Finish vendor import Deleted: vendor/mediawiki/1.4.8/ Added: vendor/mediawiki/1.5.3/ Deleted: vendor/mediawiki/1.5.3/.cvsignore Added: vendor/mediawiki/1.5.3/.cvsignore Deleted: vendor/mediawiki/1.5.3/AdminSettings.sample Added: vendor/mediawiki/1.5.3/AdminSettings.sample Deleted: vendor/mediawiki/1.5.3/HISTORY Added: vendor/mediawiki/1.5.3/HISTORY Deleted: vendor/mediawiki/1.5.3/INSTALL Added: vendor/mediawiki/1.5.3/INSTALL Deleted: vendor/mediawiki/1.5.3/README Added: vendor/mediawiki/1.5.3/README Deleted: vendor/mediawiki/1.5.3/RELEASE-NOTES Added: vendor/mediawiki/1.5.3/RELEASE-NOTES Deleted: vendor/mediawiki/1.5.3/UPGRADE Added: vendor/mediawiki/1.5.3/UPGRADE Deleted: vendor/mediawiki/1.5.3/Version.php Deleted: vendor/mediawiki/1.5.3/config/index.php Added: vendor/mediawiki/1.5.3/config/index.php Added: vendor/mediawiki/1.5.3/docs/README Deleted: vendor/mediawiki/1.5.3/docs/deferred.doc Added: vendor/mediawiki/1.5.3/docs/deferred.txt Deleted: vendor/mediawiki/1.5.3/docs/design.doc Added: vendor/mediawiki/1.5.3/docs/design.txt Added: vendor/mediawiki/1.5.3/docs/export-0.1.xsd Added: vendor/mediawiki/1.5.3/docs/export-0.2.xsd Added: vendor/mediawiki/1.5.3/docs/export-0.3.xsd Added: vendor/mediawiki/1.5.3/docs/export-demo.xml Deleted: vendor/mediawiki/1.5.3/docs/globals.doc Added: vendor/mediawiki/1.5.3/docs/globals.txt Deleted: vendor/mediawiki/1.5.3/docs/hooks.doc Added: vendor/mediawiki/1.5.3/docs/hooks.txt Deleted: vendor/mediawiki/1.5.3/docs/language.doc Added: vendor/mediawiki/1.5.3/docs/language.txt Deleted: vendor/mediawiki/1.5.3/docs/linkcache.doc Added: vendor/mediawiki/1.5.3/docs/linkcache.txt Deleted: vendor/mediawiki/1.5.3/docs/memcached.doc Added: vendor/mediawiki/1.5.3/docs/memcached.txt Deleted: vendor/mediawiki/1.5.3/docs/schema.doc Added: vendor/mediawiki/1.5.3/docs/schema.txt Deleted: vendor/mediawiki/1.5.3/docs/skin.doc Added: vendor/mediawiki/1.5.3/docs/skin.txt Deleted: vendor/mediawiki/1.5.3/docs/title.doc Added: vendor/mediawiki/1.5.3/docs/title.txt Deleted: vendor/mediawiki/1.5.3/docs/user.doc Added: vendor/mediawiki/1.5.3/docs/user.txt Deleted: vendor/mediawiki/1.5.3/img_auth.php Added: vendor/mediawiki/1.5.3/img_auth.php Deleted: vendor/mediawiki/1.5.3/includes/Article.php Added: vendor/mediawiki/1.5.3/includes/Article.php Deleted: vendor/mediawiki/1.5.3/includes/AuthPlugin.php Added: vendor/mediawiki/1.5.3/includes/AuthPlugin.php Added: vendor/mediawiki/1.5.3/includes/BagOStuff.php Deleted: vendor/mediawiki/1.5.3/includes/Block.php Added: vendor/mediawiki/1.5.3/includes/Block.php Deleted: vendor/mediawiki/1.5.3/includes/BlockCache.php Added: vendor/mediawiki/1.5.3/includes/BlockCache.php Deleted: vendor/mediawiki/1.5.3/includes/CacheManager.php Added: vendor/mediawiki/1.5.3/includes/CacheManager.php Deleted: vendor/mediawiki/1.5.3/includes/CategoryPage.php Added: vendor/mediawiki/1.5.3/includes/CategoryPage.php Deleted: vendor/mediawiki/1.5.3/includes/ChangesList.php Added: vendor/mediawiki/1.5.3/includes/ChangesList.php Deleted: vendor/mediawiki/1.5.3/includes/Credits.php Added: vendor/mediawiki/1.5.3/includes/Credits.php Deleted: vendor/mediawiki/1.5.3/includes/Database.php Added: vendor/mediawiki/1.5.3/includes/Database.php Deleted: vendor/mediawiki/1.5.3/includes/DatabaseFunctions.php Added: vendor/mediawiki/1.5.3/includes/DatabaseFunctions.php Deleted: vendor/mediawiki/1.5.3/includes/DatabasePostgreSQL.php Added: vendor/mediawiki/1.5.3/includes/DatabasePostgreSQL.php Deleted: vendor/mediawiki/1.5.3/includes/DateFormatter.php Added: vendor/mediawiki/1.5.3/includes/DateFormatter.php Deleted: vendor/mediawiki/1.5.3/includes/DefaultSettings.php Added: vendor/mediawiki/1.5.3/includes/DefaultSettings.php Deleted: vendor/mediawiki/1.5.3/includes/Defines.php Added: vendor/mediawiki/1.5.3/includes/Defines.php Deleted: vendor/mediawiki/1.5.3/includes/DifferenceEngine.php Added: vendor/mediawiki/1.5.3/includes/DifferenceEngine.php Deleted: vendor/mediawiki/1.5.3/includes/EditPage.php Added: vendor/mediawiki/1.5.3/includes/EditPage.php Added: vendor/mediawiki/1.5.3/includes/Exif.php Added: vendor/mediawiki/1.5.3/includes/ExternalEdit.php Deleted: vendor/mediawiki/1.5.3/includes/ExternalStoreDB.php Added: vendor/mediawiki/1.5.3/includes/ExternalStoreDB.php Deleted: vendor/mediawiki/1.5.3/includes/Feed.php Added: vendor/mediawiki/1.5.3/includes/Feed.php Deleted: vendor/mediawiki/1.5.3/includes/FulltextStoplist.php Added: vendor/mediawiki/1.5.3/includes/FulltextStoplist.php Deleted: vendor/mediawiki/1.5.3/includes/GlobalFunctions.php Added: vendor/mediawiki/1.5.3/includes/GlobalFunctions.php Deleted: vendor/mediawiki/1.5.3/includes/Group.php Added: vendor/mediawiki/1.5.3/includes/Group.php Deleted: vendor/mediawiki/1.5.3/includes/HTMLForm.php Added: vendor/mediawiki/1.5.3/includes/HTMLForm.php Deleted: vendor/mediawiki/1.5.3/includes/HistoryBlob.php Added: vendor/mediawiki/1.5.3/includes/HistoryBlob.php Deleted: vendor/mediawiki/1.5.3/includes/Hooks.php Added: vendor/mediawiki/1.5.3/includes/Hooks.php Added: vendor/mediawiki/1.5.3/includes/HttpFunctions.php [truncated at 100 lines; 683 more skipped] _____
Copied: vendor/mediawiki/1.5.3 (from rev 19934, vendor/mediawiki/current) _____
Deleted: vendor/mediawiki/1.5.3/.cvsignore --- vendor/mediawiki/current/.cvsignore 2005-12-06 19:30:16 UTC (rev 19934) +++ vendor/mediawiki/1.5.3/.cvsignore 2005-12-07 09:20:22 UTC (rev 19945) @@ -1,8 +0,0 @@
-LocalSettings.php -AdminSettings.php -*~ -bin -.classpath -.project -project.index -.metadata* _____
