Dan Fuhry <dan@enanocms.org> [Mon, 05 Jul 2010 19:52:10 -0400] rev 1261
DiffieHellman: gracefully handle platforms that fail the sha256 self test, currently only known to be PowerPC. Added support for PHP's built-in hash functions (they were added in 5.1.2) and use them in lieu of the built-in sha256 implementation when available.
Dan Fuhry <dan@enanocms.org> [Thu, 01 Jul 2010 20:51:53 -0400] rev 1260
Fixed the (rather expected) 1.0.x migration issues db revision system
Dan Fuhry <dan@enanocms.org> [Thu, 01 Jul 2010 20:24:19 -0400] rev 1259
First shot at switching to database revision numbers separate from release version number. There are probably bugs, especially related to migration.
Dan Fuhry <dan@enanocms.org> [Thu, 01 Jul 2010 18:25:04 -0400] rev 1258
Tagged release: 1.1.7pl1
Dan Fuhry <dan@enanocms.org> [Thu, 01 Jul 2010 18:24:11 -0400] rev 1257
Integrated XSS patch for 1.1.7 maintenance branch
Dan Fuhry <dan@enanocms.org> [Mon, 28 Jun 2010 13:55:31 -0400] rev 1256
Enanium: Added directionality to simple-header
Dan Fuhry <dan@enanocms.org> [Mon, 28 Jun 2010 13:33:09 -0400] rev 1255
Oops, maybe I could set English back to LTR :)
Dan Fuhry <dan@enanocms.org> [Mon, 28 Jun 2010 13:31:21 -0400] rev 1254
Added basic support for right-to-left languages. Set meta_direction to "rtl" in core.json.
Dan Fuhry <dan@enanocms.org> [Mon, 28 Jun 2010 10:43:04 -0400] rev 1253
SECURITY: Multiple XSS in Special:ChangeStyle. Reported by Mesut Timur of Mavituna Security - thanks! Also removed my stand-in for ucfirst().
Dan [Wed, 02 Jun 2010 21:58:26 -0400] rev 1252
Rewrote category editor. This breaks the JSON API. Also fixed a few bugs with how Wiki Mode is set in $paths. (Hopefully that doesn't cause infinite loops, heh). Fixes issue 20.
Dan [Sun, 16 May 2010 21:35:43 -0400] rev 1251
Added the ability to trust XFF (X-Forwarded-For) headers.
Dan [Sat, 15 May 2010 03:05:43 -0400] rev 1250
Test commit to verify that ktulu auto sync works properly
Dan [Sun, 02 May 2010 23:15:18 -0400] rev 1249
Added a box on Admin:UploadConfig showing the value of upload_max_filesize.
Dan [Fri, 30 Apr 2010 22:15:03 -0400] rev 1248
Merged (accidental split)
Dan [Fri, 30 Apr 2010 22:13:08 -0400] rev 1247
Fixed typo in that, the parameter that was supposed to go to getConfig was going to htmlspecialchars()
Dan [Fri, 30 Apr 2010 22:10:57 -0400] rev 1246
Added an ajax auto check for the path to ImageMagick in Admin:UploadConfig
Dan [Tue, 20 Apr 2010 11:38:59 -0400] rev 1245
Reordered wiki render stages so images happen before external links. Fixes a parser bug seen, among other places, on the Donation page.
Dan [Tue, 20 Apr 2010 11:38:24 -0400] rev 1244
Fixed some cosmetic bugs in Special:AllPages
Dan [Mon, 19 Apr 2010 18:07:43 -0400] rev 1243
Fixed registration admin override with account_activation set to disable.
Dan [Sat, 17 Apr 2010 03:33:14 -0400] rev 1242
Made separate methods in sessionManager for static and non-static generate_aes_form(), because PHP (erroneously) always calls that method statically.
Dan [Tue, 06 Apr 2010 15:55:21 -0400] rev 1241
Merged
Dan [Tue, 06 Apr 2010 15:54:45 -0400] rev 1240
Added Diffie-Hellman crypto support into the installer. Fixes issue 13.
