Enano CMS (1.1.x): Changelog

Functions: fixed HTML sanitizer to properly preprocess <code> one-liners

Fixed (well, implemented) log clearing functionality on uploaded files.

Request_HTTP: Fixed get_response_body(), added HTTP redirect support, and added support for Content-Length.

Scribus <--> Charlie merge

json2: fixed order of exception classes, it threw fits about missing Zend_Exception in ubuntu's latest PHP 5.2.6

Damn it! gzip_output() was not checking for gzip support in the browser, fixed.

Common: renamed global $title to $urlname (it broke the API from non-plugin Enano scripts)

Removed the $userpage parameter from Namespace_Default::error_404(). It screwed up a couple plugins. (Thanks Mazza for discovering the issue)

Enanium: fixed background in tinymce

Wikitext: added horizontal rule support

Fixed RenderMan::render() flags in default namespace XHTML formatter

Tutorial: improved Creating & Editing page a little bit with respect to wiki formatting stuff

Merging in work done on Charlie with upstream

Fixed a couple bugs with read-only mode and protected pages in the AJAX editor

Sessions: Improved inactive account UX; shuffled around a bit of code so that whitelist checks are shared; fixed a bunch of bugs related to ban code and IPv6 addresses

Enanium: custom header now has an <a> floating above it that links to the main page.

A bit of shuffling around code related to determining the page title from the URL. It's done in common now, and $paths becomes more of an information repository rather than an information gatherer. Note: This BREAKS $paths->fullpage/$paths->getParam() in *_preloader!

Made internal links to the Admin namespace much smarter. (They do the login box and stuff.)

A bit of work on tutorial content, more still needed

Wiki formatter: heading IDs are now name based ("head:" . sanitize_page_id($text)) instead of tocN.

Avatars: fixed animated avatars rejected even when allowed in ACP

Sidebar editor: fixed ob_end_clean() warning

Wiki engine: optimization for empty-text case

Functions: silenced PHP warnings on ob_* functions

JS: MessageBox: Fixed z-index calc

Autofill: fixed missing parameter to $db->fetchrow()

User ACP: redirect to Special:Login on own account deletion

Common: removed cookie_destroy hack

Updated readme for 1.1.7/1.2 series in general

Avatar UCP and ACP: Ported Dynano -> jQuery; merged POST processing code. Added support for IPv6 URLs (avatar UCP and RequestHTTP).

SECURITY: Comments: fix poor sanitization of subject on initial submit

Sessions: whoops, left a debug message in by accident, broke a few redirects

SECURITY: UCP: Added CSRF protection on Profile (unneeded on EmailPassword due to USER_LEVEL_CHPREF requirement)

index: removed that annoying 2-space indent

Fixed some upgrade bugs; added support for choosing one's own date/time formats; rebrand as 1.1.7

Minor fix to SHA256: some indices were not being initted under some circumstances

Added ability for authentication plugins to modify session keys (to allow invalidation when their own authentication data is changed) as well as the ability to disable the built-in password change facility

Blockquote functionality in wikitext parser now allows rendering of other block level elements properly

Some changes to AJAX login interface, made it a bit more compact with less language, with some Enanium specific modifications to the same.

Made index.php bootstrap smarter and better commented.

More work on rendering engine. Fixed some bugs with paragraph skipping and added (incomplete) support for blockquotes.

Fixed some "declaration should be compatible" errors that showed up under WinXP QA

Sessions: fixed logout() destroying normal session (instead of elevated) if $level = USER_LEVEL_CHPREF. Possible very minor security concern: elevated sessions were not fully destroyed, so if a normal session is opened from the same IP, the elevated one may be reusable for 15 minutes.

Merged development from Scribus and Charlie

Editor: completely moved wiki edit notice to AJAX fetch, so it's not shipped with the page anymore.

Admin: query string is now preserved on redirect to login

Fixed some formatter engine errors that were exposed through the wiki edit notice

AJAX Login: Fixed all known issues with lockout (and some unknown ones)

Moved User CP profile settings to front page of CP, and changed associated language

Fixed logins with usernames containing Unicode characters

Fixed title formatting in user pages

Tweaked URL sanitizing a bit to make Enanium work better.