Copied: vendor/mediawiki/1.5.3/.cvsignore (from rev 19939, vendor/mediawiki/current/.cvsignore) _____
Deleted: vendor/mediawiki/1.5.3/AdminSettings.sample --- vendor/mediawiki/current/AdminSettings.sample 2005-12-06 19:30:16 UTC (rev 19934) +++ vendor/mediawiki/1.5.3/AdminSettings.sample 2005-12-07 09:20:22 UTC (rev 19945) @@ -1,26 +0,0 @@
-<?php -/** - * This file should be copied to AdminSettings.php, and modified - * to reflect local settings. It is required for the maintenance - * scripts which run on the command line, as an extra security - * measure to allow using a separate user account with higher - * privileges to do maintenance work. - * - * Developers: Do not check AdminSettings.php into CVS! - * - * @package MediaWiki - */ - -/* - * This data is used by all database maintenance scripts - * (see directory maintenance/). The SQL user MUST BE - * MANUALLY CREATED or set to an existing user with - * necessary permissions. - * - * This is not to be confused with sysop accounts for the - * wiki. - */ -$wgDBadminuser = 'wikiadmin'; -$wgDBadminpassword = 'adminpass'; - -?> _____
Copied: vendor/mediawiki/1.5.3/AdminSettings.sample (from rev 19939, vendor/mediawiki/current/AdminSettings.sample) _____
Deleted: vendor/mediawiki/1.5.3/HISTORY --- vendor/mediawiki/current/HISTORY 2005-12-06 19:30:16 UTC (rev 19934) +++ vendor/mediawiki/1.5.3/HISTORY 2005-12-07 09:20:22 UTC (rev 19945) @@ -1,652 +0,0 @@
-Change notes from older releases. For current info see RELEASE-NOTES. - -Security reminder: MediaWiki does not require PHP's register_globals -setting since version 1.2.0. If you have it on, turn it *off* if you can. - -== Version 1.3.11, 2005-02-20 == - -MediaWiki 1.3.11 is a security release. - -A security audit found and fixed a number of problems. Users of MediaWiki -1.3.10 and earlier should upgrade to 1.3.11; users of 1.4 beta releases -should upgrade to 1.4rc1. - - -=== Cross-site scripting vulnerability === - -XSS injection points can be used to hijack session and authentication -cookies as well as more serious attacks. - -* Media: links output raw text into an attribute value, potentially - abusable for JavaScript injection. This has been corrected. -* Additional checks added to file upload to protect against MSIE and - Safari MIME-type autodetection bugs. - -As of 1.3.10/1.4beta6, per-user customized CSS and JavaScript is disabled -by default as a general precaution. Sites which want this ability may set -$wgAllowUserCss and $wgAllowUserJs in LocalSettings.php. - - -=== Cross-site request forgery === - -An attacker could use JavaScript-submitted forms to perform various -restricted actions by tricking an authenticated user into visiting -a malicious web page. A fix for page editing in 1.3.10/1.4beta6 has -been expanded in this release to other forms and functions. - -Authors of bot tools may need to update their code to include the -additional fields. - - -=== Directory traversal === - -An unchecked parameter in image deletion could allow an authenticated -administrator to delete arbitary files in directories writable by the -web server, and confirm existence of files not deletable. - - -== Version 1.3.10, 2005-02-03 == - -MediaWiki 1.3.10 is a security release. - -An attacker could craft a URL which, when visited by a particular -logged-in user, would execute arbitrary JavaScript code on the user's -browser in the wiki's site context. This attack has been blocked, and as -an extra precaution the user CSS and JavaScript subpage support is now -disabled by default. Sites which want this ability may set $wgAllowUserCss -and $wgAllowUserJs in LocalSettings.php. - -Additional protections have been added against off-site form submissions -hijacking user credentials. Authors of bot tools may need to update their -code to include additional fields. - -All wikis running 1.3.x are strongly urged to upgrade to 1.3.10. - -Changes from 1.3.9: -* Logged-in edits and preview of user CSS/JS are now locked to a session token. -* Per-user CSS and JavaScript subpage customizations now disabled by default. - They can be re-enabled via $wgAllowUserJs and $wgAllowUserCss. -* Removed .ogg from the default uploads whitelist as an extra precaution. - If your web server is configured to serve Ogg files with the correct - Content-Type header, you can re-add it in LocalSettings.php: - $wgFileExtensions[] = 'ogg'; - - - -== Version 1.3.9, 2004-12-12 == - -MediaWiki 1.3.9 is a security and bug fix release. - -A flaw in upload handling has been found which may allow upload and -execution of arbitrary scripts with the permissions of the web server. -Only wikis that have enabled uploads and have a vulnerable Apache -configuration will be affected, but to be safe all wikis should upgrade. - -Wikis with uploads available should either disable uploads or upgrade to -1.3.9 immediately; if other files are customized and require merging -changes, includes/SpecialUpload.php may be replaced individually to add -the fix. - -(It is also recommended to configure your web server to disable script -execution in the 'images' subdirectory where uploads are placed, which -prevents most attacks even if the wiki fails.) - -Changes from 1.3.8: -* Backported "Templates used in this page"-feature of EditPage -* Allow "MySkin" as a default skin. -* (bug 938) Parse namespaces correctly on self-interwiki links -* (bug 1010) fix broken Commons image link on Classic & Cologne Blue -* (bug 1004) Norsk language names for interwiki