Dotclear 2.15 - 2019-08-13 =========================================================== * 🐘 PHP 5.6+ is required, PHP 7.3 compliance * Add drag'n'drop sorting system for dashboard blocks * Backend context is preserved on switching blog (as far as possible, depending on user's grants) * No more inline javascript, default/install CSP directive modified accordingly * Add settings (in maintenance plugin) for CSP system * Set correct lang attribute (useful for browser/editor spelling) for content (post/page) depending on entry setting, and CK editor UI in user language * Add spellcheck="true" attribute on input/textarea * Refactoring of notices/messages system on backend * Add undo/redo buttons to CKEditor toolbar * Add title/legend reminder on media popup insertion (1st tab) * Add font loading capabilities for ?pf= system - plugin are now able to load css fonts * Add WebP image format support to Dotclear (may depends on your server PHP capabilities) * Add … support in Dotclear wiki, syntax : _indice_ * Template system: Allow ?sub for category/categories attributes of tpl:EntryIf, and for url/urls attributes of tpl:CategoryIf * Responsive tables/lists (posts, pages, users, …) * Spams preview (administrative board) now shows HTML code rather than interpreted content * Fix: port used behind reverse proxy (Clearbricks) * Lib: Update Codemirror to 5.48.0 * Lib: Update CKEditor to 4.12.0 * πŸ—‘ β†’ No more flash players (flv,mp3) * πŸ› β†’ Various bugs, a11y concerns and typos fixed * 🌼 β†’ Some locales and cosmetic adjustments Dotclear 2.14.3 - 2018-09-26 =========================================================== * πŸ›‘ Security: Avoid XML upload in media manager * Fix: Upgrade modification for media_exclusion default setting * Fix: cope with PHP.ini setting memory_limit set to -1 (unlimited) Dotclear 2.14.2 - 2018-09-04 =========================================================== * πŸ›‘ Security: Authenticated cross-site scripting (XSS) was possible due to the .ahtml (or .bhtml, .chtml, …) file extension being allowed in the media manager. Thank's Josiah Pierce for report (CVE-2018-16358) * πŸ›‘ Security: Unregister phar wrapper in order to avoid PHP Phar extension vulerability * Fix: Enter key in some input fields were not redirect to the parent form * Fix: Unable to save modified theme's files in theme editor, when Codemirror is used * Fix: Back to the original global_filters() template function (will be rewritten in the next 2.15) Dotclear 2.14.1 - 2018-08-17 =========================================================== * 🐘 PHP 5.6+ is required - PHP 5.5 is buggy with the 2.14 release * Fix: install wizzard was broken * Fix: smallest admin font size was set when saving user prefs * Fix: minifying JS scripts may cause problems with regular expressions * Fix: empty JS var was set for syntax coloration if disabled Dotclear 2.14 - 2018-08-13 =========================================================== * πŸ›‘ Security: Fix potential reflective XSS, thank's Zekvan Arslan for report (via Daniel Bishtawi from https://www.netsparker.com/) * 🐘 PHP 7.2 compliance * Use specialized fields whenever it's possible (email, …) * Add definition list capabilities (dl, dt, dd) to wiki (= , : ) * Add … support in wiki, syntax : ^exponant^ * Add syntax property/method to dblayer driver * Replace some js oriented background fading by CSS3 animation * Enhance some visual focus indicators * Enhance key event management in popup (Esc, Enter, …) * Template filters may now be extended (or modified) by 3rd party plugins (via behaviors) * PSR-2 code formatting as far as possible (work in progress) * Add two new ways to order tags (by oldest or newest associated post publication date) * Update Codemirror to 5.38.0 * Update CKEditor to 4.9.2 * Update jQuery migrate plugin to 1.4.1 * Update jQuery UI (custom) 1.12.1 * Add a dark mode (via user preferences) for administration, CSS refactoring * Animate some counters on dashboard icons (nb of comments, spam comments and posts) * πŸ› β†’ Various bugs and typos fixed * 🌼 β†’ Some locales and cosmetic adjustments Dotclear 2.13.1 - 2018-01-27 =========================================================== * Fix: Weird behaviour of theme editor when typing any of "t", "r", "u" and "e" characters * Fix: Unable to save an entry with dcLegacyEditor in XHTML mode, visual pane Dotclear 2.13 - 2018-01-13 =========================================================== * 🐘 PHP 5.5+ is required * πŸ›‘ Security: New password management system (including silent migration) * πŸ›‘ Security: Add Referrer-Policy header in admin pages * πŸ›‘ Security: Fix potential XSS - thank's TrΓ­ Chim TrΓ­ch for report * Dotclear news are now displayed in async way by js * Dotclear core update check is now done by async js - a forced check may still be done on /update.php page * Add utf8mb4 driver (MySQL server 5.7.7+) * Add target="blank" option in simpleMenu * Update CKEditor from 4.6.2 to 4.7.3 * Update CodeMirror from 5.25.1 to 5.32.1 * Add required attribute for mandatory fields * Fix: Avoid horizontal scrolling table when longest comment's usernames in list of comments * Fix: Cope with MySQLi connection via socket * Fix: Error messages markup and styling * Fix: Set caret at the end of the inserted thing (img, url, blockquote, …) in Legacy editor if current selection is empty * Fix: Cope with query part only in SimpleMenu URLs * πŸ› β†’ Various bugs and typos fixed * 🌼 β†’ Some locales and cosmetic adjustments Dotclear 2.12.2 - merged in 2.13 =========================================================== * Fix: lang attribute was missing on entry alone contexts for currywurst and dotty templatesets * Fix: Add http:// protocol before media.dotaddict.org for csp_admin_img * Fix: tpl:sysIf blog_lang generated code * Fix: Duplicate auto-generated URI (entries) * Fix: Do not use border and background on select to use the system aspect of them in Firefox. * Fix: For select element, target Safari to cope with font-size select/option problem. * Fix: Error messages styling Dotclear 2.12.1 - 2017-08-13 =========================================================== * Fix: 3rd party filters for template tags (std filters are not more modifiable) * Fix: Media filename are now used without modification for media title on upload (advanced mode) Dotclear 2.12 - 2017-07-27 =========================================================== * πŸ›‘ Security: Fix potential XSS * πŸ›‘ Security: Enforce uniqness of the recovery key * πŸ›‘ Security: Switch hash method from sha1 to sha512 (new installation only) * Two new values for base font size (37.5% and 87.5%) * Adaptive admin font size is now optional * Reduce base font size on very small devices * Refactor some functions to closures * No CSP directives in safe mode * Add current blog domain for script and style CSP directives * Backlinks: * Retrieving ping URLs, let trackback first, then pingback, then finally webmention * Get source post content to compose webmention excerpt and retrieve title * Use source post title as blog name if this one is unknown (Anonymous blog is used if neither title nor blog name are known) * Datepicker's look refreshed * Allow 3rd party additional headers (URL handler) * Dublin core metadata removed * Using theme\ namespace for _public.php and _prepend.php, in order to simplify theme copy and hack * Temporary password will have to be changed at first login (after resetting password) * Add ukrainian language * French help updated for theme editor * Add an option to disable Dotclear updates check (super-admin only) * Fix: Blogs’ admin (ie not super-admin) got back their blogs’ list but only super-admin may do actions * Fix: Post/page edition layout on different screen sizes * Fix: x-frame-options URL in admin * Fix: Cope with several copies of a same smiley in content * Fix: Allow 3rd party filters for template tags * Fix: Use getURLFor instead of old getBase function for breadcrumb * Fix: Give mysql/mysqli driver choice for DC 1.2 import * Clearbricks lib update from 0.9 to 1.0 * jQuery lib update from 2.2.0 to 2.2.4 (last release of jQuery 2.n branch) * CKEditor lib update from 4.6.1 to 4.6.2 * CodeMirror lib update from 5.15.3 to 5.25.1 * πŸ› β†’ Various bugs and typos fixed * 🌼 β†’ Some locales and cosmetic adjustments * πŸ“£ Warning: Next major release (2.13) will require PHP 5.5+ Dotclear 2.11.2 - 2016-12-29 =========================================================== * Fix: Ensure compatibility with old version of PHP (5.3, 5.4) * Fix: New path of CSP report for maintenance deletion task * Fix: Broken entry preview * Fix: Avoid outgoing link on images in media manager * 🌼 β†’ Do not include empty div as it disrupts CSS flexbox system Dotclear 2.11.1 - 2016-12-28 =========================================================== * Fix: admin menu not visible and some plugin admin not accessible with PHP < 5.5 Dotclear 2.11 - 2016-12-28 =========================================================== * 🐘 PHP 5.3+ is required * πŸ›‘ Security : Prevents XSS injection in media title, thanks smarterbitbybit for report * Cope with locale for sorting order if possible (work in progress) * Rich-text-editor (xhtml) may be disabled for Blog/Category description, widget's textareas, … * Add direct access to module's settings from plugins management page (depends on _define.php of modules) * Menus (except favorites) are now lexically sorted (except "new post" item) * Add Entry date as sort order in comments list * Switch admin CSS to Sass/Compass (work in progress) * Add 'l' and 'm' accesskey for editor toolbars, respectively for 'insert link' and 'select media' buttons * Add new categories attribute to EntryIf template tag * Remove Dublin-core metadata from in template-sets * ToolMan (js) not more used, thank's Tim Taylor for all this years together! * Soft redesign of administration pages using responsive font-size and OS system fonts (IE 10+) * Add a user preference to hide additional/secondary information * Add actions on blog list, new sort order: blog status * Update CKEditor to 4.6.1 * Open trackbacks with behaviors and add basic Webmention support * Add First Publication mecanism and an option to auto-ping when fired * Berlin theme is now based on Dotty template-set * Move advanced and plugins blog’s prefs in two separate foldable sections * Add legend and title insertion option for image insertion in entry * Some notices and messages may be hidden * Add urls attribute to CategoryIf template tag * CSP: Move admin CSP admin/csp_report.txt to