2005-05-01 Michael Stucki * Implemented a wrapper for executing ImageMagick * New feature #0001034: GraphicsMagick finally works with TYPO3! This can be enabled by setting TYPO3_CONF_VARS[GFX][im_version_5] to 'gm'. * The Install Tool is now more tolerant when comparing image file sizes. Warnings are only displayed if the created image is more than 10K larger than its reference. In this case you should consider to change your IM/GD version... 2005-04-30 Michael Stucki * Changed the layout of the security warning box which is displayed in alt_intro.php * Added a hook for extending the device recognition capabilities in class.t3lib_matchcondition.php (requested by Michael Perkhofer for his "wurfl" extension) * Fixed bug #0000762: If the word "include_once" is followed by a whitespace, the extension manager issued an error * New feature #0000634: Add the CURIFSUB state to menu objects (thanks to Wolfgang Klinger) * Changed the spamProtectEmailAddresses range again. Allowed values are between -5 and 1 (higher values could break the output, thus the range needed to be changed) 2005-04-29 Kasper Skårhøj,,, * Added default limit (10kb) on frontend user session data (set by TYPO3_CONF_VARS[FE][maxSessionDataSize]) and added a check that session data is saved only if a cookie is actually set. This closes a quite obvious hole for DoS attacks where requesting a TYPO3 URL something like "...index.php?id=1&recs[foo][bar]=[up to 2000 chars]" would fill 2kb of data into fe_session_data no questions asked. It is not a security problem but thousand such request (with eg. "ab") would mean 2 megabyte of junk in the database... Spamming that table is now considerably more complicated. However this setting might break applications storing large amounts of user session data, but for the average shopping plugin it should be unaffected. 2005-04-29 Kasper Skårhøj,,, * Applied fixes to t3lib_extMgm in order to prevent possible fatal errors where only local extensions would be loaded, resulting in a complete failure of the system (aka "...the cms extension is not loaded" bug). It is unknown if it fixes such problems since the bug is not repeatable. 2005-04-28 Kasper Skårhøj,,, * Added API in tslib_pibase for checking availability of the cHash value when plugins are running as USER cObjects. This is a VERY IMPORTANT thing for plugin writers to acquaint themselves with. I suggest reading the article "The Mysteries of &cHash" which was written about this tricky issue. 2005-04-28 Rupert Germann * Fixed bug #0000416: now the wrong default values in autoincrement lines will be removed from .sql files before they are written to the database. This fixes the problem that tables were not created under MySQL 4.1.x * Fixed bug #0000955: Removed a double strcmp in class.t3lib_install * Removed the mysql-version ckeck from class.tx_install.php. With current MySQL versions this is not needed anymore. * New features for the pi_base pagebrowser: first and last links, "floating" of the displayed pages, all wraps are now configurable, all hardcoded HTML can be substituted with own wraps, and many more. The behaviour of the pagebrowser doesn't change if the additional "internal"-array-elements don't exist. This array has to be set from an extension which passes its TS-config to the pagebrowser function. See comments in function for details. Thank goes to Michael H.E. Roth for developing most of the changes. * Fixed bug #0000911: setting ['BE']['lockIP'] to a value < 4 does not log out the BEuser anymore. * Fixed bug #0000570: now it is prevented that umlauts or other special characters are inserted as "accessKey". 2005-04-28 Christian Jul Jensen * Added parameter to function in t3lib_install that enables you to write to other localconf's than the canonical. 2005-04-28 Kasper Skårhøj,,, * Added search in Extension Manager for extensions locally. 2005-04-27 Bernhard Kraft * Added post-process Hook in class.t3lib_befunc.php for method "getFlexFormDS" 2005-04-27 Rupert Germann * Fixed bug #0000536: removed a hardcoded tt_news reference which inserted the admin name as news author. 