Dotclear

source: CHANGELOG @ 3297:10ef6e5a76d1

Revision 3297:10ef6e5a76d1, 29.4 KB checked in by franck <carnet.franck.paul@…>, 9 years ago (diff)

Fix somes vulnerabilities in blogroll plugin, thanks Onur Yılmaz - Netsparker ( https://www.netsparker.com)

Line 
1Dotclear 2.10 - 2016-08-13
2===========================================================
3* Security: Prevents .htaccess upload, thanks wiswat
4* Security: Prevents download of a zip media folder outside root media folder, thanks wiswat
5* Security: Prevents sort of SSRF/XSPA vulnerability in feed import, thanks wiswat
6* Security: Prevents reflected XSS in meda manager, thanks Chen Ruiqi
7* Security: Fix somes vulnerabilities in blogroll plugin, thanks Onur Yılmaz - Netsparker (https://www.netsparker.com)
8* Fix mix-content preview
9* Pure CSS3 sticky footer for admin pages (aka « footer de merde »)
10* Add missing breadcrumb styles for blowup theme
11* Currently logged super-admin may now change it's id wihtout loosing access at next login
12* The favorites icons may now be hidden from dashboard in user preferences
13* Number of posts/pages/comments are now displayed at top of lists, including quick filters depending on their status
14* Search widget has now a placeholder option (HTML5 only)
15* Add Apache 2.4+ directives in .htaccess
16* New favorites media folders (displayed at the top of recent folder list) in media manager
17* New pure HTML5 template set named dotty cloned from currywurst templateset
18* Codemirror lib updated (2.35.0 → 5.15.2) and moved to core:
19  * 40+ Codemirror themes are available — set in user preferences
20  * Fullscreen mode has been added (F11 switching key)
21  * 3rd party plugins may now load and run it with dcPage::jsLoadCodeMirror() and dcPage::jsRunCodeMirror(), see themeEditor plugin for example
22* New mark button for legacy editor (HTML5 only)
23* New with_category attribute for tpl:Entries
24* Add a /var directory:
25  * Set with DC_VAR constant in inc/config.php
26  * Admin URL of a var file should be retrieve with dcPage::getVF()
27  * Public URL of a var file should be retrieve with dcBlog::getVF()
28  * 3rd party plugins should create their own folder inside /var (aka DC_VAR) to keep it correctly organized
29* Emails and web site have been added to the comments filters' list
30* Some columns for posts and pages lists are now optional — set in user preferences
31* Add Post URL sample in blog parameters
32* CKEditor lib update (4.5.8 → 4.6.0)
33* CSP (Content Security Policies) have been implemented on admin pages:
34  * settings may be adjusted in system settings / about:config → system (see csp_admin… values)
35  * violation reports will be stored in admin/csp_report.txt (PHP 5.4+ only)
36  * new behaviour adminPageHTTPHeaderCSP may be used by 3rd party to adjust CSP directives
37* New behaviour adminPageHTTPheaders
38* New "Go Top" button displayed for long admin pages
39* 🐛 → Various bugs and typos fixes
40* 🌼 → Some locales and cosmetic adjustments
41
42Dotclear 2.9.1 - 2016-03-27
43===========================================================
44* Security: Add shtml extension to default media exclusion extension control, thanks Nitin Venkatesh for report
45* Changing theme is now allowed even with read-only theme folder
46* Audio media are not more preloaded in media manager pages
47* Array settings/prefs are stored with 'array' type rather than 'string'
48* 🐛 → Various bug fixes
49* 🌼 → Some cosmetic adjustments
50
51Dotclear 2.9 - 2016-02-29
52===========================================================
53* Additionnal menu items are now lexically sorted (default items and favorites order will be preserved)
54* Wiki syntax : Added ""marked text"" support (HTML5 only)
55* Session TTL are now adjustable (set DC_SESSION_TTL in inc/config.php)
56* Add behaviors for posts/pages/comments/users lists' columns → let 3rd party plugin playing with them
57* Blog and user lists are now lexically sorted
58* Some new filters have been added for post lists
59* Add a search engine in media manager (looking in filename, title and description metadata)
