WB 2.08.x

Change Log

===============================================================================

Please note: This change log may not be accurate

$Id: CHANGELOG 353 2006-05-20 07:52:17Z ryan $

Legend:

+ = Added

- = Removed

# = Bugfix

! = Update/Change

------------------------------------- 2.6.4 -------------------------------------

20-May-2006 Ryan Djurovich

#	Fixed security issues related to #237

19-May-2006 Ryan Djurovich

#	Fixed problem in forgotten login form where email field is too short (#207)

#	Fixed typo in forgotten login details email (#190)

15-May-2006 Stefan Braunewell

#	Fixed security issues (#237)

03-May-2006 Stefan Braunewell

#	Fixed problems with pre-2.6.0 modules in section list

#	Fixed e-mail bug caused by From: headers in internal mail function calls

	(#189)

#	E-mail validation in install script now accepts new top-level domains

	(#162)

#	Error status is now overwritten by next database query (#182)

#	Fixed obscure problem in htmlarea install script

------------------------------------- 2.6.3 -------------------------------------

19-Mar-2006 Stefan Braunewell

#	Fixed ticket #146: problems removing groups from viewers list of a page

16-Mar-2006 Stefan Braunewell

!	Changed link target selection. Now self, top and new. (Ticket #145)

#	Fixed ticket #143. Charset setting is now used in admin login and forgot

	password pages.

#	Some changes to the SQL code in the install script for improved 

	compatibility with new MySQL versions

#	Fixed ticket #134 - error on browsing media.

+	Improved backup module: new choice between full database or WB-related

	backup.

#	Fixed ticket #141 - admin now sees all folders in media

#	Fixed e-mail sending problems due to additional parameter in mail call.

#	Applied fix regarding ticket #138: new users now get deleted if

	sending e-mail fails.

#	Fixed ticket #137: Last Reset timer not reset in frontend forgotten 

	password process

#	Removed duplicate expression from modules/news/install.php which caused

	problems in installation

01-Mar-2006 Stefan Braunewell

#	Fixed ticket #68 - Safari problem with displaying all parents.

#	Fixed ticket #136 - mailing forgotten password in admin login screen leads 

	to fatal error.

!	Renamed tag [PROCESSTIME] to [PROCESS_TIME]

------------------------------------- 2.6.2 -------------------------------------

03-Feb-2006 Stefan Braunewell (very big special thanks to John and Alex)

#	Fixed ticket #104 - commas in form field descriptions not allowed.

#	Cookie REMEMBER_KEY wasn't cleared in account/logout 

	and expiration date is now set to time in the past.

#	Smart login not working.

!	Changed mail calls to new function $wb->mail.

#	Form: ticket 124 added captcha settings check 

#	Ticket 118 added formfield type to check for email/text 

#	Ticket 115 changed comparision /modules/form/view.php 

#	Added correct timecheck in form submissions

!	Changed captcha.php call to include timestamp

!	Changed the e-mail validation code and added a mail function to class wb.

!	Forgotten password: if sending of e-mail fails, restore old password.

	Ticket #110

!	Added more charset options. Ticket #102 - thanks to ruebenwurzel!

!	Character encoding setting also affects admin backend.

	Mentioned in ticket #102.

!	Reintroduced page languages setting. If switched to off, page

	languages are only used to determine the language file for the

	universal texts. If on, displayed page and menu are affected by

	the language session variable.

#	Fixed bugs in show_breadcrumbs code and added parameter "depth"

	to set the number of levels to be show.

#	Fixed a bug where access settings of registered and private pages

	were displayed incorrectly.

#	Fixed captcha being cached.

#	Added an exit call after every heading("Location:...")

	redirector to prevent unwanted execution of code.

#	Bug #122. Replaced empty field check by check that setting name is

	not "wb_version".

#	Replaced all remaining occurrences of '/media' by MEDIA_DIRECTORY - bug #108.

#	Fixed bug #99 and two additional instances of typo 

	catpcha instead of captcha.

#	Fixed some typos

#	Fixed some notices and warnings.

#	Fixed bug #105 - back buttons in addon detail pages not editable.

!	Replace 'admin' by 'wb' in all account pages. 

