Made $session->private_key protected and added pk_{en,de}crypt methods for encrypting and decrypting data using the private key

Several optimization changes including getting rid of a few eval()s. Added placeholder functions for the theme manager, which should be working now

[minor] Added password_score_* into placeholder functions

Upgraded TinyMCE to 3.1.0.1. Ported a couple special pages to the componentized JS system.

Oops, scriptPath isn't defined in jsres.php.

Made encryption work in form-based logon again; modified load_component() to fetch compressed versions when possible

Fixed javascript ACL manager and captcha not showing on ajax login lockout_captcha event

Fixed missing table_prefix in generate_rank_sql()

Installer should work with JS componentization now

Majorly reworked Javascript runtime stuff to use on-demand loading. - Runtime reduced to only AJAX library + very common functions, ~50K total - Almost all specific functionality loaded on demand using synchronous XHR - Crypto functions consolidated into crypto.js - Much testing still to be done - ACL editor known not working under firefox - Some other components (autofill, theme/rank managers) not ported yet

Initial progress towards converting auto-completion framework to Spry. Not currently in a very working state.

Fixed SQL syntax error thrown during rank data fetch

Fixed access type warning in discussion button generation in template

Fixed: init_vars double-init check ignored theme changes/reloads

Made template parser remember last initted page_id and namespace to avoid double init; made additional_headers reassign only do so if $template->additional_headers is empty (it's being blanked somehow, need to come up with a backtrace sometime)

Fixed undefined index left over from scope system rewrite a few days ago

Fixed two bugs in paginator: noisy warning when rows run out and empty strings not being treated as valid from formatting functions

Fixed title not being set properly in redirect()

Renamed some functions (that were new in this release anyway) due to compatibility broken with PunBB bridge

Moved some TinyMCE init code to make JS early init work

Got ACL scope logic working again and began enforcing it. Breaking API change: assigning page title with $template->tpl_strings['PAGE_NAME'] will no longer work, use $template->assign_vars(). Workaround may be added later. Test for assign_vars method if compatibility needed. Added namespace processor API (non-breaking change). Several other things tweaked around as well.

Fixed some plugin compatibility issues seen in Nuggie

Updated image tag parser a bit. Handles recursion of brackets properly now, allows custom parameters from plugins, and takes parameters in any order due to new keyword-based parser

A bit of UX improvement to upgrade UI; updated readme for 1.1.4

Actually made the "prevent search indexing" switch work. Needs to be merged with stable.

Made ajaxReset() call the actual requested title instead of effective title; fixed (again) template compiler bug not matching certain tags (probably PCRE bug)

[YSlow experimental] Moved jsres.php include to bottom of the body in oxygen

Updated version number metadata in system plugin files; added some comments and removed unused code from index.php and includes/graphs.php

First test of rank manager interface, not currently capable of doing anything interesting (fills form with placeholder data); strings are in an earlier commit

Got initial CSRF token framework implemented and sample implementation added in Special:Logout; removing Javascript compression engine from aggressive_optimize_html() and instead calling JavascriptCompressor class from js-compressor.php

Removed remaining references to enano.homelinux.org

Added re-import function to plugin manager

[YSlow] Added Expires header on jsres.php

Fixed some GD detection bugs with freecap

Modified $template->init_vars() to pivot to local page metadata and permissions from a PageProcessor object instead of global data from $paths and permissions from $session to allow redirects to affect on-page controls as well as the actual content (only partially complete, protection and several other elements still need to be localized)

More work done on effective permissions API, namely reporting of page group and usergroup names

Added user preference for disabling visual effects in Javascript applets; added re-import button to installed plugins

Revamped some ACL code and added effective permissions calculation code into session manager

Merged in the word_lcase column (finally)

Moved some more images into sprites for Oxygen

Minified some JS files using YUI compressor

Added ability to delete the draft revision; [SECURITY] fixed lack of permission check on draft save; renamed messagebox() constructor to MessageBox() (backward compat. maintained)

Added source and compiled images for Mint's sprites

Re-synced Mint style from the Oxygen theme

Added ETag on TinyMCE gzip; changed ETag format for standard pages so as to include user and login info to control caching when logged in or out

Switched Oxygen to use CSS sprites for faster loading (CSS changes were in a past commit, only adding image files here)

Add standard header comment block and date of changes to tiny_mce_gzip to conform to GPL/LGPL

Added TinyMCE compression support and made some supporting modifications to common.php

Upgraded TinyMCE to version 3.0.8

Added ETag support and increased caching settings to try and speed the system up. Result of a YSlow audit.