60* Add recent folders direct access mechanism for the media manager (setting in user prefs)
61* Add a another display mode (list) to the media manager
62* Details about currently selected thumbnail in media manager are now displayed
63* Shortcut access to the upload file form is now displayed on top on media page
64* Default insertion size (width and height) may now be defined for video media
65* Flash player fallback insertion is now optional for audio and video media
66* Modules may have dependencies on Dotclear core version too (using 'core' as module name)
67* Avoid mixed content (http vs https) for post/page preview: will open preview in another window if necessary
68* Finnish translation has been added
69* Content-length header is not more sent in HTTP response (should fix very long delays on some servers)
70* Template engine : add tpl:EntryAuthorEmailMD5 and tpl:EntryCategoryDescription tags
71* A new pref/setting array type is now available (JSON encoded in db)
72* Cope with sort of "un-attached" media → allows new features as "featured media" plugin
73* CKEditor library updated from 4.5.1 to 4.5.8
74* Update jQuery from 1.11.3 to 2.2.0, jQuery-migrate from 1.2.1 to 1.3.0, jQuery-ui-custom from 1.11.2 to 1.11.4
75* Provide jQuery 2.2.0 for public use (themes/plugins) - 1.4.2 (default) and 1.11.3 still provided
76* Some locales added or updated
77* PHP 7 compliance, PHP 5.3 min
78* Fix : Cope with "unknown" scheme in url (ie nor http: neither https: is defined in origin url)
79* Fix : Let select another theme even if theme folder is read-only
80* Fix : XML-RPC media uploaded are not more twice Base64 decoded
81* And plenty of other 🐛 🔫, various 🌼 adjustments, and also lot of 🍻 drunk
82
83Dotclear 2.8.2 - 2015-10-25
84===========================================================
85* Security fix : Fixed potential XSS on comments management page
86* Security fix : Enforce media exclusion control
87* Php 5.5 leaves NULL chars in unpack ==> add trim, fixed
88* Media title (in standard mode) is now taken into account on upload
89* Some 🐛 🔫
90
91Dotclear 2.8.1 - 2015-09-23
92===========================================================
93* Fix admin pager parameters escaping - thanks Keiko Yashiki from JPCERT/CC for reporting this XSS
94* Error on changing post author in entries' lists: fixed
95* Cope with unknown URL scheme in X-Frame-Options
96* One ot two of 🍻 drunk
97
98Dotclear 2.8 - 2015-08-13
99===========================================================
100* New module dependencies system (plugins)
101* Theme editor: Cope with css theme sub-folder
102* extension/heritage system applied to mustek templateset
103* installation wizard now allows SQLite engine
104* Legacy editor toolbar may now be displayed below textarea
105* Breadcrumb plugin added to the distribution, included in mustek/currywurst templatesets
106* Allow a fifth parameter (optional) for image to insert a legend using figure/figcaption tags (wiki)
107* XHTML validator removed from legacy editor
108* Update jQuery from 1.11.2 to 1.11.3
109* Add a blog parameter to disable internal search
110* Add some sort orders and filters criteria for posts and comments
111* Update CKEditor from 4.4.8 to 4.5.2
112* Add IP and antispam filter columns when displaying spams
113* Add actions to directly blacklist IP from comments list
114* Lexical sort order for tags and widgets
115* Use HTML5 audio tag for MP3 attachments
116* Bye the 🐈, welcome the 🐸
117* Lot of 🐛 🔫
118* Various 🌼 adjustments
119* Full of 🍻 drunk
120
121Dotclear 2.7.4 - 2015-02-13
122===========================================================
123* Berlin theme: resources usage has been optimized
124* currywurst templateset: head-linkrel block name fixed
125* Current editor syntax: now displayed near edited field (post/page/quick entry)
126* Some admin URLs were malformed: fixed
127* Post/page preview: anti-clickjacking system fixed
128* The cat is valid now
129
130Dotclear 2.7.3 - 2015-01-13
131===========================================================