Dan [Tue, 06 Apr 2010 10:46:25 -0400] rev 1239
Clarified some edit conflict related strings
Dan [Fri, 02 Apr 2010 17:43:50 -0400] rev 1238
Fixed lockout list in ACP under PostgreSQL
Neal Gompa <neal@enanocms.org> [Fri, 02 Apr 2010 14:48:15 -0500] rev 1237
Merge in changes about legal marks
Neal Gompa <neal@enanocms.org> [Fri, 02 Apr 2010 14:43:37 -0500] rev 1236
Fixed various legal marks in the strings of the English language pack
Dan [Fri, 02 Apr 2010 15:12:02 -0400] rev 1235
Fixed Gravatars not showing up immediately after save in Avatar UCP
Dan [Fri, 02 Apr 2010 14:42:15 -0400] rev 1234
Fixed fread() usage in Request_HTTP not properly handling incomplete responses
Neal Gompa <neal@enanocms.org> [Thu, 01 Apr 2010 19:57:23 -0500] rev 1233
Fixed typo in install.json in pgsql "no php extension" error string
Dan [Tue, 30 Mar 2010 11:43:17 -0400] rev 1232
Fixed password_score_field onload in Admin:UserManager
Dan [Tue, 30 Mar 2010 11:37:00 -0400] rev 1231
Added selection and popup for <pre> tags within wikitext. Also fixed more bugs found in the HTML paragraph parser (mostly self-closing tags e.g. <hr />).
Dan [Tue, 30 Mar 2010 11:34:56 -0400] rev 1230
Renderer: fixed the regex that looks for h-tags in reverse_process_headings so it looks forthe new format #head: IDs.
Dan [Fri, 26 Feb 2010 12:59:24 -0500] rev 1229
Fixed "waiting for l10n init" and js error in Admin:UserManager
Dan [Mon, 29 Mar 2010 01:47:31 -0400] rev 1228
Search: strip HTML tags from result text (DB pages only). Fixes issue 17.
Dan [Sun, 28 Mar 2010 23:10:46 -0400] rev 1227
Going ahead with the switch to tabs. This is a major coding standards change! If any unusual parser bugs show up, check this changeset. Converted all .php, .js, .tpl, .css, and .json files and did basic testing.
Dan [Sun, 28 Mar 2010 21:49:26 -0400] rev 1226
Introduced configurability for gzip compression. Fixes issue 18.
Dan [Sun, 28 Mar 2010 21:40:37 -0400] rev 1225
Replaced (most of) the mini box icons with famfamfam silk icons, they're better looking.
Dan [Sun, 28 Mar 2010 21:39:37 -0400] rev 1224
Added https support in Request_HTTP
Dan [Sat, 20 Mar 2010 16:05:38 -0400] rev 1223
Fixed "unapproved" status taking precedence over "spam" flag in comment submit and some display related bugs in comments.js
Dan [Wed, 17 Mar 2010 14:21:46 -0400] rev 1222
Fixed username not being decoded in Special:ActivateAccount
Dan [Mon, 08 Feb 2010 17:04:43 -0500] rev 1221
Merged braches from accidental split
Dan [Mon, 08 Feb 2010 17:04:08 -0500] rev 1220
Fixed unescaped ampersands in "&enano_version" cache breaking
Dan [Sun, 07 Feb 2010 17:07:42 -0500] rev 1219
URL sanitizer: disabled uppercase letters in URL hex character codes (it was causing conflicts with the Windows/Apache 2.2 alt namespace separator). Thanks Techokami for finding and reporting this bug.
Dan [Wed, 03 Feb 2010 02:35:47 -0500] rev 1218
Added var enano_version to installer JS header
Dan [Mon, 01 Feb 2010 02:22:54 -0500] rev 1217
Modified paragraph rule to not use recursive parsing; made parsing of code and pre tags much more reliable. Fixes issue 1 (QA: RE-TEST).
Dan [Mon, 01 Feb 2010 02:15:04 -0500] rev 1216
Fixed more places where author_uid wasn't right.