Added method add_header_js() to template to allow insertion of code to be run immediately after JS init

Added ability to specify PNG or JPEG as the format of thumbnails/scaled images in Special:DownloadFile

ACL manager: started on IE support; button clicking not working. Other compatibility improvements and bugfixes.

Userpage: rewrite of many CSS rules for better scaling behavior

ACL editor: finally fixed that annoying blank-window bug on rule deletion

Here we go, preload_js() officially added to admin panel. Pray with me.

Renderer: added "smart paragraphs" for templates. <p><b>Foo</b> {bar}</p> where bar is multiline is basically turned into proper XHTML paragraphs.

One word: Internet Explorer 6. This includes a rewrite of $paths->parseAdminTree() that encodes to JSON instead of manually generating JS, so good-bye to stupid parser problems I hope.

AJAX login: fixed lockout string being displayed where it shouldn't be

Enanium: Added some IE6 fixes

Enanium: consolidated jBox and toolbar CSS. Firefox 3.5 did a double-request and it was slowing things down. Thanks YSlow.

Admin theme: fixed onload behavior of collapsible menu

OK, JS preloading on a CDN works perfectly now. I'm sure of it.

Fixed inconsistency in JS component load order between CDN sites and non-CDN sites

Fixed a series of infinite loops with preloading components and placeholders

Enanium: <pre> elements under div.content are now indented

Wiki engine: improved behavior in block level element finding/wrapping algorithm

Template: minor: documented sidebar_widget()

Namespace_Default::bake_cdata() now guesses values for anything missing

jQuery: UI: Upgraded to 1.7.2

Dynano: finally deprecated $() syntax due to jQuery

Fixed one unlocalized string in sidebar editor; fixed sidebar editor jQuery init race condition seen under Firefox and Chromium on 64-bit

SECURITY: Fixed potential XSS in $output->set_title() (introduced: 1.1.6)

History: Fixed missing $q in fetchrow()

Language: fixed improper null return in add_filter()

Fixed decode_unicode_url() trying to parse non-hex %uXXXX sequences

Fixed onload_hooks[] being initted to null after runOnloadHooks() called (should now be initted to an array)

Fixed makeUrl() Javascript version not calling append_sid()

Wiki formatting: Headings: tolerate spaces after line; added disable_rule method (required for rev. 1029)

SHA256: Fixed broken hashes on 64-bit PHP

Installer: now compatible with new rendering engine

Removed Text_Wiki and Firebug Lite from 3rd party code list

First implementation of new parser; Text_Wiki is now gone. VERY BETA! WiP.

AJAX login: fixed improper run of login_submit_early; fixed failure to redirect if main_page_members == current page

Fixed improper usage of function_exists() in captcha

Merging branches. Revision 2^10! :D

Added support for preloading javascript libs ($template->preload_js()). Updated admin theme and Tigra Tree Menu to support this + JS_{HEADER,FOOTER} variables.

Install: fixed a few bugs that showed up under IE8

Fixed broken javascript magic on Admin:PageGroups

Enabled tiny URL scheme support in installer cli-core

Whoops, plugin upgrades got broken

Minor plugin compatibility fix to Special:Search

Theme selector: fixed disabled themes being displayed

Comments: SECURITY: Fixed IP not recorded in non-JSON submit and a few other non-security issues

Removed Firebug Lite - unused, outdated, and potential licensing issue. All licensing issues should be resolved now.

Fixed missing global $cache; in $plugins->upgrade_plugin();

Set a few queries to buffered due to intermediate queries during fetching

Stats: fixed missing $q in $db->fetchrow()

Comments: fixed failure to supply $q to fetchrow() in JSON fetcher

Clarified some licensing issues from the Fedora project's preliminary review.

Fixed lack of default value in main page field on admin panel

Fixed a PHP warning in Admin:GeneralConfig default theme selection

Disabled Connection: close in AJAX lib (throws error under Chrome 2.0)

JS core: allow setting loaded_components in other scripts

AJAX rdns call now calls is_valid_ip() (security?)