2005-04-27 Michael Scharkow * Fixed bug #0000727: Changed some labels for editing Page Header in page and list view 2005-04-27 Kasper Skårhøj,,, * Updated install tool test images again after Stuckis suggestions. Now validates perfectly with this TYPO3 using his debian packages "graphicsmagick" and "graphicsmagick-im-compat" 2005-04-27 Kasper Skårhøj,,, * More implementation of locallang-xml support in frontend * Implemented substitution of glossary terms in view_help.php. Glossary is available when the extension "t3glossary" is installed (yet to be released) 2005-04-27 Kasper Skårhøj,,, * When using frontend editing with pop-up window the save-and-view button will not change focus of the windows but keep the editing window on top while reloading the page for preview behind. (Works in any case editing happens in a pop-up window) 2005-04-21 => 04-26 Kasper Skårhøj,,, * Added a runaway brake to t3lib_div::expandList(): Ranges are limited to 1000 values per range. * Added authentication services (from sysext/sv/) to the core. * Added a feature to menu objects that you can have them show pages in the menus which are normally access restricted. The pages shown will like to a fixed page ID as long as access is not allowed - that page could then show a login box for instance. If access to the elements is ok they will of course link to themselves. * Added the same feature described for menu objects above to normal typolinks, configured with "config.typolinkLinkAccessRestrictedPages". See TSref for details. The feature will allow links pointing to access restricted page to be created but redirected to a central page which could for instnace contain a login form which is what will be shown if the page was not accessible. * !!! Technical/API: Changed sys_page->where_hid_del so the fe_group check is not included in WHERE clause but found separately in sys_page->where_groupAccess. It is probably quite rare if this affects any extension but it could do so potentially. PHP code would have to be adapted then. * Implemented configuration to inverse localization setting for pages, $GLOBALS['TYPO3_CONF_VARS']['FE']['hidePagesIfNotTranslatedByDefault']: If TRUE, pages that has no translation will be hidden by default. Basically this will inverse the effect of the page localization setting "Hide page if no translation for current language exists" to "Show page even if no translation exists" * Added new function; t3lib_div::explodeUrl2Array(): Explodes a string with GETvars (eg. "&id=1&type=2&ext[mykey]=3") into an array * Added "config.language_alt" which enables localization from locallang-files of plugins to fallback to an alternative language if the main one (specified with config.language) was not found in hte locallang file. Thus a brazil portuguese ("br") website could specify portuguese (pt) as fallback language! * Added hook for page-not-found handling enabling any handling to be done for really flexible use. * Extended class t3lib_arraybrowser so it can show a PHP array without links. Used for "realurl" extension displaying its configuration in backend module. * Introduced readLLfile() and readLLXMLfile() in t3lib_div in the section with TYPO3 specific functions. They were moved from lang/lang.php class (language class) where they served to load locallang.(php|xml) files. Since this functionality was needed in the frontend as well the functions had to exist in a common script, that being t3lib_div. * fixed "bug" where the meta data from a flexform data structure was returned in t3lib_div::-function * Completely reverted the removal of the "unsigned" attributes in *.sql files - DBAL has to handle this depending on DB. * Added record-uid to the listing of reference in TCEform group fields. * Added features in tslib_fe which records the reasons why a certain page was not accessible if it related to hidden/starttime/endtime/groups. This can be used in page-not-found handlers to produce a proper response to access attempts to eg. protected sections. * Support for locallang-xml in frontend as well. * Added unique name for TYPO3 re-login pop-up box * Fixed a few smaller bugs/inconveniences 2005-04-25 Andreas Otto * Fixed bug #0000649. Used the patch provided in the bug description. 