lhc/web/wiklou.git
15 years agoFix RELEASE-NOTES for r43944.
Siebrand Mazeland [Tue, 25 Nov 2008 21:00:30 +0000 (21:00 +0000)]
Fix RELEASE-NOTES for r43944.

15 years agoSub pages get a redirect on move, even when "Leave a redirect behind" is checked...
Siebrand Mazeland [Tue, 25 Nov 2008 20:57:29 +0000 (20:57 +0000)]
Sub pages get a redirect on move, even when "Leave a redirect behind" is checked. Fixed.

15 years agoAs brought up in bug 16374, the parserTests seem to only want parsertest_ as the...
Chad Horohoe [Tue, 25 Nov 2008 20:39:05 +0000 (20:39 +0000)]
As brought up in bug 16374, the parserTests seem to only want parsertest_ as the dbprefix. If we're going to do that, lets make the PHPUnit tests consistent and use the same test prefix.

15 years agoLet's try limiting the language object cache... see if that fixes our problem with...
Brion Vibber [Tue, 25 Nov 2008 19:38:22 +0000 (19:38 +0000)]
Let's try limiting the language object cache... see if that fixes our problem with centralnotice all-languages preview running out of ram

15 years ago* Follow-up to r43656 -- rename the use of a function when you rename it!
Brion Vibber [Tue, 25 Nov 2008 18:26:21 +0000 (18:26 +0000)]
* Follow-up to r43656 -- rename the use of a function when you rename it!
* Follow-up to r43655 -- $clientWidth/$clientHeight were used in error generation, no longer exist in the breakout function

15 years agoLocalisation updates for core messages from Betawiki (2008-11-25 10:55 CET)
Siebrand Mazeland [Tue, 25 Nov 2008 10:28:25 +0000 (10:28 +0000)]
Localisation updates for core messages from Betawiki (2008-11-25 10:55 CET)

15 years agolist right bug number
Brion Vibber [Tue, 25 Nov 2008 02:44:05 +0000 (02:44 +0000)]
list right bug number

15 years ago* (bug 5477) Searches for words less than 4 characters now work without
Brion Vibber [Tue, 25 Nov 2008 02:39:06 +0000 (02:39 +0000)]
* (bug 5477) Searches for words less than 4 characters now work without
  requiring customization of MySQL server settings

Short words are padded so they now get indexed. Yay!

Adapted part of Werdna's patch, with some additional cleanup:
* Using 'U00' to pad instead of 'SMALL' to reduce false positives (eg search for "small*" could match "Smallville" and "SMALLc")
* Checking server's ft_min_word_len variable to see if we need to do anything. This preserves index compatibility with existing installations which have customized their index length.
* Some further cleanup on redundant code -- just toss everything through lc() and be done with it :D
* Cleaned out some more evals in zh and yue classes :P
* Fixed yue class to call the parent adjustor properly

15 years agoDrop 'locale' directory, not actually used by MediaWiki and it confuses people.
Brion Vibber [Mon, 24 Nov 2008 21:32:46 +0000 (21:32 +0000)]
Drop 'locale' directory, not actually used by MediaWiki and it confuses people.

15 years ago* Add guard exception in OutputPage::parse() for failure case where $wgTitle is null...
Brion Vibber [Mon, 24 Nov 2008 01:58:15 +0000 (01:58 +0000)]
* Add guard exception in OutputPage::parse() for failure case where $wgTitle is null; that causes a fatal error which doesn't show a backtrace if we don't catch it here.
* Temporarily set $wgTitle while doing article creation/edit updates during XML import. A null $wgTitle as in importDump.php caused a fatal error when special pages were transcluded if they did any parsing via OutputPage::parse()

15 years ago* Remove project+main search to reduce clutter
Aaron Schulz [Sun, 23 Nov 2008 16:18:06 +0000 (16:18 +0000)]
* Remove project+main search to reduce clutter
* Tweak search messages

15 years ago* I didn't even notice the extra reblock check; merged this into submit button with...
Aaron Schulz [Sun, 23 Nov 2008 09:52:29 +0000 (09:52 +0000)]
* I didn't even notice the extra reblock check; merged this into submit button with hidden input.
* Break long line
* (bug 16436) Don't log if nothing changed

