/
HISTORY.txt
1467 lines (1392 loc) · 75.2 KB
/
HISTORY.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Changes in 4.9.0 (upcoming)
* Changed: Minimum system requirements increased to PHP 5.6.
* Changed: Minimum system requirements increased to MySQL 5.5.
* Changed: Removed 'noopener' from target="_blank" links (now default behaviour
in all supported browsers) (thanks, phiw13).
* Changed: Removed 'aria-label' attributes where 'title' already exists.
* Fixed: Improved support for images with EXIF orientation metadata
(thanks, jools-r).
* Fixed: Compiled plugins upload on PHP 5.
* Fixed: Restored empty 'height' and 'width' attributes behaviour of
<txp:image />.
* Fixed: Self-closing tag output for html5 doctype to silence validator
(thanks, jools-r).
* Added: Option to define a Content Security Policy header for the Textpattern
admin-side via config.php.
* Added: PHPMailer for third-party SMTP delivery. See Admin>Preferences>Mail.
* Added: Multi-edit for changing author language.
* Added: Plugins can be uploaded from a URL by dragging to upload textarea.
* Added: Compiled plugins can be uploaded via Browse... feature.
* Changed: Plugins of all types trigger verify step (with improved security).
* Changed: Can no longer delete in-use languages.
* Developer: Introduce UI class library for building interface components.
* jQuery 3.6.2.
* Textile 4.0.0. See https://github.com/textile/php-textile/releases/ for full
list of changes in this release (thanks, gocom).
* PrismJS 1.29.0.
Changes in 4.8.8 (24 Jan 2022)
* Maintenance release with support for PHP 8.1, security enhancements, general
improvements and bug fixes.
* Security: Fix reported cross-site scripting issue relating to article preview
CSRF token (many thanks, Paul Ritchie at Pentest Limited).
* Fixed: More robust numeric searches.
* Fixed: Improved query efficiency of category operations.
* Fixed: Required parameters after optional in tag builder (thanks, phiw13).
* Fixed: Admin-side pagination when sorting by non-unique values.
* Added: PHP 8.1 support.
* Added: Natural search mode.
* Added: Random form selection.
* Added: Support for AVIF image format, on PHP 8.1 or higher.
* Added: Global 'limit', 'offset' and 'sort' attributes.
* Added: 'url_title' attribute to <txp:article[_custom] />.
* Added: 'range' attribute to <txp:article_image />.
* Added: 'date' and 'time' attributes to <txp:if_expired />.
* Added: 'calendar' attribute to <txp:posted /> and similar tags.
* Added: Substring extraction via 'escape' attribute.
* Added: <txp:items_count /> tag.
* Added: Expanded conditional 'match' attribute with comparison operators.
* Added: 'UTC' is now a permitted time zone.
* Added: Custom date formats.
* Changed: <txp:category_list /> with 'children' >1 attribute behaviour.
* Changed: Global 'escape' attribute operates at the items level in lists.
* Changed: Multi-site plugins directory defaults to site/admin/plugins.
* Accessibility: Additional 'aria-label' attributes for some internal links.
* Internal: Removed FOUND_ROWS() which is deprecated in MySQL 8.0.17.
* Internal: Prefer is_readable() and is_file() to file_exists().
* Developer: Added plugin lifecycle events 'upgraded' and 'downgraded'.
* Developer: Export new article IDs on duplicate.
* PrismJS 1.26.0.
Changes in 4.8.7 (30 May 2021)
* High priority maintenance release to address functionality and setup issues
discovered after 4.8.6 release.
* Fixed: Users panel throws error due to missing DB prefix (thanks, prbt2016).
* Removed: Database user GRANT check during initial setup, which broke some
installations.
* Changed: Context check priority in tags.
Changes in 4.8.6 (28 May 2021)
* DO NOT USE IN PRODUCTION - issues discovered after release, use 4.8.7 instead.
* Maintenance release with bug fixes.
* Fixed: Regression in override form usage in lists (thanks, Christian Rapp).
* Fixed: Undefined $article warning when accessing non-existent articles.
* Fixed: Error with <txp:output_form /> tag on empty forms (thanks, Adi).
* Fixed: Low-privilege users can save immediately after duplicating articles.
* Added: Latest text translations. Thank you to all our translators.
* Added: 'id' attribute to <txp:if_different /> tag.
* Added: 'db' option to the global 'escape' attribute.
* Added: Option to create database during setup.
* Added: Permission (grants) verification during setup.
* Changed: 'Assign sections' from Themes panel only selects its own sections.
* Changed: <txp:variable trim> trims its own output (thanks, cara-tm).
* Changed: <txp:link_to_next/prev> can return URL or container.
* Changed: <txp:page_url> and <txp:if_request> tags are more flexible.
* Changed: Boost power of <txp:article(_custom)> grouping by date.
* Changed: Articles can be filtered by keywords more easily.
* Changed: No Edit options in Write panel without appropriate privileges.
* Changed: No disabled update buttons on Languages panel (thanks, phiw13).
* Changed: Deprecate <txp:search_result_date />. Use <txp:posted /> instead.
* Changed: Remove deprecated break attribute from search_result_excerpt tag.
* Changed: Back-end search improved when handling numbers. Comparators can
also be used for numeric searches.
* Developer: Permit step=false to hook into explicit empty step callbacks and
step=null to indicate 'any step'.
* Developer: Permit $pre to be any text. Opens up arbitrary callback grouping.
* Developer: New articles>multi_edit.$method callback on Articles list panel.
* Developer: User panel callbacks:
user>fields and user>from to manipulate the query
user>controls to affect the button area
user_ui>list.row (pluggable_ui) for adding table data
user>steps for plugins to register custom panel-level functionality.
* Developer: Diagnostics panel callbacks diag>steps and diag_ui>level for
custom plugin steps.
Changes in 4.8.5 (29 Mar 2021)
* Maintenance release including improvements for PHP 8.0 and bug fixes.
* Changed: <txp:header /> attributes are unset by default. Ensure any 'name'
attributes are set before updating to avoid issues with custom headers.
* Fixed: Database connection issue for new installations on PHP 8.0.
* Fixed: libxml_disable_entity_loader() deprecation warning on PHP 8.0.
* Fixed: Undefined array key/offset warnings on PHP 8.0.
* Fixed: System temp directory notice on PHP 8.0.
* Fixed: Custom field ordering on Write panel.
* Fixed: Diagnostics panel strings no longer have 'Help' appended.
* Fixed: Draft/hidden/pending articles output 404 Not Found status as they
should.
* Fixed: RSS/Atom feeds display correct titles (thanks, jrmartin).
* Fixed: Form processing on 'pretext_end' callback.