!/#	Moved print_success and print_error code to class.wb.php.

	Added correct parameters to these functions in account pages. 

------------------------------------- 2.6.1 -------------------------------------

12-Dec-2005 Ryan Djurovich

#	Fixed security vulnerability in class.login.php

#	Fixed typo in EN language file

#	Fixed captcha problems (when feature is disabled) in form module and sign-up

!	Added charset encoding to admin templates

!	Added extra code to check for selection of addon upon uninstalling

#	Fixed bugs in RSS news feeder

#	Fixed bug with PAGE_DESCRIPTION not being set on any page

------------------------------------- 2.6.0 -------------------------------------

28-Nov-2005 Ryan Djurovich

+	Added default charset option to (advanced) settings

#	Form module email fields now have email address validation

#	Fixed spacing in form submissions

27-Nov-2005 Ryan Djurovich

+	Added captcha verification to sign-up form

+	Added Captcha to News module

24-Nov-2005 Stefan Braunewell

!	Applied aportale's patch to use label instead of javascript toggle code

20-Nov-2005 Ryan Djurovich

!	News mod now hides read more link if no need for it (see ticket #56)

+	Added support for mailto: links in the menu link mod

#	Added direct-access redirection on some files (see ticket #37)

+	Added extra characters to convert.php (see ticket #64)

#	Fixed ticket #65 (last_reset check in account/forgot_form.php)

29-Sep-2005 Ryan Djurovich

!	Cleaned up form buttons in Settings

!	Moved some options into Advanced Settings

#	Semi-disabled "separate" page trash option

+	Created a backup module/tool for backing-up the database

	(thanks to John (pcwacht) for the original code)

+	Created new "blank template", which can be used in case where you don't

	want anything wrapping page-content.

19-Sep-2005 Ryan Djurovich

+	Added _license field for all add-ons to specify a license

!	Renamed _designed_for variables (for all addons) to _platform

+	Created addons table for faster internal referencing of installed addons

!	Fixed some links, including the "Help" button in Admin

#	Used nl2br to display body correctly when viewing form-submissions

15-Sep-2005 Stefan Braunewell

+	Added table module with columns 'name','type' and 'directory' as an

	index.

+	Added entry to settings table 'wb_version' which holds the version

	number and can be utilized in future upgrade scripts.

!	Added upgrade functionality also for templates and languages.

#/!	Template/modules installation now respects paths.

!	Moved updates from config.php to database.

	Created initialize.php (required by config.php) to read settings.

11-Sep-2005 Stefan Braunewell

!	HTMLArea is now a module instead of a core component. Files moved

	from "include" to "modules".

+	Implemented Installation of modules on top of an older version. This is 

	done via checking $module_version. Instead of install.php, upgrade.php

	is then called if it exists in the module package. 

	For module developers: $module_version and $new_module_version are 

	accessible in upgrade.php to find out what upgrade steps need to be taken.

!	Changed column names in mod_news_posts from short,long to content_short,

	content_long.

09-Sep-2005 Stefan Braunewell

+	Added new advanced setting "Rename Files On Upload". File extensions can be

	given so that respective files will have a ".txt" appended on media upload.

#	Fixed "None found" message bug when user has no top level page edit

	rights.

#	Fixed missing parent option 'none' - ticket #12 - and a minor scope bug.

+	Added breadcrumbs code. Call using $wb->breadcrumbs().

+	Added utf-8 character encoding meta tag into all stock templates.

#	Fixed bug when changing a page's parent

!	Changed the way blocks are treated. Added new frontend class attribute

	default_block_content that controls what is shown on pages such as

	search, login, etc. (Ticket #16)

+	Added support for WYSIWYG editor modules (wysiwygmod)

+	When trying to access a registered page, user is automatically redirected

	there on successful login.

#	Fixed various issues with system search (mainly related to stripslashes()

#	Removed stripslashes() in many places in the code. Added check for

	magic_quotes_gpc to new wb class method add_slashes(). Now database contest

	is independent of magic_quotes setting..