132* Restore advanced edition of category description (as in 2.6)
133* Various bug fixes
134* Some cosmetic adjustments
135
136Dotclear 2.7.2 - 2014-12-25
137===========================================================
138* Dotclear wiki could not be used by standard user: fixed
139
140Dotclear 2.7.1 - 2014-12-25
141===========================================================
142* Various bug fixes
143* Some cosmetic adjustments
144
145Dotclear 2.7 - 2014-12-13
146===========================================================
147* Security : protection against clickjacking may be activated (see blog parameters)
148* Switch to HTML5 : backend, templatesets and themes
149* ARIA roles in da place (a11y)
150* Multiple templatesets : mustek (legacy) and currywurst
151* Themes may use extension/heritage template mechanisms
152* New theme (Berlin) based on currywurst templateset
153* New WYSIWYG editor (CKEditor)
154* Dotclear Wiki now produces HTML5 compatible markup
155* Video and audio HTML5 tags are now used (with fallback to flash if possible)
156* Copying default theme to user-defined theme folder is not more necessary
157* Preview of comment may be optional (see blog parameters)
158* Widgets may be put offline without deleting them
159* jQuery version may be choosen between 1.4.2 (default) and 1.11.1 (see blog parameters)
160* Number of posts listed on home page may be different than other pages (see blog parameters)
161* Hidden folders are now hidden in media manager (set DC_SHOW_HIDDEN_DIRS to true in config.php to display them)
162* User-defined template files may be reset (deleted) in theme editor
163* Drag'n'drop now enabled on touch screens
164* Alternative syntax may be set for comments by third-party plugins
165* A lot of bug fixes
166* Much more cosmetic adjustements and enhancements
167
168Dotclear 2.6.4 - 2014-08-18
169===========================================================
170* Security fix: Sanitize search request. Thanks to Takayuki Uchiyama
171* Security fix: Strenghened xmlrpc (see http://www.breaksec.com/?p=6362)
172
173Dotclear 2.6.3 - 2014-05-16
174===========================================================
175* Security fix: Strengthened xmlrpc auth. Thanks to Egidio Romano
176* Security fix: Strengthened categories ordering. Thanks to Egidio Romano
177
178Dotclear 2.6.2 - 2014-01-20
179===========================================================
180* Security fix: Fixed potential code injection on password protected post/page. Thanks to Charlie Briggs
181* Bugfix: cope with numeric module (plugin/theme) id
182* Bugfix: Bad SQL syntax when using SQLite
183* Bugfix: BlogParentThemeURL template value is back
184* Various bug fixes
185
186Dotclear 2.6.1 - 2013-11-22
187===========================================================
188* Bugfix: trackbacks/pingbacks post URL
189* Bugfix: short/full list of tags (post edition)
190* Bugfix: Toolbar not drawn on new comment form (administration)
191* Various bug fixes
192* Some cosmetic adjustments
193
194Dotclear 2.6 - 2013-11-13
195===========================================================
196* Various bug fixes
197* Various cosmetic adjustments
198
199Dotclear 2.6-RC - 2013-10-18
200===========================================================
201* PHP 5.2 required
202* jQuery upgraded to 1.10.2 (including jQuery migrate plugin 1.2.1)
203* mySQLi support (now proposed by default rather than mySQL)
204* Administration revamped, relooked, redesigned, new icons, new ergonomic's behaviours
205* Administration is now responsive (easier to cope with it on small devices)
206* Administration menu re-organized
207* a11y (accessibility) everywhere, with and whithout Js
208* Success, notice and warning messages have been harmonized
209* daInstaller has been dispatched in core (in plugins and blog themes management)
210* Global help is now available, contextual help is available on every page
211* Media manager enhanced
212* Maintenance plugin revamped and enhanced (now includes export features)
213* Categories management enhanced
214* Plugins and themes management revamped