links changed, - Nauruan language name changed -* Enhance upload extension blacklist to protect against vulnerable - Apache configurations - - -== Version 1.3.8, 2004-11-15 == - -MediaWiki 1.3.8 is a bugfix release. Those running wikis with uploads -enabled are strongly recommended to upgrade as this fixes several problems -with overwriting previously-uploaded files. - -Changes from 1.3.7: -* (bug 506) fix array_key_exists() warning for IIS servers using - ISAPI mode -* (bug 718) fix bad charset in (file) cached pages -* use local numerals in category page (for Hindi et al) -* alias month abbreviations to month names in Hindi -* add localized numerals for Gujarati and Kannada -* fix Category and project namespaces for Hindi -* Don't output bogus timestamp on Special:Recentchanges if no entries -* Correct template include path which broke some but not all Windows installs -* Fix edit form submission problem with some PHP versions -* Disallow unreachable titles with %XX hex codes -* Allow page [[0]] to be renamed -* (bug 774) when saving with section=new, return to the anchor as with - existing numbered section edits -* Experimental shared upload overlay area (disabled by default) -* (bug 806) Removed some "Wikipedia" hardcoding in German localization -* User option localization fix for some extensions -* (bug 809) now try to load the mysql php extension if it isn't loaded -* (bug 848) fix error message in Special:Newpages RSS and Atom feeds -* (bug 26) fix cache headers on anon talk page notification -* (bug 874) added 'cgi' to wgFileBlacklist -* (bug 862) localize date and time format for Finnish -* (bug 548) Don't overwrite images until the user confirms it - - -== Version 1.3.7, 2004-10-18 == -Changes from 1.3.6: -* Fix protected-page related security issue. - - -== Version 1.3.6, 2004-10-14 == - -Changes from 1.3.5: -* (bug 296) Variables in user interface messages are no longer substituted - at install time, so changes to the site name etc should be easier to make -* (bug 149) Special:Recentchanges "changes from" link preserves limit -* (bug 433) tooltip for "Undelete" tab now labeled correctly -* (bug 439) unclickable "Move" tab no longer displays on protected pages -* (bug 484) graceful deletion of images where the actual file is missing -* (bug 686) fixed [[plural]]s in Catalan localization -* Fixed potential HTML/JavaScript injection attack in the UnicodeConverter - extension. (This extension is not enabled by default.) -* Fixed potential HTML/JavaScript injection attack via raw page views to - a maliciously crafted wiki page. -* (bug 187, bug 669) Fixed centered thumbnails, using <div> instead of - <span>. -* catch MySQL error 2000 during installation. -* (bug 704) Removed misleading LocalSettings.sample -* Fix cross site scripting bugs in SpecialIpblocklist, SpecialEmailuser -* Fix SQL injection and cross site scripting bugs in SpecialMaintenance -* Fix cross site scripting bugs and possible filename validation vulnerability - in ImagePage. -* and more of that sort - - -== Version 1.3.5, 2004-09-30 == - -Changes from 1.3.4: -* Clean up input validation in 'raw' page output mode which was a potential - cross-site scripting opportunity. - - -== Version 1.3.4, 2004-09-28 == - -************************** SECURITY NOTE! ****************************** - -As of 1.3.4, MediaWiki performs some screening of newly uploaded files for -validity. (Some) corrupt image files, and HTML files mistakenly or -maliciously masquerading as images, should now be rejected. - -These checks protect against Internet Explorer security holes relating -to type autodetection which are a potential cross-site scripting attack -vector, and also rejects at least one known version of the "JPEG virus" -which might attack unpatched clients. - -If you already have invalid files uploaded this will not protect against -them. If you have expanded the filetype whitelist or disabled the strict -type checking, other dangerous file types may still get through. You should -always be careful when allowing uploads! - - -Changes from 1.3.3: -* Fixed lots of template-related bugs, esp. for cases where template - variables are used for links, images, etc. -* Fixed transformation of page messages when viewing Special:Allmessages -* Handle "ISBN ISBN 1234" correctly -* Fixed warning on Category pages -* Fixed some bad error messages on login page -* Fixed history entry for initial main page on install -* Removed problematic { and } from legal title characters -* Strip leading blank from output in preformated text. -* Fixed problem when moving pages to titles with '#' in -* Optional $wgRawHtml for raw <html> sections. Use only on limited- - participation 'trusted' wikis, as it does not protect against cross-site - scripting attacks. For security, this option can only be enabled if in - $wgWhitelistEdit mode. -* Fixed problem where pages which were created as a redirect following - a move never showed on Special:Randompage. -* Fixed line spacing on printed table of contents -* Allow links to pages with names of the form [[RFC 1234]] -* Fixed broken edit links being shown for sections from included templates -* Verify that uploaded image files are of the claimed type. - - -== Version 1.3.3, 2004-09-09 == - -Changes from 1.3.2: -* Fix for long numeric page titles -* Fix Go search for "0", numeric almost-self-links -* Avoid caching of pages with "You have new messages" headers -* Fix for upgrades as non-root users from 1.2 command-line