05-Sep-2005 Stefan Braunewell

#	Fixed bug concerning direct access of preferences page.

#	Reworked page visibility and menu item visibility code (frontend login

	problem).

#	Pages in link list in htmlarea popup are now correctly ordered.

#	Fixed bug where group with existing name can be added.

04-Sep-2005 Ryan Djurovich

+	Added and RSS newsfeed script to the News module

04-Sep-2005 Stefan Braunewell

!	Rewrote menu function. Parameters are now given as attributes to frontend class.

#	Fixed some occurrences of potential direct access path disclosure

#	Added directory check to browse.php to prevent xss exploit by trusted users.

!	Updated code to reflect move to Subversion repository system.

27-Aug-2005 Stefan Braunewell

#	Fixed bugs 4,5,6,8,9 in bug tracker

!	Removed 'USER_LANGUAGE' and 'GET_LANGUAGE' constants.

	A GET['lang'] now sets the session language variable.

26-Aug-2005 Stefan Braunewell

!	Moved redundant code into the new class functions. Created 

	'compatibility.php' for backward compatibility with

	modules and templates. Variables and functions can still be accessed

	in the old way.

!/+	Reorganized core frontend files, added new base class 'wb' from

	which 'admin' and the new 'frontend' class inherit. Moved all frontend

	function into new class. Completely rewrote core index.php.

	Now all variables and functions that are available to templates and

	modules are attributes and methods of the frontend and the wb classes

------------------------------------- 2.5.2 -------------------------------------

23-Jun-2005 Ryan Djurovich

!	create_access_file now creates all parent directories if needed

#	Fixed bug when moving page with subpages to another level

#	Fixed bug when saving "Settings" (in Admin) on Windows/IIS

#	Fixed bug where query was not setting error correctly in class.database.php

22-Jun-2005 Ryan Djurovich

#	Fixed bug where template permissions were not saved when a adding group

21-Jun-2005 Ryan Djurovich

#	Added htmlspecialchars for modifying WYSIWYG, news, etc. modules (Bug #78)

#	Fixed language problems in some area's of Admin. (Bug #70)

#	Added a space in website/page keywords (Bug #69)

#	Fixed bugs on settings2.php (Bug #52)

!	Links inserted with HTMLArea now use [wblink--PAGE_ID--] instead of raw URL

13-Jun-2005 Ryan Djurovich

#	Fixed bug (#88) with news module

!	Title of Administration login page now taken from language file (Bug #72)

#	Fixed redirection admin/home to admin/start on admin/index.php

#	Fixed bug with forgotten password page in admin (Bug #81)

25-Apr-2005 Ryan Djurovich

#	Fixed numerous bugs with module uninstallation

#	Fixed bug when uploading files in Administration -> Media

!	Installer no-longer requires you to accept the GNU GPL

------------------------------------- 2.5.1 -------------------------------------

16-Apr-2005 Ryan Djurovich

#	Fixed two bugs with account login/logout

------------------------------------- 2.5.1 -------------------------------------

15-Apr-2005 Ryan Djurovich

#	Fixed bug where non-english characters can get used in page filenames. Many

	measuers have been added (including a new file: wb/framework/convert.php),

	to prevent any possible errors that can occur in page filenames.

#	Fixed invalid meta tags in stock templates (meta tags were not closed)

#	Removed lines 401, 402, and 425 of wb/index.php - not needed

#	Fixed bug where search and account pages are shown in every block

	that is in a template

#	Fixed numerous bugs with media home directories feature

10-Apr-2005 Ryan Djurovich

#	Fixed bugs in account/login.php and logout.php where users

	gets redirected to /pages

------------------------------------- 2.5.0 -------------------------------------

08-Apr-2005 Ryan Djurovich

-	Removed section language feature

+	Added page language feature (replaces need for sections language feature)

#	Fixed bug where pages using menu_link module can have the URL changed

-	Page directory no longer stored in link field in pages table, it is now added

	when the page_link function is called - this makes changing the pages

	directory much easier and quicker

!	Pages with visibility of "none" are now no longer directly accessable

+	Added new visibility setting "hidden", acts exactly like none did previously

!	Template info file can now specify number of menu's available and relative names