DC_VAR/csp/csp_report.json * CSP: Violations are now stored only once in report if repeated * a11y: Remove empty link (href=#) from admin * Fix: Proxies may use standard HTTP(S) ports and SSL may now run through a proxy * Fix: Prevents precondition failed during activated theme update * πŸ› β†’ Various bugs and typos fixed * 🌼 β†’ A lot of locales and cosmetic adjustments * 🚽 β†’ Housecleaning of no more used scripts, images, resources, IE 9- :-) Dotclear 2.10.4 - 2016-11-02 =========================================================== * PostgreSQL < 9.1 fix Dotclear 2.10.3 - 2016-11-01 =========================================================== * Security: Fix CVE-2016-7903: Password Reset Address Spoof β€” Thank's Hongkun Zeng for report * Security: Fix CVE-2016-7902: Media Manager, unrestricted File Upload β€” Thank's Hongkun Zeng for report * CSP: Cope with external sources used in editor's iframe to preview public external content * Fix: Cope with post.post_position field during flat import * Fix: Prevents precondition failed during currently activated theme update * Fix: Remove unecessary header (cope by dotclear) in page plugin * Fix: Let some proxies playing with standard http and https ports * Fix: Let SSL runs through a proxy, it may be ok, sometimes * πŸ› β†’ Various bugs and typos fixed Dotclear 2.10.2 - 2016-08-17 =========================================================== * Update fails with PostgreSQL db support β†’ fixed Dotclear 2.10.1 - 2016-08-15 =========================================================== * CSP (Content-Security-Policies) : * Fix default directive for new installation * Cope with media public URL for media manager * Cope with blog public URL for post/page preview * Codemirror lib is now packed as the other Javascript lib are Dotclear 2.10 - 2016-08-13 =========================================================== * Security: Prevents .htaccess upload, thanks wiswat * Security: Prevents download of a zip media folder outside root media folder, thanks wiswat * Security: Prevents sort of SSRF/XSPA vulnerability in feed import, thanks wiswat * Security: Prevents reflected XSS in meda manager, thanks Chen Ruiqi * Security: Fix somes vulnerabilities in blogroll plugin, thanks Onur YΔ±lmaz - Netsparker (https://www.netsparker.com) * Fix mix-content preview * Pure CSS3 sticky footer for admin pages (aka Β« footer de merde Β») * Add missing breadcrumb styles for blowup theme * Currently logged super-admin may now change it's id wihtout loosing access at next login * The favorites icons may now be hidden from dashboard in user preferences * Number of posts/pages/comments are now displayed at top of lists, including quick filters depending on their status * Search widget has now a placeholder option (HTML5 only) * Add Apache 2.4+ directives in .htaccess * New favorites media folders (displayed at the top of recent folder list) in media manager * New pure HTML5 template set named dotty cloned from currywurst templateset * Codemirror lib updated (2.35.0 β†’ 5.15.2) and moved to core: * 40+ Codemirror themes are available β€” set in user preferences * Fullscreen mode has been added (F11 switching key) * 3rd party plugins may now load and run it with dcPage::jsLoadCodeMirror() and dcPage::jsRunCodeMirror(), see themeEditor plugin for example * New mark button for legacy editor (HTML5 only) * New with_category attribute for tpl:Entries * Add a /var directory: * Set with DC_VAR constant in inc/config.php * Admin URL of a var file should be retrieve with dcPage::getVF() * Public URL of a var file should be retrieve with dcBlog::getVF() * 3rd party plugins should create their own folder inside /var (aka DC_VAR) to keep it correctly organized * Emails and web site have been added to the comments filters' list * Some columns for posts and pages lists are now optional β€” set in user preferences * Add Post URL sample in blog parameters * CKEditor lib update (4.5.8 β†’ 4.6.0) * Wiki syntax: new ") " mark to generate aside blocks * CSP (Content Security Policies) have been implemented on admin pages: * settings may be adjusted in system settings / about:config β†’ system (see csp_admin… values) * violation reports will be stored in admin/csp_report.txt (PHP 5.4+ only) * new behaviour adminPageHTTPHeaderCSP may be used by 3rd party to adjust CSP directives * New behaviour adminPageHTTPheaders * New "Go Top" button displayed for long admin pages * πŸ› β†’ Various bugs and typos fixed * 🌼 β†’ Some locales and cosmetic adjustments Dotclear 2.9.1 - 2016-03-27 =========================================================== * Security: Add shtml extension to default media exclusion extension control, thanks Nitin Venkatesh for report * Changing theme is now allowed even with read-only theme folder * Audio media are not more preloaded in media manager pages * Array settings/prefs are stored with 'array' type rather than 'string' * πŸ› β†’ Various bug fixes * 🌼 β†’ Some cosmetic adjustments Dotclear 2.9 - 2016-02-29 =========================================================== * Additionnal menu items are now lexically sorted (default items and favorites order will be preserved) * Wiki syntax : Added ""marked text"" support (HTML5 only) * Session TTL are now adjustable (set DC_SESSION_TTL in