Dotclear

source: CHANGELOG @ 3649:3b0b868d58b0

Revision 3649:3b0b868d58b0, 37.3 KB checked in by franck <carnet.franck.paul@…>, 5 years ago (diff)

Fix potential XSS - thank's Trí Chim Trích for report

Line 
1Dotclear 2.13 - 2018-01-13
2===========================================================
3* 🐘 PHP 5.5+ is required
4* 🛡 Security: New password management system (including silent migration)
5* 🛡 Security: Add Referrer-Policy header in admin pages
6* 🛡 Security: Fix potential XSS - thank's Trí Chim Trích for report
7* Dotclear news are now displayed in async way by js
8* Dotclear core update check is now done by async js - a forced check may still be done on <admin>/update.php page
9* Add utf8mb4 driver (MySQL server 5.7.7+)
10* Add target="blank" option in simpleMenu
11* Update CKEditor from 4.6.2 to 4.7.3
12* Update CodeMirror from 5.25.1 to 5.32.1
13* Add required attribute for mandatory fields
14* Fix: Avoid horizontal scrolling table when longest comment's usernames in list of comments
15* Fix: Cope with MySQLi connection via socket
16* Fix: Error messages markup and styling
17* Fix: Set caret at the end of the inserted thing (img, url, blockquote, …) in Legacy editor if current selection is empty
18* Fix: Cope with query part only in SimpleMenu URLs
19* 🐛 → Various bugs and typos fixed
20* 🌼 → Some locales and cosmetic adjustments
21
22Dotclear 2.12.2 - merged in 2.13
23===========================================================
24* Fix: lang attribute was missing on entry alone contexts for currywurst and dotty templatesets
25* Fix: Add http:// protocol before media.dotaddict.org for csp_admin_img
26* Fix: tpl:sysIf blog_lang generated code
27* Fix: Duplicate auto-generated URI (entries)
28* Fix: Do not use border and background on select to use the system aspect of them in Firefox.
29* Fix: For select element, target Safari to cope with font-size select/option problem.
30* Fix: Error messages styling
31
32Dotclear 2.12.1 - 2017-08-13
33===========================================================
34* Fix: 3rd party filters for template tags (std filters are not more modifiable)
35* Fix: Media filename are now used without modification for media title on upload (advanced mode)
36
37Dotclear 2.12 - 2017-07-27
38===========================================================
39* 🛡 Security: Fix potential XSS
40* 🛡 Security: Enforce uniqness of the recovery key
41* 🛡 Security: Switch hash method from sha1 to sha512 (new installation only)
42* Two new values for base font size (37.5% and 87.5%)
43* Adaptive admin font size is now optional
44* Reduce base font size on very small devices
45* Refactor some functions to closures
46* No CSP directives in safe mode
47* Add current blog domain for script and style CSP directives
48* Backlinks:
49  * Retrieving ping URLs, let trackback first, then pingback, then finally webmention
50  * Get source post content to compose webmention excerpt and retrieve title
51  * Use source post title as blog name if this one is unknown (Anonymous blog is used if neither title nor blog name are known)
52* Datepicker's look refreshed
53* Allow 3rd party additional headers (URL handler)
54* Dublin core metadata removed
55* Using theme\<theme_name> namespace for _public.php and _prepend.php, in order to simplify theme copy and hack
56* Temporary password will have to be changed at first login (after resetting password)
57* Add ukrainian language
58* French help updated for theme editor
59* Add an option to disable Dotclear updates check (super-admin only)
60* Fix: Blogs’ admin (ie not super-admin) got back their blogs’ list but only super-admin may do actions
61* Fix: Post/page edition layout on different screen sizes
62* Fix: x-frame-options URL in admin
63* Fix: Cope with several copies of a same smiley in content
64* Fix: Allow 3rd party filters for template tags
65* Fix: Use getURLFor instead of old getBase function for breadcrumb
66* Fix: Give mysql/mysqli driver choice for DC 1.2 import
67* Clearbricks lib update from 0.9 to 1.0
68* jQuery lib update from 2.2.0 to 2.2.4 (last release of jQuery 2.n branch)
69* CKEditor lib update from 4.6.1 to 4.6.2
70* CodeMirror lib update from 5.15.3 to 5.25.1
71* 🐛 → Various bugs and typos fixed
72* 🌼 → Some locales and cosmetic adjustments
73* 📣 Warning: Next major release (2.13) will require PHP 5.5+
74
75Dotclear 2.11.2 - 2016-12-29
76===========================================================
77* Fix: Ensure compatibility with old version of PHP (5.3, 5.4)
78* Fix: New path of CSP report for maintenance deletion task
79* Fix: Broken entry preview
80* Fix: Avoid outgoing link on images in media manager
81* 🌼 → Do not include empty div as it disrupts CSS flexbox system
82
83Dotclear 2.11.1 - 2016-12-28
84===========================================================
85* Fix: admin menu not visible and some plugin admin not accessible with PHP < 5.5
86
87Dotclear 2.11 - 2016-12-28
88===========================================================
89* 🐘 PHP 5.3+ is required
90* 🛡 Security : Prevents XSS injection in media title, thanks smarterbitbybit for report
91* Cope with locale for sorting order if possible (work in progress)
92* Rich-text-editor (xhtml) may be disabled for Blog/Category description, widget's textareas, …
93* Add direct access to module's settings from plugins management page (depends on _define.php of modules)
94* Menus (except favorites) are now lexically sorted (except "new post" item)
95* Add Entry date as sort order in comments list
96* Switch admin CSS to Sass/Compass (work in progress)
97* Add 'l' and 'm' accesskey for editor toolbars, respectively for 'insert link' and 'select media' buttons
98* Add new categories attribute to EntryIf template tag
99* Remove Dublin-core metadata from <head> in template-sets
100* ToolMan (js) not more used, thank's Tim Taylor for all this years together!
