Enano CMS (1.1.x): Graph

Tagged release: 1.1.8
2010-11-16, by Dan Fuhry
Added a notice to re-import language on 1.1.8 upgrade
2010-11-16, by Dan Fuhry
Tagged release: 1.1.7pl2
2010-11-16, by Dan Fuhry
SECURITY: Fix SQL injection in banlist check (1.1.7 branch) 1.1.7-maintenance 1.1.7pl2
2010-11-16, by Dan Fuhry
editor: removed extraneous debug info; changed around the order by which the textarea is created and appended to the DOM
2010-11-16, by Dan Fuhry
Fixed bad language installation docs in common
2010-11-16, by Dan Fuhry
SECURITY: Fix SQL injection in banlist check
2010-11-16, by Dan Fuhry
SECURITY: Fix path disclosure in Special:Captcha
2010-11-16, by Dan Fuhry
common: log Enano upgrades
2010-11-15, by Dan Fuhry
Added a new "hide-with-mce" CSS class in Dynano; all elements which have it will be hidden when TinyMCE is activated, and re-shown when it is destroyed.
2010-11-15, by Dan Fuhry
ImageMagick check now notes that only directories in the PATH are checked.
2010-11-15, by Dan Fuhry
Fixed a table_prefix omission in File namespace code.
2010-10-28, by Dan Fuhry
Parser updates. Added the "styled" keyword to wikitables to allow them to be styled using the current theme's standard table skinning, and changes to how the image tag parser decides how to display an image (framed, inline or raw).
2010-10-28, by Dan Fuhry
Added an editor hook that allows plugins to insert their own content right before the editor box.
2010-10-28, by Dan Fuhry
Fixed a rather major bug with the external link parser: two links in one line now handled gracefully.
2010-10-12, by Dan Fuhry
Fixed check for iPhone OS 3 - it now returns true on 3.0 or any later version including 4.x
2010-09-24, by Dan Fuhry
Merged
2010-09-21, by Dan Fuhry
Fixed password field in HTML login not being focused during >USER_LEVEL_MEMBER auth
2010-09-21, by Dan Fuhry
Hide the "Create an account" button if registration is disabled (Enanium only, but there is a template boolean called "registration_disabled" so other themes can use it too)
2010-09-19, by Dan Fuhry
Merged (again)
2010-09-05, by Dan Fuhry
Converted inlinerename.js in enanium to tabs
2010-09-05, by Dan Fuhry
So, grinding_halt() now finally uses the new default theme in template_nodb.
2010-09-05, by Dan Fuhry
Fixed display of username in comments (ranks enabled)
2010-09-05, by Dan Fuhry
Fixed typo in string acl_inherit_pg_everyone. Fixes issue 22.
2010-09-05, by Dan Fuhry
Merged from accidental split
2010-08-21, by Dan Fuhry
Added an API for AJAX file uploads and the monitoring thereof. This is to be used in Snapr and soon core (Special:UploadFile).
2010-08-21, by Dan Fuhry
Fixed broken handling of password reset response in AJAX login
2010-08-21, by Dan Fuhry
Fixed some bugs with the change password form when pw_strength_enable is 0.
2010-08-21, by Dan Fuhry
Fixed some ACL scope warnings
2010-08-20, by Dan Fuhry
Visual refresh on the textarea in the enanium page editor. Also fixed missing image on the Save Draft button.
2010-08-17, by Dan Fuhry
Javascript maintenance. Upgraded jQuery; fixed some gzip bugs; added JavascriptCompressor usage to licenses/.
2010-08-09, by Dan Fuhry
Fixed PHP warning with empty search results
2010-08-08, by Dan Fuhry
Fixed no plugins showing up in sidebar create block page
2010-08-03, by Dan Fuhry
Enanium: Link blocks now render properly on the right sidebar, and textual blocks now look good on the left.
2010-08-03, by Dan Fuhry
Got live reauth working again in the admin cp
2010-08-03, by Dan Fuhry
Added an icon for Edit Sidebar admin page.
2010-08-03, by Dan Fuhry
Plugin manager: fixed duplicate removal of whiteout
2010-08-01, by Dan Fuhry
Experimentally changing how content-length works.