inc/config.php) * Add behaviors for posts/pages/comments/users lists' columns β†’ let 3rd party plugin playing with them * Blog and user lists are now lexically sorted * Some new filters have been added for post lists * Add a search engine in media manager (looking in filename, title and description metadata) * Add recent folders direct access mechanism for the media manager (setting in user prefs) * Add a another display mode (list) to the media manager * Details about currently selected thumbnail in media manager are now displayed * Shortcut access to the upload file form is now displayed on top on media page * Default insertion size (width and height) may now be defined for video media * Flash player fallback insertion is now optional for audio and video media * Modules may have dependencies on Dotclear core version too (using 'core' as module name) * Avoid mixed content (http vs https) for post/page preview: will open preview in another window if necessary * Finnish translation has been added * Content-length header is not more sent in HTTP response (should fix very long delays on some servers) * Template engine : add tpl:EntryAuthorEmailMD5 and tpl:EntryCategoryDescription tags * A new pref/setting array type is now available (JSON encoded in db) * Cope with sort of "un-attached" media β†’ allows new features as "featured media" plugin * CKEditor library updated from 4.5.1 to 4.5.8 * Update jQuery from 1.11.3 to 2.2.0, jQuery-migrate from 1.2.1 to 1.3.0, jQuery-ui-custom from 1.11.2 to 1.11.4 * Provide jQuery 2.2.0 for public use (themes/plugins) - 1.4.2 (default) and 1.11.3 still provided * Some locales added or updated * PHP 7 compliance, PHP 5.3 min * Fix : Cope with "unknown" scheme in url (ie nor http: neither https: is defined in origin url) * Fix : Let select another theme even if theme folder is read-only * Fix : XML-RPC media uploaded are not more twice Base64 decoded * And plenty of other πŸ› πŸ”«, various 🌼 adjustments, and also lot of 🍻 drunk Dotclear 2.8.2 - 2015-10-25 =========================================================== * Security fix : Fixed potential XSS on comments management page * Security fix : Enforce media exclusion control * Php 5.5 leaves NULL chars in unpack ==> add trim, fixed * Media title (in standard mode) is now taken into account on upload * Some πŸ› πŸ”« Dotclear 2.8.1 - 2015-09-23 =========================================================== * Fix admin pager parameters escaping - thanks Keiko Yashiki from JPCERT/CC for reporting this XSS * Error on changing post author in entries' lists: fixed * Cope with unknown URL scheme in X-Frame-Options * One ot two of 🍻 drunk Dotclear 2.8 - 2015-08-13 =========================================================== * New module dependencies system (plugins) * Theme editor: Cope with css theme sub-folder * extension/heritage system applied to mustek templateset * installation wizard now allows SQLite engine * Legacy editor toolbar may now be displayed below textarea * Breadcrumb plugin added to the distribution, included in mustek/currywurst templatesets * Allow a fifth parameter (optional) for image to insert a legend using figure/figcaption tags (wiki) * XHTML validator removed from legacy editor * Update jQuery from 1.11.2 to 1.11.3 * Add a blog parameter to disable internal search * Add some sort orders and filters criteria for posts and comments * Update CKEditor from 4.4.8 to 4.5.2 * Add IP and antispam filter columns when displaying spams * Add actions to directly blacklist IP from comments list * Lexical sort order for tags and widgets * Use HTML5 audio tag for MP3 attachments * Bye the 🐈, welcome the 🐸 * Lot of πŸ› πŸ”« * Various 🌼 adjustments * Full of 🍻 drunk Dotclear 2.7.4 - 2015-02-13 =========================================================== * Berlin theme: resources usage has been optimized * currywurst templateset: head-linkrel block name fixed * Current editor syntax: now displayed near edited field (post/page/quick entry) * Some admin URLs were malformed: fixed * Post/page preview: anti-clickjacking system fixed * The cat is valid now Dotclear 2.7.3 - 2015-01-13 =========================================================== * Restore advanced edition of category description (as in 2.6) * Various bug fixes * Some cosmetic adjustments Dotclear 2.7.2 - 2014-12-25 =========================================================== * Dotclear wiki could not be used by standard user: fixed Dotclear 2.7.1 - 2014-12-25 =========================================================== * Various bug fixes * Some cosmetic adjustments Dotclear 2.7 - 2014-12-13 =========================================================== * Security : protection against clickjacking may be activated (see blog parameters) * Switch to HTML5 : backend, templatesets and themes * ARIA roles in da place (a11y) * Multiple templatesets : mustek (legacy) and currywurst * Themes may use extension/heritage template mechanisms * New theme (Berlin) based on currywurst templateset * New WYSIWYG editor (CKEditor) * Dotclear Wiki now produces HTML5 compatible markup * Video and audio HTML5 tags are now used (with fallback to flash if possible) * Copying default theme to user-defined theme folder is not more necessary * Preview of comment may be optional (see blog parameters) * Widgets may be put offline without deleting them * jQuery version may be choosen between 1.4.2 (default) and 1.11.1 (see blog parameters) * Number of posts listed on home page may be different than other pages (see blog parameters) * Hidden folders are now hidden in media manager (set DC_SHOW_HIDDEN_DIRS to true in config.php to display them) * User-defined template files may be reset (deleted) in theme editor * Drag'n'drop now enabled on touch screens * Alternative syntax may be set for comments by third-party plugins * A lot of bug fixes * Much more cosmetic adjustements and enhancements Dotclear 2.6.4 - 2014-08-18 =========================================================== * Security fix: Sanitize search request. Thanks to Takayuki Uchiyama * Security fix: Strenghened xmlrpc (see http://www.breaksec.com/?p=6362) Dotclear 2.6.3 - 2014-05-16 =========================================================== * Security fix: Strengthened xmlrpc auth. Thanks to Egidio Romano * Security fix: Strengthened categories ordering. Thanks to Egidio Romano Dotclear 2.6.2 - 2014-01-20 =========================================================== * Security fix: Fixed potential code injection on password protected post/page. Thanks to Charlie Briggs * Bugfix: cope with numeric module (plugin/theme) id * Bugfix: Bad SQL syntax when using SQLite * Bugfix: BlogParentThemeURL template value is back * Various bug fixes Dotclear 2.6.1 - 2013-11-22 =========================================================== * Bugfix: trackbacks/pingbacks post URL * Bugfix: short/full list of tags (post edition) * Bugfix: Toolbar not drawn on new comment form (administration) * Various bug fixes * Some cosmetic adjustments Dotclear 2.6 - 2013-11-13 =========================================================== * Various bug fixes * Various cosmetic adjustments Dotclear 2.6-RC - 2013-10-18 =========================================================== * PHP 5.2 required * jQuery upgraded to 1.10.2 (including jQuery migrate plugin 1.2.1) * mySQLi support (now proposed by default rather than mySQL) * Administration revamped, relooked, redesigned, new icons, new ergonomic's behaviours * Administration is now responsive (easier to cope with it on small devices) * Administration menu re-organized * a11y (accessibility) everywhere, with and whithout Js * Success, notice and warning messages have been harmonized * daInstaller has been dispatched in core (in plugins and blog themes management) * Global help is now available, contextual help is available on every page * Media manager enhanced * Maintenance plugin revamped and enhanced (now includes export features) * Categories management enhanced * Plugins and themes management revamped * New β€œPlumetis” variation for Blowup theme * Jasmine is now used for unit testing of js components * A lot of bug fixes * A lot of cosmetics adjustments * A lot of enhancements Dotclear 2.5.3 - 2013-09-13 =========================================================== * Bugfix: l10n Clearbricks library * Bugfix: post's comments and trackbacks counters * Check public and cache directories (existence and permissions) * Avoid Categorie's identical URL as far as possible * Cope with alpha layers in PNG images for thumbnails generation * Add password strength indicators * Fix permission form (checkboxes management) * Better management of antispam filters * Minor enhancements * Various bug fixes * Various cosmetic adjustments Dotclear 2.5.2 - 2013-08-14 =========================================================== * Security fix: Fixed potential XSS * Bugfix: l10n Clearbricks library * now works * Dotclear update check may now be forced (ignoring cache) * Enforce integration of daInstaller plugin * Tags link button is now available on page editor * Default cache age is now 1 week instead of 2 hours * Quick entry dashboard module is not activated by default on new installation * New template {{tpl:BlogParentThemeURL}} (return URL of parent theme of blog's theme if any, URL of blog's theme otherwise) * Fix post comments number on comments deletion * Fix order of backup files * Minor enhancements * Various bug fixes * Various cosmetic adjustments Dotclear 2.5.1 - 2013-07-20 =========================================================== * Security fix: Replacement of swfupload.swf by a jQuery plugin * Security enhancement: Strenghened lists display * Thumbnails quality improved * Minor enhancements * Various bug fixes * Various cosmetic adjustments Dotclear 2.5.0 - 2013-03-12 =========================================================== * Security fix: XSS vulnerabilities in swfupload.swf (media enhanced uploader) * Ductile theme may now use webfont (from Google, Adobe and similar providers) * daInstaller plugin is now included in the official distribution * The media enhanced uploader may now be temporarily enabled or disabled * Add mass expand on posts and comments lists * Allow wildcard for IP address on comments filters * Add ability to delete non empty category (and move its content to another category) * Every types of entries may be used to inserted an entry link in current edited post * Add (none) option to image insertion title pattern * Smileys are not more converted in image in pre,code,kbd,script