* Added: Support for WebP image format, on PHP 7.1 or higher.
* Added: SSL version verification on Diagnostics panel during update checks.
* Added: Latest text translations. Thank you to all our translators.
* Added: More aggregators in <txp:article /> 'fields' attribute.
* Added: Global 'break', 'replace' and 'trim' attributes.
* Added: 'breakby' and 'breakform' attributes for all content types.
* Added: <txp:image_info type="mime" />.
* Added: Support for Fulah language translation.
* Added: Locale for en, and improved locale fallbacks.
* Added: Import attributes in <txp:php /> as PHP variables.
* Added: 'root' attribute of <txp:page_url /> to create relative URLs.
* Changed: <txp:article_custom /> can paginate content using 'pageby' attribute.
* Changed: <txp:images /> outputs full-size images if thumbnails don't exist and
<txp:images thumbnail="0" /> displays full-size images as expected.
* Changed: <txp:images> accepts <txp:else />.
* Changed: <txp:variable> default attribute can be used during assignment
(thanks, cara-tm).
* Changed: Expose 'secondpass' Advanced pref for testing.
* Changed: Plugin load warning includes version number.
* Changed: Comments off by default on new installations.
* Changed: Diagnostics textarea is rendered fully in English to aid support
requests.
* Changed: If allowed, <txp:php /> is processed in forms even in article body.
* Changed: Copy Editors are allowed to use <txp:php /> in articles.
* Changed: Better i18n handling for 'ago'.
* Developer: New pre-pretext_end callback.
* Developer: New txp.image>types callback.
* PrismJS 1.23.0.
Changes in 4.8.4 (29 Nov 2020)
* Maintenance release including support for PHP 8.0 and bug fixes.
* Fixed: Write panel JS error when override forms were switched off
(thanks, GugUser).
* Fixed: Default publishing section is not updated on section delete/rename.
* Added: 'fields' attribute to <txp:article />.
* Added: Tags syntax extension to allow for custom processing order.
* Added: Additional public-side language strings, primarily for themes.
* Added: Latest translations. Thank you to all translators for your hard work.
* Changed: Override forms can be of any type, not just article. See prefs.
* Changed: Admin-side theme name references are appended with the theme version
number.
* Changed: Improved keyboard focus within responsive tables (to allow scrolling
via arrow keys).
* PrismJS 1.22.0.
Changes in 4.8.3 (13 Sep 2020)
* Fixed: A bug in 4.8.2 that can break some legacy plugins (thanks, Yiannis).
* Fixed: Correctly label 'Allow commenter images in comments' pref.
* Fixed: Reload private prefs on preferences save (thanks, phiw13).
* Fixed: More notifications on list panels if there were no assets recorded.
* Fixed: Improved upgrade path for Textpattern prior to version 4.5.0.
* Added: 'loading' attribute for <txp:article_image />, <txp:image /> and
<txp:thumbnail /> tags.
* Added: Instantly refresh admin theme on change.
* Added: Latest translations. Thank you to all translators for your hard work.
* Changed: Theme styles are now optional.
* PrismJS 1.21.0.
Changes in 4.8.2 (29 Jul 2020)
* Fixed: <txp:if_yield> 'else' container returning 1 instead of contents
(thanks, Vienuolis).
* Fixed: Sanitize custom field labels on Write panel (thanks, luuthehienhbit).
* Fixed: Date tags return -1 in some server setups (thanks, the blue dragon).
* Fixed: Notification on list panels if there were no assets recorded.
* Fixed: Incorrect search label for 'name' on Links panel.
* Fixed: Override forms on Write panel stay in step with live Theme/Section
(thanks, cara-tm).
* Fixed: Plugins loaded from cache show correct Textpack menu labels instead
of untranslated strings.
* Added: 'size' attribute to <txp:images> tag to filter by aspect ratio.
* Added: valueless 'replace' attribute filters out duplicates.
* Added: Language selector on login and User Edit panels (if >1 installed).
* Added: Support for table_collation variable in config.php to affect
safe_create() calls, when used in tandem with dbcharset.
* Changed: Matching categories in <txp:article_custom> now performs AND. Use
match="Category" for previous OR behaviour.
* Changed: Category links in breadcrumb permlink mode.
* Changed: 'searchall="0"' attribute filters by section.
* Changed: When logging in, chosen login language is used as admin language.
* Changed: Password reset/welcome/activation and comment notification emails
sent in author language.
* Changed: Multi-edit only active when checkboxes are selected.
* Changed: Comments made by logged-in authors don't go through moderation.
* Fixed: Multi-edit rearmed correctly after async saves on Forms panel.
* Fixed: Update language list when deleting/switching to prevent stale entries.
* Fixed: Language errors when using article preview (thanks, Destry and jakob).
* Fixed: Date/time format when switching front-end language.
* Fixed: Removed TRADITIONAL sql_mode for a smoother upgrade (thanks, Adi).
* Fixed: Plugin panel uses the tempdir pref correctly.
* Fixed: Image/thumb uploaders default to image types (thanks, Adi).
* Fixed: Plugin auto-TOC strips out heading markup (thanks, Adi).
* Developer: New 'pre' pretext callback.
* Developer: Plugins can alter $pretext.
* Developer: getIfElse() function returns 'else' part of <txp:if_yield else />,
and may be used as an EvalElse() replacement.
* Developer: Add ability to filter strings in Lang->getPack() and extract().
Changes in 4.8.1 (31 May 2020)
* Changed: Improved pophelp for update check status on Diagnostics panel.
* Changed: Tag builder includes new 4.8.x attributes where possible.
* Changed: Lazy load images within Images list on supported browsers.
* Changed: Support <txp:else /> in shortcodes.
* Changed: Improved handling of yyyy/mm/dd article permlinks. Single-digit
months and days permitted, and /section/yyyy/mm/dd will limit articles to the
given section.
* Changed: Multi-assign pageless (live) sections.
* Changed: Dedicated '*' option when altering theme/page/style to leave assets
as they are.
* Changed: Use noopener on target="_blank" links.
* Changed: Optimised language loading.
* Added: Latest translations. Thank you to all translators for your hard work.
* Added: 'showalways' attribute for <txp:pages /> tag.
* Added: Support for InnoDB database engine.
* Fixed: Development and live assets are kept in sync when renamed.
* Fixed: When setting development assets/themes, link to both live and dev
assets even if they share a name.
* Fixed: Default value of permlink_format on new installs. Thanks, cara-tm.
* Fixed: Multi-site index.php correctly included in multi-site css.php.
* Fixed: JavaScript console warning on Hive theme login screens. Thanks,
cara-tm.
* Fixed: Optional parameters come first in function definitions.
