| Wed, 13 Mar 2013 00:18:23 -0400 |
Dan Fuhry |
Compatibility band-aids
default tip
|
changeset |
files
|
| Tue, 12 Jul 2011 22:49:29 -0400 |
Dan Fuhry |
Release: 1.0.6pl4
|
changeset |
files
|
| Tue, 12 Jul 2011 22:37:21 -0400 |
Dan Fuhry |
Release prep 1.0.6pl4
1.0.6pl4
|
changeset |
files
|
| Tue, 12 Jul 2011 22:13:37 -0400 |
Dan Fuhry |
SECURITY: Fixed several XSS vulns reported by Secunia, mostly in Private Messaging. Also backported CSRF protection API from 1.1.x, and protected Private Messaging and logout functions.
|
changeset |
files
|
| Tue, 16 Nov 2010 12:44:22 -0500 |
Dan Fuhry |
Retagged current-stable
|
changeset |
files
|
| Tue, 16 Nov 2010 12:43:24 -0500 |
Dan Fuhry |
Tagged release: 1.0.6pl3
|
changeset |
files
|
| Tue, 16 Nov 2010 12:42:36 -0500 |
Dan Fuhry |
Version bump to 1.0.6pl3 (the real release number)
1.0.6pl3 current-stable
|
changeset |
files
|
| Tue, 16 Nov 2010 12:20:50 -0500 |
Dan Fuhry |
Version bump to 1.0.6pl2
|
changeset |
files
|
| Tue, 16 Nov 2010 12:19:13 -0500 |
Dan Fuhry |
SECURITY: Fix SQL injection in banlist check
|
changeset |
files
|
| Mon, 28 Jun 2010 11:11:09 -0400 |
Dan Fuhry |
Tagged release: 1.0.6pl2
|
changeset |
files
|
| Mon, 28 Jun 2010 11:00:51 -0400 |
Dan Fuhry |
SECURITY: Multiple XSS in Special:ChangeStyle. Reported by Mesut Timur of Mavituna Security - thanks!
1.0.6pl2
|
changeset |
files
|
| Mon, 28 Dec 2009 16:52:41 -0500 |
Dan |
Fixed a couple non-security sanitizer and editor bugs
|
changeset |
files
|
| Mon, 28 Dec 2009 12:19:47 -0500 |
Dan |
Updated current-stable tag
|
changeset |
files
|
| Mon, 24 Aug 2009 12:33:36 -0400 |
Dan |
Stable release: Enano CMS 1.0.6pl1
|
changeset |
files
|
| Sat, 22 Aug 2009 13:31:09 -0400 |
Dan |
Fixed lockup on unclosed HTML tags in wikiformat_process_block()
1.0.6pl1
|
changeset |
files
|
| Sat, 22 Aug 2009 13:30:39 -0400 |
Dan |
Version bumped to v1.0.6pl1
|
changeset |
files
|
| Fri, 21 Aug 2009 11:50:22 -0400 |
Dan |
SECURITY: Comments: fix poor sanitization of subject on initial submit
|
changeset |
files
|
| Sat, 21 Mar 2009 18:58:41 -0400 |
Dan |
Merging nighthawk and scribus branches
|
changeset |
files
|
| Sat, 21 Mar 2009 18:57:34 -0400 |
Dan |
Fixed typo in function call to check for apache 2.2
|
changeset |
files
|
| Sun, 18 Jan 2009 18:59:29 -0500 |
Dan |
Added license block to AmigaLink captcha engine and set this engine as the default; clarified licensing situation for this module in licenses/index.html
|
changeset |
files
|
| Sun, 18 Jan 2009 18:13:48 -0500 |
Dan |
Updated current-stable tag
|
changeset |
files
|
| Sun, 18 Jan 2009 18:11:42 -0500 |
Dan |
Re-merged 1.0.6 tag
|
changeset |
files
|
| Sun, 18 Jan 2009 18:10:48 -0500 |
Dan |
Continuation of previous commit in admin CP; EditSidebar: updated strings to be more accurate (thanks again Vadi)
|
changeset |
files
|
| Sun, 18 Jan 2009 18:10:21 -0500 |
Dan |
Pageutils: Also delete page-specific ACL rules when deleting a page (thanks Vadi)
|
changeset |
files
|
| Sun, 18 Jan 2009 18:09:55 -0500 |
Dan |
SECURITY: Enforce denied history_view on previous revisions
|
changeset |
files
|
| Sun, 18 Jan 2009 18:09:08 -0500 |
Dan |
Removed some crufty CSS classes in enano-shared (thanks Vadi)
|
changeset |
files
|
| Sat, 17 Jan 2009 12:08:28 -0500 |
Dan |
Stable release: Enano CMS 1.0.6 (Roane)
|
changeset |
files
|
| Sat, 17 Jan 2009 11:57:02 -0500 |
Dan |
Updated readme for Roane
1.0.6
|
changeset |
files
|
| Sat, 17 Jan 2009 11:51:17 -0500 |
Dan |
Rebrand as v1.0.6 (Roane)
|
changeset |
files
|
| Sat, 17 Jan 2009 11:32:52 -0500 |
Dan |
Merging branches
|
changeset |
files
|
| Sat, 17 Jan 2009 11:32:18 -0500 |
Dan |
SECURITY: Fix XSS under IE in closing tags (shared sanitizer)
|
changeset |
files
|
| Sat, 17 Jan 2009 11:31:45 -0500 |
Dan |
Minor fix to OS detection in install
|
changeset |
files
|
| Sat, 29 Nov 2008 22:50:19 -0500 |
Dan |
Plugins can now register their own custom actions for $_GET["do"]. (Backport from unstable)
|
changeset |
files
|
| Thu, 27 Nov 2008 10:57:50 -0500 |
Dan |
Stable release: Enano CMS 1.0.5 (Ferrishyn)
|
changeset |
files
|
| Thu, 27 Nov 2008 10:38:00 -0500 |
Dan |
Remove some unused/obsolete release tags
1.0.5
|
changeset |
files
|
| Thu, 27 Nov 2008 10:26:49 -0500 |
Dan |
[cosmetic only] lowercase release name in installer splash
|
changeset |
files
|
| Thu, 27 Nov 2008 10:21:58 -0500 |
Dan |
Made UX for Windows patch more pleasant including external documentation. Breaking change to dynamic download script.
