Fixed typo in string acl_inherit_pg_everyone. Fixes issue 22.

Merged from accidental split

Added an API for AJAX file uploads and the monitoring thereof. This is to be used in Snapr and soon core (Special:UploadFile).

Fixed broken handling of password reset response in AJAX login

Fixed some bugs with the change password form when pw_strength_enable is 0.

Fixed some ACL scope warnings

Visual refresh on the textarea in the enanium page editor. Also fixed missing image on the Save Draft button.

Javascript maintenance. Upgraded jQuery; fixed some gzip bugs; added JavascriptCompressor usage to licenses/.

Fixed PHP warning with empty search results

Fixed no plugins showing up in sidebar create block page

Enanium: Link blocks now render properly on the right sidebar, and textual blocks now look good on the left.

Got live reauth working again in the admin cp

Added an icon for Edit Sidebar admin page.

Plugin manager: fixed duplicate removal of whiteout

Experimentally changing how content-length works.

Fixed theme not being loaded in Admin:EditSidebar

Disabled Javascript debugging. That thing has a nasty habit of getting enabled when it shouldn't.

Improved display of comments from foes, and fixed some general issues with the friend and foe lists

Enabled content-length in Special:DownloadFile even when gzip is on. Should probably check the http spec to see if Content-Length should match the decoded or encoded length

Fixed redlinks to special pages + parameters

Files now list what pages use them

ajax.php getpage now cals $template->set_page() so that templates that depend on PAGE_URLNAME etc. will not show errors

Lockouts were displaying separately when they should have been displayed together (incorrect grouping). Possibly breaks Postgres - needs re-test in that environment

Moved sidebar editor into the admin CP. Icon still needs to be added, no Internet right now to go find one. Also fixed a few template related things.

Updated README and KNOWN_BUGS for 1.1.8

jBox now works when horizontally scrolled; fixed case matching inconsistency in autofill

Pending group memberships no longer alter result in rank alterations

Some fixes to autofill with Unicode usernames; fixed a few end user experience pieces of the group CP. Users are now allowed to freely leave GROUP_OPEN and GROUP_REQUEST groups, and must be removed by a group mod for GROUP_CLOSED and GROUP_HIDDEN.

Added template hooks in the JS template compiler. Attach to thook_<template hook name>. Use Echo() to echo HTML; access compiler instance with Template.tpl_{strings,bool}, etc.

Database revision is now shown in ACP home

Added ability for plugins to hook into admin user manager

Improved captcha word generation; fixed duplicate auth parameter in Special:Login privileged login; improved search indexer performance on websites with lots of words

Fixed direction related regression in drop down code

Made login window focus the controls earlier if animations are disabled.

Clean up that GLOBALS silliness.

Default theme can no longer be changed in demo mode

DiffieHellman: gracefully handle platforms that fail the sha256 self test, currently only known to be PowerPC. Added support for PHP's built-in hash functions (they were added in 5.1.2) and use them in lieu of the built-in sha256 implementation when available.

Fixed the (rather expected) 1.0.x migration issues db revision system

First shot at switching to database revision numbers separate from release version number. There are probably bugs, especially related to migration.

Tagged release: 1.1.7pl1

Integrated XSS patch for 1.1.7 maintenance branch

Enanium: Added directionality to simple-header

Oops, maybe I could set English back to LTR :)

Added basic support for right-to-left languages. Set meta_direction to "rtl" in core.json.

SECURITY: Multiple XSS in Special:ChangeStyle. Reported by Mesut Timur of Mavituna Security - thanks! Also removed my stand-in for ucfirst().

Rewrote category editor. This breaks the JSON API. Also fixed a few bugs with how Wiki Mode is set in $paths. (Hopefully that doesn't cause infinite loops, heh). Fixes issue 20.

Added the ability to trust XFF (X-Forwarded-For) headers.

Test commit to verify that ktulu auto sync works properly

Added a box on Admin:UploadConfig showing the value of upload_max_filesize.

Merged (accidental split)

Fixed typo in that, the parameter that was supposed to go to getConfig was going to htmlspecialchars()

Added an ajax auto check for the path to ImageMagick in Admin:UploadConfig

Reordered wiki render stages so images happen before external links. Fixes a parser bug seen, among other places, on the Donation page.

Fixed some cosmetic bugs in Special:AllPages

Fixed registration admin override with account_activation set to disable.

Made separate methods in sessionManager for static and non-static generate_aes_form(), because PHP (erroneously) always calls that method statically.