and math contents * Notes' title can be now enclosed in h4 (default), h3 or p HTML tag * Now display translated name and desc of plugins * Add publication date validation on post and page editing forms * Add description to widgets * Add syntax color option to theme editor plugin * Add delete button on media item page * Add/complement display modes (all pages, home page only, except on home page) for all widgets * {{tpl:Widgets}} without type attribute set displays now all widgets (from nav, extra and custom) * Add {{tpl:else}}, {{tpl:TagCount}}, , {{tpl:CategoryEntriesCount}} template tags * Add cat_only, no_tag and content_only attributes to {{tpl:EntryFirstImage}} tag * Add capitalize attribute to template filters' list * Enhance links lookup anti spam filter * Add hidden optional attribute for pages * Adaptative compression rate for thumbnails generation * Add timestamp on admin information messages * Update to jQuery 1.8.3 and jQuery-UI 1.9.2 (custom) * Add default favicon.ico * Add default attributes settings for image,mp3,flv insertion * Various bug fixes * Various cosmetic updates and contrast adjustments Dotclear 2.4.4 - 2012-08-13 =========================================================== * Bugfix: Programmed entries works again. * Compatibility fix: widgets are now fully php >=5.3 compliant * Security fix: potential CSRF in user management * has_tag now part of dotclear core, moved from tag plugin. * empty title fixed on rss reader widget Dotclear 2.4.3 - 2012-05-18 =========================================================== * Admin: My favorites menu can be hidden * Admin: Fix wordpress importer * Admin: about:config and user:pref tables are now more readable * Ductile theme: Blog logo can be changed * New lithuanian language (thanks to Paulius Černakauskas) * Various bug fixes Dotclear 2.4.2 - 2012-02-11 =========================================================== * Security fix release * 4 XSS vulnerabilities fixed, discovered by High-Tech Bridge Dotclear 2.4.1.2 - 2011-12-24 =========================================================== * Happy Christmas! * Security: fixed one SQL injection vulnerability in Clearbricks, thanks to Adjaya * New behaviour: publicGetURLFor * New behaviour: publicRegisterURL * New behaviour: templatePrepareParams * Changed the way to get artefacts URLs, through $core->url->getURLFor calls, instead of $core->url->getBase() * new/updated parameter sql_only in $core->blog->getPosts and $core->blog->getComments Dotclear 2.4.0 - 2011-11-13 =========================================================== * Admin: new iconset from Thomas Daveluy * Admin: Accessibility enhancements * Added a custom widget sidebar * Added a new theme (Ductile) * Added a new plugin (simpleMenu) * handling of postgres non default schemas (db_prefix = 'schema.prefix') * New iconset mechanism * New behaviour: coreBlogBeforeGetPosts * Security fix: Spam comments feed now checks for blog permission. Thanks to Romuald Brunet. * Various bug fixes Dotclear 2.3.1 - 2011-06-14 =========================================================== * Updated makefile for cleaner distrib. * Better localization handling for prefs and shortcuts. * Misc JS & CSS cleaning. * Import/Export preferences-related bugfix. * Administrative mail address is now configurable. * Security: one minor fix and changes for two potential problems. Thanks to Jeremie Boutoille Dotclear 2.3.0 - 2011-05-16 =========================================================== * Admin: Major backend redesign * Admin: Customizable Dashboard * Admin: New Favourites admin submenu * Admin: New user preferences backend * Admin: Accessibility enhancements * Admin: Inline help extended * Templates: Default theme templates moved to inc/public/default-templates * Clearbricks: External libraries relocated to inc/libs * Clearbricks: fixed utf-8 and mysql strict mode problems * Added a safe mode connection, disabling all plugins * Mysqli support (config.php may need to be updated manually) * Fixed dcLog bug with pgsql * Fixed comment/trackbacks counters reset. * Several other bug fixes Dotclear 2.2.3 - 2011-04-01 =========================================================== * Security fix in media manager. Thx to RaphaΓ«l * Bugfix : 2.2.2 was preventing manual thumbnail regeneration. * Database handling bugfixes Dotclear 2.2.2 - 2011-01-17 =========================================================== * Bugfix: 2.2.1 was blocking new installations * Autoupdate procedure should now be "bad ftp client configuration"-proof. * Several other small bugfixes Dotclear 2.2.1 - 2011-01-15 =========================================================== * ExternalMedia is not part of the core distribution anymore * New attribute to tpl:SysIf: blog_id * New behaviour: adminMediaItemForm * Several bugfixes * Several code optimizations * Several typos corrected * Security fix in Clearbricks. Thx to FranΓ§ois Pierre-Doray for pointing it out. Dotclear 2.2 - 2010-07-01 =========================================================== * New installation wizard. * Several new behaviours: - adminCommentHeaders - adminCommentsActionsCombo - adminCommentsActions - adminCommentsActionsContent - adminBeforeCommentDelete - adminPostsActionsHeaders - adminUsersActionsCombo - coreBeforeCategoryCreate & coreAfterCategoryCreate - coreBeforeCategoryUpdate & coreAfterCategoryUpdate - coreBeforeLogCreate & coreAfterLogCreate - coreBeforePostCreate & coreAfterPostCreate - coreBeforePostUpdate & coreAfterPostUpdate - coreMediaConstruct - templateCustomSortByAlias - urlHandlerGetArgsDocument * New methods for several core classes. * Metadata integration to the core. * Error handlers can now be extended. * Templates: blocks can now be recursive. * Templates: Entries & Comments tags can now be sorted. * Templates: The template subsystem is quicker, linier, and ready to be extended. * Complete reworking of the settings system * Correct handling of postgresql non default schemas. * Admin: Autocompletion and further enhancing to tags handling. * Admin: Accessibility & ergonomic tweaks. * Admin: Administrator tag in users list. * Comment cookies are now specific to the blog rather than to the domain. * Password changes can now be mandatory. * jQuery updated to 1.4.2. * And way too many bugfixes and typos squashes to be listed. Dotclear 2.1.7 - 2010-05-25 =========================================================== * Auto-update procedure fix Dotclear 2.1.6 - 2009-10-01 =========================================================== * Install procedure fixes * Admin: Page managers can now create pages * Admin: several typos corrected. * Admin: Widgets now work in IE8. * Admin: Password protected posts can now be previewed. * Templates: tpl:Meta* are now tpl:Tags*. * Templates: now display all posts. * new behavior: adminPageHTMLHead * DB schema: new blog_id field in log table * Media manager: Pubic folder can now be set on a different host. * WordPress import fixes * Dailymotion insertion fix * Upgrade procedure: CRLF removed in files that were bugging the upgrade. * JQuery updated to 1.3 * IE7-js update * security: Full Path Disclosure protection. Thx to Karim Ayad for pointing it out. * and way too many bugfixes to be listed. Dotclear 2.1.5 - 2009-02-05 =========================================================== * Security release * Youtube insertion update Dotclear 2.1.4 - 2008-12-21 =========================================================== * Security flaw fix * WordPress import refining * XML-RPC improvements Dotclear 2.1.3 - 2008-11-19 =========================================================== * Admin: New upgrade procedure * Admin: Fixed video insertion bug * Template: New attributes * url on EntryIf * only_category on Blogroll * no_context on Pagination * Template: New tag * BlogID * Admin: escaped blog_id on authentication page Dotclear 2.1.1 - 2008-11-07 =========================================================== * Admin: Automatic Update bug fixes * Admin: Disable Automatic Update if no digests file * Admin: Javascript fixes in authentication page * Admin: Fixed errors with categories select boxes * Template: Added level attribute in tpl:Categories * Media: Added H.264/MPEG-4 AVC for mp4 files Dotclear 2.1 - 2008-11-01 =========================================================== * Subcategories * Admin: Automatic Update * Admin: Flash 10 support for uploader * Admin: mailto link in comment details * Admin: Embedded video size selection * Admin: Restrict session cookie path to admin * Media: H.264/MPEG-4 AVC (HD) support with m4v files * Inherited themes * WordPress XML-RPC methods support * True unicode URLs * Plugin: Widgets as template tags * Plugin: Filters in entries widgets and Blogroll * Plugin: Added vimeo.com in external media * Template: New tags * LoopPosition * CommentAuthorDomain * CommentAuthorMD5 * EntryFirstImage * EntryCategoryShortURL * CategoryIf * CategoryFirstChildren * CategoryParents * EntryCategoriesBreadcrum * MediaURL Dotclear 2.0.2 - 2008-09-05 =========================================================== * New installation procedure * Plugin: WordPress import fixes * Plugin: Plain text export as downloadable files * Plugin: Message about URLs in Dotclear 1.2 import * Public: Display a message if search returns no result * Admin: Fixed some CSS bugs * Admin: Batch select/unselect entries * Admin: In a media item, find entries containing it Dotclear 2.0.1 - 2008-08-16 =========================================================== * Plugin: Fixed a bug with Dotclear 1.2 URLs import. * Plugin: Fixed a l10n bug in Pages * Admin: Enhanced plugins resources loading and cache Dotclear 2.0 - 2008-08-01 =========================================================== * Public: Atom becomes the default feed format. RSS 2 is always available. * Admin: design enhancements and new Dotclear logo * Admin: entries preview in blog context * L10N: New language manager with zip files support * Plugin: Import/Export plugin version 2.0 with import from Dotclear 1.2 and WordPress * Plugin: Pages enhancements (preview, sorting) * Plugin: support for jamendo and deezer in External Media * JSMin on JavaScript files instead of JS packing * SQLite 3 only support (PDO based) * Many bug fixes and major performances improvements Dotclear 2.0 RC2 - 2008-06-21 =========================================================== * FairTrackback spam filter * Language pack infrastructure * Bug fix on comment search with author "0" * Javascript fixes * dcAuth::sessionExists and dcAuth::checkSession