2005-04-24 Michael Stucki * Fixed a problem with a recent change in the filelist module 2005-04-19 Martin Kutschker * Changed t3lib_page::deleteClause to make it JOIN-safe * Added innerWrap and outerWrap properties to EDITPANEL and innerWrap, outerWrap and color properties to EDITPANEL.previewBorder * Added t3lib_div::expandList (turns eg "1,3-5,7" into "1,3,4,5,7") 2005-04-18 Karsten Dambekalns * typo3/file_upload.php: Small fix to fix bug #986, patch by Sebastian Kurfuerst. * t3lib/class.t3lib_befunc.php, sysext/viewpage/view/index.php: Fix to bug #983, preview when BE uses SSL. * t3lib/class.t3lib_befunc.php: Show warning when encryption key is empty (bug #766). * sysext/install/mod/class.tx_install.php: Make encryption key setting accessible in "Basic Configuration". * sysext/install/mod/class.tx_install.php: Missing PHP support for MySQL is only seen as error if DBAL extension is not loaded. 2005-04-18 Rupert Germann * Added a condition that removes wrong default values from autoinc-lines when importing static data. (bug #416 related). 2005-04-18 Michael Stucki * Release of TYPO3 3.8.0beta2 2005-04-17 Rupert Germann * Fixed bugs #0000920 and #0000935: Changed the parsing of recordtitles in lists. Now 'label_alt' and 'label_alt_force' are honored too. 2005-04-17 Michael Stucki * Changed the size of ses_iplock fields to 39 (needed for storing IPv6 addresses) 2005-04-15 Michael Stucki * Made fe_user passwords case sensitive and render them as password fields * New feature #0000957: Added TypoScript option page.headTag 2005-04-14 Rupert Germann * Fixed bug #0000966: The BE-listview in "Localization Mode" does now show the labels and flags of translated records again. 2005-04-14 Michael Stucki * Added new stdWrap property "stdWrap" for calling stdWrap recursively * Added new hook in t3lib_tcemain::process_cmdmap (closes #0000823) * Removed typeNum = 0 in some places (a previous change already sets them to 0 by default) * !!! Use nimbus.ttf and vera.ttf as default truetype fonts for the GIFBUILDER. This is generally not a problem because they were always used (arial.ttf is a symlink to nimbus.ttf, verdana.ttf is pointing to vera.ttf). However it could change your page design if you just overwrote the symlinks with a different file and did not set the fontFile in the GIFBUILDER configuration. * File- and foldernames in the fileadmin could be cut to some lenght. Therefore a tool tip is added to show the full name. * Fixed bug #0000286: spamProtectEmailAddresses sometimes wrecked table content elements * New feature #0000490: Optionally remove duplicate parameters in typolinks * Fixed bug #0000675: Context menu did not work with Opera * Corrected a hook in index_ts.php 2005-04-13 Ingmar Schlecht * Corrected earlier bugfix by Karsten: Reverted require_once(PATH_t3lib.'config_default.php') to require() in index_ts.php * Cleaned up tslib_content by putting some lines of redundant code into new function getMailTo() * Minor change to spamProtectEmailAddresses ASCII * Added hook in t3lib_page for additional enableColumns 2005-04-13 Karsten Dambekalns * Small fix to fix bug #974. * Applied some more DBAL patches for indexed search and fixed bug #961. * Re-added images in install tool with binary flag (bug #972). * Changed some uses of require to require_once to fix bug #958. 2005-04-12 Kasper Skårhøj,,, * changed install tool comparison images 2005-04-10 Ingmar Schlecht * Added hook for TIMTAW extension in t3lib_userauth * Changed typo3/mod/tools/em/index.php to support new "Overwrite" checkbox feature of Kickstarter 2005-04-10 Jan-Erik Revsbech * The earlier attempts to fix the problem of Return-Path with Postfix below version 2.0 seems not to work on all systems. The t3lib_htmlmail class now only forces the return-path if forceReturnPath is enabled in the install tool. * Added an option to the install tool mail test form. Send the testmail via t3lib_htmlmail with the return-path set to null@. 2005-04-08 Michael Stucki * Fixed bug #0000941: The diff feature was disabled on Windows but works fine if diff.exe is present and TYPO3_CONF_VARS[BE][diff_path] is correctly set 2005-04-07 Andreas Otto * Added modfunc2 to sysext/indexed_search which offers statistics of entered search words. 