Removed unused/seldom-used DBAL functions that weren't entirely supported in PDO

Merged

Add PDO support for MySQL

Fixed undefined $errors in mass e-mail function

Merged

Fix double negative in avatar language string ("Don't block animated images" -> "Allow animated images")

Add Output class for Comet (HTTP incremental streams) -- experimental and not working with every browser/apache configuration.

Make redirects send 302 Found instead of 307 to suppress "confirm POST resend" dialog in firefox

DBAL: Persistent connections; also explicitly commit and unlock tables when shutting down

Plugins: support closures

Fixed a few bugs/display issues in search

Fixed minor display issue in login.js

Cacher: Add XCache support (partial)

Merged

Added template context API and render_getpage_norender hook. This allows variable sets to be pushed and popped from $template, so that variables in a template inclusion can be accessed and pre-processed by plugins.

firebugx was breaking things

Small change to generation time formatting to make all pages the same time. Makes apachebench not screw up.

Image scaling: Fixed a bug where (height > width) images would be scaled to the wrong dimensions (GD). Added PNG/GIF transparency support to GD image resizer. Added a cache bypass option to SpecialUpDownload.

Disable output gzipping during file download... it negates the memory usage controls

Typo

Fixed PHP-based JSON decode to output arrays, not objects

AjaxUpload: fixed handling of upload completion

Conditionally declare hex2bin() due to a function of the same name being introduced in PHP 5.4

Improvements and updates to tutorial

Improved vimperator compatibility in jBox

SECURITY: Various security enhancements to password resets. They are now rate-limited by username and IP, and it is possible to disable username autofill for guests.

Fixed CLI installer failing to set the DB version

Release: 1.1.8pl1

Release prep 1.1.8pl1

SECURITY: CSRF protection in Private Messaging, which is a really broken feature and should get the TinyMCE treatment. *sigh* Reported by Secunia.

SECURITY: Fixed XSS in post-login page redirection. Reported by Secunia.

Fixed installer (DB revision was wrong); make editor load jQuery, as the editor requires it now

Removed TinyMCE from licenses page

Removed TinyMCE.

Removed explicit TinyMCE support, replaced with support for arbitrary page_formats. The TinyMCE files will be removed in an upcoming commit.

Added database transaction API. (Untested with Postgres)

Fixed a typo in which()

ajax get_styles is now case insensitive with the theme_id

functions: HTML compressor: fixed handling of <script> blocks which consist only of whitespace

More comments in enanium header

Fixed some variable issues in emailer

ACL permissions viewer has better formatting now

Corrected a link

Added another AJAX editor hook after init is pretty much done

Added set_post() in Request_HTTP

Added some more hooks to the page editing pipeline. It should now be possible to add controls to the page editor, send the data from them out to the server, and process them on the server side.

Fixed a postgresql bug in the File namespace (reported by phirox - thanks)

AES: Fixed wrongfully hardcoded $return_format/$input_format (non-security)

Added conflict resolution for wikitext heading names

Some enhancements to the error handler. It replaces out ENANO_ROOT for security, and if the warning is from dbal.php and ENANO_DEBUG is set, prints out a much more verbose message.

Changed var_export() calls to use "true" as second parameter. Not sure which PHP version it was added in, but I could have sworn it wasn't there last time I checked.

Fixed syntax error in plugins/admin/PageManager.php

Fixed some rather severe issues when changing the urlname of uploaded files

Added FLAC to list of file types. (In other news: I'm an audiophile)

Updated tags

Fixed title[]= too.