Massive commit with various changes. Added user ranks system (no admin interface yet) and ability for users to have custom user titles. Made cron framework accept fractions of hours through floating-point intervals. Modifed ACL editor to use miniPrompt framework for close confirmation box. Made avatar system use a special page as opposed to fetching the files directly for caching reasons.

Added but didn't set up custom_user_title ACL; fixed rebuild_page_index() to use word_lcase

Replaced some confirmation boxes with miniPromptMessage versions. This commit will require a re-langimport and shift-reload.

Merging changes from nighthawk

Added a really simple message box system based on miniPrompts, this will be used for confirmation windows like delete_page, clear_logs, delvote, etc.

Rebrand as 1.1.4 (Caoineag alpha 4)

Fixed selector stage in ACL editor under Safari

Added template_compile_subst hook

Huge improvements to the template_nodb class and surrounding code; moved template compiler core to its own non-classed function to allow code re-use

Finally fixed link coloring settings in Oxygen Bleu; added compatibility wrapper for people that "ajaxLogonInit" over "ajaxLoginInit"

[HIG] Added a little heading and intro message to the top of the plugin manager

Fixed Javascript error in admin-menu with quotes in list items

Implemented security logging for plugin management

Fixed some bad language string references in plugin management API

(Hopefully) finished new plugin manager and implemented the utilization of it. Still HIGHLY experimental.

New plugin manager half-implemented. Most of the UI/frontend code is done. Moved sql_parse.php to /includes/ to allow use after installation - TODO: check installer, etc. for breakage

Merging nighthawk and scribus branches

Pretty much pseudo-commit to make Hg let me merge some stuff in, only change was the "system plugin" key in $plugin_meta in PluginManager

Fixed a jBox issue on the AppleMobile platform

Dramatically improved the page-rename UX and added a miniPrompt API that allows small pop-down prompts as opposed to prompt() or confirm().

Implemented the password-reset redirect _properly_ instead of the hackish direct header() call in sessions.php

Optmized a number of Javascript routines for better speed on pathetic Javascript interpreters.

Started work on the new plugin manager and associated management code. Very incomplete at this point and not usable.

SECURITY: Disabled caching of decrypted DiffieHellman login requests

Fixed bad captcha refresh code on registration page

Added debugging ability to Language::import() for CLI usage

Fixed bad URL interpretation on CGI and Apache wrongly supplying PATH_INFO when directory index requested

Added debugging switch to $lang->import() for help with optimization

AJAX interface for listing ACL rules implemented

ACL: Added API call to edit rule based only on numeric rule ID; to be used later with lister for existing rules and effective permissions viewer

Made some improvements to ACL system including: warning on setting Deny for Everyone on the entire site, added ACL_ALWAYS_ALLOW_ADMIN_EDIT_ACL, and changed behavior as noted in the docs so that Deny for Everyone is no longer able to be overridden

Fixed some bugs in the installer that prevented it from working without mod_rewrite and/or with a table_prefix present

Added a copy of Firebug Lite for debugging purposes. License is uncertain but being treated as MPL. (If is is not MPL then it is under something more permissive that permits relicensing anyway)

Fixed auto-detection of URL scheme, didn't work unless rewriting worked

Fixed some stray version numbers (again!); added support for Diffie-Hellman logins in the normal login form (not AJAX) - even works in IE

Updated tree menu images to fit with the icons

Added icons for the administration panel

Added support for embedding language data into plugins; updated all version numbers on plugin files

[minor] silence errors when closing DB connections

Adding the images for the expander support. (oops)

Added support for an enano:expand=(closed|open) attribute on fieldsets to make them act like GTK expandable widgets; implementation is on Special:CreatePage

Added basic CLI support for the Enano API. Loads automatically, just include common.php as normal. REVISION 500!!! :-D

Fixed some bugs with PostgreSQL and added a word_lcase column to the search_index table because collation is not working under MySQL. TODO: Trigger search index rebuild on upgrade to 1.1.4.