* Fixed: Fall back on partial language identifier if code is not found.
* Fixed: Strings loaded from plugin cache no longer break those already loaded.
Thanks, David.
* Fixed: RPC errors when altering content from remote editors.
* jQuery 3.5.1.
* PrismJS 1.20.0.
* jQuery File Upload 10.29.0.
Changes in 4.8.0 (25 Feb 2020)
* Changed: Minimum system requirements increased to PHP 5.5.
* Changed: <txp:newer /> and <txp:older /> tags support pagination ranges.
* Changed: Author's real name is available in <txp:page_url>.
* Changed: Refined scope of root .htaccess, and restricted directory listing
in /files/ and /textpattern/ with their respective .htaccess.
* Changed: Non-searchable sections can be omitted from <txp:section_list>
output with valueless 'exclude' attribute.
* Changed: Consistent Edit step search behaviour on Plugins and Links panels.
* Changed: Text/HTML tabs now in popup dialog, with optional live preview.
* Changed: Tag parser tweaks for secondpass handler.
* Changed: Plugins cached and loaded from disk to avoid eval().
* Changed: Custom fields support from/to filtering.
* Changed: <txp:evaluate /> removes empty items from lists.
* Changed: Scroll to top on list panels during navigation.
* Changed: Random generator supports random_bytes and doesn't throw errors.
* Changed: Improved performance of syndication feed handling for sections.
* Changed: Check for updates throttle reduced to 1hr from 24hrs.
* Added: Global public theme switcher.
* Added: Dedicated live/dev theme switching.
* Added: Support for PHP 7.4.
* Added: <txp:if_request /> tag for checking server, URL, POST and cookie
variables.
* Added: <txp:pages /> tag for enhanced pagination schemes.
* Added: 'item' attribute to <txp:yield /> tag.
* Added: 'title' attribute to image tags.
* Added: 'class' attribute to comment form tags.
* Added: 'match' and 'separator' attributes to <txp:if_variable /> tag.
* Added: 'month' and 'time' attributes to <txp:file_download_list /> and
<txp:linklist> tags.
* Added: 'pg', 'total' and 'limit' attributes to <txp:newer /> and
<txp:older /> tags.
* Added: Support for id ranges in some tags and admin fields.
* Added: Support for HTTP status 451 (Unavailable For Legal Reasons).
* Added: Support for native PHP password hashing.
* Added: Dark Mode support in Hive admin theme.
* Added: Pageless sections for content snippets and creative article flows.
* Added: Per-section article link format override.
* Added: 'breadcrumb/title' article link format.
* Added: 'section/category/title' article link format.
* Added: Links have an editable publish time and date.
* Added: Category searching to a specified depth.
* Added: Custom field aliases and URL filters via valueless attributes.
* Added: Global 'evaluate', 'replace' and 'yield' attributes. Evaluate can
execute contained content in arbitrary order.
* Added: Ability to trim lists when using valueless 'trim' attribute.
* Added: Link to phpinfo() in Diagnostics panel.
* Added: Configuration file generated during setup can be downloaded.
* Added: Support for Bengali language translation.
* Added: Support for Khmer language translation.
* Added: Support for Norwegian Nynorsk language translation.
* Added: Support for Welsh language translation.
* Added: Latest translations. Thanks to all Crowdin translators for their work.
* Added: Hive and Classic admin themes now support 3 column layouts.
* Added: Option to disable auto-expanding text areas in Hive admin themes via
config.php file. See Hive theme's README.txt file for instructions.
* Added: Warning to admin panels if JavaScript is unavailable.
* Added: Support for SSL MySQL connections in config.php.
* Removed: Obsolete 'No widowed words' preference setting. If this feature is
needed it can be implemented directly with <txp:title /> tag.
* Removed: Some deprecated functions from long ago.
* Fixed: index.php correctly included in css.php.
* Fixed: 3 undefined routing-related indexes.
* Fixed: Article preview (txpreview) is not cached.
* Fixed: <txp:category_list> 'sort' attribute respects 'categories'
attribute instead of requiring sort="" override.
* Fixed: <txp:recent_articles> only uses default link without form/container.
* Fixed: Use locale on admin side.
* Fixed: Localization of pre-flight diagnostic upgrade messages.
* Fixed: Undefined variable warnings thrown via compact().
* Fixed: Password handling when using MySQL 8+.
* Fixed: nbsp on French opening quote broke Textile in some cases.
* Fixed: Incorrect acronym tag in welcome article.
* Accessibility: Improved indication of required form fields.
* Accessibility: Honour 'prefers-reduced-motion' in official themes.
* Accessibility: Target WCAG 2.0 AAA contrast levels in official themes.
* Accessibility: Improved ARIA experience.
* Accessibility: Improved keyboard-only access experience.
* Developer: Plugins can be uploaded with .php and .zip extensions.
* Developer: Upload order and file totals sent when batch uploading files.
* Developer: Some txplib_misc.php functions moved to txplib_admin.php.
* Developer: PHP magic_quotes_gpc, magic_quotes_runtime, safe_mode and
register_globals support removed.
* Developer: Title accessible to plugins in Atom/RSS.
* Developer: Merge headers on demand.
* Developer: Tags can be registered with custom attributes/parameters.
* Developer: Multiple forms can be fetched at once.
* Developer: txp.article > neighbour.criteria callback on Write panel.
* Developer: Please register plugin tags or they will not work in future.
* Performance optimizations via cacheing and preloading frequent content.
* Textile 3.7.6. See https://github.com/textile/php-textile/releases/tag/v3.7.6
for full list of changes in this release (thanks, gocom).
* jQuery 3.4.1.
* PrismJS 1.19.0.
* jQuery File Upload 10.8.0.
Changes in 4.7.3 (25 Feb 2019)
* Maintenance release with enhancements and bug fixes.
* Fixed: 'Export to disk' checkbox state inconsistencies for new assets.
* Fixed: Logout issue in Classic admin theme.
* Fixed: A bug when PHP 'mbstring' extension is disabled.
* Fixed: Prevent Alt+S from triggering save (thanks, o10154016).
* Fixed: Language .ini files trump old .txt files.
* Changed: Permit falling back on pophelp in 'lang' database table.
* Changed: 'Show password' on Users panel displays both passwords.
* Added: <txp:yield /> values are available in external forms too.
* Added: Indicator for GD Graphics Library WebP support in Diagnostics panel.
* Added: Latest translations.
* Added: Complete Italian inline help translation. Many thanks to Giampiero
Mellea for all their work.
* Developer: Introduce L10n/Lang->languageList() to get language tuples.
* Textile 3.7.1. See https://github.com/textile/php-textile/releases/tag/v3.7.1
for full list of changes in this release (thanks, gocom).
