Made $session->private_key protected and added pk_{en,de}crypt methods for encrypting and decrypting data using the private key

Several optimization changes including getting rid of a few eval()s. Added placeholder functions for the theme manager, which should be working now

[minor] Added password_score_* into placeholder functions

Upgraded TinyMCE to 3.1.0.1. Ported a couple special pages to the componentized JS system.

Oops, scriptPath isn't defined in jsres.php.

Made encryption work in form-based logon again; modified load_component() to fetch compressed versions when possible

Fixed javascript ACL manager and captcha not showing on ajax login lockout_captcha event

Fixed missing table_prefix in generate_rank_sql()

Installer should work with JS componentization now

Majorly reworked Javascript runtime stuff to use on-demand loading. - Runtime reduced to only AJAX library + very common functions, ~50K total - Almost all specific functionality loaded on demand using synchronous XHR - Crypto functions consolidated into crypto.js - Much testing still to be done - ACL editor known not working under firefox - Some other components (autofill, theme/rank managers) not ported yet

Initial progress towards converting auto-completion framework to Spry. Not currently in a very working state.

Fixed SQL syntax error thrown during rank data fetch

Fixed access type warning in discussion button generation in template

Fixed: init_vars double-init check ignored theme changes/reloads

Made template parser remember last initted page_id and namespace to avoid double init; made additional_headers reassign only do so if $template->additional_headers is empty (it's being blanked somehow, need to come up with a backtrace sometime)

Fixed undefined index left over from scope system rewrite a few days ago

Fixed two bugs in paginator: noisy warning when rows run out and empty strings not being treated as valid from formatting functions

Fixed title not being set properly in redirect()

Renamed some functions (that were new in this release anyway) due to compatibility broken with PunBB bridge

Moved some TinyMCE init code to make JS early init work

Got ACL scope logic working again and began enforcing it. Breaking API change: assigning page title with $template->tpl_strings['PAGE_NAME'] will no longer work, use $template->assign_vars(). Workaround may be added later. Test for assign_vars method if compatibility needed. Added namespace processor API (non-breaking change). Several other things tweaked around as well.

Fixed some plugin compatibility issues seen in Nuggie

Updated image tag parser a bit. Handles recursion of brackets properly now, allows custom parameters from plugins, and takes parameters in any order due to new keyword-based parser

A bit of UX improvement to upgrade UI; updated readme for 1.1.4

Actually made the "prevent search indexing" switch work. Needs to be merged with stable.

Made ajaxReset() call the actual requested title instead of effective title; fixed (again) template compiler bug not matching certain tags (probably PCRE bug)

[YSlow experimental] Moved jsres.php include to bottom of the body in oxygen

Updated version number metadata in system plugin files; added some comments and removed unused code from index.php and includes/graphs.php

First test of rank manager interface, not currently capable of doing anything interesting (fills form with placeholder data); strings are in an earlier commit

Got initial CSRF token framework implemented and sample implementation added in Special:Logout; removing Javascript compression engine from aggressive_optimize_html() and instead calling JavascriptCompressor class from js-compressor.php

Removed remaining references to enano.homelinux.org

Added re-import function to plugin manager

[YSlow] Added Expires header on jsres.php

Fixed some GD detection bugs with freecap

Modified $template->init_vars() to pivot to local page metadata and permissions from a PageProcessor object instead of global data from $paths and permissions from $session to allow redirects to affect on-page controls as well as the actual content (only partially complete, protection and several other elements still need to be localized)

More work done on effective permissions API, namely reporting of page group and usergroup names

Added user preference for disabling visual effects in Javascript applets; added re-import button to installed plugins

Revamped some ACL code and added effective permissions calculation code into session manager

Merged in the word_lcase column (finally)

Moved some more images into sprites for Oxygen

Minified some JS files using YUI compressor

Added ability to delete the draft revision; [SECURITY] fixed lack of permission check on draft save; renamed messagebox() constructor to MessageBox() (backward compat. maintained)

Added source and compiled images for Mint's sprites

Re-synced Mint style from the Oxygen theme

Added ETag on TinyMCE gzip; changed ETag format for standard pages so as to include user and login info to control caching when logged in or out

Switched Oxygen to use CSS sprites for faster loading (CSS changes were in a past commit, only adding image files here)

Add standard header comment block and date of changes to tiny_mce_gzip to conform to GPL/LGPL

Added TinyMCE compression support and made some supporting modifications to common.php

Upgraded TinyMCE to version 3.0.8

Added ETag support and increased caching settings to try and speed the system up. Result of a YSlow audit.

Massive commit with various changes. Added user ranks system (no admin interface yet) and ability for users to have custom user titles. Made cron framework accept fractions of hours through floating-point intervals. Modifed ACL editor to use miniPrompt framework for close confirmation box. Made avatar system use a special page as opposed to fetching the files directly for caching reasons.

Added but didn't set up custom_user_title ACL; fixed rebuild_page_index() to use word_lcase

Replaced some confirmation boxes with miniPromptMessage versions. This commit will require a re-langimport and shift-reload.

Merging changes from nighthawk

Added a really simple message box system based on miniPrompts, this will be used for confirmation windows like delete_page, clear_logs, delvote, etc.

Rebrand as 1.1.4 (Caoineag alpha 4)

Fixed selector stage in ACL editor under Safari

Added template_compile_subst hook

Huge improvements to the template_nodb class and surrounding code; moved template compiler core to its own non-classed function to allow code re-use

Finally fixed link coloring settings in Oxygen Bleu; added compatibility wrapper for people that "ajaxLogonInit" over "ajaxLoginInit"