Enano CMS (1.1.x): Changelog

Added support for Firefox 3.1 beta 3's native JSON.

Resynced version numbers in JSON language files

A few fixes to Windows detection code

Swapped in a new theme selector.

Plugins: Added checks and additional warning for authentication plugins.

Special:About_Enano should be up to date for another 9 months.

Moved gzip and aggressive_optimize_html calls to output.php

Fixed a bug in default namespace handler: referenced global page_id instead of local

New template feature: template hooks ()

Dynano: don't try to destroy MCE if window.tinymce is invalid

SQL parse: fix improper mid-query newline handling

Installer: pgsql main schema: fixed missing page_format in logs

Installer: payload: Minor performance tweak

DBAL: Fixed missing $loc in pgsql die_json()

Removed some stray PunBB CSS files (thanks Neal)

install-cli: Fixed wrong language string id for $driver

Added support for alternate port numbers on database servers. Also in install-cli, merged in new sysreqs functionality.

template: added ability for themes to hide user, tools, and search sidebar blocks

Change to search behavior for heading+link in sidebar collapse code

MessageBox: fixed: load fadefilter when aclDisableTransitionFX on

Added ability for jBox to align submenu position to right of parent button instead of left

Installer: minor: added a box on sysreqs success

Redesigned installer sysreqs page to cover more features, be more comprehensive, and look better

Installer: fixed load of lang_js on finish

jQuery: updated to latest jQuery + jQuery UI

Template: addslashes() around wiki_edit_notice_text (whoops)

http: minor fix to tolerate missing SERVER_SOFTWARE

Plugin backend: bugfix: installing a plugin should now properly import its strings

Set password in userinfo to allow auth plugins to see it (some really do need it)

Plugin manager: system plugins now sorted to last

Added possibility for auth plugins, which can log a user in using non-standard authentication methods.

setConfig() will now delete config values if the second parameter is explicitly set to false

HMAC functions are now standards-compliant (not a security issue). This BREAKS 1.1.6-hg passwords!

Added a basic plugin/hook framework for Javascript

[minor] changed heading format in mainpage-default

Added color specifications on input fields for admin and oxygen

Blah. Wrong type for those getConfig values.

Fixed: no default values in for avatar upload settings

[Oops] removed debug message in install-cli

Damn, forgot to add the version insertion back into schema

Major redesign of rendering pipeline that separates pages saved with MCE from pages saved with the plaintext editor (full description in long commit message) - Pages are now stored with an extra metadata field called page_format which is "wikitext" or "xhtml" - New $flags parameter + RENDER_* constants added that control RenderMan::render() behavior - Several other changes: * Added a sprite API for Javascript and made editor use sprites when possible * Removed a number of config options from the default install schema, replaced with second parameter to getConfig() calls * MessageBox in editor mostly replaced with miniPrompt * A few bugfixes related to password changes (registration didn't even work) * Rewrote the bitfield compression algorithm used to serialize allowed MIME types * Fixed some typos in language files and strings * Fixed a Text_Wiki bug in Heading parser

Made all page_id and namespace columns consistent

Added Unicode support for usernames and passwords (this is probably best considered a JS crypto bug)

Fixed https urls not allowed in user_extra CPs; fixed nonworking password reset in admin CP

Added a few hooks to Admin:GeneralConfig (didn't I do this already?)

Merging Nighthawk (anti-spam work) and Scribus (AJAX work + debugging + CLI installer) branches

Replaced integer checks that used preg_match() to use ctype_digit() instead

Added (very basic) spam filtering plugin support. Plugins can mark a message as spam by hooking into the spam check API, which is documented in functions.php. No spam checking functionality is built-in.

AJAX core library: possible breaking change, readystatechange functions are now called with the XHR instance as the first parameter, to allow requests to run in parallel. This means much better stability but may break some applets (compatibility hack is included)

Oxygen: synced mint style

PageProcessor: fix not setting page_exists to true after create_page() success (todo: move to Namespace_*?); add $visible parameter to create_page()

Change config.new.php and .htaccess.new to have a single newline according to Fedora project guidelines

Installer: add RewriteBase to .htaccess to work properly under aliased Apache setups (generated 404s in QA)

A few bugfixes in CLI installer related to interactivity

SECURITY: Fix XSS under IE in closing tags (shared sanitizer)

Fixed login form being focused too early (caused page to scroll up)

Deprecated old grab_password_hash() functions in session

Whoops! Fixed an SQL injection vulnerability in the CLI installer. (Not like it's a huge deal because the vulnerability was only introduced last commit and if you make it to that stage you already know the database password)

Added already-installed check to cli-core

Added CLI installer. Supports interactive, command-line, and internal-call installation. Fixed a few bugs related to anti-SQL injection parser and plugin installation.