101* Soft redesign of administration pages using responsive font-size and OS system fonts (IE 10+)
102* Add a user preference to hide additional/secondary information
103* Add actions on blog list, new sort order: blog status
104* Update CKEditor to 4.6.1
105* Open trackbacks with behaviors and add basic Webmention support
106* Add First Publication mecanism and an option to auto-ping when fired
107* Berlin theme is now based on Dotty template-set
108* Move advanced and plugins blog’s prefs in two separate foldable sections
109* Add legend and title insertion option for image insertion in entry
110* Some notices and messages may be hidden
111* Add urls attribute to CategoryIf template tag
112* CSP: Move admin CSP admin/csp_report.txt to DC_VAR/csp/csp_report.json
113* CSP: Violations are now stored only once in report if repeated
114* a11y: Remove empty link (href=#) from admin
115* Fix: Proxies may use standard HTTP(S) ports and SSL may now run through a proxy
116* Fix: Prevents precondition failed during activated theme update
117* 🐛 → Various bugs and typos fixed
118* 🌼 → A lot of locales and cosmetic adjustments
119* 🚽 → Housecleaning of no more used scripts, images, resources, IE 9- :-)
120
121Dotclear 2.10.4 - 2016-11-02
122===========================================================
123* PostgreSQL < 9.1 fix
124
125Dotclear 2.10.3 - 2016-11-01
126===========================================================
127* Security: Fix CVE-2016-7903: Password Reset Address Spoof — Thank's Hongkun Zeng for report
128* Security: Fix CVE-2016-7902: Media Manager, unrestricted File Upload — Thank's Hongkun Zeng for report
129* CSP: Cope with external sources used in editor's iframe to preview public external content
130* Fix: Cope with post.post_position field during flat import
131* Fix: Prevents precondition failed during currently activated theme update
132* Fix: Remove unecessary header (cope by dotclear) in page plugin
133* Fix: Let some proxies playing with standard http and https ports
134* Fix: Let SSL runs through a proxy, it may be ok, sometimes
135* 🐛 → Various bugs and typos fixed
136
137Dotclear 2.10.2 - 2016-08-17
138===========================================================
139* Update fails with PostgreSQL db support → fixed
140
141Dotclear 2.10.1 - 2016-08-15
142===========================================================
143* CSP (Content-Security-Policies) :
144  * Fix default directive for new installation
145  * Cope with media public URL for media manager
146  * Cope with blog public URL for post/page preview
147* Codemirror lib is now packed as the other Javascript lib are
148
149Dotclear 2.10 - 2016-08-13
150===========================================================
151* Security: Prevents .htaccess upload, thanks wiswat
152* Security: Prevents download of a zip media folder outside root media folder, thanks wiswat
153* Security: Prevents sort of SSRF/XSPA vulnerability in feed import, thanks wiswat
154* Security: Prevents reflected XSS in meda manager, thanks Chen Ruiqi
155* Security: Fix somes vulnerabilities in blogroll plugin, thanks Onur Yılmaz - Netsparker (https://www.netsparker.com)
156* Fix mix-content preview
157* Pure CSS3 sticky footer for admin pages (aka « footer de merde »)
158* Add missing breadcrumb styles for blowup theme
159* Currently logged super-admin may now change it's id wihtout loosing access at next login
160* The favorites icons may now be hidden from dashboard in user preferences
161* Number of posts/pages/comments are now displayed at top of lists, including quick filters depending on their status
162* Search widget has now a placeholder option (HTML5 only)
163* Add Apache 2.4+ directives in .htaccess
164* New favorites media folders (displayed at the top of recent folder list) in media manager
165* New pure HTML5 template set named dotty cloned from currywurst templateset
166* Codemirror lib updated (2.35.0 → 5.15.2) and moved to core:
167  * 40+ Codemirror themes are available — set in user preferences
168  * Fullscreen mode has been added (F11 switching key)
169  * 3rd party plugins may now load and run it with dcPage::jsLoadCodeMirror() and dcPage::jsRunCodeMirror(), see themeEditor plugin for example
170* New mark button for legacy editor (HTML5 only)
171* New with_category attribute for tpl:Entries
172* Add a /var directory:
173  * Set with DC_VAR constant in inc/config.php
174  * Admin URL of a var file should be retrieve with dcPage::getVF()
175  * Public URL of a var file should be retrieve with dcBlog::getVF()
176  * 3rd party plugins should create their own folder inside /var (aka DC_VAR) to keep it correctly organized
177* Emails and web site have been added to the comments filters' list
178* Some columns for posts and pages lists are now optional — set in user preferences
179* Add Post URL sample in blog parameters
180* CKEditor lib update (4.5.8 → 4.6.0)
181* Wiki syntax: new ") <text>" mark to generate aside blocks