Dan [Mon, 01 Feb 2010 02:14:02 -0500] rev 1215
Added "days ago" to the Site Started field on admin home
Dan [Tue, 19 Jan 2010 10:02:30 -0500] rev 1214
Fixed an example url in install.json pophelp (which may be removed momentarily)
Dan [Tue, 12 Jan 2010 11:33:53 -0500] rev 1213
Renamed 1.0.6 -> 1.0.6pl1 upgrade script, migrations from 1.0.6pl1 were broken
phirox [Sun, 10 Jan 2010 17:14:52 -0500] rev 1212
Fix: add author_uid in GROUP BY in LogDisplay for PostgreSQL compatibility
Dan [Sun, 10 Jan 2010 17:13:03 -0500] rev 1211
Fixed author_uid in activation request insertion
Dan [Wed, 06 Jan 2010 02:20:53 -0500] rev 1210
Logins: if the error message string doesn't look like a langstring id, don't prepend "user_err_" to it (some auth plugins are not localized at all, this lets them be without ugly cosmetic bugs)
Dan [Wed, 06 Jan 2010 02:19:58 -0500] rev 1209
Somehow I broke automatic localization of special page titles.
Dan [Wed, 06 Jan 2010 02:03:20 -0500] rev 1208
End year on Enano copyright dates is dynamic now
Dan [Wed, 06 Jan 2010 02:03:10 -0500] rev 1207
DBAL: readded sql_affectedrows(), some plugins were using it
Dan [Wed, 06 Jan 2010 02:02:51 -0500] rev 1206
Fixed some bugs with account activation, especially if you're a half-logged-in vegetable.
Dan [Wed, 06 Jan 2010 01:18:19 -0500] rev 1205
Sessions: fixed on_critical_page(), it referenced the wrong global; enabled better extensible behavior in the account_active column
Dan [Tue, 05 Jan 2010 09:56:21 -0500] rev 1204
Merging scribus and charlie repos
Dan [Tue, 05 Jan 2010 09:56:00 -0500] rev 1203
Fixed ENANO_VERSION under databaseless template class
Dan [Tue, 05 Jan 2010 09:55:21 -0500] rev 1202
common_cli: Fixed warning with $paths->init() (kind of a hack)
Dan [Tue, 05 Jan 2010 09:53:26 -0500] rev 1201
Search: some refinements to algorithm, introduced score promotion for phrase matches and Levenshtein distance based score manipulation
Dan [Tue, 05 Jan 2010 09:50:25 -0500] rev 1200
Fixed a bug in getHighestZ() that broke login boxes
Dan [Mon, 04 Jan 2010 11:09:50 -0500] rev 1199
Fixed Special:AllPages under PostgreSQL. Thanks phirox from IRC.
Dan [Mon, 28 Dec 2009 16:53:19 -0500] rev 1198
Fixed oversanitation of multiple XHTML closing tags in a row
Dan [Mon, 28 Dec 2009 12:20:43 -0500] rev 1197
Tagged 1.1.7 as current-unstable
Dan [Sun, 27 Dec 2009 02:28:21 -0500] rev 1196
All javascript and css requests now append the version number to the URL to break browser caches and prevent from having to clear the cache upon upgrade
Dan [Sun, 27 Dec 2009 02:27:35 -0500] rev 1195
Version bump to 1.1.8
Dan [Sun, 27 Dec 2009 02:25:29 -0500] rev 1194
Fixed phrase search, it got really broken somehow
Dan [Tue, 22 Dec 2009 13:09:59 -0500] rev 1193
TinyMCE: Bumped to v3.2.7
Dan [Mon, 21 Dec 2009 15:41:05 -0500] rev 1192
Fixed two "declaration should be compatible" errors encountered by the BitNami folks. Thanks Neal for reporting.
Dan [Sat, 19 Dec 2009 16:06:29 -0500] rev 1191
Beta release: Enano CMS 1.1.7 (Caoineag beta 2) (retag #2)
Dan [Sat, 19 Dec 2009 16:06:27 -0500] rev 1190
Detagged 1.1.7
Dan [Sat, 19 Dec 2009 15:59:52 -0500] rev 1189
Upgrade: added 1.0.6pl1 migration support, tarball repository will need to be updated
Dan [Fri, 18 Dec 2009 22:04:01 -0500] rev 1188
Beta release: Enano CMS 1.1.7 (Caoineag beta 2)
Dan [Fri, 18 Dec 2009 22:03:55 -0500] rev 1187
Last minute fix to wikitext code tag
Dan [Fri, 18 Dec 2009 22:00:02 -0500] rev 1186
Backout from 1.1.7 due to upgrade issue, fixed and retagging
Dan [Fri, 18 Dec 2009 21:49:48 -0500] rev 1185
Beta release: Enano CMS 1.1.7 (Caoineag beta 2)
Dan [Fri, 18 Dec 2009 21:46:05 -0500] rev 1184
Backed out of ENANO_INSTALLED check in DBAL, it broke CLI installs badly
Dan [Fri, 18 Dec 2009 21:21:59 -0500] rev 1183
OK screw that, put the crypto backend check in functions.