Changes in 4.7.2 (20 Dec 2018)
* Maintenance release with enhancements and bug fixes.
* Fixed: A bug with <txp:link_to_[next|prev] /> tags in 'month' URL mode.
* Fixed: A bug with <txp:related_articles /> tag.
* Fixed: <txp:search_input /> will always respect its 'form' attribute setting,
if set.
* Fixed: A bug with the global 'not' attribute.
* Fixed: Multibyte characters are correctly obfuscated by <txp:email />.
* Fixed: Salutation text within emails not displaying correctly.
* Fixed: 'problem_connecting_update_server' language string grouping corrected.
* Fixed: Unparsed 'must_reassign_assets' and 'cannot_assign_assets_to_deletee'
strings.
* Changed: <txp:search_input /> can be used as a container tag, and also accepts
'aria_label' and 'placeholder' attributes.
* Changed: More robust search routes within default public-side theme.
* Changed: Improved upgrade route where MySQL NO_ZERO_DATE is set.
* Changed: Enhanced password manager compatibility on login and user details
pages.
* Changed: Extended fallback to 'C' locale in some situations.
* Changed: Partially translated inline help files use fallback language (by
default: English) where localized help items are not present.
* Changed: Hive admin theme login panel now displays link to public site.
* Changed: Simplified Classic admin theme login panel layout.
* Changed: Fine-grained development theme preview.
* Changed: More customizable Atom/RSS feeds via 'atom_head', 'rss_head' and
'feed_filter' callbacks.
* Changed: Deleting an article deletes any associated comments.
* Changed: Forms, Pages and Styles accept pre-4.7 names for editing, but
must be sanitized prior to saving.
* Changed: Some emoji are preserved in automatically-generated article URL
titles.
* Changed: Article text blocks starting with a Textpattern tag are not
Textile'd.
* Changed: File data is available on 'file_download' callback.
* Changed: Article lists can be split by 'breakby' form value.
* Changed: Expanded Schema.org media items within default public-side theme.
* Added: Latest translations.
* Added: Czech inline help translation. Many thanks to Miloš Berka for all
their work.
* Added: French inline help translation. Many thanks to Lowel for all their
work.
* Added: Partial Italian inline help translation. Thanks Giampiero Mellea.
* Added: Global 'trim' and 'default' attributes.
* Added: Global 'wrapform' attribute.
* Added: Global 'escape="ordinal|spell|url"' attribute values.
* Added: 'aria_label' and 'placeholder' attributes on comment input fields.
* Added: 'breakform' attribute to <txp:article(_custom) /> tag.
* Added: 'test' attribute to <txp:if_different /> tag.
* Added: 'context' attribute to <txp:link_to_next />, <txp:link_to_prev />,
<txp:page_url /> and <txp:permlink /> tags.
* Added: 'context' and 'format' attributes to <txp:output_form /> tag.
* Added: 'add', 'reset', 'separator' and 'output' attributes to <txp:variable />
tag.
* Added: Custom form media (MIME) types, served as 'flat' files if needed.
* Added: Option to export form/page/style to disk on save.
* Added: Custom functions can be registered for use in <txp:evaluate /> tag.
* Textile 3.7. See https://github.com/textile/php-textile/releases/tag/v3.7.0
for full list of changes in this release (thanks, gocom).
* jQuery File Upload 9.28.0.
Changes in 4.7.1 (26 Jun 2018)
* Maintenance release with bug fixes.
* Fixed: <txp:article /> and <txp:article_custom /> correctly parse their
content.
* Fixed: <txp:article /> with 'listform' attribute returns correct value.
* Fixed: Textpack correctly updates timestamp where web server and database
server reside in different timezones.
* Fixed: Fallback to 'C' locale in some situations.
* Fixed: Section page/style selectors are correctly populated.
* Fixed: Articles without a URL-only title have a valid permlink across all
link formats.
* Changed: Additional code optimization for PHP 5.4 and later.
* Changed: Improved language string coverage in setup process.
* Changed: Extended use of Textpattern 4.7.*-native tags in Four Point Seven
theme.
* Changed: Additional database-related information included in Diagnostics.
* Added: Latest translations.
* PrismJS 1.15.0.
* jQuery File Upload 9.22.0.
Changes in 4.7.0 (15 May 2018)
* In memory of Dean Cameron Allen, creator of Textpattern CMS.
* Changed: Minimum system requirements increased to PHP 5.4.0.
* Textpattern instances older than version 4.2.0 (released 17 Sep 2009) should
upgrade to version 4.2.0 before upgrading to version 4.7.0.
* Added: Support for website themes, markup stored within the database (accessed
via the Themes panel) and available as flat file templates for easier version
control, portability and installation (many many thanks, NicolasGraph).
* Added: Support for installation on Nginx web servers (thanks, makss).
* Added: Support for automated installation from CLI (thanks, makss).
* Added: Filipino language translation (thanks, Joseph Buarao).
* Added: Tagalog language translation (thanks, Kurt Lem Zamora).
* Added: User-selectable column list options in tables replaces 'Show more
detail' checkboxes. Settings remembered per device.
* Added: Valueless attributes.
* Added: Optional short-tags.
* Added: Ability to use Forms as tags via <txp:output_form /> or
<txp::shortcode /> tags.
* Added: Tag global attributes: 'breakby', 'breakclass', 'class', 'escape',
'html_id', 'not' and 'wraptag'.
* Added: <txp:article_custom /> tag can count pages.
* Added: <txp:evaluate /> tag.
* Added: <txp:header /> tag allows optional setting of HTML headers on page
output.
* Added: <txp:if_logged_in /> tag.
* Added: XML and JSON file support. Completely overhauled setup procedure to
centralize and verify/delete preferences on upgrade. Table structure and
preferences defined in files for easier maintenance (thanks, makss).
* Added: Per-user admin panel language preference (decoupled from site language
preference).
* Added: All users can administer their own key biographical info.
* Added: Ability to copy an article without enforced save.
* Added: Button to swap width and height values on image edit thumbnail
generator.
* Added: Ctrl+S/Cmd+S keyboard shortcuts for Submit, Publish and Save buttons
on any admin panel.
* Added: Multiple Files and Images upload with progress meter.
* Added: Section searches by description.
* Added: Visual indicator that a subset of search fields are in use.
* Added: One-pass comment searches by parent article (thanks, makss).
* Added: Diagnostics can optionally suppress sensitive path data.
* Added: 'Expire now' checkbox on Write panel.
* Added: Automatic table of contents generation for well-structured plugin help
text.
* Added: JSON-LD and Open Graph metadata scaffold included with default theme.