182* CSP (Content Security Policies) have been implemented on admin pages:
183  * settings may be adjusted in system settings / about:config → system (see csp_admin… values)
184  * violation reports will be stored in admin/csp_report.txt (PHP 5.4+ only)
185  * new behaviour adminPageHTTPHeaderCSP may be used by 3rd party to adjust CSP directives
186* New behaviour adminPageHTTPheaders
187* New "Go Top" button displayed for long admin pages
188* 🐛 → Various bugs and typos fixed
189* 🌼 → Some locales and cosmetic adjustments
190
191Dotclear 2.9.1 - 2016-03-27
192===========================================================
193* Security: Add shtml extension to default media exclusion extension control, thanks Nitin Venkatesh for report
194* Changing theme is now allowed even with read-only theme folder
195* Audio media are not more preloaded in media manager pages
196* Array settings/prefs are stored with 'array' type rather than 'string'
197* 🐛 → Various bug fixes
198* 🌼 → Some cosmetic adjustments
199
200Dotclear 2.9 - 2016-02-29
201===========================================================
202* Additionnal menu items are now lexically sorted (default items and favorites order will be preserved)
203* Wiki syntax : Added ""marked text"" support (HTML5 only)
204* Session TTL are now adjustable (set DC_SESSION_TTL in inc/config.php)
205* Add behaviors for posts/pages/comments/users lists' columns → let 3rd party plugin playing with them
206* Blog and user lists are now lexically sorted
207* Some new filters have been added for post lists
208* Add a search engine in media manager (looking in filename, title and description metadata)
209* Add recent folders direct access mechanism for the media manager (setting in user prefs)
210* Add a another display mode (list) to the media manager
211* Details about currently selected thumbnail in media manager are now displayed
212* Shortcut access to the upload file form is now displayed on top on media page
213* Default insertion size (width and height) may now be defined for video media
214* Flash player fallback insertion is now optional for audio and video media
215* Modules may have dependencies on Dotclear core version too (using 'core' as module name)
216* Avoid mixed content (http vs https) for post/page preview: will open preview in another window if necessary
217* Finnish translation has been added
218* Content-length header is not more sent in HTTP response (should fix very long delays on some servers)
219* Template engine : add tpl:EntryAuthorEmailMD5 and tpl:EntryCategoryDescription tags
220* A new pref/setting array type is now available (JSON encoded in db)
221* Cope with sort of "un-attached" media → allows new features as "featured media" plugin
222* CKEditor library updated from 4.5.1 to 4.5.8
223* Update jQuery from 1.11.3 to 2.2.0, jQuery-migrate from 1.2.1 to 1.3.0, jQuery-ui-custom from 1.11.2 to 1.11.4
224* Provide jQuery 2.2.0 for public use (themes/plugins) - 1.4.2 (default) and 1.11.3 still provided
225* Some locales added or updated
226* PHP 7 compliance, PHP 5.3 min
227* Fix : Cope with "unknown" scheme in url (ie nor http: neither https: is defined in origin url)
228* Fix : Let select another theme even if theme folder is read-only
229* Fix : XML-RPC media uploaded are not more twice Base64 decoded
230* And plenty of other 🐛 🔫, various 🌼 adjustments, and also lot of 🍻 drunk
231
232Dotclear 2.8.2 - 2015-10-25
233===========================================================
234* Security fix : Fixed potential XSS on comments management page
235* Security fix : Enforce media exclusion control
236* Php 5.5 leaves NULL chars in unpack ==> add trim, fixed
237* Media title (in standard mode) is now taken into account on upload
238* Some 🐛 🔫
239
240Dotclear 2.8.1 - 2015-09-23
241===========================================================
242* Fix admin pager parameters escaping - thanks Keiko Yashiki from JPCERT/CC for reporting this XSS
243* Error on changing post author in entries' lists: fixed
244* Cope with unknown URL scheme in X-Frame-Options
245* One ot two of 🍻 drunk
246
247Dotclear 2.8 - 2015-08-13
248===========================================================
249* New module dependencies system (plugins)
250* Theme editor: Cope with css theme sub-folder
251* extension/heritage system applied to mustek templateset
252* installation wizard now allows SQLite engine
253* Legacy editor toolbar may now be displayed below textarea
254* Breadcrumb plugin added to the distribution, included in mustek/currywurst templatesets
255* Allow a fifth parameter (optional) for image to insert a legend using figure/figcaption tags (wiki)
256* XHTML validator removed from legacy editor
257* Update jQuery from 1.11.2 to 1.11.3
258* Add a blog parameter to disable internal search
259* Add some sort orders and filters criteria for posts and comments
260* Update CKEditor from 4.4.8 to 4.5.2