Fixed some display issues with breadcrumbs (thanks Manoj)

Updated upgrade/migration schemas to handle user_timezone column properly

[Minor] Added a nice little link on upgrade success.

Fixed undefined variable ($row['is_regex'] instead of $is_regex) in sessions.php

Added support for upgrading arbitrary previous 1.0.x versions (very experimental)

Fixed the TinyMCE save bug.

Tagging last revision as it should be tagged (again)

Aww crap. NOW it should be together.

Tagging last revision as it should be tagged

Unstable alpha release (reprise): 1.1.3 (Caoineag alpha 3)

Oops: fixed broken template loader in upgrader for 1.0.x and 1.1.1

Unstable alpha release: 1.1.3 (Caoineag alpha 3)

Oops - had unneeded debug message in installer

[Security] made session manager have some degree of IP validation for session keys and upgrades

Fixed session validation bug in upgrade script; fixed non-object reference in template_nodb

Added safety against re-defining constants in dbal

Update readme for imminent 1.1.3 release

Hopefully completed rewrite and localization of rollback backend and interface

Added a cron task to sessions.php that deletes old admin keys once a week

Added $no_wrapper parameter to die_semicritical, useful for some upcoming PageProcessor tweaks.

Localized some remaining login bits

Fixed bad style update during theme uninstall.

Upgraded to TinyMCE 3.0.3; made editor auto-init again but only on Safari

Fixed $db->die_json(), should now produce standards-compliant output.

Changed TinyMCE init to run only on demand. Highly experimental.

Added modal dialog support for page editor; added customizability for breadcrumbs (thanks to Manoj for idea)

Implemented password reset (albeit hackishly) into the new login API; added dummy window.console object to hopefully reduce errors when Firebug isn't around; fixed the longstanding ACL dismiss/close button bug; fixed a couple undefined variables in mailer; fixed PHP error on attempted opening of /dev/(u)random in rijndael.php; clarified documentation for PageProcessor::update_page(); fixed some logic problems in theme ACL code; disabled CAPTCHA debug

Implemented all security features on theme disabling and ACLs; added clean_key mode to login API to clean unused encryption keys

[minor] fix version number on license block comment in common.php

Oops. Forgot to add the themepreview.png file which is a dummy icon for themes that don't include screenshots. Also in last commit several changes weren't documented, including: Moved several page manipulation functions from PageUtils to PageProcess. Fixed debug message in l10n.js. Started switchover to new rollback API and log_id column replacing time_id as key.

Fixed the fact that cron just didn't work at all (brain fart that day or something)

Modifed EnanoMath layer by segregating it into its own file; got support for big_int PHP extension backend working

Fixed improper serializing of IP that could allow reusing of key from multiple IP addresses.

Finished theme manager to the point where it's in a working state in Firefox and hopefully IE.

Documented includes/plugins.php to try and help plugin developers a little.

Fixed some bugs with $paths->getParam() and $paths->get_pageid_from_url() when slashes are in the namespace prefix. Result of testing on Windows Vista + Apache 2.2. Using TortoiseHG

Minor standards-compliance fix in Request_HTTP

Fixed a number of IE6 bugs

Merging in changes from Nighthawk

Upgraded tinyMCE to 3.0.1 in hopes of fixing IE race conditions. Fixed a couple minor syntax errors in Javascript objects declared in various places.