* Removed: Involuntary Personally Identifiable Information within comments (IP
address) and logs (IP address/host) no longer collected - for GDPR compliance.
* Removed: Any pre-existing IP addresses stored in comments database table are
deleted upon upgrade to 4.7.0 (and not stored in future) - for GDPR
compliance.
* Changed: Comments 'Remember me?' option is now an opt-in instead of opt-out,
setting stored in localStorage instead of as a cookie - for GDPR compliance.
* Changed: Revised multi-site installation routine and symbolic linking (thanks,
jools-r).
* Changed: Most panels perform saves/searches/pagination without page
refreshes (Ajax).
* Changed: Last used Page/Form/Stylesheet remembered.
* Changed: Forms can recursively (up to 15 levels deep) call themselves.
* Changed: <txp:breadcrumb /> can be used as a container tag, and accepts 'type'
attribute.
* Changed: Enhanced <txp:article /> sort and status handling.
* Changed: Enhanced <txp:article_custom /> 'exclude', 'expired', 'month' and
'time' attributes.
* Changed: <txp:category_list /> can output nested lists.
* Changed: <txp:if_category /> accepts 'parent' attribute.
* Changed: <txp:image_author /> tag accepts 'id' and 'name' attributes.
* Changed: <txp:link_to_next/> and <txp:link_to_prev /> are more consistent.
* Changed: Reinstate <txp:keywords> tag and add 'break', 'class' and 'wraptag'
attributes.
* Changed: Deprecated <txp:image_display /> and <txp:image_index /> tags, use
<txp:image /> and <txp:images />, respectively, instead.
* Changed: <txp:newer /> and <txp:older /> tags accept 'rel' attribute.
* Changed: <txp:output_form /> tag supports user-defined attributes,
coupled with <txp:yield>.
* Changed: <txp:page_title /> tag SEO - site name renders after page name,
default separator changed from ': ' to ' | ', page numbers added.
* Changed: <txp:page_url /> tag can return more URL paths via 'type' attribute.
* Changed: <txp:site_url /> tag accepts 'type' attribute to return admin-side
URL.
* Changed: Deprecated the 'poplink' attribute on <txp:thumbnail /> tag.
* Changed: <txp:yield> tag accepts 'name' and 'default' attributes.
* Changed: Pagination tags (like <txp:newer /> and <txp:older />) can be placed
before <txp:article /> tag.
* Changed: Image Edit panel available to all users - read-only to some (thanks,
phiw13).
* Changed: Textfilter options and help topics moved inline with their textareas.
Write panel 'sidehelp' twisty and article>sidehelp callback removed.
* Changed: Categories moved from Sort & Display subpanel to their own twisty.
Override Form (if used) moved to 'Sort and display' subpanel. 'Advanced'
twisty and its callback removed.
* Changed: Languages are updated automatically on upgrade.
* Changed: Further improvements to RTL language support.
* Changed: Language translations included in core instead of legacy RPC server.
* Changed: Diagnostics and tag trace reports always rendered in English (for
easier international support enquiries). Text strings moved to 'mode.ini'.
* Changed: Use local inline help files instead of legacy RPC server. Help topics
rendered in dialogs instead of new window (thanks, makss).
* Changed: Use JSON file to check for new releases/pre-releases instead of
legacy RPC server (thanks, makss).
* Changed: Cleanup of panels/UI elements shown based on specific user roles.
* Changed: Plugin Textpacks stored in database and installed on demand.
* Changed: Plugins have persistent data column available for custom storage.
* Changed: Clearer plugin list on Diagnostics panel.
* Changed: Article posted/modified info and ID moved below Title field.
* Changed: Enable HTTP 226 responses (thanks, da2x).
* Changed: Make Preferences panel and subpanels fully printable (thanks,
phiw13).
* Changed: Panel states stored only client-side (localStorage).
* Changed: pluggable_ui() behaves more intelligently when chaining.
* Changed: Pagination steps are more grid friendly: 12/24/48/96 items.
* Changed: More locale-aware date handling in safe_strftime().
* Changed: Deprecated support for uploading .swf files via Images panel (support
will be removed entirely in a future version).
* Changed: Extensive admin theme image optimizations.
* Changed: Admin theme accessibility improvements.
* Changed: Admin theme layout improvements on small devices.
* Changed: Pagination and search added to Plugins panel.
* Changed: Plugin preview page syntax highlighting and layout improvements.
Also show Textpack string additions preview (if applicable).
* Changed: Removed 'Create ...' links from Pages/Forms/Styles panels when
viewing a new, unsaved Page/Form/Style (thanks, adi).
* Changed: Categories can no longer reassign the parent of a child element to
its children. Avoids infinite tree loops.
* Changed: Article preview includes debug info.
* Changed: 'wraptag' attribute can prepend/append content using special '<+>'
syntax.
* Developer: 'ahu' constant as multi-site-compatible URL to admin side. Plugin
authors please use ahu in place of hu.'textpattern'.
* Fixed: Multi-site setup overhauled: Correct setup and install messages,
diagnostics information, login URL in user-invite email, login cookie
accessible to public and admin URLs (thanks, jools-r).
* Fixed: SQL injection in 'qty' attribute (thanks Manuel Garcia Cárdenas).
* Fixed: Keyboard navigation on select list popups.
* Fixed: Only update database version string if using release version.
* Fixed: Support for other MySQL client versions (thanks, CeBe).
* Fixed: URL handling for /title and /year/month/day/title (thanks, planeth44).
* Fixed: Panel layout improvements across all privilege levels.
* Fixed: Per-user preferences exposed to all users (thanks, gaekwad).
* Removed: zxcvbn password strength meter.
* Textile 3.6.
* jQuery 3.3.1.
* PrismJS 1.14.0.
* PHPass 0.5.
* jQuery File Upload 9.21.0.
Changes in 4.6.2 (21 Oct 2016)
* Maintenance release with bug fixes.
* Fixed: More complete SQL trace on non-row-based queries.
* Fixed: Update process for filesystem-only releases.
* Fixed: Normalize link text in some tag builder tags (thanks, makss).
* Fixed: Incorrect focus ring styling.
* Fixed: Define Trace in RPC (thanks, Retrax/makss).
* Added: Better cross-browser support for input type=color
(thanks, NicolasGraph).
* Added: Support for printing of admin panels.
* Added: Additional Latvian setup translations.
Changes in 4.6.1 (05 Oct 2016)
* Maintenance release with bug fixes.
* Added: A modern interpretation of the 'Classic' admin theme.
* Added: More complete SQL trace (thanks, makss).
* Fixed: New articles only marked modified after modification (thanks, gaekwad).