261* Add IP and antispam filter columns when displaying spams
262* Add actions to directly blacklist IP from comments list
263* Lexical sort order for tags and widgets
264* Use HTML5 audio tag for MP3 attachments
265* Bye the 🐈, welcome the 🐸
266* Lot of 🐛 🔫
267* Various 🌼 adjustments
268* Full of 🍻 drunk
269
270Dotclear 2.7.4 - 2015-02-13
271===========================================================
272* Berlin theme: resources usage has been optimized
273* currywurst templateset: head-linkrel block name fixed
274* Current editor syntax: now displayed near edited field (post/page/quick entry)
275* Some admin URLs were malformed: fixed
276* Post/page preview: anti-clickjacking system fixed
277* The cat is valid now
278
279Dotclear 2.7.3 - 2015-01-13
280===========================================================
281* Restore advanced edition of category description (as in 2.6)
282* Various bug fixes
283* Some cosmetic adjustments
284
285Dotclear 2.7.2 - 2014-12-25
286===========================================================
287* Dotclear wiki could not be used by standard user: fixed
288
289Dotclear 2.7.1 - 2014-12-25
290===========================================================
291* Various bug fixes
292* Some cosmetic adjustments
293
294Dotclear 2.7 - 2014-12-13
295===========================================================
296* Security : protection against clickjacking may be activated (see blog parameters)
297* Switch to HTML5 : backend, templatesets and themes
298* ARIA roles in da place (a11y)
299* Multiple templatesets : mustek (legacy) and currywurst
300* Themes may use extension/heritage template mechanisms
301* New theme (Berlin) based on currywurst templateset
302* New WYSIWYG editor (CKEditor)
303* Dotclear Wiki now produces HTML5 compatible markup
304* Video and audio HTML5 tags are now used (with fallback to flash if possible)
305* Copying default theme to user-defined theme folder is not more necessary
306* Preview of comment may be optional (see blog parameters)
307* Widgets may be put offline without deleting them
308* jQuery version may be choosen between 1.4.2 (default) and 1.11.1 (see blog parameters)
309* Number of posts listed on home page may be different than other pages (see blog parameters)
310* Hidden folders are now hidden in media manager (set DC_SHOW_HIDDEN_DIRS to true in config.php to display them)
311* User-defined template files may be reset (deleted) in theme editor
312* Drag'n'drop now enabled on touch screens
313* Alternative syntax may be set for comments by third-party plugins
314* A lot of bug fixes
315* Much more cosmetic adjustements and enhancements
316
317Dotclear 2.6.4 - 2014-08-18
318===========================================================
319* Security fix: Sanitize search request. Thanks to Takayuki Uchiyama
320* Security fix: Strenghened xmlrpc (see http://www.breaksec.com/?p=6362)
321
322Dotclear 2.6.3 - 2014-05-16
323===========================================================
324* Security fix: Strengthened xmlrpc auth. Thanks to Egidio Romano
325* Security fix: Strengthened categories ordering. Thanks to Egidio Romano
326
327Dotclear 2.6.2 - 2014-01-20
328===========================================================
329* Security fix: Fixed potential code injection on password protected post/page. Thanks to Charlie Briggs
330* Bugfix: cope with numeric module (plugin/theme) id
331* Bugfix: Bad SQL syntax when using SQLite
332* Bugfix: BlogParentThemeURL template value is back
333* Various bug fixes
334
335Dotclear 2.6.1 - 2013-11-22
336===========================================================
337* Bugfix: trackbacks/pingbacks post URL
338* Bugfix: short/full list of tags (post edition)
339* Bugfix: Toolbar not drawn on new comment form (administration)
340* Various bug fixes
341* Some cosmetic adjustments
342
343Dotclear 2.6 - 2013-11-13
344===========================================================
345* Various bug fixes
346* Various cosmetic adjustments
347
348Dotclear 2.6-RC - 2013-10-18
349===========================================================
350* PHP 5.2 required
351* jQuery upgraded to 1.10.2 (including jQuery migrate plugin 1.2.1)
352* mySQLi support (now proposed by default rather than mySQL)
353* Administration revamped, relooked, redesigned, new icons, new ergonomic's behaviours
354* Administration is now responsive (easier to cope with it on small devices)
355* Administration menu re-organized
356* a11y (accessibility) everywhere, with and whithout Js
357* Success, notice and warning messages have been harmonized
358* daInstaller has been dispatched in core (in plugins and blog themes management)
359* Global help is now available, contextual help is available on every page
360* Media manager enhanced
361* Maintenance plugin revamped and enhanced (now includes export features)
362* Categories management enhanced
363* Plugins and themes management revamped
364* New “Plumetis” variation for Blowup theme