15 years agoAdded missing devs
Alexandre Emsenhuber [Sat, 22 Nov 2008 22:00:28 +0000 (22:00 +0000)]
Added missing devs

15 years agoAPI: (bug 16421) Actually do user name normalization in list=logevents. Also fix...
Roan Kattouw [Sat, 22 Nov 2008 15:46:36 +0000 (15:46 +0000)]
API: (bug 16421) Actually do user name normalization in list=logevents. Also fix up User::idFromName so it doesn't think "Talk:Catrope" isn't the same user as "Catrope"

15 years agofix double escaping
Alexandre Emsenhuber [Sat, 22 Nov 2008 15:23:21 +0000 (15:23 +0000)]
fix double escaping

15 years agoAPI wants namespaces to be separated with a pipe, not a comma
Alexandre Emsenhuber [Sat, 22 Nov 2008 11:35:01 +0000 (11:35 +0000)]
API wants namespaces to be separated with a pipe, not a comma

15 years agoLocalisation updates for core messages from Betawiki (2008-11-22 11:16 CET)
Siebrand Mazeland [Sat, 22 Nov 2008 10:23:24 +0000 (10:23 +0000)]
Localisation updates for core messages from Betawiki (2008-11-22 11:16 CET)

15 years agoLocalization update.
Rotem Liss [Sat, 22 Nov 2008 09:31:37 +0000 (09:31 +0000)]
Localization update.

15 years agoSet numeric_version more globally so things like search don't break.
Greg Sabino Mullane [Sat, 22 Nov 2008 06:49:16 +0000 (06:49 +0000)]
Set numeric_version more globally so things like search don't break.

15 years agoAdd CASCADE back in: better to break older Postgres versions than new ones.
Greg Sabino Mullane [Sat, 22 Nov 2008 06:44:45 +0000 (06:44 +0000)]
Add CASCADE back in: better to break older Postgres versions than new ones.
Per bug 16256

15 years agoSet numeric_version
Greg Sabino Mullane [Sat, 22 Nov 2008 06:40:46 +0000 (06:40 +0000)]
Set numeric_version

15 years agoNeed to bail without error if no user so installer works.
Greg Sabino Mullane [Sat, 22 Nov 2008 06:39:55 +0000 (06:39 +0000)]
Need to bail without error if no user so installer works.

15 years agoMove password resetting out of Special:Preferences, adapt Special:ResetPass to do...
Alex Z [Sat, 22 Nov 2008 05:03:14 +0000 (05:03 +0000)]
Move password resetting out of Special:Preferences, adapt Special:ResetPass to do the job, add Special:ChangePassword as an alias.

15 years ago* Dropped old Paser_OldPP class. Only new parser with preprocessor is used.
Brion Vibber [Fri, 21 Nov 2008 22:47:51 +0000 (22:47 +0000)]
* Dropped old Paser_OldPP class. Only new parser with preprocessor is used.
Death to the old parser! Long live the preprocessor!

15 years agoLocalization update and fixes.
Rotem Liss [Fri, 21 Nov 2008 19:00:48 +0000 (19:00 +0000)]
Localization update and fixes.

15 years agoAlso update default for block page to Special:Block, and add alias BlockUser. That...
Siebrand Mazeland [Fri, 21 Nov 2008 18:20:28 +0000 (18:20 +0000)]
Also update default for block page to Special:Block, and add alias BlockUser. That MZMcBride is a persistent little bugger :P

15 years agoMake special pages names for Special:MostLinked* consisted. Pointed out by MZMcBride
Siebrand Mazeland [Fri, 21 Nov 2008 18:13:46 +0000 (18:13 +0000)]
Make special pages names for Special:MostLinked* consisted. Pointed out by MZMcBride

15 years agoRevert r43788 and r43788 (adding findBySha1 functionality). Something is breaking...
Chad Horohoe [Fri, 21 Nov 2008 17:45:57 +0000 (17:45 +0000)]
Revert r43788 and r43788 (adding findBySha1 functionality). Something is breaking here and I don't know what...

