t.

Finished localizing PageProcessor, we hope

Localized autosuggestion widgets

Localized Special:UploadFile and Special:DownloadFile