365* Jasmine is now used for unit testing of js components
366* A lot of bug fixes
367* A lot of cosmetics adjustments
368* A lot of enhancements
369
370Dotclear 2.5.3 - 2013-09-13
371===========================================================
372* Bugfix: l10n Clearbricks library
373* Bugfix: post's comments and trackbacks counters
374* Check public and cache directories (existence and permissions)
375* Avoid Categorie's identical URL as far as possible
376* Cope with alpha layers in PNG images for thumbnails generation
377* Add password strength indicators
378* Fix permission form (checkboxes management)
379* Better management of antispam filters
380* Minor enhancements
381* Various bug fixes
382* Various cosmetic adjustments
383
384Dotclear 2.5.2 - 2013-08-14
385===========================================================
386* Security fix: Fixed potential XSS
387* Bugfix: l10n Clearbricks library
388* <tpl:LoopPosition> now works <tpl:Attachments>
389* Dotclear update check may now be forced (ignoring cache)
390* Enforce integration of daInstaller plugin
391* Tags link button is now available on page editor
392* Default cache age is now 1 week instead of 2 hours
393* Quick entry dashboard module is not activated by default on new installation
394* New template {{tpl:BlogParentThemeURL}} (return URL of parent theme of blog's theme if any, URL of blog's theme otherwise)
395* Fix post comments number on comments deletion
396* Fix order of backup files
397* Minor enhancements
398* Various bug fixes
399* Various cosmetic adjustments
400
401Dotclear 2.5.1 - 2013-07-20
402===========================================================
403* Security fix: Replacement of swfupload.swf by a jQuery plugin
404* Security enhancement: Strenghened lists display
405* Thumbnails quality improved
406* Minor enhancements
407* Various bug fixes
408* Various cosmetic adjustments
409
410Dotclear 2.5.0 - 2013-03-12
411===========================================================
412* Security fix: XSS vulnerabilities in swfupload.swf (media enhanced uploader)
413* Ductile theme may now use webfont (from Google, Adobe and similar providers)
414* daInstaller plugin is now included in the official distribution
415* The media enhanced uploader may now be temporarily enabled or disabled
416* Add mass expand on posts and comments lists
417* Allow wildcard for IP address on comments filters
418* Add ability to delete non empty category (and move its content to another category)
419* Every types of entries may be used to inserted an entry link in current edited post
420* Add (none) option to image insertion title pattern
421* Smileys are not more converted in image in pre,code,kbd,script and math contents
422* Notes' title can be now enclosed in h4 (default), h3 or p HTML tag
423* Now display translated name and desc of plugins
424* Add publication date validation on post and page editing forms
425* Add description to widgets
426* Add syntax color option to theme editor plugin
427* Add delete button on media item page
428* Add/complement display modes (all pages, home page only, except on home page) for all widgets
429* {{tpl:Widgets}} without type attribute set displays now all widgets (from nav, extra and custom)
430* Add {{tpl:else}}, {{tpl:TagCount}}, <tpl:TagIf>, {{tpl:CategoryEntriesCount}} template tags
431* Add cat_only, no_tag and content_only attributes to {{tpl:EntryFirstImage}} tag
432* Add capitalize attribute to template filters' list
433* Enhance links lookup anti spam filter
434* Add hidden optional attribute for pages
435* Adaptative compression rate for thumbnails generation
436* Add timestamp on admin information messages
437* Update to jQuery 1.8.3 and jQuery-UI 1.9.2 (custom)
438* Add default favicon.ico
439* Add default attributes settings for image,mp3,flv insertion
440* Various bug fixes
441* Various cosmetic updates and contrast adjustments
442
443Dotclear 2.4.4 - 2012-08-13
444===========================================================
445* Bugfix: Programmed entries works again.
446* Compatibility fix: widgets are now fully php >=5.3 compliant
447* Security fix: potential CSRF in user management
448* has_tag now part of dotclear core, moved from tag plugin.
449* empty title fixed on rss reader widget
450
451Dotclear 2.4.3 - 2012-05-18
452===========================================================
453* Admin: My favorites menu can be hidden
454* Admin: Fix wordpress importer
455* Admin: about:config and user:pref tables are now more readable
456* Ductile theme: Blog logo can be changed
457* New lithuanian language (thanks to Paulius Černakauskas)
458* Various bug fixes
459
460Dotclear 2.4.2 - 2012-02-11
461===========================================================
462* Security fix release
463* 4 XSS vulnerabilities fixed, discovered by High-Tech Bridge
464
465Dotclear 2.4.1.2 - 2011-12-24
466===========================================================
467* Happy Christmas!