15 years agoAPI: (bug 16408) Added DOM tree generation (rvgeneratexml) to prop=revisions. Looks...
Roan Kattouw [Fri, 21 Nov 2008 13:55:27 +0000 (13:55 +0000)]
API: (bug 16408) Added DOM tree generation (rvgeneratexml) to prop=revisions. Looks kind of ugly in XML, but bots don't care about that, and people should use less crappy-looking formats anyway.

15 years agoAdd comment per wikitech-l thread
Aryeh Gregor [Fri, 21 Nov 2008 13:20:27 +0000 (13:20 +0000)]
Add comment per wikitech-l thread

15 years agoTurn wfMkdirParents() into just a thin wrapper around mkdir( $dir, $mode, true )...
Ilmari Karonen [Fri, 21 Nov 2008 12:52:36 +0000 (12:52 +0000)]
Turn wfMkdirParents() into just a thin wrapper around mkdir( $dir, $mode, true ); this won't work in PHP4, but we don't support that, do we?

NOTE: the old code used to ignore the umask by explicitly forcing the permissions with chmod().  If this is desired behavior, it can be achieved by temporarily setting the umask to 0, as in:

$oldmask = umask( 0 );
$rv = mkdir( $dir, $mode, true );
umask( $oldmask );
return $rv;

However, I can't see why we'd want to do this.  In the worst case, users with excessively tight umasks can find themselves with unusable directories, but the proper solution to that is to fix the umask rather than to
ignore it.  In the best case, we've just plugged a security hole the user didn't realize they had (because they assumed their umask would Just Work).

15 years agoReplace mkdir() in favor of wfMkdirParents():
Chad Horohoe [Fri, 21 Nov 2008 11:34:09 +0000 (11:34 +0000)]
Replace mkdir() in favor of wfMkdirParents():
* It handles directory modes for us (rather than hardcode 0777)
* It handles recursion for us

15 years agoRevert r43804 'This should probably be in Response, not Request, as we're setting...
Aaron Schulz [Fri, 21 Nov 2008 09:55:13 +0000 (09:55 +0000)]
Revert r43804 'This should probably be in Response, not Request, as we're setting data, not getting it. Nothing's using it yet (fairly new), so nothing to update.'

Session id is used by client request to specify its login data from cookie, so the session data, by extensions, is like a sort of request parameter. Also, WebResponse.php seems to be used for data actually sent to the client, like requested cookies.

15 years agoRevert r43785 (switching hardcoded Image: to loading the canonical name). This causes...
Chad Horohoe [Fri, 21 Nov 2008 09:24:57 +0000 (09:24 +0000)]
Revert r43785 (switching hardcoded Image: to loading the canonical name). This causes an interesting regression...trunk cannot use this with an API below r43639 (when Image was renamed to File), as File:Someimage.ext doesn't make sense to these wikis. Keeping it hardcoded might be best, if Image is in fact remaining an alias to File.

15 years agoThis should probably be in Response, not Request, as we're setting data, not getting...
Chad Horohoe [Fri, 21 Nov 2008 09:01:26 +0000 (09:01 +0000)]
This should probably be in Response, not Request, as we're setting data, not getting it. Nothing's using it yet (fairly new), so nothing to update.

15 years ago(bug 8702) Refactor stats updating in nukePage. Now updates edit count and good artic...
Chad Horohoe [Fri, 21 Nov 2008 06:46:31 +0000 (06:46 +0000)]
(bug 8702) Refactor stats updating in nukePage. Now updates edit count and good article count, not just total page count.

15 years agoalso fix image names with magic tildes in them, got a few on enwiki
Ilmari Karonen [Fri, 21 Nov 2008 06:08:31 +0000 (06:08 +0000)]
also fix image names with magic tildes in them, got a few on enwiki

15 years agoClean up image titles with HTML entities (made invalid in r28968). Also misc. improv...
Ilmari Karonen [Fri, 21 Nov 2008 04:54:47 +0000 (04:54 +0000)]
Clean up image titles with HTML entities (made invalid in r28968).  Also misc. improvements: fail gracefully if buildSafeTitle() fails, move description page and old image revisions too.