installs. -* Fix for $wgDebugDumpSql debug mode. -* $wgExtraNamespaces setting for configuring additional namespaces - (see note in DefaultSettings.php) -* 'recache' on query pages now disabled when miser mode is on; special case the - global settings in your LocalSettings.php to do automatic updates. -* Don't block UTF-8 titles containing byte 0xA0 (bug added in 1.3.2) -* Watch/unwatch tabs now shown on edit pages in MonoBook. -* Fix default skin in Irish localization (ga) -* Add Traditional Chinese localization (zh-tw) -* Changed default sortkey of subcategories. Don't include "Category:"-prefix - any longer -* More helpful info on spam catcher. -* Allow larger offsets for queries such as Special:Listusers -* Semicolon (;) added to French non-break space rules -* Possible fix for some install errors with path names permission problems. -* Removed [[Project:All system messages]], which has been superceded by - the much faster [[Special:Allmessages]]. This speeds up installation - considerably. - -== Version 1.3.2, 2004-08-30 == - -Changes from 1.3.1: -* Fix namespaced page creation links when no go match -* When cookies are disabled, don't show login screen twice -* Install should no longer die when PHP is pre-configured to compress output -* Fixed bug that caused long Japanese pages to time out with Tidy active -* When session.handler is set incorrectly, try automatic override to 'files' -* Watch/Unwatch links back to the affected page instead of Main Page -* Upload link no longer displayed on Monobook if uploading is disabled -* Special:Allmessages faster, shows correct original text, works in safe mode - - -== Version 1.3.1, 2004-08-14 == - -Changes from 1.3.0: -* Watchlist parameters now work with register_globals off -* Fixed parsing of ''italics'' and '''bold''' mark-up (again) -* Special:Allpages display is more sensible on smaller wikis -* Fixed XHTML parsing error in classic skins -* Moved pages update watchlist correctly -* Fixed rebuildall.php on case-sensitive Unix filesystems -* Disabled file cache compression by default due to incompatibility - with output buffer compression (ob_gzhandler) -* New magic word PAGENAMEE (URL-escaped version of PAGENAME) -* Installation avoids blank username; better message on missing XML module -* $wgWhitelistAccount no longer breaks all logins. - -== Version 1.3.0, 2004-08-11 == - -Look & layout: -* New default layout 'MonoBook' (available on PHP4 only currently) -* Print stylesheet now built-in to every page -* More or less correct XHTML 1.0 (served as text/html by default) - -Wiki features: -* Image captions can now include links and other basic formatting -* Image bounding box can be specified instead of width, e.g. as - 100x100px, making the image not wider than 100px and not higher - than 100px, keeping aspect ratio. -* Templates have been expanded with parameters, and separated from - the MediaWiki: localization scheme. -* Categories more or less work -* added a special page for listing users with sysop rights. - -Editing: -* Automatic merging of edit conflicts that don't directly interfere -* Edit summaries can now include basic formatting and links - -Metadata and output: -* Linked Creative Commons copyright metadata (optional) -* RSS 2.0 & Atom 0.3 feeds for Recent Changes, New Pages - -Optional modules: -* WikiHiero hieroglyphic module can be added (separate download) -* Timeline module can be added (separate download). - Requires ploticus. -* TeX now has an experimental MathML output mode (incomplete!) - -Installation and upgrading: -* The old install.php and update.php have been removed. In-place - installation introduced in 1.2 is now the standard installation - and upgrade method, see INSTALL and UPGRADE for directions. - -Database: -* The links table has been changed to use a cur_id for l_from. - The link tables must be converted on upgrade, which may entail - some downtime. - -Code and compatibility: -* Should now run clean with error reporting set to E_ALL. -* register_globals hack from 1.2 has been replaced with safer code -* Bundled PHPTAL 0.7.0 from http://phptal.sourceforge.net/ - (with some patches) -* Most image-related code moved to Image.php -* More fixes for PHP 4.1.2 (thanks to Asheesh Laroia) -* URL encoding fix for anchors -* All languages now available in UTF-8 mode -* Various other fixes - -=== Caveats === - -Some output, particularly involving user-supplied inline HTML, may not -produce 100% valid or well-formed XHTML output. Testers are welcome to -set $wgMimeType = "application/xhtml+xml"; to test for remaining problem -cases, but this is not recommended on live sites. (This must be set for -MathML to display properly in Mozilla.) - -The new 'MonoBook' skin is not compatible with PHP 5 due to bugs in the -underlying PHPTAL library. It will be automatically disabled when running -on PHP5; the older look and feel will be used instead. - - -== Version 1.2.6, 2004-05-24 == -* Spam blocker ($wgSpamRegex - refuses to save edits that match) -* Updated documentation about $wgWhitelistRead -* Ensure that searchindex table is created as MyISAM -* Interwiki cache timeout (memcached) -* Fix uploads on Windows with magic_quotes_gpc -* Some config fixes for Windows (slashes etc) -* Local interwiki URL redirects -* Fixed obscure deletion problem in squid mode on corrupt entries -* Language files updated to remove more hard-coded "Wikipedia" strings - -== Version 1.2.5, 2004-05-01 == -* Fixed install problem with blank root password -* Fixed