215* New “Plumetis” variation for Blowup theme
216* Jasmine is now used for unit testing of js components
217* A lot of bug fixes
218* A lot of cosmetics adjustments
219* A lot of enhancements
220
221Dotclear 2.5.3 - 2013-09-13
222===========================================================
223* Bugfix: l10n Clearbricks library
224* Bugfix: post's comments and trackbacks counters
225* Check public and cache directories (existence and permissions)
226* Avoid Categorie's identical URL as far as possible
227* Cope with alpha layers in PNG images for thumbnails generation
228* Add password strength indicators
229* Fix permission form (checkboxes management)
230* Better management of antispam filters
231* Minor enhancements
232* Various bug fixes
233* Various cosmetic adjustments
234
235Dotclear 2.5.2 - 2013-08-14
236===========================================================
237* Security fix: Fixed potential XSS
238* Bugfix: l10n Clearbricks library
239* <tpl:LoopPosition> now works <tpl:Attachments>
240* Dotclear update check may now be forced (ignoring cache)
241* Enforce integration of daInstaller plugin
242* Tags link button is now available on page editor
243* Default cache age is now 1 week instead of 2 hours
244* Quick entry dashboard module is not activated by default on new installation
245* New template {{tpl:BlogParentThemeURL}} (return URL of parent theme of blog's theme if any, URL of blog's theme otherwise)
246* Fix post comments number on comments deletion
247* Fix order of backup files
248* Minor enhancements
249* Various bug fixes
250* Various cosmetic adjustments
251
252Dotclear 2.5.1 - 2013-07-20
253===========================================================
254* Security fix: Replacement of swfupload.swf by a jQuery plugin
255* Security enhancement: Strenghened lists display
256* Thumbnails quality improved
257* Minor enhancements
258* Various bug fixes
259* Various cosmetic adjustments
260
261Dotclear 2.5.0 - 2013-03-12
262===========================================================
263* Security fix: XSS vulnerabilities in swfupload.swf (media enhanced uploader)
264* Ductile theme may now use webfont (from Google, Adobe and similar providers)
265* daInstaller plugin is now included in the official distribution
266* The media enhanced uploader may now be temporarily enabled or disabled
267* Add mass expand on posts and comments lists
268* Allow wildcard for IP address on comments filters
269* Add ability to delete non empty category (and move its content to another category)
270* Every types of entries may be used to inserted an entry link in current edited post
271* Add (none) option to image insertion title pattern
272* Smileys are not more converted in image in pre,code,kbd,script and math contents
273* Notes' title can be now enclosed in h4 (default), h3 or p HTML tag
274* Now display translated name and desc of plugins
275* Add publication date validation on post and page editing forms
276* Add description to widgets
277* Add syntax color option to theme editor plugin
278* Add delete button on media item page
279* Add/complement display modes (all pages, home page only, except on home page) for all widgets
280* {{tpl:Widgets}} without type attribute set displays now all widgets (from nav, extra and custom)
281* Add {{tpl:else}}, {{tpl:TagCount}}, <tpl:TagIf>, {{tpl:CategoryEntriesCount}} template tags
282* Add cat_only, no_tag and content_only attributes to {{tpl:EntryFirstImage}} tag
283* Add capitalize attribute to template filters' list
284* Enhance links lookup anti spam filter
285* Add hidden optional attribute for pages
286* Adaptative compression rate for thumbnails generation
287* Add timestamp on admin information messages
288* Update to jQuery 1.8.3 and jQuery-UI 1.9.2 (custom)
289* Add default favicon.ico
290* Add default attributes settings for image,mp3,flv insertion
291* Various bug fixes
292* Various cosmetic updates and contrast adjustments
293
294Dotclear 2.4.4 - 2012-08-13
295===========================================================
296* Bugfix: Programmed entries works again.