15 years agoRemove duplicate group rights
Aaron Schulz [Fri, 21 Nov 2008 00:45:43 +0000 (00:45 +0000)]
Remove duplicate group rights

15 years agoLocalisation updates for core messages from Betawiki (2008-11-21 01:16 CET)
Siebrand Mazeland [Fri, 21 Nov 2008 00:36:12 +0000 (00:36 +0000)]
Localisation updates for core messages from Betawiki (2008-11-21 01:16 CET)

15 years ago(bug 16388) 'HTMLFileCache's $mFileCache is initialized too late'
Aaron Schulz [Fri, 21 Nov 2008 00:31:56 +0000 (00:31 +0000)]
(bug 16388) 'HTMLFileCache's $mFileCache is initialized too late'

15 years agoTypo (and incidentally, it works 100% now :)
Chad Horohoe [Fri, 21 Nov 2008 00:22:44 +0000 (00:22 +0000)]
Typo (and incidentally, it works 100% now :)

15 years agoAdd experimental findBySha1 functionality for ForeignAPIRepo.
Chad Horohoe [Fri, 21 Nov 2008 00:18:47 +0000 (00:18 +0000)]
Add experimental findBySha1 functionality for ForeignAPIRepo.

15 years agoRemove fixed characters (spaces and comma) from listToText().
Siebrand Mazeland [Fri, 21 Nov 2008 00:05:24 +0000 (00:05 +0000)]
Remove fixed characters (spaces and comma) from listToText().
* Updated message 'and' for all languages to keep behaviour the same, no change for 'ksh' (wanted behaviour), changed 'en' (trailing comma).
* Added message 'word-separator' as optional message. Just a space for all languages at the moment.

15 years agoundo 43772; there seems to be various special behavior hacked onto <div>, some of...
Steve Sanbeg [Thu, 20 Nov 2008 23:55:38 +0000 (23:55 +0000)]
undo 43772; there seems to be various special behavior hacked onto <div>, some of which may be intentional

15 years agoGet the real canonical name for NS_IMAGE, don't assume it will be Image: forever.
Chad Horohoe [Thu, 20 Nov 2008 23:43:32 +0000 (23:43 +0000)]
Get the real canonical name for NS_IMAGE, don't assume it will be Image: forever.

15 years agoAdded a new configuration option ($wgUsePrivateIPs) to force MediaWiki to use forward...
Charles Melbye [Thu, 20 Nov 2008 23:30:08 +0000 (23:30 +0000)]
Added a new configuration option ($wgUsePrivateIPs) to force MediaWiki to use forwarded Private IPs from a Proxy server

15 years agoLocalisation updates: Adding/updating Persian translations
Huji [Thu, 20 Nov 2008 21:10:27 +0000 (21:10 +0000)]
Localisation updates: Adding/updating Persian translations

15 years agothis should prevent the parser from inserting <p> tags around the second line of...
Steve Sanbeg [Thu, 20 Nov 2008 20:50:12 +0000 (20:50 +0000)]
this should prevent the parser from inserting <p> tags around the second line of divs

15 years agoLocalization update for he.
Rotem Liss [Thu, 20 Nov 2008 15:17:14 +0000 (15:17 +0000)]
Localization update for he.

15 years agoFix up r43673: reindex the rights array after removing duplicates
Roan Kattouw [Thu, 20 Nov 2008 15:15:00 +0000 (15:15 +0000)]
Fix up r43673: reindex the rights array after removing duplicates

15 years agoAPI: (bug 16398) meta=userinfo&uiprop=rights lists a right twice if it's granted...
Roan Kattouw [Thu, 20 Nov 2008 14:46:10 +0000 (14:46 +0000)]
API: (bug 16398) meta=userinfo&uiprop=rights lists a right twice if it's granted to two groups the user is in

15 years agoLocalisation updates for core messages from Betawiki (2008-11-20 12:57 CET)
Siebrand Mazeland [Thu, 20 Nov 2008 12:10:08 +0000 (12:10 +0000)]
Localisation updates for core messages from Betawiki (2008-11-20 12:57 CET)

15 years agoRemove accidentally added BOM
Siebrand Mazeland [Thu, 20 Nov 2008 11:23:05 +0000 (11:23 +0000)]
Remove accidentally added BOM

15 years agoFix incorrect setting for namespace alias for NS_IMAGE_TALK from r43687
Siebrand Mazeland [Thu, 20 Nov 2008 11:09:36 +0000 (11:09 +0000)]
Fix incorrect setting for namespace alias for NS_IMAGE_TALK from r43687

15 years agoUpdate 'undelete-show-file-confirm' to allow time and date to be used separately.
Siebrand Mazeland [Thu, 20 Nov 2008 11:02:42 +0000 (11:02 +0000)]
Update 'undelete-show-file-confirm' to allow time and date to be used separately.