Merging fixes and updates from stable branch

Fixed: RenderMan::getPage() failing with access denial when fetching template and view_source results in deny

Made all captcha fields case-insensitive (thanks pkeating)

Merging scribus and nighthawk branches

Fixed special pages being returned with subpage information inappropriately from $paths->get_pageid_from_url()

Fixed jBox menus failing to appear when window scrolled down

Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)

Re-applying the revision with the comment fix (bad merge a couple revs back)

Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)

Merging in a couple revisions from Nighthawk

Fixed broken regenCaptcha() in Special:Register

Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.

Removed all PostgreSQL support from the installer as per http://enanocms.org/News:1200114064; installer support for Postgres is available in the 1.1 branch now

Fixed case-sensitive file extensions

PHP4 fix: sidebar missing in installer UI: problem was wrongly named constructor for templateIndividualSafe

Fix undefined E_STRICT under PHP 4; add PHP 4 deprecation notice in admin panel

Installer works again now (for MySQL only)

Adding a few stray files and removing the no-longer-needed Creative Commons Attribution 2.0 license (no more libraries under that license are included with Enano); adding hooks pageprocess_render_{head,tail} to be run before and after the final page render, respectively.

Integrating patch for PHP 6.0-dev compatibility

Fixed wrong images being used in installer formutils

Fixed broken installer due to bad $plugins object

Enabled strong compression on pwstrength.js as it causes problems otherwise in Opera

Added support for Diffie-Hellman key exchange during login. w00t!

And might as well add theme-manager.js while I'm at it.

Merging a stray change from Nighthawk (probably release tagging)

Can't believe I forgot to add ThemeManager.php.

[retag] Unstable alpha release: 1.1.2 (Caoineag alpha 2)

Detagging last release revision to merge in theme manager from Scribus

Started (but disabled) work on the new theme manager, 1.1.2 is being released with this thing halfway done.

Unstable alpha release: 1.1.2 (Caoineag alpha 2)

Updated readme file for 1.1.2 release

Merging Nighthawk and Scribus branches

Modernized Special:CreatePage.

Fixed typo in ban logic

Some memory usage improvements, I think. PHP is being weird to me.

Merging changes from scribus

Fixed user -> user_id transition for enano_tags table

Optimized JS aggressive-compression list a little more

Re-enabled, debugged, and optimized Javascript compression code

Unsuccessful attempt at fixing "dismiss"/"close manager" buttons in ACL editor; non-breaking change to template API to allow plugins to add "normal" sidebar widgets in addition to the special "raw" block type, specified as the third parameter to $template->sidebar_widget(). Defaults to false, which is old behavior; new behavior (enabled by passing TRUE as the 3rd param) means that the content of the block is primarily block-level links.

Fixed version-set on migration code (see the comments in the source for why) and added post-upgrade hooks.

Edit summary should now be carried over when a draft is restored

[Minor] Fixed obsolete trigger upon attempt at page save after draft autosave

OOPS: forgot to add the "save draft" icon

Added "is_draft != 1" where appropriate in SQL queries to prevent drafts from being treated as real revisions.

Added autosave functionality and resurrected the old toolbar code that was added about a year ago but never uesd.

Tagging latest revision as rebrand

Rebrand as 1.1.2; made upgrade framework functional

Added upgrade schema files for 1.1.1 -> current (1.1.2-dev)

Removed unused schema files

Modified editor and rename functions to go through the API when rolling back. This causes rollbacks to be logged.

Mass-fixed all AJAX functions to also check the HTTP status code before parsing the response

Added some basic timezone support; DST support is still to come.

[minor] re-enabled ENANO_DANGEROUS on install.php (oops!); made textarea in page editor focus automatically

Made the form validation icons (check/X/?) more visually appealing. IE-friendliness is still on the TODO list.

Started on a Special:RecentChanges page, more to come.

Fixed some captcha bugs and made all captcha fields case-insensitive

Implemented a new CAPTCHA API; the frontend ($session->{make,get}_captcha) is API-compatible but the backend (the captcha class) is deprecated.

A few hacks to make the 1.1 demo plugin work

Cosmetic improvements to page editor; added demo mode checks in Admin:LangManager

Fixed some MySQL installation schema bugs, thanks to rainmain on the forums.