297* Compatibility fix: widgets are now fully php >=5.3 compliant
298* Security fix: potential CSRF in user management
299* has_tag now part of dotclear core, moved from tag plugin.
300* empty title fixed on rss reader widget
301
302Dotclear 2.4.3 - 2012-05-18
303===========================================================
304* Admin: My favorites menu can be hidden
305* Admin: Fix wordpress importer
306* Admin: about:config and user:pref tables are now more readable
307* Ductile theme: Blog logo can be changed
308* New lithuanian language (thanks to Paulius Černakauskas)
309* Various bug fixes
310
311Dotclear 2.4.2 - 2012-02-11
312===========================================================
313* Security fix release
314* 4 XSS vulnerabilities fixed, discovered by High-Tech Bridge
315
316Dotclear 2.4.1.2 - 2011-12-24
317===========================================================
318* Happy Christmas!
319* Security: fixed one SQL injection vulnerability in Clearbricks, thanks to Adjaya
320* New behaviour: publicGetURLFor
321* New behaviour: publicRegisterURL
322* New behaviour: templatePrepareParams
323* Changed the way to get artefacts URLs, through $core->url->getURLFor calls, instead of $core->url->getBase()
324* new/updated parameter sql_only in $core->blog->getPosts and $core->blog->getComments
325
326Dotclear 2.4.0 - 2011-11-13
327===========================================================
328* Admin: new iconset from Thomas Daveluy
329* Admin: Accessibility enhancements
330* Added a custom widget sidebar
331* Added a new theme (Ductile)
332* Added a new plugin (simpleMenu)
333* handling of postgres non default schemas (db_prefix = 'schema.prefix')
334* New iconset mechanism
335* New behaviour: coreBlogBeforeGetPosts
336* Security fix: Spam comments feed now checks for blog permission. Thanks to Romuald Brunet.
337* Various bug fixes
338
339Dotclear 2.3.1 - 2011-06-14
340===========================================================
341* Updated makefile for cleaner distrib.
342* Better localization handling for prefs and shortcuts.
343* Misc JS & CSS cleaning.
344* Import/Export preferences-related bugfix.
345* Administrative mail address is now configurable.
346* Security: one minor fix and changes for two potential problems. Thanks to Jeremie Boutoille
347
348Dotclear 2.3.0 - 2011-05-16
349===========================================================
350* Admin: Major backend redesign
351* Admin: Customizable Dashboard
352* Admin: New Favourites admin submenu
353* Admin: New user preferences backend
354* Admin: Accessibility enhancements
355* Admin: Inline help extended
356* Templates: Default theme templates moved to inc/public/default-templates
357* Clearbricks: External libraries relocated to inc/libs
358* Clearbricks: fixed utf-8 and mysql strict mode problems
359* Added a safe mode connection, disabling all plugins
360* Mysqli support (config.php may need to be updated manually)
361* Fixed dcLog bug with pgsql
362* Fixed comment/trackbacks counters reset.
363* Several other bug fixes
364
365
366Dotclear 2.2.3 - 2011-04-01
367===========================================================
368* Security fix in media manager. Thx to Raphaël
369* Bugfix : 2.2.2 was preventing manual thumbnail regeneration.
370* Database handling bugfixes
371
372Dotclear 2.2.2 - 2011-01-17
373===========================================================
374* Bugfix: 2.2.1 was blocking new installations
375* Autoupdate procedure should now be "bad ftp client configuration"-proof.
376* Several other small bugfixes
377
378Dotclear 2.2.1 - 2011-01-15
379===========================================================
380* ExternalMedia is not part of the core distribution anymore
381* New attribute to tpl:SysIf: blog_id
382* New behaviour: adminMediaItemForm
383* Several bugfixes
384* Several code optimizations
385* Several typos corrected
386* Security fix in Clearbricks. Thx to François Pierre-Doray for pointing it out.