15 years agoLocalisation updates for core from Betawiki
Siebrand Mazeland [Wed, 19 Nov 2008 21:12:41 +0000 (21:12 +0000)]
Localisation updates for core from Betawiki

15 years agoLocalisation updates for core messages from Betawiki (2008-11-19 21:50 CET)
Siebrand Mazeland [Wed, 19 Nov 2008 21:01:39 +0000 (21:01 +0000)]
Localisation updates for core messages from Betawiki (2008-11-19 21:50 CET)

15 years agoLocalization update.
Rotem Liss [Wed, 19 Nov 2008 18:15:05 +0000 (18:15 +0000)]
Localization update.

15 years ago'pages' -> 'content pages' where applicable in search page
Siebrand Mazeland [Wed, 19 Nov 2008 17:01:06 +0000 (17:01 +0000)]
'pages' -> 'content pages' where applicable in search page

15 years agoRevert "Starter for a re-jig of hit counting (in a per-day table)."
Andrew Garrett [Wed, 19 Nov 2008 12:05:33 +0000 (12:05 +0000)]
Revert "Starter for a re-jig of hit counting (in a per-day table)."

That was supposed to be in a branch.

15 years agoStarter for a re-jig of hit counting (in a per-day table).
Andrew Garrett [Wed, 19 Nov 2008 12:01:43 +0000 (12:01 +0000)]
Starter for a re-jig of hit counting (in a per-day table).

Needs configurability, purty graphs, and some cleanup in the back-end.

15 years agoUpdate magic words for Ukranian
Siebrand Mazeland [Wed, 19 Nov 2008 11:55:50 +0000 (11:55 +0000)]
Update magic words for Ukranian

15 years agoRevert magic word localisation updates from r43441 for now. Somehow Russian aliases...
Siebrand Mazeland [Wed, 19 Nov 2008 11:47:16 +0000 (11:47 +0000)]
Revert magic word localisation updates from r43441 for now. Somehow Russian aliases ended up in there too. Working on fixing this with Ahonc.

15 years agoMore fixes and consistency tweaks
Aaron Schulz [Wed, 19 Nov 2008 09:08:49 +0000 (09:08 +0000)]
More fixes and consistency tweaks

15 years agoLocalisation updates for core messages from Betawiki (2008-11-19 09:50 CET)
Siebrand Mazeland [Wed, 19 Nov 2008 09:02:48 +0000 (09:02 +0000)]
Localisation updates for core messages from Betawiki (2008-11-19 09:50 CET)

15 years ago* Checkbox fix
Aaron Schulz [Wed, 19 Nov 2008 08:35:04 +0000 (08:35 +0000)]
* Checkbox fix
* Remove unused var
* Add $this->sk field
* Tweak code style
* Adding missing wfProfileOut( __METHOD__ );

15 years ago* Make for loop faster
Aaron Schulz [Wed, 19 Nov 2008 01:45:32 +0000 (01:45 +0000)]
* Make for loop faster
* Don't show incomplete prefix links
* Show the 'project' namespaces
* Tweak table margins

15 years ago* Remove <hr/>
Aaron Schulz [Wed, 19 Nov 2008 00:19:25 +0000 (00:19 +0000)]
* Remove <hr/>
* Use count variables since they are already there

15 years agoAdd FeedItem::stripComment() and remove duplication
Aaron Schulz [Wed, 19 Nov 2008 00:11:14 +0000 (00:11 +0000)]
Add FeedItem::stripComment() and remove duplication

15 years ago* Remove incomplete isFileCacheable(), the parent one is fine
Aaron Schulz [Wed, 19 Nov 2008 00:02:23 +0000 (00:02 +0000)]
* Remove incomplete isFileCacheable(), the parent one is fine
* Break long line

15 years ago* Move user-agent construction to its own method, so we're not writing the same strin...
Chad Horohoe [Tue, 18 Nov 2008 22:48:03 +0000 (22:48 +0000)]
* Move user-agent construction to its own method, so we're not writing the same string in two places (and provides a reliable way for getting MW's standard user-agent)
* Mark visibility, they're all public anyway