!	Template info file can now specify number of blocks's available and relative names

------------------------------------- 2.4.3 -------------------------------------

07-Apr-2005 Ryan Djurovich

#	page_filename function has been rewritten using str_replace

	function, which should be faster and will allow characters

	from other languages into filenames

!	Created new media_filename function, which is now used

	by all media functions (create,upload,rename) to determine

	which characters should be removed from a desired filename

+	New button in Administration page list to view specific page

#	Updated the page_link function to now be compatible with menu link

	module when setting pages directory to root

#	Fixed bugs in search when using "Any Words" option

#	Fixed bug with news module when pages directory set to root

!	Changed URL of documentation website on Administration Start page

------------------------------------- 2.4.2 -------------------------------------

05-Apr-2005 Ryan Djurovich

#	Fixed bug where file could be renamed to nothing in Media

!	Optimised Media create folder, upload file, and rename functions

#	Fixed bug where stripslashes not run on news post titles in admin

05-Apr-2005 Stefan Braunewell

#	Fixed bug concerning usage of the private_sql variable

#	Fixed bug conerning sub-pages being displayed in menus incorrectly

------------------------------------- 2.4.1 -------------------------------------

04-Apr-2005 Ryan Djurovich

!	Pages with visibility of "none" are again directly accessable

#	Fixed bugs regarding renaming files and directories in Media section

!	When home folders disabled, all folders now visible in Media section

------------------------------------- 2.4.0 -------------------------------------

03-Apr-2005 Ryan Djurovich

-	Removed recently added visibility setting of "heading", and relative config vars

+	Added new "menu" field to pages table, and new setting "multiple menus"

	which replaces the need for the menu headings feature

+	Added links to top of groups and users sections, linking to each other

!	Change menu width in "Round" template to 170px (was 150px)

#	Change page "are you sure" deletion message to mention that it will delete

	all sub-pages as well

#	Fixed many bugs with news module when viewing posts by group

!	Pages with visibility of "none" are now no longer directly accessable

02-Apr-2005 Ryan Djurovich

-	Removed need to specify DB_URL when calling database class

#	Stopped fields without a type specified from being shown in form mod

#	Changed '/media' to MEDIA_DIRECTORY on HTMLArea popup windows

	for insert link and insert image

+	Added setting which allows you to specify the default WYSIWYG style

+	Added "Server Email" option, to specify what is used in "From" field when

	sending emails using the PHP mail function. Default is admins email address.

#	Search now excludes pages which have a visibility of none or heading

!	Pages are now given modified_when and modified_by when added

01-Apr-2005 Ryan Djurovich

+	Added option to News module to specify how many posts should be listed

	per page (by default it is set to unlimited, which functions like previous version)

#	Added stripslashes when display page titles in search

+	Page descriptions and last updated date now shown in search by default

30-Mar-2005 Ryan Djurovich

+	Added new feature for Media home folders, where a folder can be specified

	for a specific user or group of users only

!	Changed URL of Help button to http://www.websitebaker.org/docs/

+	Added new feature for "Page Trash" - two modes available: inline and separate

!	When pages are deleted, all sub-pages are now deleted (instead of being moved

	up a level)

29-Mar-2005 Ryan Djurovich

-	Removed Database Settings from Administration Settings (options will not be

	available in 3.x, so trying to match interface with WB 3.x plans

!	Changed the name of Path Settings to Filesystem Settings in Administration

	Settings, and removed ability to change path/url options - matching interface

	plans for WB 3.x

+	Added same options for OS and file permissions as installer to Settings

!	Sessions now named with APP_NAME.'_session_id' (e.g. default is wb_session_id)

28-Mar-2005 Ryan Djurovich

+	New functions available to templates to simplify creation of them. This aims

	to "future-proof" templates for WB 3.x plans.

!	Default templates updated to support some of the new functions

+	Added field to pages table "page_trail" which stores a list of the pages

	parents. This field was needed by the new page_menu function

+	Added option for page visibility "heading" to enabled support for multiple

	menu's. Also, this helps to "future-proof" templates for WB 3.x plans

+	Added option for page visibility "registered", which acts a little like

	private, but is still shown in the menu (although users need to log in to view

	the pages content)

+	Form module submissions now saved to database, and feature now added to

	limit number of submissions per hour to prevent spamming

+	New field for Form module: email. Allows you to specify their email in

	"from" field on module settings.