Special:Emailuser/Username links -* Fixed main-page edit links on fuzzy search results -* Fixed wikipedia-interwiki.sql -* Fixed install with apache2filter (ugly URLs) -* IP in 'go' search brings up contributions -* Switch from broken & to ? on top-level wiki URL hack - -== Version 1.2.4, 2004-04-13 == - -* Fixed edit toolbar in Mozilla -* Diff links in Contributions for 'top' edits -* Fixed Nostalgia skin drop-down for register_globals off -* Backported optional open proxy blocker -* Backported $wgWhitelistRead -* $wgCapitalLinks option to force full case sensitivity in titles -* Cleaned up error handling when can't talk to database -* Disabled unsafe command-line installer (remove the "die()" call to use) - -== Version 1.2.3, 2004-04-02 == - -* Fixed an in-place install bug with non-root MySQL user -* Fixed history diff checkboxes bug on titles with ampersands -* Fixed printable link bug on special pages with parameters -* Fixed bug that broke IP blocking w/o memcached -* Turns off E_NOTICE warnings if PHP settings have them on - (you can grope in and turn this off if you like to debug) - -== Version 1.2.2, 2004-03-28 == - -* Fixed an upgrade bug introduced in 1.2.1. -* Disabled $wgUseCategoryMagic, which feature is incomplete broken - -== Version 1.2.1, 2004-03-27 == - -Installation, compatibility, security fixlets: -* Detect use of PHP as CGI and disable index.php/Title URLs -* Try to auto-create math tmp & output directories if not present -* Disable Asksql in default install ($wgAllowSysopQueries) -* Better handling of get_magic_quotes_gpc (apostrophe problems) -* French localisation no longer hard-codes "Wikipedia" name - -== Version 1.2.0 == - -New features in 1.2: -* Image resizing/thumbnail generation -* Stricter upload file extension blacklist and whitelist options -* More flexible blocking system; time period may be set -* Handier sysop account management. An account marked "bureaucrat" - may assign sysop access to other accounts via Special:Makesysop. - (The exact details of this may change in the future) -* Support for a squid cache with explicit purging of cached anon pages -* Optional compression of old revision text (requires zlib support) -* Fuzzy title search (experimental, requires memcached) -* Page rendering cache (experimental) -* Editing toolbar to demonstrate wiki syntax to newbies - (off by default in user preferences) -* Support for authenticated SMTP outgoing e-mail (experimental) -* It's now possible to assign sysop accounts from within the wiki. - An account with this ability must be labeled with the "bureaucrat" - privilege, such as the 'Developer' account created by the install. - -Fixes and tweaks: -* Now works with register_globals off! -* Works with short tags disabled. -* Should work out of the box on MySQL 3.2.x again. On 4.x set - $wgEnablePersistentLC = true; to turn on the link cache table - for a slight rendering speed boost. -* rebuildMessages.php can now selectively update new messages, or - overwrite everything. -* Various bug fixes. -* Other stuff we forgot. -* Documentation more out of date than ever before! - -=== Behavior changes === - -* wiki.phtml and redirect.phtml are now renamed to index.php and redirect.php - The old names are provided too for compatibility, but make sure they don't - conflict if you've been putting other files in your wiki. -* Uploaded filenames are more strictly checked than before. See bits in - DefaultSettings.php to tweak this behavior to your needs. -* Database messages are now enabled by default, so the interface messages can - be tweaked through the wiki with a sysop account. Disable this if you - don't want the performance hit. - -=== Database changes === - -An index was added to recentchanges table to speed up Newpages -(patch-rc-newindex.sql for manual updaters). - -Expiration date field has been added to ipblocks table -(patch-ipb_expiry.sql for manual updaters). - - -== Version 1.1.0, 2003-12-08 == - -This is the new production release. Any following 1.1.x releases are expected -to contain only bug fixes; developments of new features will go towards a 1.2.0 -release. - -New features in 1.1: -* New wiki table syntax: - http://meta.wikipedia.org/wiki/MediaWiki_User%27s_Guide:_Using_tables -* User-editable interface messages: - http://meta.wikipedia.org/wiki/MediaWiki_namespace -* XML-wrapped page source export with optional history: - http://meta.wikipedia.org/wiki/XML_import_and_export - (There is not yet an import function!) -* "Magic words" - -Fixes and tweaks: -* linkscc table caches link data for rendering; faster rebuildlinks.php -* Numerous bugs in Cologne Blue skin fixed -* Login gives warning about missing cookies -* Block log, protection log added; deletion log now includes undeletions -* Deletion & upload logs now escape comment text properly -* Problems with <nowiki> segments in section titles etc mitigated -* Contributions offset and minor edit bugs fixed -* Whatlinkshere now sorted alphabetically -* Various exciting new profiling options. -* Debug log is off by default. -* Various small bugs fixed. - -Internal changes: -* wfQuery has had a second parameter inserted, DB_READ or DB_WRITE. This value - is not actually used so far. -* Partial code for categories and Smarty template-based skins is in the tree - but disabled. -* Parts of Article.php have been moved to EditPage.php and ImagePage.php. - -New translations: -* fi - Finnish -* ia - Interlingua -* no - Norwegian -* sk - Slovak -* ta - Tamil - -=== Database changes === - -"linkscc" table added. If upgrading manually (rather than with update.php), -run maintenance/archives/patch-linkscc.sql to create the table. - -Older releases were dated snapshots from the old 'stable' branch: - -== mediawiki-20031118 == - -* Image deletion fixed. -* Deletion of image old revisions now restricted to sysops - (this is an irreversible action and not well logged) -* Fixed maintenance scripts broken by last release's security fix -* Many errors in rebuildlinks script fixed. - -== mediawiki-20031117 == - -* SECURITY FIX: stricter checking of include path -* Fixed user contributions next/prev bug -* Login cookies now have the database name prefixed to allow wikis - to coexist in the same domain. This will invalidate any old saved - password cookies. -* Update cache timestamp when talk pages are created -* Saving the login form in Mozilla no longer blanks password in prefs. -* Check existence of source page before performing a move. -* Detect invalid titles in Special:Allpages -* Q-encode headers on outgoing inter-user e-mail -* Updates to some translations. -* Added table of contents border/bg to Cologne Blue, Nostalgia skins -* Protected pages no longer appear unprotected when visited via redirect -* Swapped old Wikipedia logo for the MediaWiki sunflower logo -* install.php, update.php print warning on old PHP versions, - added compatibility functions that might or might not help - -No database changes since 20031107; upgrading should be clean. - - -== mediawiki-20031107 == - -* Fixed various bugs! -* Some speed improvements from tweaks to the table indexes -* Limited support for memcached (see below) -* New translations (see below) -* Interwiki link data now kept in database for flexibility -* Friendlier read-only source view if asked to edit a page when - the db is locked or the page is protected. -* Normal IP blocks auto-expire after 24 hours -* Optional support for blocking usernames -* Uploads disabled by default (see below) - - -=== Security note === - -Uploads are now disabled by default. If you've set up a secure configuration -you can reenable uploads by putting: - - $wgDisableUploads = false; - -into LocalSettings.php. - -Earlier versions of MediaWiki included a bug that potentially allows logged- -in users to delete arbitrary files in directories writable by the web server -user by manually feeding false form data; this is now fixed. - -As a reminder, disable PHP script execution in the upload directory! -You may also wish to serve HTML pages as plaintext to prevent cookie- -stealing JavaScript attacks. Example Apache config fragment: - - <Directory "/Library/MediaWiki/web/upload"> - # Ignore .htaccess files - AllowOverride None - - # Serve HTML as plaintext - AddType text/plain .html .htm .shtml - - # Don't run arbitrary PHP code. - php_admin_flag engine off - - # If you've other scripting languages, disable them too. - </Directory> - - -=== Database updates === - -If you're using update.php, the necessary database changes should -be made automatically. - -To manually upgrade your database from the 2003-08-29 release, run the -following SQL scripts from the maintenance subdirectory: - - archives/patch-ipblocks.sql - archives/patch-interwiki.sql - archives/patch-indexes.sql - interwiki.sql - -To copy in the Wikipedia language-prefix interwikis as well, add: - - wikipedia-interwiki.sql - - -=== Translations === - -New interface localization files are included for: - fy Frisian - ro Romanian - sl Slovene - sq Albanian - sr Serbian - - -=== Memcached === - -Memcached is a distributed cache system. See http://www.danga.com/memcached/ -MediaWiki can optionally use memcached to store some data between calls -to reduce load on the database. Currently this is limited to user and -talk page notification data, interwiki prefix/URL matches, and the -UTF-8 conversion tables. - -MediaWiki includes version 1.0.10 of the (GPL'd) PHP memcached client by -Ryan Gilfether; if memcached is disabled it acts as a dummy object with -minimal overhead. - -To use memcached you'll need PHP installed with sockets support (this is not -in the default configure options). See docs/memcached for some more details. - -Additionally, you can store login session data in memcached instead of the -local filesystem, which can help to enable load-balancing by letting login -sessions transparently work on multiple front-end web servers. (The primary -other issue is with uploads, which requires some care in handling.) - -To enable this, set $wgSessionsInMemcached = true; and set $wgCookieDomain -appropriately if exposing multiple hostnames. This system is new and may be -volatile; login sessions will fail dramatically if memcached is unavailable -when this option is turned on. - - -=== Online documentation === - -Documentation for both end-users and site administrators is currently being -built up on Meta-Wikipedia, and is covered under the GNU Free Documentation -License: - - http://meta.wikipedia.org/wiki/MediaWiki_User%27s_Guide - - -=== Mailing list === - -A MediaWiki-l mailing list has been set up distinct from the Wikipedia -wikitech-l list: - - http://mail.wikipedia.org/mailman/listinfo/mediawiki-l - - -=== UseModWiki import script === - -A stripped-down UseModWiki import script is available in the maintenance -subdirectory. It is incomplete and requires a lot of manual clean-up, but -does function for the brave and pure of heart. - - -=== Test suite removed === - -The unmaintained Java-based test suite has been removed from the tarball -release. If you really want it you can check it out from CVS. - - -== mediawiki-20030829 == - -First release under MediaWiki name. _____