Dan [Fri, 18 Dec 2009 21:11:42 -0500] rev 1182
Fixed libenanoinstall/CLI double declaration of run_installer_stage()
Dan [Fri, 18 Dec 2009 21:04:39 -0500] rev 1181
Forgot table_prefix in the logs table migrator
Dan [Fri, 18 Dec 2009 21:01:09 -0500] rev 1180
Fixed no author_uid in PageProcessor::rename_page()
Dan [Fri, 18 Dec 2009 20:57:28 -0500] rev 1179
Added an upgrade hook to populate the author_uid column in logs, pending test by Neal
Dan [Fri, 18 Dec 2009 20:31:43 -0500] rev 1178
Added ajaxLoginInit to JS load stub list
Dan [Fri, 18 Dec 2009 19:26:36 -0500] rev 1177
Added a graceful dead-end for the tutorial; removed the hash symbols from IRC links per a heads-up from Neal.
Dan [Fri, 18 Dec 2009 19:17:18 -0500] rev 1176
AJAX login: Fixed error box failure to destroy upon cancel. Fixes issue 8.
Dan [Fri, 18 Dec 2009 19:06:49 -0500] rev 1175
Logs: Fully integrated an author_uid column. Logs are now linked by user ID instead of just username, so they survive username changes better. Database is changed. Fixes issue 6.
Dan [Fri, 18 Dec 2009 09:39:18 -0500] rev 1174
Wikitext parer: re-added the <code> tag thing
Dan [Fri, 18 Dec 2009 05:12:02 -0500] rev 1173
Comments (AJAX): Now paginated server side. Fixes issue 2.
Dan [Fri, 18 Dec 2009 05:05:01 -0500] rev 1172
Mod extras: Changed string for RDNS generic failure error
Dan [Thu, 17 Dec 2009 22:42:32 -0500] rev 1171
Fixed php_in_pages out-of-scope error in Special:UploadFile; modified RenderMan::preprocess_text() to take a permissions object for any page
Dan [Thu, 17 Dec 2009 04:31:55 -0500] rev 1170
ACP: Added lockout management feature
Dan [Thu, 17 Dec 2009 04:29:55 -0500] rev 1169
Fixed undefined $score_min in password change. Potential security concern?
Dan [Thu, 17 Dec 2009 04:27:50 -0500] rev 1168
Namespace_Default: added a workaround for an inconsistency in SQL. Basically, if you join the same table multiple times under multiple aliases, COUNT() always uses the first instance. Was affecting the comment counter in the "discussion" button.
Dan [Thu, 17 Dec 2009 04:26:21 -0500] rev 1167
JSON preparser: fixed corruption of strings that include the exact pattern word, comma, space, word, colon
Dan [Sun, 13 Dec 2009 03:56:18 -0500] rev 1166
Merge from accidental split
Dan [Sun, 13 Dec 2009 03:56:06 -0500] rev 1165
DBAL: Majorly cleaned up and improved coding standards/documentation
Dan [Sat, 12 Dec 2009 17:30:46 -0500] rev 1164
Installer: cleaned up CSS header; updated comments in config.php to not say that passwords are stored with AES (as they are now stored with HMAC-SHA1)
Dan [Sat, 12 Dec 2009 16:45:52 -0500] rev 1163
Updated KNOWN_BUGS to point to our issue tracker
Dan [Sat, 12 Dec 2009 16:44:38 -0500] rev 1162
Crap, broke page editing. Fixed it.
Dan [Sat, 12 Dec 2009 16:23:47 -0500] rev 1161
Drafts saved on nonexistent pages now show up. Fixes issue 7.
Dan [Sat, 12 Dec 2009 15:44:36 -0500] rev 1160
Re-merge changes from a2hosting dev
Dan [Sat, 12 Dec 2009 15:43:23 -0500] rev 1159
Set up more sensible defaults (UTC, DST off) for timezone preferences. Also modified enano_date() to properly include GMT offsets when timezone characters are used. Fixes issue 4.