|
changeset |
files
|
| Tue, 25 Nov 2008 22:08:00 -0500 |
Dan |
Updated readme for Ferrishyn
|
changeset |
files
|
| Fri, 07 Nov 2008 08:56:53 -0500 |
Dan |
Fixed sanitization of full page IDs with accidental parse of escaped hex character in dirtify_page_id(). Thanks Asterion; see http://forum.enanocms.org/post/20/
|
changeset |
files
|
| Tue, 16 Sep 2008 08:20:14 -0400 |
Dan |
Fixed IPv6 address match (the one from phpBB3 did not work)
|
changeset |
files
|
| Wed, 10 Sep 2008 06:57:54 -0400 |
Dan |
Fixed SQL parse errors caused by conversion to \r\n by some FTP/zip clients (hackish workaround that isn't Enano's fault)
|
changeset |
files
|
| Fri, 22 Aug 2008 01:05:42 -0400 |
Dan |
Forgot to update, merging heads from nighthawk and scribus
|
changeset |
files
|
| Fri, 22 Aug 2008 01:04:20 -0400 |
Dan |
Redid tags to match version numbers; only latest release will be tagged as such from now on. Hopefully Mercurial registers this.
|
changeset |
files
|
| Sun, 17 Aug 2008 08:38:15 -0400 |
Dan |
Upgrade from 1.0.4 -> 1.0.5 now tolerates errors in user -> user_id transition in tags table
|
changeset |
files
|
| Tue, 05 Aug 2008 14:02:26 -0400 |
Dan |
Tagging revision 290 (72ecb951b313) as release, it was never done before.
|
changeset |
files
|
| Tue, 05 Aug 2008 14:02:18 -0400 |
Dan |
Backported customizable 404 page from unstable (thanks Vadi); made customizable 404 page have a {STANDARD404} variable available to allow embedding the "default" 404 content.
|
changeset |
files
|
| Mon, 04 Aug 2008 11:44:20 -0400 |
Dan |
RNG now uses /dev/urandom instead of /dev/random to fix slowdowns during login. Potentially not as secure, but speed problems on some servers were of blocker severity.
|
changeset |
files
|
| Thu, 26 Jun 2008 21:00:25 -0400 |
Dan |
Merging scribus and nighthawk branches
|
changeset |
files
|
| Thu, 26 Jun 2008 20:59:57 -0400 |
Dan |
Fixed jBox hover event reference to undefined object
|
changeset |
files
|
| Thu, 26 Jun 2008 20:59:23 -0400 |
Dan |
Fixed E_STRICT under PHP 5 and 6 (reference operator in instanciation)
|
changeset |
files
|
| Thu, 12 Jun 2008 10:58:48 -0400 |
Dan |
Merging in page['visible'] patch from unstable, pages marked as invisible should now be omitted from searches
|
changeset |
files
|
| Fri, 09 May 2008 23:33:11 -0400 |
Dan |
Tagging latest revision as rebrand
|
changeset |
files
|
| Fri, 09 May 2008 23:32:51 -0400 |
Dan |
Rebrand as 1.0.5 (Ferrishyn)
|
changeset |
files
|
| Fri, 09 May 2008 23:32:00 -0400 |
Dan |
Fixed (again) the user -> user_id transition in enano_tags table
|
changeset |
files
|
| Sun, 13 Apr 2008 17:03:15 -0400 |
Dan |
Fixed aclScopeSel control in Safari/KHTML
|
changeset |
files
|
| Sun, 13 Apr 2008 17:02:42 -0400 |
Dan |
Added enforced warning about PHP4
|
changeset |
files
|
| Sun, 16 Mar 2008 21:08:37 -0400 |
Dan |
Filled and updated out the README for 1.0.4
1.0.4
|
changeset |
files
|
| Sat, 15 Mar 2008 16:34:28 -0400 |
Dan |
Backporting cron fixes from unstable
|
changeset |
files
|
| Sun, 02 Mar 2008 21:34:56 -0500 |
Dan |
Allowed uppercase characters to be used in the database name (thanks Andrew)
|
changeset |
files
|
| Sun, 02 Mar 2008 14:52:08 -0500 |
Dan |
Fixed PHP warning in Rijndael RNG code when open_basedir restriction in effect
|
changeset |
files
|