new methods * Right management in dcAuth::sudo * Media File sorting options in media manager * CandyUpload, new uploader tool based on SWFUpload * New search engine robots options * New image options * L10N: Japanese and Portugues (Brazil) language packs * Many bug fixes and enhancements Dotclear 2.0 RC1 - 2008-05-01 =========================================================== * New: Pages plugin * New: Theme editor plugin * Entries: Text and WYSIWYG enhancements * Entries: Markup validator * Entries: Insertion of links to other entries from toolbar * Entries: External media insertion (dailymotion, youtube, google video) * Tags: Same list for new and existing entries * Tags: Tags can be removed on all associated entries * Tags: Tags can be removed on a post selection * Admin: Ask password for user management tasks, theme upload and plugin upload * Admin: New contextual help viewer * Media manager: Recreate thumbnails option * Media manager: Custom medium thumbnail size (per blog) * Media manager: Zip files extract support * Media manager: Zip file download of directory * Media manager: File exclusion pattern option * Themes and plugins: Zip as new package format * Themes and plugins: Upload * Themes and plugins: Upgrade within administration interface * Themes and plugins: Deletion * Public: New default theme: Blowup (fully customizable) * Public: Changed the way commenter cookie is handled * Themes: Template files moved to tpl/ directory * L10N: Polish, Catalan and Spanish translations * Misc: jQuery upgraded to 1.2.3 * Misc: Crushed png files * Fixed many bugs Dotclear 2.0 beta 7 - 2007-07-12 =========================================================== * New way to display comments and trackbacks on entries in backend * Dashboard visual improvements * Default cache dir created by installation process * Option to limit posts and comments in feeds * Introduced UDBS for installation and upgrade * Changed handling of XML-RPC URLs * New option to force HTTPS redirect if wanted * Enforced cookies security (directory and ssl support) * Added Plugin auto-install and auto-upgrade support * Added trackbacks ttl and moderation preferences * Added an Internal search engine * FLV support in backend with Neolao player * Added nice messages if database is broken or Dotclear not installed * upgrade jQuery to 1.1.3 * Fixed many bugs * Fixed security issues in backend Dotclear 2.0 beta 6 - 2007-02-19 =========================================================== * New antispam plugin, with a set of filters (rbl, ipblacklist, spamwords, akismet) * New admin dashboard page * Fixed unwanted logout bug * Added settings to disable template caching and allow PHP code * Blog preferences panel bug fix * New XML-RPC Client and Server * Comment posting permissions bug fix Dotclear 2.0 beta 5.4 - 2007-01-19 =========================================================== * Minor change on spam display in comments.php * Command line upgrade script and fix in load_plugin_file.php * Make akismet configurable only by superadmin with DC_AKISMET_SUPER * SQL optimisations * New comments view in post Dotclear 2.0 beta 5.2 - 2007-01-11 =========================================================== * Fixed a bug with imageMeta::getMeta * Enhanced dynamic file uploader * Move clearbricks files to their own repository * Fixed a bug with auto_br in wikiSimpleComment * Support for language restriction in feeds * Default theme structure changes * Fixed a PHP 5.0 compatibility issue * Installation Wizard Dotclear 2.0 beta 4 - 2006-12-26 =========================================================== * Performances enhancements. * Administration UI enhancements. * More user-friendly Widgets (version 1.5). * Switch to jQuery . * Added jQuery in default theme. * Major changes in HTTP client and Feed Parser based on a generic socket handler. * PHP 5.2 compatibility. * Code documentation (all core and most of clearbricks). * Many bug fixes. Dotclear 2.0 beta 3 - 2006-11-05 =========================================================== * Disallow special wrappers for fopen like functions. * XML/RPC improvements. * Read IPTC and EXIF metadata in uploaded pictures. * MySQL 4.1 support only. * Metadata import from Dotclear 1.2.x. * Akismet plugin. * Pings plugin. * Added a priority setting for plugins. * Many bug fixes. Dotclear 2.0 beta 2 - 2006-08-09 =========================================================== * DC_PLUGIN_ROOT can handle more than one path. * OPML/XBEL import in blogroll plugin. * Fixed a security issue in html::absoluteURLs(). * Fixed issues with timezone on scheduled entries. * Multiple categories selection in tpl:Entries. * Improved dbLayer. * Changed category feed URL. * Feeds for tags (entries and comments). * Added attachments count on backend and frontend. * New settings code design. Can now handle wide system settings. * Memory usage improvements with autoloader. * Some code cleanup. * Feed parser improvements. * Themes can be configured if needed. * XMP support on JPEG files. * Media manager improvements. * Spamplemousse now uses DNSBL (and the guy who left the bug was fired). * Javascript editor and toolbar improvements. * RDS support (XML/RPC API discovery). * Added a theme with user stylesheet. * Plugins manager