15 years agoFix syntax error in MessagesTe.php in r43687
Siebrand Mazeland [Tue, 18 Nov 2008 22:22:31 +0000 (22:22 +0000)]
Fix syntax error in MessagesTe.php in r43687

15 years agoLocalisation updates for core from Betawiki
Siebrand Mazeland [Tue, 18 Nov 2008 22:21:35 +0000 (22:21 +0000)]
Localisation updates for core from Betawiki
* Namespace updates

15 years agoLocalisation updates for core from Betawiki
Siebrand Mazeland [Tue, 18 Nov 2008 22:18:31 +0000 (22:18 +0000)]
Localisation updates for core from Betawiki
* Namespace updates

15 years agoBunch of globals laying around and nobody using them.
Chad Horohoe [Tue, 18 Nov 2008 21:37:11 +0000 (21:37 +0000)]
Bunch of globals laying around and nobody using them.

15 years agoLocalization update.
Rotem Liss [Tue, 18 Nov 2008 20:27:47 +0000 (20:27 +0000)]
Localization update.

15 years ago(bug 2077) Info on how to use external editor is vague. Minor tweak to the UI should...
Chad Horohoe [Tue, 18 Nov 2008 19:57:03 +0000 (19:57 +0000)]
(bug 2077) Info on how to use external editor is vague. Minor tweak to the UI should make it a little more clear.

15 years agoLocalization:
Rotem Liss [Tue, 18 Nov 2008 18:55:38 +0000 (18:55 +0000)]
Localization:
* Update for he.
* Rebuilding MessagesEn.php.
* Marking 'coll-template_blacklist_title' as an ignored message.

15 years agoAPI: (bug 12760) meta=userinfo&uiprop=ratelimits doesn't list group-specific rate...
Roan Kattouw [Tue, 18 Nov 2008 16:05:24 +0000 (16:05 +0000)]
API: (bug 12760) meta=userinfo&uiprop=ratelimits doesn't list group-specific rate limits

15 years agoAPI: Make reblocking (introduced in r42843) possible through the API
Roan Kattouw [Tue, 18 Nov 2008 15:21:04 +0000 (15:21 +0000)]
API: Make reblocking (introduced in r42843) possible through the API
* Add reblock parameter to action=block
* Tweak the description for allowusertalk for consistency

15 years agoAPI: (bug 16367) Add allowusertalk attribute to list=blocks output
Roan Kattouw [Tue, 18 Nov 2008 15:11:11 +0000 (15:11 +0000)]
API: (bug 16367) Add allowusertalk attribute to list=blocks output

15 years ago* (bug 11728) Unify layout of enhanced watchlist/recent changes:
Raimond Spekking [Tue, 18 Nov 2008 12:54:53 +0000 (12:54 +0000)]
* (bug 11728) Unify layout of enhanced watchlist/recent changes:
Changed from:
  Time  Page (4 changes) . . (+bytes) . . (hist) [list of editors]
To:
  Time  Page (4 changes; hist) . . (+bytes) . . [list of editors]

Use consistent message for the history link
Patch by Mormegil

15 years agoCleanup to r43657, don't really need strlen() here.
Chad Horohoe [Tue, 18 Nov 2008 12:11:03 +0000 (12:11 +0000)]
Cleanup to r43657, don't really need strlen() here.

15 years agoAdd hints for maximum values of some user preferences.
Raimond Spekking [Tue, 18 Nov 2008 09:36:19 +0000 (09:36 +0000)]
Add hints for maximum values of some user preferences.