Merged

Added Diffie-Hellman crypto support into the installer. Fixes issue 13.

Clarified some edit conflict related strings

Fixed lockout list in ACP under PostgreSQL

Merge in changes about legal marks

Fixed various legal marks in the strings of the English language pack

Fixed Gravatars not showing up immediately after save in Avatar UCP

Fixed fread() usage in Request_HTTP not properly handling incomplete responses

Fixed typo in install.json in pgsql "no php extension" error string

Fixed password_score_field onload in Admin:UserManager

Added selection and popup for <pre> tags within wikitext. Also fixed more bugs found in the HTML paragraph parser (mostly self-closing tags e.g. <hr />).

Renderer: fixed the regex that looks for h-tags in reverse_process_headings so it looks forthe new format #head: IDs.

Fixed "waiting for l10n init" and js error in Admin:UserManager

Search: strip HTML tags from result text (DB pages only). Fixes issue 17.

Going ahead with the switch to tabs. This is a major coding standards change! If any unusual parser bugs show up, check this changeset. Converted all .php, .js, .tpl, .css, and .json files and did basic testing.

Introduced configurability for gzip compression. Fixes issue 18.

Replaced (most of) the mini box icons with famfamfam silk icons, they're better looking.

Added https support in Request_HTTP

Fixed "unapproved" status taking precedence over "spam" flag in comment submit and some display related bugs in comments.js

Fixed username not being decoded in Special:ActivateAccount

Merged braches from accidental split

Fixed unescaped ampersands in "&enano_version" cache breaking

URL sanitizer: disabled uppercase letters in URL hex character codes (it was causing conflicts with the Windows/Apache 2.2 alt namespace separator). Thanks Techokami for finding and reporting this bug.

Added var enano_version to installer JS header

Modified paragraph rule to not use recursive parsing; made parsing of code and pre tags much more reliable. Fixes issue 1 (QA: RE-TEST).

Fixed more places where author_uid wasn't right.

Added "days ago" to the Site Started field on admin home

Fixed an example url in install.json pophelp (which may be removed momentarily)

Renamed 1.0.6 -> 1.0.6pl1 upgrade script, migrations from 1.0.6pl1 were broken

Fix: add author_uid in GROUP BY in LogDisplay for PostgreSQL compatibility

Fixed author_uid in activation request insertion

Logins: if the error message string doesn't look like a langstring id, don't prepend "user_err_" to it (some auth plugins are not localized at all, this lets them be without ugly cosmetic bugs)

Somehow I broke automatic localization of special page titles.

End year on Enano copyright dates is dynamic now

DBAL: readded sql_affectedrows(), some plugins were using it

Fixed some bugs with account activation, especially if you're a half-logged-in vegetable.

Sessions: fixed on_critical_page(), it referenced the wrong global; enabled better extensible behavior in the account_active column

Merging scribus and charlie repos

Fixed ENANO_VERSION under databaseless template class

common_cli: Fixed warning with $paths->init() (kind of a hack)

Search: some refinements to algorithm, introduced score promotion for phrase matches and Levenshtein distance based score manipulation

Fixed a bug in getHighestZ() that broke login boxes

Fixed Special:AllPages under PostgreSQL. Thanks phirox from IRC.

Fixed oversanitation of multiple XHTML closing tags in a row

Tagged 1.1.7 as current-unstable

All javascript and css requests now append the version number to the URL to break browser caches and prevent from having to clear the cache upon upgrade

Version bump to 1.1.8

Fixed phrase search, it got really broken somehow

TinyMCE: Bumped to v3.2.7

Fixed two "declaration should be compatible" errors encountered by the BitNami folks. Thanks Neal for reporting.

Beta release: Enano CMS 1.1.7 (Caoineag beta 2) (retag #2)

Detagged 1.1.7

Upgrade: added 1.0.6pl1 migration support, tarball repository will need to be updated

Beta release: Enano CMS 1.1.7 (Caoineag beta 2)

Last minute fix to wikitext code tag

Backout from 1.1.7 due to upgrade issue, fixed and retagging

Beta release: Enano CMS 1.1.7 (Caoineag beta 2)

Backed out of ENANO_INSTALLED check in DBAL, it broke CLI installs badly

OK screw that, put the crypto backend check in functions.

Fixed libenanoinstall/CLI double declaration of run_installer_stage()

Forgot table_prefix in the logs table migrator

Fixed no author_uid in PageProcessor::rename_page()

Added an upgrade hook to populate the author_uid column in logs, pending test by Neal

Added ajaxLoginInit to JS load stub list