* Fixed: Silently fail if old files cannot be deleted.
* Fixed: Conditional tags now trigger correctly (thanks, craigerskine).
* Fixed: Missing sql_now_* preferences (thanks, makss).
* Fixed: Save preference pane states on keyboard focus too (thanks, phiw13).
* Fixed: Avoid setLocale errors if locale unavailable in lang tag attributes
(thanks, brachycera).
* Fixed: 'Change author' multi-edit only available to users with sufficient
rights (thanks, makss).
* Fixed: Relative URLs in feeds (thanks, hidalgo).
* Changed: Made better use of available screen estate for presentation panel
code textareas (thanks, phiw13).
* Changed: Tightened up vertical layout on Forms panel.
* Changed: Put an upper limit on preference group widths for better readability
(thanks, phiw13).
* Changed: CONTRIBUTING.textile info has been consolidated into main
README.txt file.
* jQuery UI 1.12.1.
* zxcvbn 4.4.0.
Changes in 4.6.0 (10 Sep 2016)
* Textile v3.5.
* Improved RTL language support.
* Improved admin side UI.
* Requires PHP 5.3.3 or newer. Compatible with PHP 7.0 and MySQL 5.7
(thanks Ruud van Melick).
* New tags: <txp:authors />, <txp:meta_description />, <txp:if_description> and
<txp:if_yield>.
* No more plaintext passwords sent: password reset requests are handled directly
on the server.
* One-week validity for new account activation requests by default. Configurable
in config.php (see ACTIVATION_EXPIRY_HOURS).
* Ninety-minute validity for password reset requests by default. Configurable in
config.php (see RESET_EXPIRY_MINUTES).
* Stronger password hashes and strength meter implemented (zxcvbn).
* Performance increases due to cache-friendly public side database queries,
parser improvements and reduction of admin-side queries
(thanks Ruud van Melick and etc).
* Added: Support for adding other markup languages (for example, Markdown)
via plugins.
* Added: Default article publishing status preference.
* Added: Support for custom CSS and JavaScript files in admin themes, for
advanced users.
* Removed: Import panel - the blog import options were obsolete
(thanks Ruud van Melick).
* Removed: Commenter IP ban feature - this method of banning is unreliable and
becoming obsolete (thanks Ruud van Melick).
* Removed: Modernizr - unnecessary due to Internet Explorer 11 being the minimum
Internet Explorer browser requirement.
* Changed: The /textpattern/theme/ directory has been renamed to
/textpattern/admin-themes/ for stronger differentiation between this and the
public-side /themes/ directory planned for Textpattern 4.7. Additionally
prevents breakage of preferences panel caused by old, incompatible themes
residing in the previously titled admin theme directory during upgrade.
* Changed: <txp:article_custom /> accepts 'exclude' attribute to exclude
articles by a comma-separated id list.
* Changed: <txp:author /> accepts 'escape' and 'format' attributes.
* Changed: <txp:category_list /> accepts 'html_id', 'limit' and 'offset'
attributes.
* Changed: <txp:comments_form/>: Deprecated 'isize', 'msgcols', 'msgrows',
'msgstyle', 'previewlabel', 'submitlabel', 'rememberlabel', and 'forgetlabel'
attributes .
* Changed: <txp:comments/>, <txp:comments_form/>, <txp:comments_preview/> and
<txp:popup_comments/> can be used as container tags.
* Changed: <txp:comment_email_input /> accepts 'size' attribute.
* Changed: <txp:comment_message_input /> accepts 'cols' and 'rows' attributes.
Removed capability to apply an immediate style to the element.
* Changed: <txp:comment_name_input /> accepts 'size' attribute.
* Changed: <txp:comment_preview /> accepts 'label' attribute.
* Changed: <txp:comment_remember /> accepts 'rememberlabel' and 'forgetlabel'
attributes.
* Changed: <txp:comment_submit /> accepts 'label' attribute.
* Changed: <txp:comment_web_input /> accepts 'size' attribute.
* Changed: <txp:link /> accepts 'id' and 'name' attributes.
* Changed: <txp:meta_author /> accepts 'escape' and 'format' attributes.
* Changed: <txp:meta_keywords /> accepts 'escape', 'format' and 'separator'
attributes.
* Changed: <txp:password_protect /> can be used as a container tag.
* Changed: <txp:recent_articles /> accepts 'offset' attribute.
* Changed: <txp:section_list /> accepts 'html_id', 'limit' and 'offset'
attributes.
* Changed: Deprecated <txp:keywords /> tag. Use <txp:meta_keywords format="" />
instead.
* Changed: Deprecated <txp:rsd /> tag.
* Changed: Deprecated 'breakclass' attribute for <txp:comments /> and
<txp:image_info />.
* Changed: Removed Form (article) Preview facility.
* Changed: Removed empty 'About' section from new installs.
* Changed: Tag builder has been reworked as a dialog window.
* Changed: Increased 'page' and 'css' sizes in txp_section table.
* Changed: 'Prevent widowed words in article titles' preference defaults to 'No'
in new installs.
* Changed: 'Include email in Atom feeds' preference defaults to 'No' in new
installs.
* Changed: Detailed debug trace log.
* Changed: Default charset is now utf8mb4: supports a wider range of characters,
including emoji.
* Changed: Removed built-in Gzip compression of RSS feed and Atom feed.
* Developer: getNextPref() now returns array members 'next' and 'prev' with
article data, no longer returns array members 'next_id', 'next_title',
'next_utitle', 'next_posted', 'prev_id', 'prev_title', 'prev_utitle',
'prev_posted'
* Developer: getNeighbour() returns 'false' if no matching neighbour article
exists.
* Developer: Uses 'mysqli' extension for database access, lose dependency on
'mysql' extension.
* Developer: Uses the TXP 'now()' function instead of the SQL 'NOW()' function
to create cache-friendly, faster SELECT queries.
* Developer: Added jQuery UI library to admin side.
* Developer: Added Prism code highlighting for <code> and <pre><code> to admin
side. The following languages are supported (when specified via classnames on
the <code> tag, i.e. using 'class="language-xxx"): 'language-markup',
'language-css', 'language-clike', 'language-javascript', 'language-json',
'language-php', 'language-markdown', 'language-textile'. Optional line numbers
are also supported when code highlighting, by adding an additional classname
of 'line-numbers' to the parent <pre> tag.
* Developer: Added DocBlock documentation comments throughout the source code.
* Developer: Adherence to PSR coding standards where possible.
* Developer: Function signature for wrapRegion() changed: 7th parameter 'ARIA
role' dropped, as it shouldn't be stated for semantic tags such as 'section'.