#	Fixed bug when displaying comments in News module (WB Bug #14)

+	New "under contruction" message if no pages exist

!	Cleaned-up wb/index.php

27-Mar-2005 Ryan Djurovich

+	Created advanced mkdir and chmod functions

#	Fixed bug in media where wrong file/folder is deleted

+	Complete overhall of installer - now only one step! It has been greatly

	simplified in many ways, has much better validation, reports error much more

	nicely, and automatically logs the user into the Administrations

+	Must now specify OS type - allows for customizable file permission settings

+	Sections can now have a language code assigned to them

+	Sections can now have a block name/id assigned to them

!	Home section of Administration renamed to Start, to save confusion with saying

	Homepage (because this term could either mean the main website or Home section

	in	Administration). Also, this aims to unify the interface with WB 3.x plans

!	Moved Users and Groups sections under Access section. This aims to unify the

	interface with WB 3.x plans, which help to unclutter the menu

!	Interface for Settings section has been imporved for usability purposes

#	Fixed HTMLArea where no scrollbar for "insert link" and "insert image" dialogs

	by placing media list inside an iframe

#	Fixed stripslashes problem for viewing news comments

!	Added code from Formesque module (an advanced version of the original Form

	module, modified by Rudolph Lartey from www.carbonect.com), and made further

	interface improvements for select box/checkbox group/radio group options.

#	Possibly fixed bugs where an S appears before file and dir modes

#	Fixed bug where users can be added with same emails (in Administration)

-	Removed support for PEAR, as it was deemed an unnecessary addition which only

	makes code more bulky, and removing it will decrease package size a lot

+	New "homepage redirect" option so first page is included and not redirected to

#	Fixed text not being shown when module uninstalled

!	Imporved interface for basic group permissions

26-Mar-2005 Stefan Braunewell

#	Fixed bug with front-end logins

#	Fixed bug when saving intro page 

+	Added check on sign-up if e-mail exists (thanks to P. Melief)

#	Fixed bugs concerning moving/deleting pages

#	Fixed list of parents in page settings

#	Fixed mkdir without mode parameter

#	Added a check on install to ensure PHP 4.1.x compatibility (thanks to Wanderer)

+	Added support for PAGES_DIRECTORY set to root

+	Search form now supports quotes (thanks to Manafta)

#	Fixed page section ordering

#	News items are displayed with name of poster instead of "Unknown"

#	Deletion confirmation popup window in media section now shows correct file name

------------------------------------- 2.3.1 -------------------------------------

03-Fed-2005 Ryan Djurovich

+	Now there is two types of "filesystem modes", one for directories and one

	for files. Having different settings is very common for most servers, so

	this addition should fix many problems people had with 2.3.0.

-	Removed filesystem mode options from installation

!	Removed duplicate text on installation step 3 for timezone

!	All "access files" for the news module now stored in pages/posts instead

	of a sub-dir relative to the page (this fixes many bugs)

#	Fixed major bugs when deleting pages with sub-pages

!	Removed the restrictions that prevent a user for changing a pages level

#	Fixed bug with "toggle" plus/minus in IE for pages list

#	Fixed some bugs where /pages was not replaced with PAGES_DIRECTORY constant

------------------------------------- 2.3.0 -------------------------------------

26-Jan-2005 Ryan Djurovich

#	Fixed bug in framework/functions.php that made root parent always equal 8

#	Added missing braces in lines 182 and 208 of admin/pages/settings2.php

#	Fixed SQL-query on line 172, placing a / after $old_link

#	Added eregi checks for PAGES_DIRECTORY on lines 140 and 150 of

	admin/pages/settings2.php

#	Added ordering cleaning to delete_post.php on line 53 for news module

!	GMT option is selected for "Default Timezone" in the installer, instead

	of the old "Please select" message (which had the same value as GMT)

28-Jan-2005 Ryan Djurovich

!	Ability to specify the chmod number when WB uploads files, etc.