Copied: vendor/mediawiki/1.5.3/HISTORY (from rev 19939, vendor/mediawiki/current/HISTORY) _____
Deleted: vendor/mediawiki/1.5.3/INSTALL --- vendor/mediawiki/current/INSTALL 2005-12-06 19:30:16 UTC (rev 19934) +++ vendor/mediawiki/1.5.3/INSTALL 2005-12-07 09:20:22 UTC (rev 19945) @@ -1,89 +0,0 @@
---- -Installing MediaWiki ---- - -Starting with MediaWiki 1.2.0, it's possible to install -and configure the wiki "in-place", as long as you have -the necessary prerequesites available. - -In 1.3.0 the old command-line installer has been removed. -There is a command-line upgrade tool; see the file UPGRADE. - -Required software: -* Web server with PHP 4.1.2 or higher (4.3.x or 5.0.x is preferred) -* A MySQL server. 4.0.x is preferred, but 3.2.x should - work as well. - -********************************************************* - Read the file RELEASE-NOTES for notes on - MySQL 4.1 and other issues! -********************************************************* - -MediaWiki is developed and tested mainly on Unix/Linux -platforms, but should work on Windows as well. - -If your PHP is configured as a CGI plug-in rather than -an Apache module you may experience problems, as this -configuration is not well tested. safe_mode and other -non-standard PHP configurations may sometimes cause -problems as well. - -If you want math support see the instructions in math/README - -Don't forget to check the RELEASE-NOTES file... - -********************** WARNING ************************** - -REMEMBER: ALWAYS BACK UP YOUR DATABASE BEFORE ATTEMPTING -TO INSTALL OR UPGRADE!!! - -********************** WARNING ************************** - ----- -In-place web install ----- - -Decompress the MediaWiki installation archive either on -your server, or on your local machine and upload the -directory tree. Rename it from "mediawiki-1.x.x" to -something nice, like "wiki", since it'll be in your URL. - -To run the install script, you'll need to temporarily make -the 'config' subdirectory writable by the web server. The -simplest way to do this on a Unix/Linux system is to make -it world-writable: - - chmod a+w config - -Hop into your browser and surf into the wiki directory. -It'll direct you into the config script. Fill out the form... -remember you're probably not on an encrypted connection. -Gaaah! :) - -If all goes well, you should soon be told that it's set up -your wiki database and written a configuration file. There -should now be a 'LocalSettings.php' in the config directory; -move it back up to the main wiki directory, and the wiki -should now be working. - -Once the wiki is set up, you should remove the config -directory, or at least make it not world-writable (though -it will refuse to config again if the wiki is set up). - - ----- - -Don't forget that this is free software under development! -Chances are good there's a crucial step that hasn't made it -into the documentation. You should probably sign up for the -MediaWiki developers' mailing list; you can ask for help (please -provide enough information to work with, and preferably be aware -of what you're doing!) and keep track of major changes to the -software, including performance improvements and security patches. - -http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce - -http://mail.wikipedia.org/mailman/listinfo/mediawiki-l (site admin support) - -http://mail.wikipedia.org/mailman/listinfo/wikitech-l (development) - _____
Copied: vendor/mediawiki/1.5.3/INSTALL (from rev 19939, vendor/mediawiki/current/INSTALL) _____
Deleted: vendor/mediawiki/1.5.3/README --- vendor/mediawiki/current/README 2005-12-06 19:30:16 UTC (rev 19934) +++ vendor/mediawiki/1.5.3/README 2005-12-07 09:20:22 UTC (rev 19945) @@ -1,87 +0,0 @@
-2005-07-09 - -MediaWiki ---------- - -MediaWiki is the software used for Wikipedia (http://www.wikipedia.org) and the -other Wikimedia Foundation websites. Compared to other wikis, it has an -excellent range of features and support for high-traffic websites (Wikipedia -peaks at 2500+ requests per second as of June 2005). However, it is generally -harder to install. Be sure to follow the INSTALL document closely. - -Installation on a Microsoft Windows system is not recommended, however it is -possible. Documentation for installation on Windows may be found at: - - http://meta.wikipedia.org/wiki/Running_MediaWiki_on_Windows - - -The MediaWiki software was written by: - * Lee Daniel Crocker - * Magnus Manske - * Jan Hidders - * Brion Vibber - * Axel Boldt - * Geoffrey T. Dairiki - * Tomasz Wegrzanowski - * Erik Moeller - * Tim Starling - * Gabriel Wicke - * Ashar Voultoiz - * Evan Prodromou - * Several others - -These developers hold the copyright to this work, and it is licensed under the -terms of the GNU General Public License, version 2 (see -http://www.fsf.org/licenses/gpl.html). Derivative works and later versions of -the code will also be considered free software licensed under the same terms. - -The newly-founded Wikimedia Foundation currently has no legal rights to the -software, although copyright may be assigned to it at a later date. Wikimedia -has not funded any of the development work. - -Sections of code written exclusively by Lee Crocker or Erik Moeller are also -released into the public domain, which does not impair the obligations of users -under the GPL for use of the whole code or other sections thereof. - -Many thanks to the Wikipedia regulars for testing and suggestions. - -The code is currently maintained at Sourceforge under the project "wikipedia", -module name "phase3". You can view the code in CVS there: - - http://wikipedia.sourceforge.net - -Please report bugs and make feature requests in our BugZilla system: - - http://bugzilla.wikipedia.org - -Documentation and discussion on new features may be found at: - - http://meta.wikimedia.org/wiki/MediaWiki_User%27s_Guide - http://meta.wikipedia.org/wiki/MediaWiki_development - -If you are setting up your own wiki based on this software, it is highly -recommended that you subscribe to mediawiki-l: - - http://mail.wikipedia.org/mailman/listinfo/mediawiki-l - -The mailing list is very low volume, and is intended primarily for -announcements of new versions, bug fixes, and security issues. - - -PHP - -The code is written in PHP. Version 4.3.2 or higher is recommended. There are -known issues with early 4.2.x releases. - -MySQL - -MediaWiki requires MySQL 3.23 or later, and PHP-MySQL. Version 4.0 or later is -strongly recommended. - -Operating system - -The code was written on and for Linux, and no attempt has been made to make it -portable to other OSs. The math support in particular has run-time dependencies -on things like TeTeX and GhostScript that are generally found in Linux but not -other OSs. However, we have had reports of successful installation on Windows, -albeit without TeX support. _____
Copied: vendor/mediawiki/1.5.3/README (from rev 19939, vendor/mediawiki/current/README) _____
Deleted: vendor/mediawiki/1.5.3/RELEASE-NOTES --- vendor/mediawiki/current/RELEASE-NOTES 2005-12-06 19:30:16 UTC (rev 19934) +++ vendor/mediawiki/1.5.3/RELEASE-NOTES 2005-12-07 09:20:22 UTC (rev 19945) @@ -1,781 +0,0 @@
-= MediaWiki release notes = - -Security reminder: MediaWiki does not require PHP's register_globals -setting since version 1.2.0. If you have it on, turn it *off* if you can. - -== MediaWiki 1.4.8 == - -(released 2005-08-23) - -MediaWiki 1.4.8 is a bug fix and security maintenance release. - -A flaw in the interaction between extensions and HTML attribute -sanitization was discovered which could allow unauthorized use -of offsite resources in style sheets, and possible exploitation -of a JavaScript injection feature on Microsoft Internet Explorer. - -This version expands the returned text and properly checks it -before output. - -Additionally, an update to skins/MonoBook.php ensures that sites -using the default MonoBook skin will display correctly in the -Internet Explorer 7 beta. (1.3 and 1.5 are not affected by this bug.) - - -== MediaWiki 1.4.7 == - -(released 2005-07-16) - -MediaWiki 1.4.7 is a bug fix release. Those affected by the following -problems in 1.4.6 should upgrade: - -* Watchlist breakage on MySQL 3.23.x and with table prefix enabled -* Possible breakage in watchlist, some image resizing modes on PHP 4.1.2 - -1.4.6 included a fix for a cross-site scripting vulnerability, so anyone -running older 1.4 releases is very strongly encouraged to upgrade as well. - -Note to upgraders: this version of MediaWiki is known to produce a large -number of notice-level warnings under the newly released PHP 4.4.0. -These appear however to be harmless; if you encounter them add this to -your LocalSettings.php to suppress the notices: - - error_reporting( E_ALL & ~E_NOTICE ); - -PHP 5.1.0beta3 is known to be incompatible at this time. - - -== MediaWiki 1.4.6 == - -(released 2005-07-07) - -MediaWiki 1.4.6 is a bug fix and security update release. - -Incorrect escaping of a parameter in the page move template could -be used to inject JavaScript code by getting a victim to visit a -maliciously constructed URL. Users of vulnerable releases are -recommended to upgrade to this release. - -Vulnerable versions: -* 1.5 preview series: n <= 1.5beta2 vulnerable, fixed in 1.5beta3 -* 1.4 stable series: 1.4beta6 <= n <= 1.4.5 vulnerable, fixed in 1.4.6 -* 1.3 legacy series: not vulnerable - -This release also includes fixes for some rare bug annoying HTTP errors, -a PHP 4.1.2 breakage bug, and works around some template limitations -introduced in 1.4.5. See the changelog at the end of this file for -a detailed list of bugs fixed. - - -== MediaWiki 1.4.5 == - -(released 2005-06-03) - -MediaWiki 1.4.5 is a security update and bugfix release. - -Incorrect handling of page template inclusions made it possible to -inject JavaScript code into HTML attributes, which could lead to -cross-site scripting attacks on a publicly editable wiki. - -Vulnerable releases and fix: -* 1.5 prerelease: fixed in 1.5alpha2 -* 1.4 stable series: fixed in 1.4.5 -* 1.3 legacy series: fixed in 1.3.13 -* 1.2 series no longer supported; upgrade to 1.4.5 strongly recommended - -This release also includes a number of bug fixes (see changelog below) -and merges some large-server load balancing patches from Wikipedia. - -An experimental rate limiter for page edits and moves can be enabled -with global, per-IP, per-subnet, or per-user bases. See configuration -options in includes/DefaultSettings.php - - -== MediaWiki 1.4.4 == - -(released 2005-05-04) - -MediaWiki 1.4.4 is a bugfix release for the 1.4 stable release series. - -Some bugs in the installer/updater and refreshLinks maintenance script -were introduced in the last release and have been corrected. - [truncated at 1000 lines; 138538 more skipped]
-
gvg＠svn.reactos.com