2010-07-31, by Dan Fuhry
Fixed theme not being loaded in Admin:EditSidebar
2010-07-31, by Dan Fuhry
Disabled Javascript debugging. That thing has a nasty habit of getting enabled when it shouldn't.
2010-07-30, by Dan Fuhry
Improved display of comments from foes, and fixed some general issues with the friend and foe lists
2010-07-30, by Dan Fuhry
Enabled content-length in Special:DownloadFile even when gzip is on. Should probably check the http spec to see if Content-Length should match the decoded or encoded length
2010-07-30, by Dan Fuhry
Fixed redlinks to special pages + parameters
2010-07-30, by Dan
Files now list what pages use them
2010-07-30, by Dan
ajax.php getpage now cals $template->set_page() so that templates that depend on PAGE_URLNAME etc. will not show errors
2010-07-30, by Dan
Lockouts were displaying separately when they should have been displayed together (incorrect grouping). Possibly breaks Postgres - needs re-test in that environment
2010-07-30, by Dan
Moved sidebar editor into the admin CP. Icon still needs to be added, no Internet right now to go find one. Also fixed a few template related things.
2010-07-30, by Dan
Updated README and KNOWN_BUGS for 1.1.8
2010-07-30, by Dan
jBox now works when horizontally scrolled; fixed case matching inconsistency in autofill
2010-07-30, by Dan
Pending group memberships no longer alter result in rank alterations
2010-07-29, by Dan
Some fixes to autofill with Unicode usernames; fixed a few end user experience pieces of the group CP. Users are now allowed to freely leave GROUP_OPEN and GROUP_REQUEST groups, and must be removed by a group mod for GROUP_CLOSED and GROUP_HIDDEN.
2010-07-29, by Dan
Added template hooks in the JS template compiler. Attach to thook_<template hook name>. Use Echo() to echo HTML; access compiler instance with Template.tpl_{strings,bool}, etc.
2010-07-29, by Dan
Database revision is now shown in ACP home
2010-07-29, by Dan
Added ability for plugins to hook into admin user manager
2010-07-29, by Dan
Improved captcha word generation; fixed duplicate auth parameter in Special:Login privileged login; improved search indexer performance on websites with lots of words
2010-07-26, by Dan
Fixed direction related regression in drop down code
2010-07-25, by Dan
Made login window focus the controls earlier if animations are disabled.
2010-07-25, by Dan Fuhry
Clean up that GLOBALS silliness.
2010-07-06, by Dan Fuhry
Default theme can no longer be changed in demo mode
2010-07-06, by Dan Fuhry
DiffieHellman: gracefully handle platforms that fail the sha256 self test, currently only known to be PowerPC. Added support for PHP's built-in hash functions (they were added in 5.1.2) and use them in lieu of the built-in sha256 implementation when available.
2010-07-05, by Dan Fuhry
Fixed the (rather expected) 1.0.x migration issues db revision system
2010-07-01, by Dan Fuhry
First shot at switching to database revision numbers separate from release version number. There are probably bugs, especially related to migration.
2010-07-01, by Dan Fuhry
Tagged release: 1.1.7pl1
2010-07-01, by Dan Fuhry
Integrated XSS patch for 1.1.7 maintenance branch 1.1.7-maintenance 1.1.7pl1
2010-07-01, by Dan Fuhry
Enanium: Added directionality to simple-header
2010-06-28, by Dan Fuhry
Oops, maybe I could set English back to LTR :)
2010-06-28, by Dan Fuhry
Added basic support for right-to-left languages. Set meta_direction to "rtl" in core.json.
2010-06-28, by Dan Fuhry
SECURITY: Multiple XSS in Special:ChangeStyle. Reported by Mesut Timur of Mavituna Security - thanks! Also removed my stand-in for ucfirst().
2010-06-28, by Dan Fuhry
Rewrote category editor. This breaks the JSON API. Also fixed a few bugs with how Wiki Mode is set in $paths. (Hopefully that doesn't cause infinite loops, heh). Fixes issue 20.
2010-06-02, by Dan
Added the ability to trust XFF (X-Forwarded-For) headers.
