Thu, 06 Mar 2008 23:31:28 -0500 |
Dan |
[Security] made session manager have some degree of IP validation for session keys and upgrades
|
file |
diff |
annotate
|
Thu, 06 Mar 2008 23:27:50 -0500 |
Dan |
Fixed session validation bug in upgrade script; fixed non-object reference in template_nodb
|
file |
diff |
annotate
|
Thu, 06 Mar 2008 20:53:26 -0500 |
Dan |
Added a cron task to sessions.php that deletes old admin keys once a week
|
file |
diff |
annotate
|
Sun, 02 Mar 2008 19:32:19 -0500 |
Dan |
Implemented password reset (albeit hackishly) into the new login API; added dummy window.console object to hopefully reduce errors when Firebug isn't around; fixed the longstanding ACL dismiss/close button bug; fixed a couple undefined variables in mailer; fixed PHP error on attempted opening of /dev/(u)random in rijndael.php; clarified documentation for PageProcessor::update_page(); fixed some logic problems in theme ACL code; disabled CAPTCHA debug
|
file |
diff |
annotate
|
Sat, 01 Mar 2008 23:02:05 -0500 |
Dan |
Implemented all security features on theme disabling and ACLs; added clean_key mode to login API to clean unused encryption keys
|
file |
diff |
annotate
|
Sat, 01 Mar 2008 18:55:54 -0500 |
Dan |
Fixed improper serializing of IP that could allow reusing of key from multiple IP addresses.
|
file |
diff |
annotate
|
Sun, 24 Feb 2008 12:52:07 -0500 |
Dan |
Merging in changes from Nighthawk
|
file |
diff |
annotate
|
Fri, 22 Feb 2008 12:51:53 -0500 |
Dan |
Merging fixes and updates from stable branch
|
file |
diff |
annotate
|
Mon, 31 Dec 2007 21:16:27 -0500 |
Dan |
Integrating patch for PHP 6.0-dev compatibility
|
file |
diff |
annotate
|
Wed, 20 Feb 2008 14:38:39 -0500 |
Dan |
Added support for Diffie-Hellman key exchange during login. w00t!
|
file |
diff |
annotate
|
Mon, 18 Feb 2008 16:13:56 -0500 |
Dan |
Fixed typo in ban logic
|
file |
diff |
annotate
|
Mon, 11 Feb 2008 14:33:31 -0500 |
Dan |
Rebrand as 1.1.2; made upgrade framework functional
|
file |
diff |
annotate
|
Fri, 08 Feb 2008 23:20:20 -0500 |
Dan |
Added some basic timezone support; DST support is still to come.
|
file |
diff |
annotate
|
Wed, 06 Feb 2008 19:27:43 -0500 |
Dan |
Fixed some captcha bugs and made all captcha fields case-insensitive
|
file |
diff |
annotate
|
Wed, 06 Feb 2008 18:41:47 -0500 |
Dan |
Implemented a new CAPTCHA API; the frontend ($session->{make,get}_captcha) is API-compatible but the backend (the captcha class) is deprecated.
|
file |
diff |
annotate
|
Tue, 29 Jan 2008 23:15:44 -0500 |
Dan |
Localization is FINISHED, DAMN IT HELLAH YEAH! OVER WITH! Man, it feels to get that off my chest. Release is in under 48 hours, folks. And we're ready for it.
|
file |
diff |
annotate
|
Tue, 29 Jan 2008 16:19:51 -0500 |
Dan |
Rebranded source code as 1.1.1; added TinyMCE ACL rule as per Vadi's request: http://forum.enanocms.org/viewtopic.php?f=7&t=54
|
file |
diff |
annotate
|
Sun, 27 Jan 2008 22:57:40 -0500 |
Dan |
Got Enano to load even if there are no plugins; added caching for decrypted session keys to significantly improve performance (in theory at least)
|
file |
diff |
annotate
|
Sat, 26 Jan 2008 15:42:32 -0500 |
Dan |
Removed stray debugging info from ACL editor success notification; added ability for guests to set language on URI (?lang=eng); added html_in_pages ACL type and separated from php_in_pages so HTML can be embedded but not PHP; rewote portions of the path manager to better abstract URL input; added Zend Framework into list of BSD-licensed libraries; localized some remaining strings; got the migration script working, but just barely; fixed display bug in Special:Contributions; localized Main Page button in admin panel
|
file |
diff |
annotate
|
Thu, 24 Jan 2008 22:14:40 -0500 |
Dan |
[minor] Trying to be a little more careful with values from users_extra in validate_session()
|
file |
diff |
annotate
|
Thu, 24 Jan 2008 22:06:09 -0500 |
Dan |
A number of scattered changes. Profiler added and only enabled in debug mode (currently on), but awfully useful for fixing performance in the future. Started work on Admin:LangManager
|
file |
diff |
annotate
|
Wed, 23 Jan 2008 12:48:22 -0500 |
Dan |
Improved compatibility with PostgreSQL and fixed a number of installer bugs; fixed missing "meta" category declaration in language files
|
file |
diff |
annotate
|
Tue, 22 Jan 2008 01:08:15 -0500 |
Dan |
Localized registration errors and activation/COPPA e-mails
|
file |
diff |
annotate
|
Mon, 21 Jan 2008 10:09:48 -0500 |
Dan |
Implemented IP logging for comments and registration
|
file |
diff |
annotate
|
Thu, 03 Jan 2008 00:53:33 -0500 |
Dan |
WiP commit for admin panel localization. All modules up to Admin:UserManager (working down the list) are localized except Admin:ThemeManager, which is due for a rewrite
|
file |
diff |
annotate
|
Fri, 28 Dec 2007 00:07:53 -0500 |
Dan |
Merging in the last couple of revisions from stable
|
file |
diff |
annotate
|
Sun, 23 Dec 2007 17:58:21 -0500 |
Dan |
Corrected licensing issue on YoungPup's DOM-Drag (it is now public domain -> GPLv2+ for Enano); fixed wrongful access denial under specific circumstances (fetch_page_acl() on nonexistent page + wiki mode)
|
file |
diff |
annotate
|
Thu, 27 Dec 2007 22:09:33 -0500 |
Dan |
Replaced TinyMCE 2.x with 3.0 beta 3. Supports everything but IE. Also rewrote the editor interface completely from the ground up.
|
file |
diff |
annotate
|