Dan [Sat, 12 Dec 2009 15:39:36 -0500] rev 1158
CAPTCHA: Added smart autosubmit for registration page. Usability testing was so-so, may back out later.
Dan [Fri, 11 Dec 2009 17:11:47 -0500] rev 1157
A couple fixes to permission out-of-scope errors.
Dan [Fri, 11 Dec 2009 17:10:44 -0500] rev 1156
Wikitext parser: re-added mailto support
Dan [Mon, 07 Dec 2009 15:21:47 -0500] rev 1155
Sessions: Made acl_check_deps() verify scope, so that all of an action's dependencies must apply to the namespace of the given action.
Dan [Mon, 07 Dec 2009 15:12:55 -0500] rev 1154
Removed history_rollback_extra action from scope of Special pages, as it's unneeded
Dan [Mon, 07 Dec 2009 15:12:22 -0500] rev 1153
PostgreSQL: bugfix in ACL related SQL query
Dan [Sun, 06 Dec 2009 22:05:02 -0500] rev 1152
PostgreSQL: Fixed another bug, this time in the log fetch code
Dan [Sun, 06 Dec 2009 21:56:46 -0500] rev 1151
Fixed ranks table under PostgreSQL. FIXME, only affects new installations and upgrades, if this bug is encountered in the wild we might want to look at auto-integrating a fix.
Dan [Sun, 06 Dec 2009 21:54:55 -0500] rev 1150
Updated default main page with links to the Google Code issue tracker
Dan [Sun, 06 Dec 2009 21:53:06 -0500] rev 1149
Improved language for static HTML page delete interface
Dan [Sun, 06 Dec 2009 21:51:55 -0500] rev 1148
PostgreSQL: Fixed $session->create_user()
Dan [Sun, 06 Dec 2009 21:51:32 -0500] rev 1147
PostgreSQL: Fixed user pages. Also added a columns_in() method to the DBAL to list columns in a table
Dan [Sun, 06 Dec 2009 18:22:02 -0500] rev 1146
PostgreSQL: fixed Admin:SecurityLog database error
Dan [Tue, 01 Dec 2009 11:15:45 -0500] rev 1145
Plugin block parser: Fixed plugin block parsing for plugin files in CRLF format
Dan [Tue, 01 Dec 2009 00:35:04 -0500] rev 1144
Installer sysreqs: Merged all the crypto extensions into one check; altered warnings. Strings are hopefully cleaned up.
Dan [Tue, 01 Dec 2009 00:27:26 -0500] rev 1143
common_cli and dbal: Fixed lack of ENANO_INSTALLED check in determining config path
Dan [Mon, 30 Nov 2009 22:35:14 -0500] rev 1142
Merge from accidental split
Dan [Mon, 30 Nov 2009 22:34:58 -0500] rev 1141
Admin User Manager: When a user with a DB-driven user page is renamed, also change urlname of their user page. Fixes issue 3.
Dan [Mon, 30 Nov 2009 22:22:43 -0500] rev 1140
Admin Home: fixed undefined %num_users% in string acphome_msg_inactive_users_plural
Dan [Fri, 27 Nov 2009 18:31:23 -0500] rev 1139
Language update for About Enano page ("help achieve" sentence added)
Dan [Fri, 27 Nov 2009 18:29:20 -0500] rev 1138
parse_mediawiki: Marked the paragraph bug as non-blocker, delayed until RC1. I have higher priorities than a minor win32 only parsing issue.
Dan [Mon, 16 Nov 2009 20:37:39 -0500] rev 1137
Fixed some open_basedir errors in SpecialPageFuncs
Dan [Mon, 16 Nov 2009 00:06:55 -0500] rev 1136
Login: Fixed typo that prevented non-DH crypto from working (thanks Keith Schmader)
Dan [Wed, 11 Nov 2009 23:48:55 -0500] rev 1135
Added a switch to disable following redirects in Request_HTTP
dan [Wed, 11 Nov 2009 23:44:10 -0500] rev 1134
Hack: temporarily disabled PCRE recursion for Win32 in the paragraph block tag parser until a better parser can be written/adapted