2010-05-16, by Dan
Test commit to verify that ktulu auto sync works properly
2010-05-15, by Dan
Added a box on Admin:UploadConfig showing the value of upload_max_filesize.
2010-05-02, by Dan
Merged (accidental split)
2010-04-30, by Dan
Fixed typo in that, the parameter that was supposed to go to getConfig was going to htmlspecialchars()
2010-04-30, by Dan
Added an ajax auto check for the path to ImageMagick in Admin:UploadConfig
2010-04-30, by Dan
Reordered wiki render stages so images happen before external links. Fixes a parser bug seen, among other places, on the Donation page.
2010-04-20, by Dan
Fixed some cosmetic bugs in Special:AllPages
2010-04-20, by Dan
Fixed registration admin override with account_activation set to disable.
2010-04-19, by Dan
Made separate methods in sessionManager for static and non-static generate_aes_form(), because PHP (erroneously) always calls that method statically.
2010-04-17, by Dan
Merged
2010-04-06, by Dan
Added Diffie-Hellman crypto support into the installer. Fixes issue 13.
2010-04-06, by Dan
Clarified some edit conflict related strings
2010-04-06, by Dan
Fixed lockout list in ACP under PostgreSQL
2010-04-02, by Dan
Merge in changes about legal marks
2010-04-02, by Neal Gompa
Fixed various legal marks in the strings of the English language pack
2010-04-02, by Neal Gompa
Fixed Gravatars not showing up immediately after save in Avatar UCP
2010-04-02, by Dan
Fixed fread() usage in Request_HTTP not properly handling incomplete responses
2010-04-02, by Dan
Fixed typo in install.json in pgsql "no php extension" error string
2010-04-01, by Neal Gompa
Fixed password_score_field onload in Admin:UserManager
2010-03-30, by Dan
Added selection and popup for <pre> tags within wikitext. Also fixed more bugs found in the HTML paragraph parser (mostly self-closing tags e.g. <hr />).
2010-03-30, by Dan
Renderer: fixed the regex that looks for h-tags in reverse_process_headings so it looks forthe new format #head: IDs.
2010-03-30, by Dan
Fixed "waiting for l10n init" and js error in Admin:UserManager
2010-02-26, by Dan
Search: strip HTML tags from result text (DB pages only). Fixes issue 17.
2010-03-29, by Dan
Going ahead with the switch to tabs. This is a major coding standards change! If any unusual parser bugs show up, check this changeset. Converted all .php, .js, .tpl, .css, and .json files and did basic testing.
2010-03-28, by Dan
Introduced configurability for gzip compression. Fixes issue 18.
2010-03-28, by Dan
Replaced (most of) the mini box icons with famfamfam silk icons, they're better looking.
2010-03-28, by Dan
Added https support in Request_HTTP
2010-03-28, by Dan
Fixed "unapproved" status taking precedence over "spam" flag in comment submit and some display related bugs in comments.js
2010-03-20, by Dan
Fixed username not being decoded in Special:ActivateAccount
2010-03-17, by Dan
Merged braches from accidental split
2010-02-08, by Dan
Fixed unescaped ampersands in "&enano_version" cache breaking
2010-02-08, by Dan
URL sanitizer: disabled uppercase letters in URL hex character codes (it was causing conflicts with the Windows/Apache 2.2 alt namespace separator). Thanks Techokami for finding and reporting this bug.
2010-02-07, by Dan
Added var enano_version to installer JS header
2010-02-03, by Dan
Modified paragraph rule to not use recursive parsing; made parsing of code and pre tags much more reliable. Fixes issue 1 (QA: RE-TEST).
2010-02-01, by Dan
Fixed more places where author_uid wasn't right.
2010-02-01, by Dan
Added "days ago" to the Site Started field on admin home
2010-02-01, by Dan
Fixed an example url in install.json pophelp (which may be removed momentarily)
2010-01-19, by Dan
Renamed 1.0.6 -> 1.0.6pl1 upgrade script, migrations from 1.0.6pl1 were broken
2010-01-12, by Dan
Fix: add author_uid in GROUP BY in LogDisplay for PostgreSQL compatibility
2010-01-10, by phirox
Fixed author_uid in activation request insertion
2010-01-10, by Dan
Logins: if the error message string doesn't look like a langstring id, don't prepend "user_err_" to it (some auth plugins are not localized at all, this lets them be without ugly cosmetic bugs)
2010-01-06, by Dan
Somehow I broke automatic localization of special page titles.