387
388Dotclear 2.2 - 2010-07-01
389===========================================================
390* New installation wizard.
391* Several new behaviours:
392     - adminCommentHeaders
393     - adminCommentsActionsCombo
394     - adminCommentsActions
395     - adminCommentsActionsContent
396     - adminBeforeCommentDelete
397     - adminPostsActionsHeaders
398     - adminUsersActionsCombo
399     - coreBeforeCategoryCreate & coreAfterCategoryCreate
400     - coreBeforeCategoryUpdate & coreAfterCategoryUpdate
401     - coreBeforeLogCreate & coreAfterLogCreate
402     - coreBeforePostCreate & coreAfterPostCreate
403     - coreBeforePostUpdate & coreAfterPostUpdate
404     - coreMediaConstruct
405     - templateCustomSortByAlias
406     - urlHandlerGetArgsDocument
407* New methods for several core classes.
408* Metadata integration to the core.
409* Error handlers can now be extended.
410* Templates: blocks can now be recursive.
411* Templates: Entries & Comments tags can now be sorted.
412* Templates: The template subsystem is quicker, linier, and ready to be extended.
413* Complete reworking of the settings system
414* Correct handling of postgresql non default schemas.
415* Admin: Autocompletion and further enhancing to tags handling.
416* Admin: Accessibility & ergonomic tweaks.
417* Admin: Administrator tag in users list.
418* Comment cookies are now specific to the blog rather than to the domain.
419* Password changes can now be mandatory.
420* jQuery updated to 1.4.2.
421* And way too many bugfixes and typos squashes to be listed.
422
423
424Dotclear 2.1.7 - 2010-05-25
425===========================================================
426* Auto-update procedure fix
427
428Dotclear 2.1.6 - 2009-10-01
429===========================================================
430* Install procedure fixes
431* Admin: Page managers can now create pages
432* Admin: several typos corrected.
433* Admin: Widgets now work in IE8.
434* Admin: Password protected posts can now be previewed.
435* Templates: tpl:Meta* are now tpl:Tags*.
436* Templates: <tpl:Entries lastn="0"> now display all posts.
437* new behavior: adminPageHTMLHead
438* DB schema: new blog_id field in log table
439* Media manager: Pubic folder can now be set on a different host.
440* WordPress import fixes
441* Dailymotion insertion fix
442* Upgrade procedure: CRLF removed in files that were bugging the upgrade.
443* JQuery updated to 1.3
444* IE7-js update
445* security: Full Path Disclosure protection. Thx to Karim Ayad for pointing it out.
446* and way too many bugfixes to be listed.
447
448Dotclear 2.1.5 - 2009-02-05
449===========================================================
450* Security release
451* Youtube insertion update
452
453Dotclear 2.1.4 - 2008-12-21
454===========================================================
455* Security flaw fix
456* WordPress import refining
457* XML-RPC improvements
458
459Dotclear 2.1.3 - 2008-11-19
460===========================================================
461* Admin: New upgrade procedure
462* Admin: Fixed video insertion bug
463* Template: New attributes
464  * url on EntryIf
465  * only_category on Blogroll
466  * no_context on Pagination
467* Template: New tag
468  * BlogID
469* Admin: escaped blog_id on authentication page
470
471Dotclear 2.1.1 - 2008-11-07
472===========================================================
473* Admin: Automatic Update bug fixes
474* Admin: Disable Automatic Update if no digests file
475* Admin: Javascript fixes in authentication page
476* Admin: Fixed errors with categories select boxes
477* Template: Added level attribute in tpl:Categories
478* Media: Added H.264/MPEG-4 AVC for mp4 files
479
480Dotclear 2.1 - 2008-11-01
481===========================================================
482* Subcategories
483* Admin: Automatic Update
484* Admin: Flash 10 support for uploader
485* Admin: mailto link in comment details
486* Admin: Embedded video size selection
487* Admin: Restrict session cookie path to admin