468* Security: fixed one SQL injection vulnerability in Clearbricks, thanks to Adjaya
469* New behaviour: publicGetURLFor
470* New behaviour: publicRegisterURL
471* New behaviour: templatePrepareParams
472* Changed the way to get artefacts URLs, through $core->url->getURLFor calls, instead of $core->url->getBase()
473* new/updated parameter sql_only in $core->blog->getPosts and $core->blog->getComments
474
475Dotclear 2.4.0 - 2011-11-13
476===========================================================
477* Admin: new iconset from Thomas Daveluy
478* Admin: Accessibility enhancements
479* Added a custom widget sidebar
480* Added a new theme (Ductile)
481* Added a new plugin (simpleMenu)
482* handling of postgres non default schemas (db_prefix = 'schema.prefix')
483* New iconset mechanism
484* New behaviour: coreBlogBeforeGetPosts
485* Security fix: Spam comments feed now checks for blog permission. Thanks to Romuald Brunet.
486* Various bug fixes
487
488Dotclear 2.3.1 - 2011-06-14
489===========================================================
490* Updated makefile for cleaner distrib.
491* Better localization handling for prefs and shortcuts.
492* Misc JS & CSS cleaning.
493* Import/Export preferences-related bugfix.
494* Administrative mail address is now configurable.
495* Security: one minor fix and changes for two potential problems. Thanks to Jeremie Boutoille
496
497Dotclear 2.3.0 - 2011-05-16
498===========================================================
499* Admin: Major backend redesign
500* Admin: Customizable Dashboard
501* Admin: New Favourites admin submenu
502* Admin: New user preferences backend
503* Admin: Accessibility enhancements
504* Admin: Inline help extended
505* Templates: Default theme templates moved to inc/public/default-templates
506* Clearbricks: External libraries relocated to inc/libs
507* Clearbricks: fixed utf-8 and mysql strict mode problems
508* Added a safe mode connection, disabling all plugins
509* Mysqli support (config.php may need to be updated manually)
510* Fixed dcLog bug with pgsql
511* Fixed comment/trackbacks counters reset.
512* Several other bug fixes
513
514
515Dotclear 2.2.3 - 2011-04-01
516===========================================================
517* Security fix in media manager. Thx to Raphaël
518* Bugfix : 2.2.2 was preventing manual thumbnail regeneration.
519* Database handling bugfixes
520
521Dotclear 2.2.2 - 2011-01-17
522===========================================================
523* Bugfix: 2.2.1 was blocking new installations
524* Autoupdate procedure should now be "bad ftp client configuration"-proof.
525* Several other small bugfixes
526
527Dotclear 2.2.1 - 2011-01-15
528===========================================================
529* ExternalMedia is not part of the core distribution anymore
530* New attribute to tpl:SysIf: blog_id
531* New behaviour: adminMediaItemForm
532* Several bugfixes
533* Several code optimizations
534* Several typos corrected
535* Security fix in Clearbricks. Thx to François Pierre-Doray for pointing it out.
536
537Dotclear 2.2 - 2010-07-01
538===========================================================
539* New installation wizard.
540* Several new behaviours:
541     - adminCommentHeaders
542     - adminCommentsActionsCombo
543     - adminCommentsActions
544     - adminCommentsActionsContent
545     - adminBeforeCommentDelete
546     - adminPostsActionsHeaders
547     - adminUsersActionsCombo
548     - coreBeforeCategoryCreate & coreAfterCategoryCreate
549     - coreBeforeCategoryUpdate & coreAfterCategoryUpdate
550     - coreBeforeLogCreate & coreAfterLogCreate
551     - coreBeforePostCreate & coreAfterPostCreate
552     - coreBeforePostUpdate & coreAfterPostUpdate
553     - coreMediaConstruct
554     - templateCustomSortByAlias
555     - urlHandlerGetArgsDocument
556* New methods for several core classes.
557* Metadata integration to the core.
558* Error handlers can now be extended.
559* Templates: blocks can now be recursive.
560* Templates: Entries & Comments tags can now be sorted.
561* Templates: The template subsystem is quicker, linier, and ready to be extended.
562* Complete reworking of the settings system
563* Correct handling of postgresql non default schemas.
564* Admin: Autocompletion and further enhancing to tags handling.
565* Admin: Accessibility & ergonomic tweaks.
566* Admin: Administrator tag in users list.
567* Comment cookies are now specific to the blog rather than to the domain.
568* Password changes can now be mandatory.
569* jQuery updated to 1.4.2.
570* And way too many bugfixes and typos squashes to be listed.
571
572
573Dotclear 2.1.7 - 2010-05-25
574===========================================================
575* Auto-update procedure fix
576
577Dotclear 2.1.6 - 2009-10-01
578===========================================================
579* Install procedure fixes
580* Admin: Page managers can now create pages
581* Admin: several typos corrected.