15 years agoUpdate per r43658 and r43661
Raimond Spekking [Tue, 18 Nov 2008 08:11:58 +0000 (08:11 +0000)]
Update per r43658 and r43661

15 years agoMark the functions I just accessed from outside the class as explicitly "public"
Tim Starling [Tue, 18 Nov 2008 05:58:24 +0000 (05:58 +0000)]
Mark the functions I just accessed from outside the class as explicitly "public"

15 years agoProtect users from attacks against their browsers via malicious script-containing...
Tim Starling [Tue, 18 Nov 2008 05:57:08 +0000 (05:57 +0000)]
Protect users from attacks against their browsers via malicious script-containing uploads, by:
1) Requiring a session token before streaming files out via Special:Undelete
2) Restricting img_auth.php to private wikis only (its intended use case)

15 years agoImproved the security of wfStreamFile():
Tim Starling [Tue, 18 Nov 2008 05:07:54 +0000 (05:07 +0000)]
Improved the security of wfStreamFile():
* Use the file extension to determine Content-Type, don't look for magic numbers. This makes the attack surface similar to ordinary web server downloads, and avoids problems when MIME type is not checked on upload.
* Use the same restrictions for Content-Type when streaming as for uploading. This closes any vulnerabilities caused by a change to a more secure configuration, post-upload.
* Don't stream out the file after headers are unexpectedly sent (e.g. due to display_errors). The Content-Type will typically be fixed to text/html in this case and so we need to be careful what we send.

15 years agoRemove some debugging code...
Andrew Garrett [Tue, 18 Nov 2008 02:53:29 +0000 (02:53 +0000)]
Remove some debugging code...

15 years agoWarn when re-uploading a file with the same SHA1/extension pair as a file which has...
Andrew Garrett [Tue, 18 Nov 2008 02:20:55 +0000 (02:20 +0000)]
Warn when re-uploading a file with the same SHA1/extension pair as a file which has been deleted.

15 years agoBit of path cleanup per comments on code review (r43316). Construct proper hash paths...
Chad Horohoe [Tue, 18 Nov 2008 02:03:44 +0000 (02:03 +0000)]
Bit of path cleanup per comments on code review (r43316). Construct proper hash paths and use the image name as a child directory of that.

15 years agoRename function to 'rasterize'
Aaron Schulz [Tue, 18 Nov 2008 01:24:56 +0000 (01:24 +0000)]
Rename function to 'rasterize'

15 years agoRefactor SvgHandler to have transformSvgToPng() function, which can be used for non...
Aaron Schulz [Tue, 18 Nov 2008 01:18:12 +0000 (01:18 +0000)]
Refactor SvgHandler to have transformSvgToPng() function, which can be used for non-thumbnail purposes

15 years agoReverting r43642 "Added $wgLoginAutocomplete to let wiki owner disable password autoc...
Brion Vibber [Mon, 17 Nov 2008 22:09:29 +0000 (22:09 +0000)]
Reverting r43642 "Added $wgLoginAutocomplete to let wiki owner disable password autocompletion in Special:Userlogin by setting it to false. Defaults to true."
There's not a compelling reason to make it hard for users to manage their own password affairs here.

15 years agoFix up r43617: put RELEASE-NOTES entry in the API section
Roan Kattouw [Mon, 17 Nov 2008 21:55:36 +0000 (21:55 +0000)]
Fix up r43617: put RELEASE-NOTES entry in the API section

15 years agoAdded $wgLoginAutocomplete to let wiki owner disable password autocompletion in Speci...
Marco Schuster [Mon, 17 Nov 2008 21:49:29 +0000 (21:49 +0000)]
Added $wgLoginAutocomplete to let wiki owner disable password autocompletion in Special:Userlogin by setting it to false. Defaults to true.

15 years agoDisabled auto-completion for password in Special:Preferences. Should resolve the...
Marco Schuster [Mon, 17 Nov 2008 21:28:42 +0000 (21:28 +0000)]
Disabled auto-completion for password in Special:Preferences. Should resolve the behaviour described at lists.wikimedia.org/pipermail/wikitech-l/2008-November/040067.html

15 years ago(bug 44) Rename Image namespace to File. Based on a patch by brion.
Siebrand Mazeland [Mon, 17 Nov 2008 21:27:00 +0000 (21:27 +0000)]
(bug 44) Rename Image namespace to File. Based on a patch by brion.
* Parser tests updated. 14 failing parser tests before the change, added one, and the same 14 failing parser tests are remaining
* added namespace aliases for Image and Image_talk for backward compatibility purposes

15 years agolittle bit of cleanup in the generator for the "remember login" toggle
Marco Schuster [Mon, 17 Nov 2008 21:18:37 +0000 (21:18 +0000)]
little bit of cleanup in the generator for the "remember login" toggle