!	Modified file headers (copyright/license notice) so they now look almost the

	same, independant of font. Also, it now covers copyright for 2005.

30-Jan-2005 Ryan Djurovich

#	Added code on wb/admin/pages/delete.php to remove sections from the sections

	table when a page is deleted.

+	New 'Smart Login' prevents users from using external password managers,

	and can be set to remember the users password using cookies.

!	SourceForge CVS module now called websitebaker2 (instead of just

	websitebaker). Also, all file versions have been reset.

01-Fed-2005 Ryan Djurovich

!	Added code to prevent from changing a pages level (it simply disables

	the select box), to prevent many possible bugs.

------------------------------------- 2.2.4 -------------------------------------

23-Dec-2004 Ryan Djurovich

!	Change 'EXACT_PHRASE' to 'EXACT_MATCH' on line 261 of wb/languages/EN.php

#	Fixed multi-language support in search

+	Added more detailed options to list of PHP error reporting level's

-	Removed ability to change language and PHP error reporting level

	on installation to make things easier for newbie's

+	Ability to select custom spacer for page filename's

!	Changed the way a language code is found on language installation

+	Added template permissions to groups

#	Fixed bug when trying to change email from Preferences (admin and frontend)

#	Fixed bug with auto-selection of "System Default" for Preferences

!	News module now use's WYSIWYG for modifying news posts

+	Ability to specify both the pages and media target directories

------------------------------------ 2.2.3-c ------------------------------------

22-Dec-2004 Ryan Djurovich

#	Fixed problem with DB password being reset if Settings saved in basic mode

------------------------------------ 2.2.3-b ------------------------------------

21-Dec-2004 Ryan Djurovich

#	Fixed minor bug on admin templates section

#	Fixed bug on rename.php and rename2.php in admin media section

------------------------------------- 2.2.3 -------------------------------------

20-Dec-2004 Ryan Djurovich

+	Added WB release version in Administration (top right corner)

!	New option to prevent users from adding level 0 pages

#	Fixed bug when deleting post's in News module

+	Added new field in pages table for "root" parent (level 0 parent), for

	extra flexability in creating templates

!	Round template now supports unlimited page levels

------------------------------------- 2.2.2 -------------------------------------

18-Dec-2004 Ryan Djurovich

+	New option under Search Settings for selecting custom template for search

+	New option when changing page settings to set the target

#	Fixed error when saving a user after editing

!	Users can now modify sub-page if they dont have permissions on the parent

------------------------------------- 2.2.1 -------------------------------------

15-Dec-2004 Ryan Djurovich

#	Fixed bug when changing password on preferences form (front-end)

#	Fixed bug when retrieving user details (administration)

#	Added check to see if module, template, or language is in use when deleting

#	Fixed up email that is sent to user from a submitted form

#	Fixed major problem with module permissions which stopped it from working

------------------------------------- 2.2.0 -------------------------------------

14-Dec-2004 (Correct date[s] unkown) Ryan Djurovich

+	Multiple-level page support

+	Multiple section's for pages (including interface)

!	Removed text created using two words on all areas

	(e.g. {Intro} {PAGE} is now {INTRO_PAGE})

	this is for better language support

+	Added Languages section

!	Moved Templates and Modules under Add-ons section

!	Changed name of "Default" template to "Round"

+	Added "All CSS" template

+	Added "Jump"

+	Added 

!	Modified "Box" template to support multiple page levels

+	Added "Menu Link" module

+	Added "News" module

+	Added "Code" module

+	Added "Form" module

+	Added "Wrapper" module

!	Changed name of "Normal Page" module to "WYSIWYG"

+	Created new admin wrapper script to ease module develpment

+	Media now automatically creates index.php file for every

	sub-folder made (for security purposes)

!	Change "Help" link in Administration menu so it now directs

	to the the new Website Baker documentation website found at:

	http://www.websitebaker.org/documentation

!	Password is now required to change email in preferences

+	User can now select custom Language and Date & Time Formats

+	Added search functionality, with three different "methods":

	1. Using all words  2. Using any words  3. Exact match

+	Added native MySQL database support