Got the installer working. Fixed a few bugs including a nasty-to-debug issue where the lang_id was being hardcoded during installation, resulting in strings being inserted with the wrong lang_id causing an infinfinite loop with fetch() throwing a "no strings" error and using template (which calls fetch()) to complain

Fixed lack of str_replace() to runtime-patch cache_anon_sidebar

Got user registration working with the new componentized JS framework

Completed work (we hope) on CacheManager admin page

Made CLI version of common load cache manager properly

Sprited icons for admin panel applets

Fixed gzip output - no longer depends on ob_gzhandler(), uses gzencode() now with a failsafe available if gzencode() is not available. Public function gzip_output() remains unchanged.

Fixed a few places where page metadata cache should have been purged (there may be a few more commits like this)

Merging nighthawk and scribus branches (now that nighthawk isn't panicked anymore)

First stab at cache management backend. Everything seems to have been tested and working so far, but a number of things require a more specialized cache and can't go through the framework (e.g. user ranks which use references to map usernames to user IDs)

Moved enano_safe_array_merge() to functions.php as comment.php depends on it

First draft of new CacheManager admin page. Backend is yet to be implemented.

Fixed missing require() on math.php in SpecialUserFuncs

Moved all account deactivation notice presentation code to its own method in sessions

Fixed missing randkey() method in rijndael.php

Fixed $use_cache bug in plugins.php

Fixed missing require() on stats.php in pageprocess; made pageprocess update the metadata cache on page rename

Added purge_all_caches() routine to functions.php. Temporary, will be discarded once the new cache code is implemented

Added the theme_is_<themeid> template boolean value to allow conditional template code depending on theme ID (in shared templates, sidebar blocks, etc.)

Added ability to hide or show sidebar blocks based on a {restrict} or {hideif} conditional in the sidebar script

Added failsafe .htaccess files to enable far future Expires and mod_deflate

As promised, dropped in the new librijndael. Benchmarks say about 3 times faster, but more performance testing will be done.

A little more optimization work, client-side this time. I lied, no librijnadel2 here, but it's about to be merged in...

More optimization work. Moved special page init functions to common instead of common_post hook. Allowed paths to cache page metadata on filesystem. Phased out the redundancy in $paths->pages that paired a number with every urlname as foreach loops are allowed now (and have been for some time). Fixed missing includes for several functions. Rewrote str_replace_once to be a lot more efficient.

Another sweep from the optimization monster. template: rewrote parts of tplWikiFormat to do faster validation and less eval()ing template: sidebar is now cached for anonymous users (thanks to Richard Greene for the suggestion) dbal: rewrote SQL query parser, much cruft taken out template: made tplWikiFormat depend more on RenderMan common: moved some lesser-used includes out of main loading sequence Expect a lot of changes to AES code in the next commit!

Made $session->private_key protected and added pk_{en,de}crypt methods for encrypting and decrypting data using the private key

Several optimization changes including getting rid of a few eval()s. Added placeholder functions for the theme manager, which should be working now

[minor] Added password_score_* into placeholder functions

Upgraded TinyMCE to 3.1.0.1. Ported a couple special pages to the componentized JS system.

Oops, scriptPath isn't defined in jsres.php.

Made encryption work in form-based logon again; modified load_component() to fetch compressed versions when possible

Fixed javascript ACL manager and captcha not showing on ajax login lockout_captcha event

Fixed missing table_prefix in generate_rank_sql()

Installer should work with JS componentization now

Majorly reworked Javascript runtime stuff to use on-demand loading. - Runtime reduced to only AJAX library + very common functions, ~50K total - Almost all specific functionality loaded on demand using synchronous XHR - Crypto functions consolidated into crypto.js - Much testing still to be done - ACL editor known not working under firefox - Some other components (autofill, theme/rank managers) not ported yet

Initial progress towards converting auto-completion framework to Spry. Not currently in a very working state.

Fixed SQL syntax error thrown during rank data fetch

Fixed access type warning in discussion button generation in template

Fixed: init_vars double-init check ignored theme changes/reloads

Made template parser remember last initted page_id and namespace to avoid double init; made additional_headers reassign only do so if $template->additional_headers is empty (it's being blanked somehow, need to come up with a backtrace sometime)

Fixed undefined index left over from scope system rewrite a few days ago

Fixed two bugs in paginator: noisy warning when rows run out and empty strings not being treated as valid from formatting functions

Fixed title not being set properly in redirect()

Renamed some functions (that were new in this release anyway) due to compatibility broken with PunBB bridge

Moved some TinyMCE init code to make JS early init work

Got ACL scope logic working again and began enforcing it. Breaking API change: assigning page title with $template->tpl_strings['PAGE_NAME'] will no longer work, use $template->assign_vars(). Workaround may be added later. Test for assign_vars method if compatibility needed. Added namespace processor API (non-breaking change). Several other things tweaked around as well.

Fixed some plugin compatibility issues seen in Nuggie

Updated image tag parser a bit. Handles recursion of brackets properly now, allows custom parameters from plugins, and takes parameters in any order due to new keyword-based parser

A bit of UX improvement to upgrade UI; updated readme for 1.1.4

Actually made the "prevent search indexing" switch work. Needs to be merged with stable.

Made ajaxReset() call the actual requested title instead of effective title; fixed (again) template compiler bug not matching certain tags (probably PCRE bug)

[YSlow experimental] Moved jsres.php include to bottom of the body in oxygen

Updated version number metadata in system plugin files; added some comments and removed unused code from index.php and includes/graphs.php

First test of rank manager interface, not currently capable of doing anything interesting (fills form with placeholder data); strings are in an earlier commit

Got initial CSRF token framework implemented and sample implementation added in Special:Logout; removing Javascript compression engine from aggressive_optimize_html() and instead calling JavascriptCompressor class from js-compressor.php

Removed remaining references to enano.homelinux.org

Added re-import function to plugin manager

[YSlow] Added Expires header on jsres.php

Fixed some GD detection bugs with freecap

Modified $template->init_vars() to pivot to local page metadata and permissions from a PageProcessor object instead of global data from $paths and permissions from $session to allow redirects to affect on-page controls as well as the actual content (only partially complete, protection and several other elements still need to be localized)