Enanium: bumped top heading down a few px

Class "currentpage" is now added to all internal links, including sidebar buttons, if the link points to the current page.

Whoa! I broke Live Re-Auth, fortunately after the 1.1.6 release.

Sped up AJAX de-auth a little; added a little extra info to login_success JSON responses

Fixed: cache was being used during plugin fetch, so newly placed plugin files were not listed

Fixed two bugs: PluginManager: forgot to import cache; PageManager: now queries pages with buffered query (temporary fix)

Unstable beta release: 1.1.6 (Caoineag beta 1)

Fixed category display not listing entirely

Unstable beta release: 1.1.6 (Caoineag beta 1)

Merged accidental split, we should be ready to push out 1.1.6

Merging from accidental branch split

Plugins: fixed a final system plugin bug

Detagged 1.1.6 release - upgrader bug found

Unstable beta release: 1.1.6 (Caoineag beta 1)

Added another word to the CAPTCHA blacklist (thanks Neal).

Added protection against obscene words in CAPTCHAs

User homepage/URL is now displayed on user pages

Fixed undefined indices for user_extra in various places

Installer: payload: fixed two minor PHP errors with .htaccess.new and wrong form field name

GeneralConfig: Fixed failure to import $cache during save

Fixed some PHP warnings with API pages

Added minor edit filter to Special:Log

Fixed some bugs with history viewing and log display (wrong row counts, failing to provide result resource, etc.); added "view" button to edits in log display; fixed underscores in auto generated titles

Fixed redirects before $session init not working; fixed failure to load system plugins

A few safety changes to tolerate no $session when it's not available

Enanium: fixed visited wikilink-nonexistent links

Added cache for installed themes

Cut out two queries per page with plugin loader routine

Paths: System messages are cached in RAM now

Replaced the USE with a mysql_select_db() to cut out one query

Band-Aided user_homepage undefined index error in comments.

Render / Template: No longer does exist checks for wikilinks on sidebar

Fixed behavior of log display and title fetch for nonexistent pages

Comment UI / Special:Memberlist: UI consistency for Send PM/Add Buddy links in Memberlist and comment display UI

ajax: theme selector: no longer lists disallowed themes

SpecialPageFuncs: Removed tag cloud sidebar in the name of cutting out an SQL query. It will go into a plugin.

Fixed a couple bugs with admin avatar settings and getConfig() return types

Enanium: left collapse button same size as jBox bars now

Enanium: fixed failure to load on template_nodb

Wikitext redirects should work again + get_redirect() added to Namespace_* to allow plugins to extend

Enanium: move new memberlist above admin buttons + only show for logged-in

Merging from accidental branch split

Added register_special_page() function, to make it much easier to create special pages. Also, rewrote Special:Memberlist to use more efficient fetch method and not use an unbuffered whole-table query.

Added "About" sidebar block which simply shows the site description.

Enanium: added collapse for left sidebar

Fixed a couple bugs with protection UI; fixed stray <enano:no-opt> in Special:CSS (do people still use that?)

API: Properly handles $title again

Enanium: Set right sidebar as collapsible. Whether I will do the left one I do not know.

Whoops, last commit broke admin stuff.

Made some more changes to the way namespaces are handled, for optimization purposes. This is a bit of a structural reorganization: $paths->pages is obsoleted in its entirety; calculating page existence and metadata is now the job of the Namespace_* backend class. There are many things in PageProcessor that should be reorganized, and page actions in general should really be rethought. This is probably the beginning of a long process that will be taking place over the course of the betas.

Fixed some error display cosmetics in Request_HTTP

Admin: Home: Properly handles Request_HTTP exceptions now

Security log: fixed typo in plugin enable/disable display

Admin theme: Fixed l10n in footer

Enanium: added wikilink-nonexistent

Whoops. LogDisplay sorted by log_id, not time_id.

AJAX: Reset votes: now uses whiteOutMiniPrompt()

Removed "@" from all call_user_func() calls to make debugging special pages and such possible

Renamed smiley conversion script (more descriptive); fixed +x on cli-core.php (both rpmlint warnings, thanks Neal)

Fixed sidebar editor not closing floating windows properly when FX off

Upgrades from stable now skip langimport if it's being done later anyway. Pending testing.