2010-01-06, by Dan
End year on Enano copyright dates is dynamic now
2010-01-06, by Dan
DBAL: readded sql_affectedrows(), some plugins were using it
2010-01-06, by Dan
Fixed some bugs with account activation, especially if you're a half-logged-in vegetable.
2010-01-06, by Dan
Sessions: fixed on_critical_page(), it referenced the wrong global; enabled better extensible behavior in the account_active column
2010-01-06, by Dan
Merging scribus and charlie repos
2010-01-05, by Dan
Fixed ENANO_VERSION under databaseless template class
2010-01-05, by Dan
common_cli: Fixed warning with $paths->init() (kind of a hack)
2010-01-05, by Dan
Search: some refinements to algorithm, introduced score promotion for phrase matches and Levenshtein distance based score manipulation
2010-01-05, by Dan
Fixed a bug in getHighestZ() that broke login boxes
2010-01-05, by Dan
Fixed Special:AllPages under PostgreSQL. Thanks phirox from IRC.
2010-01-04, by Dan
Fixed oversanitation of multiple XHTML closing tags in a row
2009-12-28, by Dan
Tagged 1.1.7 as current-unstable
2009-12-28, by Dan
All javascript and css requests now append the version number to the URL to break browser caches and prevent from having to clear the cache upon upgrade
2009-12-27, by Dan
Version bump to 1.1.8
2009-12-27, by Dan
Fixed phrase search, it got really broken somehow
2009-12-27, by Dan
TinyMCE: Bumped to v3.2.7
2009-12-22, by Dan
Fixed two "declaration should be compatible" errors encountered by the BitNami folks. Thanks Neal for reporting.
2009-12-21, by Dan
Beta release: Enano CMS 1.1.7 (Caoineag beta 2) (retag #2)
2009-12-19, by Dan
Detagged 1.1.7 1.1.7
2009-12-19, by Dan
Upgrade: added 1.0.6pl1 migration support, tarball repository will need to be updated
2009-12-19, by Dan
Beta release: Enano CMS 1.1.7 (Caoineag beta 2)
2009-12-18, by Dan
Last minute fix to wikitext code tag
2009-12-18, by Dan
Backout from 1.1.7 due to upgrade issue, fixed and retagging
2009-12-18, by Dan
Beta release: Enano CMS 1.1.7 (Caoineag beta 2)
2009-12-18, by Dan
Backed out of ENANO_INSTALLED check in DBAL, it broke CLI installs badly
2009-12-18, by Dan
OK screw that, put the crypto backend check in functions.
2009-12-18, by Dan
Fixed libenanoinstall/CLI double declaration of run_installer_stage()
2009-12-18, by Dan
Forgot table_prefix in the logs table migrator
2009-12-18, by Dan
Fixed no author_uid in PageProcessor::rename_page()
2009-12-18, by Dan
Added an upgrade hook to populate the author_uid column in logs, pending test by Neal
2009-12-18, by Dan
Added ajaxLoginInit to JS load stub list
2009-12-18, by Dan
Added a graceful dead-end for the tutorial; removed the hash symbols from IRC links per a heads-up from Neal.
2009-12-18, by Dan
AJAX login: Fixed error box failure to destroy upon cancel. Fixes issue 8.
2009-12-18, by Dan
Logs: Fully integrated an author_uid column. Logs are now linked by user ID instead of just username, so they survive username changes better. Database is changed. Fixes issue 6.
2009-12-18, by Dan
Wikitext parer: re-added the <code> tag thing
2009-12-18, by Dan
Comments (AJAX): Now paginated server side. Fixes issue 2.
2009-12-18, by Dan
Mod extras: Changed string for RDNS generic failure error
2009-12-18, by Dan
Fixed php_in_pages out-of-scope error in Special:UploadFile; modified RenderMan::preprocess_text() to take a permissions object for any page
2009-12-17, by Dan
ACP: Added lockout management feature
2009-12-17, by Dan
Fixed undefined $score_min in password change. Potential security concern?