* Developer: Refactored 'Validator', 'Constraint', and 'theme' classes into the
'Textpattern' namespace; deprecated their 'txplib_validator' and
'txplib_theme' implementations.
* Developer: Changed name of pref 'permalink_title_format' to 'permlink_format'.
* jQuery 1.12.4.
* jQuery UI 1.12.0.
Changes in 4.5.7 (20 Sep 2014)
* Maintenance release with bug fixes.
* Textile v2.4.3 resolves PHP 5.5 compatibility issues.
* Updated default site theme and libraries.
* Setup now remembers settings. No more 'form resubmission' browser warnings
when going back through the wizard.
* Allow pre_publish_script in multi-site installations.
* Email address validation uses PHP's filter_var(), which permits addresses such
as @[127.0.0.1].
* Fixed: <txp:link_to_prev>, <txp:link_to_next>, <txp:prev_title>, and
<txp:next_title> tags for certain combinations with <txp:article_custom>.
* Fixed: SQL statement escaping in set_pref().
* Fixed: Situations where set_pref() could corrupt the preference table if the
string name contained '%' or '_' characters.
* Fixed: Save comment emails of any valid length properly.
* Fixed: Visitor logs support IPv6.
* Fixed: Articles can be assigned to sections with names longer than 64
characters.
* Fixed: Setup script more robust, and compatible with MySQL 5.6.
* Fixed: Warnings when writing image thumbnails.
* Fixed: Files no longer trash author names, and empty files can no longer be
created.
* Fixed: Percent encoding of spaces in site URL.
* Security: IXR fixes to prevent XML quadratic blowup attack.
* Security: Prevent variable injection during setup and plugin preview step.
Changes in 4.5.6
* Skipped due to broken update path for SVN users.
Changes in 4.5.5 (04 Oct 2013)
* Maintenance release with bug fixes, no security implications.
* Fixed: Compatibility issues with PHP 5.5 in <txp:yield> and setup routines.
* Fixed: Category table's parent-child associations break and the table malforms
on name updates, if two different category types share same category name.
* Fixed: Image caption isn't escaped.
* Fixed: Admin-side JavaScript dies on Safari 5 (or any browser that doesn't
allow re-defining keywords or constructs as variables).
* jQuery 1.8.3.
Changes in 4.5.4 (05 Dec 2012)
* Corrects a packaging error in the 4.5.3 archives.
Changes in 4.5.3 (04 Dec 2012)
* Maintenance release with bug fixes, no security implications.
* Fix <txp:link_to_prev>, <txp:link_to_next>, <txp:prev_title>, and
<txp:next_title> tags for certain combinations with <txp:article_custom>.
* Escape new page name in the 'Pages' panel.
* Developer: Render valid HTML in fInput() for input types 'file' and 'image'.
* Developer: In http_accept_format(), discard MIME formats with a quality factor
below 0.1.
Changes in 4.5.2 (10 Oct 2012)
* Maintenance release with bug fixes, no security implications.
* Fix <txp:link_to_prev>, <txp:link_to_next>, <txp:prev_title>, and
<txp:next_title> tags for setups with web server and database server in
different time zones.
* Avoid "undefined variable" error while bulk-editing form types.
* Developer: Use actual callback instead of hard-coded function to render
'View' link. Pass reference to partials meta data into partial callbacks as
$rs['partials_meta'].
* Developer: Escape '<script>' tags in script_js(). Use jQuery in dom_attach().
Changes in 4.5.1 (12 Sep 2012)
* Maintenance release with bug fixes, no security implications.
* Default front-side template: Remove duplicate search input field.
* Textile: Use 'named groups' syntax '?P<group>' for b/c with older PCRE library
versions.
* Hive admin-side theme: Modernizr v2.6.2.
* Prevent fatal aborts from error-handling during version upgrades.
* Unregister all globals in multi-site setups.
* Prevent deletion of used stylesheets from UI.
* Offer all supported units in the tag builder for <txp:file_download_size />.
* Developer: New events 'authors_deleted', 'categories_deleted', 'css_deleted',
'discuss_deleted', 'file_deleted', 'forms_deleted', 'thumbnail_deleted',
'links_deleted', 'articles_deleted', 'page_deleted', 'sections_deleted'.
Changes in 4.5.0 (27 Aug 2012)
* Minimum system requirement: PHP 5.2.
* Modern default site theme (responsive, HTML5, CSS3).
* Choice of HTML5 or XHTML document type as a preference.
* Textile 2.4.1. See full changelog at
https://textpattern.com/textile-changelog.
* User interface realignment and clean-up.
* Additional admin theme (Hive).
* Beautified setup process.
* Write, Plugin and Section panels save some changes without page refreshes
(Ajax).
* WordPress import tool imports image media attachments as article images, can
use 'utf8' or 'latin1' source databases.
* New advanced preference "Login info email address" allows to define a 'From:'
address from which a new user's login info is sent.
* Check for new Textpattern version moved from Preferences to Diagnostics panel.
* Removed raw PHP support in pages and articles.
* Plugin status is preserved across plugin updates.
* <txp:link_to_prev> and <txp:link_to_next> adhere to the sort order set by
<txp:article>.
* Deprecated 'escape' attribute for <txp:search_term />.
* Removed 'align' attribute for <txp:image />, <txp:thumbnail />,
<txp:article_image />.
* <txp:css /> accepts a comma-separated list of style-sheet names for the 'name'
attribute.
* <txp:txp_die />: New attribute 'url'. Specifies location target for HTTP stati
301, 302, 307.
* <txp:article_custom>, <txp:file_download_list> preserve sorting order from
'id' attribute.
* <txp:images /> preserves sorting order from article image ids.
* <txp:file_download> may be used as a container tag.
* <txp:comment_form />: New attributes 'previewlabel', 'submitlabel',
'rememberlabel', 'forgetlabel'.
* New <txp:author_email> tag.
* <txp:linklist /> accepts a comma-separated list of link ids in the new 'id'
attribute.
* <txp:images /> uses the sort order of images from the 'id' attribute if
present.
* Developer: Introduce gTxtScript() to help with the l10n of client-side
strings.
* Developer: Introduce txpspecialchars() as a recommended HTML5-safe alternative
to htmlspecialchars().
* Developer: New events 'article_saved', 'article_posted', 'comment.saved',
'article_ui'.'partials_meta', 'article_ui'.'validate_save',
'image_ui'.'fullsize_image', 'image_ui'.'thumbnail_image',
'admin_criteria'.'author_list', 'admin_criteria'.'author_list',
'admin_criteria'.'css_list', 'admin_criteria'.'discuss_list',
'admin_criteria'.'file_list', 'admin_criteria'.'form_list',
'admin_criteria'.'image_list', 'admin_criteria'.'link_list',
'admin_criteria'.'list_list', 'admin_criteria'.'log_list',
'admin_criteria'.'page_list', 'admin_criteria'.'section_list'
(NB: 'image_ui'.'image_edit' and 'image_ui'.'thumbnail_edit' changed).