2005-04-06 Kasper Skårhøj,,, * Removed all "unsigned" attributes from .sql files in the core and implemented a complete list of those fields for which it has been removed in the t3lib_install class. By default the install tool will NOT detect that these fields should be changed to signed integers since if the field is found in the list in the install class this difference will be ignored. The reason is that it will be 200+ ALTER TABLe changes and the significance is mostly cosmetic. However if somebody wants to actually do the conversion they can switch an internal variable in the t3lib_install class to TRUE and the install tool WILL convert... 2005-04-06 Kasper Skårhøj,,, * Extended a comment of a function in t3lib_extMgm 2005-04-06 Michael Stucki * Release of TYPO3 3.8.0beta1 2005-04-05 Ingmar Schlecht * Changed the way htmlspecialchars() is applied to tag attributes on xhtmlCleaning 2005-04-04 Michael Stucki * Unfortunately the resolve-path patch was overwritten, so here it is again 2005-04-04 Robert Lemke * Added a preliminary way for moving containers in a flexform section in TCEforms + TCEmain. Before you could only delete containers. * Added Sebastian Kurfürst's collapsable modules feature for the backend's module bar 2005-04-04 Kasper Skårhøj,,, * Added to-top/up/down/to_bottom bottoms for the select/group element. up/down will show up by default, to-top and to-bottom will appear automatically when the SIZE of the selector is >= 5. 2005-04-03 Michael Stucki * Fixed a stupid error in the display-empty-tags function 2005-04-01 Kasper Skårhøj,,, * Updated all years from 2004 to 2005 * Updated all function indexeds in top of scripts (no actual code changes done!) 2005-04-01 Kasper Skårhøj,,, * Added Bernhard Krafts security improvement for server validated challenge value. * Added "Esperanto" as language - now we are at 41 backend languages. * Made a change to how cache-control headers are sent. Thanks to Ole Tange, FI, Denmark 2005-04-01 Michael Stucki * Display empty tag contents in the backend (e.g. ) * Fixed bug #0000750: Resolve relative links in the backend (caused problems with some firewalls) * Install tool now shows which image is the reference when doing image tests (thanks to Dimitri Tarassenko) * Small changes in t3lib_div::quoted_printable() * !!! t3lib_htmlmail::quoted_printable() is now obsolete. Please call t3lib_div::quoted_printable() instead. * simulateStaticDocuments_addTitle is now set to 30 if the value is 1 (cause 1 doesn't make sense, does it?) * Display a warning message if this installation is obviously insecure!! These warnings are only displayed to admin users. * Added a link to re-login if the session has timed out 2005-03-29 Michael Stucki * Added a Russian flag (thanks to Michael Shigorin) 2005-03-29 Ingmar Schlecht * TYPO3 seems to prefer "mediumblob" instead of "MEDIUMBLOB", thus I changed that in typo3/sysext/cms/ext_tables.sql * Added hook in tslib_fe 2005-03-28 Michael Stucki * Corrected a typo in fe_adminLib.inc (Ingmar watch this!) 2005-03-28 Ingmar Schlecht * Fixed bug #0000341: Changed table definition of "fe_session_data" so field "content" is MEDIUMBLOB instead of BLOB * Fixed bug #0000890: fe_adminLib.inc procesSetFixed does not support userFunc_afterSave * Fixed bug #0000316: Backend typo3/template.php output spurious tag for doctype xhtml_frames * Added two hooks to t3lib_userauthgroup for Sebastian Kurfuerst's ACL implementation * New feature #0000341: New option "ascii" for spamProtectEmailAddresses (very cool, because it doesn't need JavaScript! Thanks to Karsten Dambekalns) 2005-03-25 Michael Stucki * Added two hooks for tx_timtaw, written by Sebastian Kurfuerst * FORM object is finally able to create a reset button (closes #0000743, thanks to Michael Scharkow) * FE editing: Up/Down buttons in panel did not work (closes #0000849, thanks to Peter Niederlag for pointing me on this) * typeNum 0 is now set automatically by default: If a page object has no typeNum and typeNum '0' is not defined, TYPO3 will automatically do that now * Renamed admin function links in the left down corner of the BE (closes #0000025) * EM: Display privacy message before connecting to the online repository 2005-03-16 Ingmar Schlecht * Fixed bug #0000335: in class.t3lib_extfilefunc.php: If $this->dont_use_exec_commands was set, it was impossible to delete any directories, which is now possible again. It's still impossible to delete direcories recursively though. * Fixed bug #0000280: pi_list_query() produced wrong query when $orderBy paramater was not given. 