582* Admin: Widgets now work in IE8.
583* Admin: Password protected posts can now be previewed.
584* Templates: tpl:Meta* are now tpl:Tags*.
585* Templates: <tpl:Entries lastn="0"> now display all posts.
586* new behavior: adminPageHTMLHead
587* DB schema: new blog_id field in log table
588* Media manager: Pubic folder can now be set on a different host.
589* WordPress import fixes
590* Dailymotion insertion fix
591* Upgrade procedure: CRLF removed in files that were bugging the upgrade.
592* JQuery updated to 1.3
593* IE7-js update
594* security: Full Path Disclosure protection. Thx to Karim Ayad for pointing it out.
595* and way too many bugfixes to be listed.
596
597Dotclear 2.1.5 - 2009-02-05
598===========================================================
599* Security release
600* Youtube insertion update
601
602Dotclear 2.1.4 - 2008-12-21
603===========================================================
604* Security flaw fix
605* WordPress import refining
606* XML-RPC improvements
607
608Dotclear 2.1.3 - 2008-11-19
609===========================================================
610* Admin: New upgrade procedure
611* Admin: Fixed video insertion bug
612* Template: New attributes
613  * url on EntryIf
614  * only_category on Blogroll
615  * no_context on Pagination
616* Template: New tag
617  * BlogID
618* Admin: escaped blog_id on authentication page
619
620Dotclear 2.1.1 - 2008-11-07
621===========================================================
622* Admin: Automatic Update bug fixes
623* Admin: Disable Automatic Update if no digests file
624* Admin: Javascript fixes in authentication page
625* Admin: Fixed errors with categories select boxes
626* Template: Added level attribute in tpl:Categories
627* Media: Added H.264/MPEG-4 AVC for mp4 files
628
629Dotclear 2.1 - 2008-11-01
630===========================================================
631* Subcategories
632* Admin: Automatic Update
633* Admin: Flash 10 support for uploader
634* Admin: mailto link in comment details
635* Admin: Embedded video size selection
636* Admin: Restrict session cookie path to admin
637* Media: H.264/MPEG-4 AVC (HD) support with m4v files
638* Inherited themes
639* WordPress XML-RPC methods support
640* True unicode URLs
641* Plugin: Widgets as template tags
642* Plugin: Filters in entries widgets and Blogroll
643* Plugin: Added vimeo.com in external media
644* Template: New tags
645  * LoopPosition
646  * CommentAuthorDomain
647  * CommentAuthorMD5
648  * EntryFirstImage
649  * EntryCategoryShortURL
650  * CategoryIf
651  * CategoryFirstChildren
652  * CategoryParents
653  * EntryCategoriesBreadcrum
654  * MediaURL
655
656Dotclear 2.0.2 - 2008-09-05
657===========================================================
658* New installation procedure
659* Plugin: WordPress import fixes
660* Plugin: Plain text export as downloadable files
661* Plugin: Message about URLs in Dotclear 1.2 import
662* Public: Display a message if search returns no result
663* Admin: Fixed some CSS bugs
664* Admin: Batch select/unselect entries
665* Admin: In a media item, find entries containing it
666
667Dotclear 2.0.1 - 2008-08-16
668===========================================================
669* Plugin: Fixed a bug with Dotclear 1.2 URLs import.
670* Plugin: Fixed a l10n bug in Pages
671* Admin: Enhanced plugins resources loading and cache
672
673Dotclear 2.0 - 2008-08-01
674===========================================================
675* Public: Atom becomes the default feed format. RSS 2 is always available.