Upgrader: UX: Added welcome page, different between Caoineag and Banshee

DBAL: _die() now detects installation environment and, if present, calls installer UI library for error display chrome

Fixed path to wrong line image in admin CP nav tree

Installer welcome page can tolerate 1.0.x databases again

Fixed session key clearing process, it should work right now.

Made handling of $perms being non-object work properly in template

Cleared up a few discrepancies in page handling, template var init, and how NewsBoy works.

Made upgrades from 1.0.6 work.

Installer: Whoops, moved the start of the main form on sysreqs down too far

Installer: Added recheck button to sysreqs page (thanks Nolan Rollo)

Installer: Form AJAX action no longer fades (too slow!)

Added web.config support for IIS7 URL rewriting.

QA: Schema: fixed urlname in pages was wrong size (both MySQL and PgSQL)

QA: Fixed bad update of user info when user_rank is NULL in Admin:UserManager

Added the indices to the 1.1.5 -> 1.1.6 upgrade schema

Added some more indices to speed some stuff up (MySQL only)

Added the linked-to page of the tutorial (it is, however, a stub at this point)

Installer default content is now modular, and can pivot between starting with a blank site and installing a tutorial site.

Drop-in Enanium as default theme upon install

[QA] User CP: rearranged some things to fix overly tall cells and/or sidescrolling

New primary theme: Enanium

Merging accidental branch split

Fixed log being pushed inwards due to lack of clear: both; before list

Fixed logs not working under postgresql

Removed Special:RecentChanges (phased out)

Fixed division by zero on first day installed.

New, beautiful, rethought Admin:Home. No, really, you'll like it.

Removed unused MIME magic file.

Deletion vote reset is now logged and able to be rolled back

File rollbacks should be all up to date now.

Made Special:Log tolerate literal, unescaped slashes in page names (hack of sorts, but still...)

Meh, finished my half-written-out thought in a FIXME in Special:Log code.

Finished core of log display interface including filter management. There is still a bit of a to-do list, especially regarding rollbacks and reuploads.

Memberlist now shows rank instead of user level in "Title" column. (thanks mm3)

Live Re-Auth is now required for deleting pages, editing ACLs, protecting pages, and clearing logs. Committing in a hurry as a storm is coming in, hope everything is in there.

New page protection UI. Both miniPrompt and failsafe HTML.

Log displayer should support some actions besides edit now

Whoops, page protection code didn't flush page_meta cache

Theme selector: controls height now (limits box to height of screen minus a few px of padding) if there are lots of themes

Cleared up a few warnings that appeared under the Phalanger PHP interpreter.

Work started on Special:Log and associated tools/interfaces. This is far from complete, but the basic functionality is in there.

Index: minor fix-up to code cleanliness under diff loading

Allowed custom processing functions altogether for AJAX login error handling

When changing namespace of a File: page, associated files are now deleted. Also fixed some issues with image scaling.

session: login_process_userdata_json hook should work with more than one installed auth plugin now

UserPage: whoops, wrong name (Namespace_Default::$exists, not ::$page_exists); bumped userpage tabs down by 0.05em to correct an Oxygen bug

Session: additional metadata passed back from auth plugins is passed through to client for optional further parsing

HTTP: now throws exceptions instead of flat-out dying

SpecialUserPrefs: fixed: userprefs_body hook only allowed first loaded plugin to work

Oxygen (and general): cleaned up sidebar CSS, wikitext blocks are now sent through alternate block

Committing string changes associated with new logout interface

Whoops! JSON parser Unicode escape sequence typo.

Made aclDisableTransitionFX also switch on jQuery.fx.off; made theme switcher work with said jQuery switch

AJAX comments: ranks are now displayed properly in a submitted post.

New logout interface + made DiffieHellman faster by disabling animated GIF

Set textarea in sidebar editor to fixed height of 360px due to webkit bug (thanks Neal)

Major revamp to sidebar editor. Some behavioral changes as well as being based on jQuery UI Sortables. Creation interface remains the same, but better strings merged in from stable.