includes/sessions.php
2008-03-03 Dan Implemented password reset (albeit hackishly) into the new login API; added dummy window.console object to hopefully reduce errors when Firebug isn't around; fixed the longstanding ACL dismiss/close button bug; fixed a couple undefined variables in mailer; fixed PHP error on attempted opening of /dev/(u)random in rijndael.php; clarified documentation for PageProcessor::update_page(); fixed some logic problems in theme ACL code; disabled CAPTCHA debug
2008-03-02 Dan Implemented all security features on theme disabling and ACLs; added clean_key mode to login API to clean unused encryption keys
2008-03-01 Dan Fixed improper serializing of IP that could allow reusing of key from multiple IP addresses.
2008-02-24 Dan Merging in changes from Nighthawk
2008-02-22 Dan Merging fixes and updates from stable branch
2008-01-01 Dan Integrating patch for PHP 6.0-dev compatibility
2008-02-20 Dan Added support for Diffie-Hellman key exchange during login. w00t!
2008-02-18 Dan Fixed typo in ban logic
2008-02-11 Dan Rebrand as 1.1.2; made upgrade framework functional
2008-02-09 Dan Added some basic timezone support; DST support is still to come.
2008-02-07 Dan Fixed some captcha bugs and made all captcha fields case-insensitive
2008-02-06 Dan Implemented a new CAPTCHA API; the frontend ($session->{make,get}_captcha) is API-compatible but the backend (the captcha class) is deprecated.
2008-01-30 Dan Localization is FINISHED, DAMN IT HELLAH YEAH! OVER WITH! Man, it feels to get that off my chest. Release is in under 48 hours, folks. And we're ready for it.
2008-01-29 Dan Rebranded source code as 1.1.1; added TinyMCE ACL rule as per Vadi's request: http://forum.enanocms.org/viewtopic.php?f=7&t=54
2008-01-28 Dan Got Enano to load even if there are no plugins; added caching for decrypted session keys to significantly improve performance (in theory at least)
2008-01-26 Dan Removed stray debugging info from ACL editor success notification; added ability for guests to set language on URI (?lang=eng); added html_in_pages ACL type and separated from php_in_pages so HTML can be embedded but not PHP; rewote portions of the path manager to better abstract URL input; added Zend Framework into list of BSD-licensed libraries; localized some remaining strings; got the migration script working, but just barely; fixed display bug in Special:Contributions; localized Main Page button in admin panel
2008-01-25 Dan [minor] Trying to be a little more careful with values from users_extra in validate_session()
2008-01-25 Dan A number of scattered changes. Profiler added and only enabled in debug mode (currently on), but awfully useful for fixing performance in the future. Started work on Admin:LangManager
2008-01-23 Dan Improved compatibility with PostgreSQL and fixed a number of installer bugs; fixed missing "meta" category declaration in language files
2008-01-22 Dan Localized registration errors and activation/COPPA e-mails
2008-01-21 Dan Implemented IP logging for comments and registration
2008-01-03 Dan WiP commit for admin panel localization. All modules up to Admin:UserManager (working down the list) are localized except Admin:ThemeManager, which is due for a rewrite
2007-12-28 Dan Merging in the last couple of revisions from stable
2007-12-23 Dan Corrected licensing issue on YoungPup's DOM-Drag (it is now public domain -> GPLv2+ for Enano); fixed wrongful access denial under specific circumstances (fetch_page_acl() on nonexistent page + wiki mode)
2007-12-28 Dan Replaced TinyMCE 2.x with 3.0 beta 3. Supports everything but IE. Also rewrote the editor interface completely from the ground up.
2007-12-20 Dan Redid merge, the previous one had a few problems
2007-12-19 Dan Many changes. Installer with PostgreSQL is broken badly and will be for some time.
2007-12-15 Dan SURPRISE! Preliminary PostgreSQL support added. The required schema file is not present in this commit and will be included at a later date. No installer support is implemented. Also in this commit: several fixes including <!-- SYSMSG ... --> was broken in template compiler; set fixed width on included images to prevent the thumbnail box from getting huge; added a much more friendly interface to AJAX responses that are invalid JSON
2007-12-13 Dan Rebrand as 1.0.3 (Dyrad)
2007-12-07 Dan Merging in changes from stable
2007-12-03 Dan Deprecated debugConsole and removed all calls to it. Added a lot of comments to common.php. Added support for "anonymous pages" that are created when the Enano API is loaded from an external script. Fixed missing border-bottom on Type 2 sidebar blocks in Oxygen.
2007-12-02 Dan Merging in the newly stable Coblynau
2007-11-25 Dan Fixed highlighting in search results; changed search algorithm to give more score for terms found in page title; hopefully (hackishly) fixed login_key_cache getting too long
2007-11-24 Dan Fixed a few major bugs with the upgrade script and the config file not getting loaded properly due to IN_ENANO_INSTALL
2007-11-24 Dan Fixed a number of issues with SQL query readability and some undefined index-ish errors; consequently the SQL report feature was added
2007-11-19 Dan Merging in fixes and updates from stable
2007-11-18 Dan Major fixes to the ban system - large IP match lists don't slow down the server miserably anymore.
2007-11-18 Dan Hopefully managed to put enough hacks in there to make renaming the config file the last step, so if it fails, it can be done manually
2007-11-18 Dan Merging in fixes from stable
2007-11-18 Dan Major improvements in the security of the CAPTCHA system (no SQL injection or anything like that); fixed denied form submission due to _af_acting on form object wrongly switched to true
2007-11-17 Dan Fixed: secure-cookie option is no longer set if $_SERVER['HTTPS'] is set but == "off"
2007-11-15 Dan Merging in all changes from revision 185 (90b7a52bea45)
2007-11-09 Dan Merge in some minor fixes from stable
2007-11-09 Dan Cleaned up some HTML in the installer; corrected some phpDoc syntax errors
2007-11-03 Dan Merging in fixes and updates from 90b7a52bea45
2007-11-03 Dan Merging in fixes from rev. 207
2007-11-03 Dan Localized a good part, if not all, of the registration page and a couple other things.
2007-10-28 Dan Login page mostly localized
2007-10-24 Dan Merging in fixes from stable
2007-10-26 Dan You know what folks, a lot of Mercurial merges failed, and I just now figured out why. So now all changes from stable are permanently synced in.
2007-10-23 Dan Slight HTTPS compatibility improvements
2007-10-21 Dan Merging in changes from db8a849ad4c9
2007-10-21 Dan Merging in changes from stable
2007-10-15 Dan SECURITY: Fix failure to log login failure on no row match
2007-10-08 Dan Fixed the security hole (really, I'm a moron - used $failed > $threshold instead of $failed >= $threashold) and patched up some...erm... math issues
2007-10-08 Dan Upgrade UI should work now (upgrades still don't work); do not pull this revision as there is a security hole in the lockout system pending a fix
less more (0) -56 tip