2009-12-17, by Dan
Namespace_Default: added a workaround for an inconsistency in SQL. Basically, if you join the same table multiple times under multiple aliases, COUNT() always uses the first instance. Was affecting the comment counter in the "discussion" button.
2009-12-17, by Dan
JSON preparser: fixed corruption of strings that include the exact pattern word, comma, space, word, colon
2009-12-17, by Dan
Merge from accidental split
2009-12-13, by Dan
DBAL: Majorly cleaned up and improved coding standards/documentation
2009-12-13, by Dan
Installer: cleaned up CSS header; updated comments in config.php to not say that passwords are stored with AES (as they are now stored with HMAC-SHA1)
2009-12-12, by Dan
Updated KNOWN_BUGS to point to our issue tracker
2009-12-12, by Dan
Crap, broke page editing. Fixed it.
2009-12-12, by Dan
Drafts saved on nonexistent pages now show up. Fixes issue 7.
2009-12-12, by Dan
Re-merge changes from a2hosting dev
2009-12-12, by Dan
Set up more sensible defaults (UTC, DST off) for timezone preferences. Also modified enano_date() to properly include GMT offsets when timezone characters are used. Fixes issue 4.
2009-12-12, by Dan
CAPTCHA: Added smart autosubmit for registration page. Usability testing was so-so, may back out later.
2009-12-12, by Dan
A couple fixes to permission out-of-scope errors.
2009-12-11, by Dan
Wikitext parser: re-added mailto support
2009-12-11, by Dan
Sessions: Made acl_check_deps() verify scope, so that all of an action's dependencies must apply to the namespace of the given action.
2009-12-07, by Dan
Removed history_rollback_extra action from scope of Special pages, as it's unneeded
2009-12-07, by Dan
PostgreSQL: bugfix in ACL related SQL query
2009-12-07, by Dan
PostgreSQL: Fixed another bug, this time in the log fetch code
2009-12-06, by Dan
Fixed ranks table under PostgreSQL. FIXME, only affects new installations and upgrades, if this bug is encountered in the wild we might want to look at auto-integrating a fix.
2009-12-06, by Dan
Updated default main page with links to the Google Code issue tracker
2009-12-06, by Dan
Improved language for static HTML page delete interface
2009-12-06, by Dan
PostgreSQL: Fixed $session->create_user()
2009-12-06, by Dan
PostgreSQL: Fixed user pages. Also added a columns_in() method to the DBAL to list columns in a table
2009-12-06, by Dan
PostgreSQL: fixed Admin:SecurityLog database error
2009-12-06, by Dan
Plugin block parser: Fixed plugin block parsing for plugin files in CRLF format
2009-12-01, by Dan
Installer sysreqs: Merged all the crypto extensions into one check; altered warnings. Strings are hopefully cleaned up.
2009-12-01, by Dan
common_cli and dbal: Fixed lack of ENANO_INSTALLED check in determining config path
2009-12-01, by Dan
Merge from accidental split
2009-11-30, by Dan
Admin User Manager: When a user with a DB-driven user page is renamed, also change urlname of their user page. Fixes issue 3.
2009-11-30, by Dan
Admin Home: fixed undefined %num_users% in string acphome_msg_inactive_users_plural
2009-11-30, by Dan
Language update for About Enano page ("help achieve" sentence added)
2009-11-27, by Dan
parse_mediawiki: Marked the paragraph bug as non-blocker, delayed until RC1. I have higher priorities than a minor win32 only parsing issue.
2009-11-27, by Dan
Fixed some open_basedir errors in SpecialPageFuncs
2009-11-16, by Dan
Login: Fixed typo that prevented non-DH crypto from working (thanks Keith Schmader)
2009-11-16, by Dan
Added a switch to disable following redirects in Request_HTTP
2009-11-11, by Dan
Hack: temporarily disabled PCRE recursion for Win32 in the paragraph block tag parser until a better parser can be written/adapted
2009-11-11, by dan
which(): added silencer to shut up errors on servers with open_basedir restriction
2009-11-09, by Dan
Logins: reorganized data structures a bit. WiP - needs test routine done.