Added a heading "editing page" in page editor for visual appeal; removed use of alternate <?= ?> syntax in installer as it was causing problems on Win2k3 + PHP/FastCGI. (Experimentally using TortoiseHG's hgtk to commit)

Fixed some stray undefined-variable problems revealed as a result of testing on Windows Server '03, IIS6, PHP/FastCGI, and PostgreSQL 8.2.5.

Fixed splitting bug (really the same issue from stable) in get_pageid_from_url(); upgraded TinyMCE to version 3.0-stable

Fixed jBox menus failing to appear when window scrolled down

Unstable alpha release (1.1.1)

Updated readme file for 1.1.1

Localization is FINISHED, DAMN IT HELLAH YEAH! OVER WITH! Man, it feels to get that off my chest. Release is in under 48 hours, folks. And we're ready for it.

Fixed JSON parser error in installer (caused by magic_quotes_gpc, wouldn't you know) and re-enabled server-side l10n debugging

Merging Nighthawk and Scribus branches (and Scribus is back, yay!)

Localized stray string "list of registered members" in UCP

Rebranded source code as 1.1.1; added TinyMCE ACL rule as per Vadi's request: http://forum.enanocms.org/viewtopic.php?f=7&t=54

Fixed contentPath getting messed up because I forgot a slash or two in payload

payload.php stg_language_setup() should set default language now

Fixed bad column count in MySQL payload

Fixed SYSMSG tag in templates causing problems; commented out ENANO_DEBUG; fixed bad table prefix in installer payload logic

Profiling enabled for RenderMan's wikiformat routine; [minor] made HTML from profiler more pretty

Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)

Updated acledit and comment templates on themes, as they weren't in sync with Oxygen; fixed some undefined index errors in SpecialAdmin and paths

Minor and hopefully non-breaking change to plugin loader to possibly double performance at hook points

Got Enano to load even if there are no plugins; added caching for decrypted session keys to significantly improve performance (in theory at least)

Removed stray debugging info from ACL editor success notification; added ability for guests to set language on URI (?lang=eng); added html_in_pages ACL type and separated from php_in_pages so HTML can be embedded but not PHP; rewote portions of the path manager to better abstract URL input; added Zend Framework into list of BSD-licensed libraries; localized some remaining strings; got the migration script working, but just barely; fixed display bug in Special:Contributions; localized Main Page button in admin panel

Finished (or nearly finished) the admin language CP

[minor] Trying to be a little more careful with values from users_extra in validate_session()

[minor] silenced errors to mysql_free_result() and pg_free_result()

[minor] silenced errors to ob_gzhandler()

A number of scattered changes. Profiler added and only enabled in debug mode (currently on), but awfully useful for fixing performance in the future. Started work on Admin:LangManager

Improved compatibility with PostgreSQL and fixed a number of installer bugs; fixed missing "meta" category declaration in language files

Localized registration errors and activation/COPPA e-mails

Localized the 404 page, w00t.

Finished localizing PageProcessor, we hope

Localized autosuggestion widgets

Localized Special:UploadFile and Special:DownloadFile

Localized Special:EditSidebar

Finished l10n on user CP

Re-merged rev 35ed07abc99e, apparently didn't go through the first time.

Started localization on User CP. Localized pagination, password strength, and various other small widgets. Fixed bug in path manager causing return of fullpage from get_page_id_from_url() even when namespace is Special.

PageUtils::createpage(): $name was being sanitized too strictly

Implemented (well stubbed) IP logging in non-AJAX comment interface

Implemented IP logging for comments and registration

Completed l10n on admin panel. Exception is Admin:ThemeManager, which is pending a rewrite.

Localized Admin:MassEmail

Localized Admin:COPPA

Fixed a coupla minor bugs with the template_nodb class wrongly referencing $lang

A few more installer tweaks / fixes. Initted upgrade script. Added migration schema from 1.0 to 1.1.

Dropping changes from revision 350 (dd7cbc97f681)

Enano's new installable installer, alpha 1. No upgrade and (in some parts) very little localization.