Added support for live re-auth and de-auth; fully AJAX, no page reload required, plus plugin-usable API.

JS core: whiteOutReportSuccess now has a sister whiteOutReportFailure(); both abstracted to function whiteOutDestroyWithImage(whitey, image_url)

DBAL: Fixed issues with die_json() and multiline responses from {mysql,pg_last}_error()

Plugin manager: added support for having specific install and uninstall blocks per DBMS

Special:Administration: fixed 404 on several Tigra tree menu images

jBox: When an anchor in a menu is clicked, menu is now hidden

Fix undefined variable in special namespace missing function handler

If there's an onlineupgrade.php, installer index.php will link to that instead of upgrade.php (future readiness ;))

Fix version number warning in installer common

Upgrades should work now.

Two big commits in one day I know, but redid password storage to use HMAC-SHA1. Consolidated much AES processing to three core methods in session that should handle everything automagically. Installation works; upgrades should. Rebranded as 1.1.6.

Major underlying changes to namespace handling. Each namespace is handled by its own class which extends Namespace_Default. Much greater customization/pluggability potential, at the possible expense of some code reusing (though code reusing has been avoided thus far). Also a bit better handling of page passwords [SECURITY].

Added a couple of hooks for the registration form.

Redid error handler (it was causing some problems with gzip enabled)

Small speed optimization to admin panel loader

Revamped main page default content

Several thematic enhancements to Oxygen including making the main page title an h1

Added support for re-auth on submit to rank manager when session goes bad; still more to come

Added dynamic reload-less re-auth to admin panel, so that if a session is lost it can be recovered without a reload. Support for hooking into form submits will be added in the future.

Updated URLs and strings to point to the new server (ktulu)

Fixed a few bugs with plugin management and importing of old plugin metadata

Added support for upgrades from Ferrishyn

Added paginator_goto() to function reverse map; fixed some missing component loads in pagination code

When will that stupid user -> user_id bug stop REARING ITS UGLY HEAD. DIE! DIE! DIE! DIE! DIE!

Fixed: autocomplete got broken somehow

Unstable alpha release: 1.1.5 (Caoineag alpha 5)

Added ajaxReverseDNS to function-to-script map.

Added spell-checking support for TinyMCE on user request (see: http://forum.enanocms.org/topic/11/)

Minor cosmetic change to installer: bumped down Continue button on payload page by 12px

Corrected a few issues with languages and client-side code

A few fixes to the most recently added feature: more efficiency tweaks, tweaked l10n to have beetter fetch-on-demand support to ensure that stubs are never returned

load_component() now accepts an array, and most JS components are loaded all in one request now. Totally modular baby. And failsafe too.

Upgraded TinyMCE to version 3.2.1.1

[Branding] New artwork swapped in for the old. See <http://enanocms.org/News:1228698725>.

Fixed a couple PostgreSQL bugs.

Minor string change to match other string changes in 1.1 installer

Squashed one last typo.

Fixed a couple typos in mod_rewrite detection (I'm really doing this blind, as the source tree used for testing is different than the one for editing)

Fixed: checked for win32 but not winnnt

Merged WINDOWS_MOD_REWRITE_WORKAROUNDS changes from stable.

Fixed timezone preference setting not fully implemented; added ability for users to select their own rank from a list of possible ranks based on group membership and user level

Fixed: update_plugins_cache() is now tolerant of write errors

Fixed: private keys were way too long in EnanoMath

template: Fixed undefined $from_internal in assign_bool(); theme.cfg now require()d on theme load

Added support for IPv6 IP ranges... ehh, not easy.

Removed obsolete JWS code from enano-shared

[Minor] Enabled anonymous user autocompletion in ACL tracer

Fixed: editor state was not unlocked after draft save

Removed the completely obsolete old Special:CreatePage function

External links in sidebar now work with manual port numbers and IPv6 addresses

Plugins can now register their own custom actions for $_GET["do"].

Added additionalwhere option (it was already documented) to custom search API

Fixed PostgreSQL incompatibility in new search API

Added a new search API that allows much easier registration of search results. Basically you give the engine a table, a few columns to look at, and tell it how to format the results and you're done.