2009-11-03, by Dan
Another fix to paragraph bypass behavior, for when the same substring appears more than once in the text
2009-10-25, by Dan
OK, I'm done with the preg_replace() in the paragraph parser. It's too buggy. Replaced with preg_match_all()/str_replace_once().
2009-10-13, by Dan
MiniPrompt: [minor] Added short delay before destruction in whiteOutDestroyWithImage().
2009-10-07, by Dan
Merged from accidental split
2009-10-04, by Dan
More parser work: fixed a few bugs with [[intlinks]] in headers, a bug that caused the paragraph parser to return an empty string, and added a warning/backup-and-restore for when a render stage returns an empty string.
2009-10-04, by Dan
Fixed (more) output buffering bugs in Special:EditSidebar
2009-10-01, by Dan
Javascript lib: UX: When whiteOutReportSuccess() is called on a whiteout over a miniPrompt, the miniPrompt and whiteout are now flown out together. Also, a bit of improvement to message box DOM object destruction code; this fixes problems with message boxes appearing below the shade when ajax auth is done 3 or more times in one page load.
2009-09-30, by Dan
Same issue, was doing an empty() check on $page_urlname in Admin:PageManager and not taking both main pages into account
2009-09-26, by Dan
More blank-urlname bugfixes, this time involving internal links
2009-09-26, by Dan
A bit of refinement and consistency to "Powered by Enano" link and associated documentation
2009-09-26, by Dan
Fixed handling of blank urlname as guest main page / other main page for members
2009-09-26, by Dan
Whoops, it's setHook(), not getHook() (Special:Administration JS core)
2009-09-25, by Dan
HTML login: fixed bad submit under IE
2009-09-25, by Dan
Admin panel: added collapsible tables under GeneralConfig, with room for support on other pages.
2009-09-20, by Dan
Login: if return-to specified and already logged in, jump to return-to instead of main page.
2009-09-20, by Dan
Installer: Fixed "RewriteBase /" bug and some improper Dynano use in formutils.js
2009-09-20, by Dan
Functions: fixed HTML sanitizer to properly preprocess <code> one-liners
2009-09-20, by Dan
Fixed (well, implemented) log clearing functionality on uploaded files.
2009-09-15, by Dan
Request_HTTP: Fixed get_response_body(), added HTTP redirect support, and added support for Content-Length.
2009-09-12, by Dan
Scribus <--> Charlie merge
2009-09-11, by Dan
json2: fixed order of exception classes, it threw fits about missing Zend_Exception in ubuntu's latest PHP 5.2.6
2009-08-30, by Dan
Damn it! gzip_output() was not checking for gzip support in the browser, fixed.
2009-09-11, by Dan
Common: renamed global $title to $urlname (it broke the API from non-plugin Enano scripts)
2009-09-11, by Dan
Removed the $userpage parameter from Namespace_Default::error_404(). It screwed up a couple plugins. (Thanks Mazza for discovering the issue)
2009-08-26, by Dan
Enanium: fixed background in tinymce
2009-08-26, by Dan
Wikitext: added horizontal rule support
2009-08-26, by Dan
Fixed RenderMan::render() flags in default namespace XHTML formatter
2009-08-26, by Dan
Tutorial: improved Creating & Editing page a little bit with respect to wiki formatting stuff
2009-08-26, by Dan
Merging in work done on Charlie with upstream
2009-08-25, by Dan
Fixed a couple bugs with read-only mode and protected pages in the AJAX editor
2009-08-25, by Dan
Sessions: Improved inactive account UX; shuffled around a bit of code so that whitelist checks are shared; fixed a bunch of bugs related to ban code and IPv6 addresses
2009-08-21, by Dan
Enanium: custom header now has an <a> floating above it that links to the main page.
2009-08-21, by Dan
A bit of shuffling around code related to determining the page title from the URL. It's done in common now, and $paths becomes more of an information repository rather than an information gatherer. Note: This BREAKS $paths->fullpage/$paths->getParam() in *_preloader!
2009-08-21, by Dan
Made internal links to the Admin namespace much smarter. (They do the login box and stuff.)
2009-08-21, by Dan
A bit of work on tutorial content, more still needed
2009-08-21, by Dan