488* Media: H.264/MPEG-4 AVC (HD) support with m4v files
489* Inherited themes
490* WordPress XML-RPC methods support
491* True unicode URLs
492* Plugin: Widgets as template tags
493* Plugin: Filters in entries widgets and Blogroll
494* Plugin: Added vimeo.com in external media
495* Template: New tags
496  * LoopPosition
497  * CommentAuthorDomain
498  * CommentAuthorMD5
499  * EntryFirstImage
500  * EntryCategoryShortURL
501  * CategoryIf
502  * CategoryFirstChildren
503  * CategoryParents
504  * EntryCategoriesBreadcrum
505  * MediaURL
506
507Dotclear 2.0.2 - 2008-09-05
508===========================================================
509* New installation procedure
510* Plugin: WordPress import fixes
511* Plugin: Plain text export as downloadable files
512* Plugin: Message about URLs in Dotclear 1.2 import
513* Public: Display a message if search returns no result
514* Admin: Fixed some CSS bugs
515* Admin: Batch select/unselect entries
516* Admin: In a media item, find entries containing it
517
518Dotclear 2.0.1 - 2008-08-16
519===========================================================
520* Plugin: Fixed a bug with Dotclear 1.2 URLs import.
521* Plugin: Fixed a l10n bug in Pages
522* Admin: Enhanced plugins resources loading and cache
523
524Dotclear 2.0 - 2008-08-01
525===========================================================
526* Public: Atom becomes the default feed format. RSS 2 is always available.
527* Admin: design enhancements and new Dotclear logo
528* Admin: entries preview in blog context
529* L10N: New language manager with zip files support
530* Plugin: Import/Export plugin version 2.0 with import from Dotclear 1.2 and WordPress
531* Plugin: Pages enhancements (preview, sorting)
532* Plugin: support for jamendo and deezer in External Media
533* JSMin on JavaScript files instead of JS packing
534* SQLite 3 only support (PDO based)
535* Many bug fixes and major performances improvements
536
537Dotclear 2.0 RC2 - 2008-06-21
538===========================================================
539* FairTrackback spam filter
540* Language pack infrastructure
541* Bug fix on comment search with author "0"
542* Javascript fixes
543* dcAuth::sessionExists and dcAuth::checkSession new methods
544* Right management in dcAuth::sudo
545* Media File sorting options in media manager
546* CandyUpload, new uploader tool based on SWFUpload
547* New search engine robots options
548* New image options
549* L10N: Japanese and Portugues (Brazil) language packs
550* Many bug fixes and enhancements
551
552Dotclear 2.0 RC1 - 2008-05-01
553===========================================================
554* New: Pages plugin
555* New: Theme editor plugin
556* Entries: Text and WYSIWYG enhancements
557* Entries: Markup validator
558* Entries: Insertion of links to other entries from toolbar
559* Entries: External media insertion (dailymotion, youtube, google video)
560* Tags: Same list for new and existing entries
561* Tags: Tags can be removed on all associated entries
562* Tags: Tags can be removed on a post selection
563* Admin: Ask password for user management tasks, theme upload and plugin upload
564* Admin: New contextual help viewer
565* Media manager: Recreate thumbnails option
566* Media manager: Custom medium thumbnail size (per blog)
567* Media manager: Zip files extract support
568* Media manager: Zip file download of directory
569* Media manager: File exclusion pattern option
570* Themes and plugins: Zip as new package format
571* Themes and plugins: Upload
572* Themes and plugins: Upgrade within administration interface
573* Themes and plugins: Deletion
574* Public: New default theme: Blowup (fully customizable)
575* Public: Changed the way commenter cookie is handled
576* Themes: Template files moved to tpl/ directory
577* L10N: Polish, Catalan and Spanish translations
578* Misc: jQuery upgraded to 1.2.3
579* Misc: Crushed png files
580* Fixed many bugs
581
582Dotclear 2.0 beta 7 - 2007-07-12
583===========================================================