* Developer: Introduce textpattern.Relay, a pub/sub hub for client-side events.
* Developer: Introduce txpAsyncForm (a jQuery plugin for asynchronous posts from
forms) and txpAsyncHref (a jQuery plugin for asynchronous posts from links)
* Developer: Introduce safe_escape(), Constraint() and Validator() classes plus
their descendents, callback_event_ref(), theme::announce_async()
* Developer: Restrict plugin type '3' to load only at non-Ajax requests.
Introduce plugin type '4' to be loaded on the admin side for both Ajax and
non-Ajax requests. Introduce plugin type '5' to be loaded on the public side
and on the admin side for both Ajax and non-Ajax requests.
* Developer: Run custom post-update code from
txpath.'/update/custom/post-update*.php' if this glob() exists.
* Developer: Include custom code like page-caches before the page is assembled
by setting $txpcfg['pre_publish_script'] to a valid filename.
* Developer: Modified plugin type '1': Load only on non-Ajax requests on the
admin-side.
* Developer: Additional plugin types '4' (admin-side, only for Ajax requests),
and '5' (public side; admin-side, only for Ajax requests).
* Security: Admin-side disallows framing, sends "X-Frame-Options: SAMEORIGIN"
header.
* Security: The 'txp_login' cookie is set with a 'HttpOnly' attribute.
* Security: Fixed a persistent XSS vulnerability in Textile discovered by Mauro
Gentile.
* Security: Fixed a XSS vulnerability in the setup process discovered by
Jonathan Claudius of Trustwave SpiderLabs.
* Security: Fixed a persistent XSS vulnerability in the access log panel
discovered by Sasha Zivojinovic.
* Bug and security fixes.
* jQuery 1.7.2.
Changes in 4.4.1 (18 Jun 2011)
* Security: Add admin-side CSRF protection measures. Updates are highly
recommended. Thanks, Neal Poole.
* Upload of SWF images requires 'image.create.trusted' privilege (applies to
publisher, managing editor, copy editor, and designer roles).
* <txp:file_download_size /> improved from both i18n and l10n viewpoints.
* Developer: CSRF protection API in bouncer(), form_token() and tInput().
* Developer: CSRF token included in output from form(), aLink(), eLink(),
dLink(), and wLink() functions.
* phpass 0.4 / genuine.
* jQuery 1.6.1.
Changes in 4.4.0 (26 Mar 2011)
* Security: Fix several vulnerabilities. Updates are *absolutely* recommended
for sites running any older version. Thanks, Neal Poole.
* Passwords are case-sensitive.
* Hotlink protection for files: Downloads from a web-accessible '/files'
directory are inhibited. The '/file_download/$id/example.foo' route is the
only valid way to access downloadable files. Requires an Apache web server and
usage of the sample .htaccess file.
* Empty <txp:variable></txp:variable> container sets a variable's value to "".
* WordPress import tool fixed for WP 3.x.
* Context bug in messy mode fixed.
* get_pref() now honours per-user prefs in all cases.
* Developer: txp_validate() accepts a '$log' parameter to discern between 'real
user login' vs. 'just validating credentials' usage.
* Developer: sendAsyncEvent() accepts parameter $format.
* Developer: Introducing escape_js() and send_script_response().
* Developer: Taghandler functions *must not* contain upper case letters.
* Developer: Taghandler functions *must not* be defined within a <txp:php>
element.
* Developer: phpass 0.3 / genuine for password portability, hashing, stretching,
and salting. Old-style passwords will be migrated upon a user's first login.
Persistent hash values in database are incompatible with previous versions.
* jQuery 1.5.1.
Changes in 4.3.0 (04 Nov 2010)
* Security: Fixed two XSS vulnerabilities (thanks Jorge Hoya and High-Tech
Bridge). Updates are recommended.
* New Textpattern logo by courtesy of Philipp Schilling (belipe,
http://www.psgd.de). Happy retirement to The Carver!
* Feature: Optional alternate URL for static image resources. Defined in
constant 'ihu'.
* Feature: /category and /author lists for all content types, with conditionals
and pagination.
* Feature: Optional top-level 'Home' tab for dashboard plugins.
* Feature: File titles.
* Feature: Multiple categories/sections in feeds via
http://example.com/rss/?category=foo,bar§ion=baz,omg and
http://example.com/atom/?category=foo,bar§ion=baz,omg).
* New tags: <txp:images />, <txp:image_info />, <txp:image_url />,
<txp:image_date />, <txp:if_thumbnail />.
* New tags: <txp:link_author />, <txp:image_author />,
<txp:file_download_author />.
* Changed: Verbose semantic admin-side markup.
* Changed: Explicit 'Create new $thing' button for pages and styles.
* Changed: <txp:image /> and <txp:article_image /> accept 'width' and/or
'height' attribute.
* Changed: <txp:search_input /> accepts a 'match' attribute. Possible values:
'exact', 'any' or 'all' (default).
* Changed: <txp:css /> accepts a 'name' attribute. Attribute 'n' is deprecated.
* Changed: <txp:image_index /> accepts a 'category' attribute. Attribute 'c' is
deprecated.
* Changed: <txp:breadcrumb /> accepts a 'separator' attribute. Attribute 'sep'
is deprecated.
* Changed: <txp:if_plugin /> accepts a 'version' attribute. Attribute 'ver' is
deprecated.
* Changed: <txp:if_custom_field /> accepts a "value" attribute. Attribute "val"
is deprecated. Added attributes 'match' and 'separator'.
* Changed: <txp:feed_link />, <txp:link_feed_link />, <txp:popup />,
<txp:search_input /> accept a 'class' attribute.
* Changed: Use percent-encoding in URLs as a RFC-1738-compliant fallback for
languages lacking a suitable transliteration array.
* Changed: Silence E_STRICT warnings in "live" production mode.
* Removed: 'Friendly' CSS editor.
* Developer: pluggable_ui() in the images tab.
* Developer: Stylesheets are stored as plain text in the database - no more
base64-encoding.
* Developer: Textpacks, a method to install i18n strings from uploaded text
files and from plugins.
* Developer: article_format_info(), link_format_info(), and get_groups()
convenience functions.
* Developer: i18n strings are not loaded while Textpattern renders the
public-side style sheet.
* Textile 2.2 adds support for note lists, definition lists, thead, tbody,
tfoot, table summary, table caption, table colgroup, glyphs for fractions,