2005-03-10 Kasper Skårhøj,,, * Added feature that connects cache-control headers with whether user-logins are allowed in a branch or not. Makes mixing of cached and dynamic user-dependant content easier. 2005-03-08 Kasper Skårhøj,,, * New feature for page records: Frontend Login Mode. Makes it possible to disable (and enable later) frontend logins for branches of the page tree. Disabling will make it look like no user is authenticated. This feature is very useful if you wish a highly performant website using cache control headers while specifying sections where user logins are accepted (for dynamic content) * Implemented a bunch of hooks in tslib_fe * Minor bug fixes and re-arrangements * Support for "crawler" extension in indexed_search; Makes it possible to index pages in the page tree by starting a crawler from the backend of TYPO3 (The extension "crawler" is specifically supported) and thus preventing the process from happening during frontend users browsing. 2005-03-07 Karsten Dambekalns * Fixed the potential security issue with mailforms, allowing spam abuse (TYPO3-20050307-1). This affected tslib/class.tslib_content.php, tslib/class.tslib_fe.php and t3lib/config_default.php 2005-02-20 Michael Stucki * Fixed a typo in the User TSconfig reference in ext_tables_static+adt.sql * !!! Renamed t3lib_stdGraphic->imageCreateFromGif into imageCreateFromFile. The old function will remain for providing backwards compatibility. 2005-02-17 Kasper Skårhøj,,, * Added 3 hooks for each hardcoded function in css_styled_content so extensions can be written which provides alternative renderings without XCLASSING. 2005-02-15 Kasper Skårhøj,,, * The indexed-search lexer has been updated so it supports "printjoins" (characters like ' or - which are allowed inside of words) and there is also support for Chinese/Japanese/Korean (CJK) indexing/searching. 2005-02-14 Kasper Skårhøj,,, * Large number of updates to system extension indexed_search, in particular to the frontend search plugin which is now ready for implementation of templating engine by workgroup. still missing work on the lexer to support CJK content. 2005-02-11 Andreas Otto * In order to use enableTypeByConfig on more types than Input and Text the variable $specConf had to be set. This was done to all getSingleField_* methods which use $this->renderWizards. A list of the methods is provided in the commit message. 2005-02-06 Michael Stucki * Fixed an often repeated typo (closes #0000127) 2005-02-04 Michael Stucki * Corrected some typos * Fix permissions after ImageMagick has created a new file. Introduced new function t3lib_div::fixPermissions. Closes bug #0000677. * Fixed bug #0000422: "Fatal error at 3: Image Processing -> 5: GD library functions" * Added a new constant TYPO3_branch which includes only the major and the minor numbers of the version (not the patchlevel). This is used in the "generator" meta tag and will finally close bug number #0000318. * ContextMenu is no longer disabled by default on Macintosh systems (except Opera, might have to do with bug #0000675). Closes bugs #0000542 and #0000486. * XHTML 1.1 compliancy fixes (thanks to Ernesto Baschny) * List view now resolves values of MM tables (thanks to Rupert Germann). Closes #0000624. * Use t3lib_div::isAbsPath() to check if the logfile path is absolute (doesn't work on Windows otherwise) 2005-02-02 Ingmar Schlecht * Fixed bug #0000728: "Enabling DevLog in t3lib_modsettings via SC_OPTIONS does not work." Reason: t3lib_modsettings::init() used $TYPO3_CONF_VARS although the global var was not available there. Changed it to $GLOBALS['TYPO3_CONF_VARS']. 2005-02-01 Ingmar Schlecht * Committed patches by Peter Klein implementing the IESelectFix for xmenu_layers.php: A fix that makes the layer menus display correctly on IE when over a