584* New way to display comments and trackbacks on entries in backend
585* Dashboard visual improvements
586* Default cache dir created by installation process
587* Option to limit posts and comments in feeds
588* Introduced UDBS for installation and upgrade
589* Changed handling of XML-RPC URLs
590* New option to force HTTPS redirect if wanted
591* Enforced cookies security (directory and ssl support)
592* Added Plugin auto-install and auto-upgrade support
593* Added trackbacks ttl and moderation preferences
594* Added an Internal search engine
595* FLV support in backend with Neolao player
596* Added nice messages if database is broken or Dotclear not installed
597* upgrade jQuery to 1.1.3
598* Fixed many bugs
599* Fixed security issues in backend
600
601Dotclear 2.0 beta 6 - 2007-02-19
602===========================================================
603* New antispam plugin, with a set of filters (rbl, ipblacklist, spamwords, akismet)
604* New admin dashboard page
605* Fixed unwanted logout bug
606* Added settings to disable template caching and allow PHP code
607* Blog preferences panel bug fix
608* New XML-RPC Client and Server
609* Comment posting permissions bug fix
610
611Dotclear 2.0 beta 5.4 - 2007-01-19
612===========================================================
613* Minor change on spam display in comments.php
614* Command line upgrade script and fix in load_plugin_file.php
615* Make akismet configurable only by superadmin with DC_AKISMET_SUPER
616* SQL optimisations
617* New comments view in post
618
619Dotclear 2.0 beta 5.2 - 2007-01-11
620===========================================================
621* Fixed a bug with imageMeta::getMeta
622* Enhanced dynamic file uploader
623* Move clearbricks files to their own repository
624* Fixed a bug with auto_br in wikiSimpleComment
625* Support for language restriction in feeds
626* Default theme structure changes
627* Fixed a PHP 5.0 compatibility issue
628* Installation Wizard
629
630Dotclear 2.0 beta 4 - 2006-12-26
631===========================================================
632* Performances enhancements.
633* Administration UI enhancements.
634* More user-friendly Widgets (version 1.5).
635* Switch to jQuery <http://jquery.com>.
636* Added jQuery in default theme.
637* Major changes in HTTP client and Feed Parser based on a
638  generic socket handler.
639* PHP 5.2 compatibility.
640* Code documentation (all core and most of clearbricks).
641* Many bug fixes.
642
643Dotclear 2.0 beta 3 - 2006-11-05
644===========================================================
645* Disallow special wrappers for fopen like functions.
646* XML/RPC improvements.
647* Read IPTC and EXIF metadata in uploaded pictures.
648* MySQL 4.1 support only.
649* Metadata import from Dotclear 1.2.x.
650* Akismet plugin.
651* Pings plugin.
652* Added a priority setting for plugins.
653* Many bug fixes.
654
655Dotclear 2.0 beta 2 - 2006-08-09
656===========================================================
657* DC_PLUGIN_ROOT can handle more than one path.
658* OPML/XBEL import in blogroll plugin.
659* Fixed a security issue in html::absoluteURLs().
660* Fixed issues with timezone on scheduled entries.
661* Multiple categories selection in tpl:Entries.
662* Improved dbLayer.
663* Changed category feed URL.
664* Feeds for tags (entries and comments).
665* Added attachments count on backend and frontend.
666* New settings code design. Can now handle wide system settings.
667* Memory usage improvements with autoloader.
668* Some code cleanup.
669* Feed parser improvements.
670* Themes can be configured if needed.
671* XMP support on JPEG files.
672* Media manager improvements.
673* Spamplemousse now uses DNSBL (and the guy who left the bug was fired).
674* Javascript editor and toolbar improvements.
675* RDS support (XML/RPC API discovery).
676* Added a theme with user stylesheet.
677* Plugins manager
Note: See TracBrowser for help on using the repository browser.

Sites map