676* Admin: design enhancements and new Dotclear logo
677* Admin: entries preview in blog context
678* L10N: New language manager with zip files support
679* Plugin: Import/Export plugin version 2.0 with import from Dotclear 1.2 and WordPress
680* Plugin: Pages enhancements (preview, sorting)
681* Plugin: support for jamendo and deezer in External Media
682* JSMin on JavaScript files instead of JS packing
683* SQLite 3 only support (PDO based)
684* Many bug fixes and major performances improvements
685
686Dotclear 2.0 RC2 - 2008-06-21
687===========================================================
688* FairTrackback spam filter
689* Language pack infrastructure
690* Bug fix on comment search with author "0"
691* Javascript fixes
692* dcAuth::sessionExists and dcAuth::checkSession new methods
693* Right management in dcAuth::sudo
694* Media File sorting options in media manager
695* CandyUpload, new uploader tool based on SWFUpload
696* New search engine robots options
697* New image options
698* L10N: Japanese and Portugues (Brazil) language packs
699* Many bug fixes and enhancements
700
701Dotclear 2.0 RC1 - 2008-05-01
702===========================================================
703* New: Pages plugin
704* New: Theme editor plugin
705* Entries: Text and WYSIWYG enhancements
706* Entries: Markup validator
707* Entries: Insertion of links to other entries from toolbar
708* Entries: External media insertion (dailymotion, youtube, google video)
709* Tags: Same list for new and existing entries
710* Tags: Tags can be removed on all associated entries
711* Tags: Tags can be removed on a post selection
712* Admin: Ask password for user management tasks, theme upload and plugin upload
713* Admin: New contextual help viewer
714* Media manager: Recreate thumbnails option
715* Media manager: Custom medium thumbnail size (per blog)
716* Media manager: Zip files extract support
717* Media manager: Zip file download of directory
718* Media manager: File exclusion pattern option
719* Themes and plugins: Zip as new package format
720* Themes and plugins: Upload
721* Themes and plugins: Upgrade within administration interface
722* Themes and plugins: Deletion
723* Public: New default theme: Blowup (fully customizable)
724* Public: Changed the way commenter cookie is handled
725* Themes: Template files moved to tpl/ directory
726* L10N: Polish, Catalan and Spanish translations
727* Misc: jQuery upgraded to 1.2.3
728* Misc: Crushed png files
729* Fixed many bugs
730
731Dotclear 2.0 beta 7 - 2007-07-12
732===========================================================
733* New way to display comments and trackbacks on entries in backend
734* Dashboard visual improvements
735* Default cache dir created by installation process
736* Option to limit posts and comments in feeds
737* Introduced UDBS for installation and upgrade
738* Changed handling of XML-RPC URLs
739* New option to force HTTPS redirect if wanted
740* Enforced cookies security (directory and ssl support)
741* Added Plugin auto-install and auto-upgrade support
742* Added trackbacks ttl and moderation preferences
743* Added an Internal search engine
744* FLV support in backend with Neolao player
745* Added nice messages if database is broken or Dotclear not installed
746* upgrade jQuery to 1.1.3
747* Fixed many bugs
748* Fixed security issues in backend
749
750Dotclear 2.0 beta 6 - 2007-02-19
751===========================================================
752* New antispam plugin, with a set of filters (rbl, ipblacklist, spamwords, akismet)
753* New admin dashboard page
754* Fixed unwanted logout bug
755* Added settings to disable template caching and allow PHP code
756* Blog preferences panel bug fix
757* New XML-RPC Client and Server
758* Comment posting permissions bug fix
759
760Dotclear 2.0 beta 5.4 - 2007-01-19
761===========================================================
762* Minor change on spam display in comments.php
763* Command line upgrade script and fix in load_plugin_file.php
764* Make akismet configurable only by superadmin with DC_AKISMET_SUPER
765* SQL optimisations
766* New comments view in post
767
768Dotclear 2.0 beta 5.2 - 2007-01-11
769===========================================================
770* Fixed a bug with imageMeta::getMeta
771* Enhanced dynamic file uploader
772* Move clearbricks files to their own repository
773* Fixed a bug with auto_br in wikiSimpleComment
774* Support for language restriction in feeds
775* Default theme structure changes
776* Fixed a PHP 5.0 compatibility issue
777* Installation Wizard
778
779Dotclear 2.0 beta 4 - 2006-12-26
780===========================================================
781* Performances enhancements.
782* Administration UI enhancements.
783* More user-friendly Widgets (version 1.5).
784* Switch to jQuery <http://jquery.com>.
785* Added jQuery in default theme.
786* Major changes in HTTP client and Feed Parser based on a
787  generic socket handler.
788* PHP 5.2 compatibility.
789* Code documentation (all core and most of clearbricks).
790* Many bug fixes.
791
792Dotclear 2.0 beta 3 - 2006-11-05
793===========================================================
794* Disallow special wrappers for fopen like functions.
795* XML/RPC improvements.
796* Read IPTC and EXIF metadata in uploaded pictures.
797* MySQL 4.1 support only.
798* Metadata import from Dotclear 1.2.x.
799* Akismet plugin.
800* Pings plugin.
801* Added a priority setting for plugins.
802* Many bug fixes.
803
804Dotclear 2.0 beta 2 - 2006-08-09
805===========================================================
806* DC_PLUGIN_ROOT can handle more than one path.
807* OPML/XBEL import in blogroll plugin.
808* Fixed a security issue in html::absoluteURLs().
809* Fixed issues with timezone on scheduled entries.
810* Multiple categories selection in tpl:Entries.
811* Improved dbLayer.
812* Changed category feed URL.
813* Feeds for tags (entries and comments).
814* Added attachments count on backend and frontend.
815* New settings code design. Can now handle wide system settings.
816* Memory usage improvements with autoloader.
817* Some code cleanup.
818* Feed parser improvements.
819* Themes can be configured if needed.
820* XMP support on JPEG files.
821* Media manager improvements.
822* Spamplemousse now uses DNSBL (and the guy who left the bug was fired).
823* Javascript editor and toolbar improvements.
824* RDS support (XML/RPC API discovery).
825* Added a theme with user stylesheet.
826* Plugins manager
Note: See TracBrowser for help on using the repository browser.

Sites map