no blocks larger than /16
[lhc/web/wiklou.git] / RELEASE-NOTES
1 = MediaWiki release notes =
2
3 == Version 1.1.0, 2003-12-08 ==
4
5 This is the new production release. Any following 1.1.x releases are expected
6 to contain only bug fixes; developments of new features will go towards a 1.2.0
7 release.
8
9 New features in 1.1:
10 * New wiki table syntax:
11 http://meta.wikipedia.org/wiki/MediaWiki_User%27s_Guide:_Using_tables
12 * User-editable interface messages:
13 http://meta.wikipedia.org/wiki/MediaWiki_namespace
14 * XML-wrapped page source export with optional history:
15 http://meta.wikipedia.org/wiki/XML_import_and_export
16 (There is not yet an import function!)
17 * "Magic words"
18
19 Fixes and tweaks:
20 * linkscc table caches link data for rendering; faster rebuildlinks.php
21 * Numerous bugs in Cologne Blue skin fixed
22 * Login gives warning about missing cookies
23 * Block log, protection log added; deletion log now includes undeletions
24 * Deletion & upload logs now escape comment text properly
25 * Problems with <nowiki> segments in section titles etc mitigated
26 * Contributions offset and minor edit bugs fixed
27 * Whatlinkshere now sorted alphabetically
28 * Various exciting new profiling options.
29 * Debug log is off by default.
30 * Various small bugs fixed.
31
32 Internal changes:
33 * wfQuery has had a second parameter inserted, DB_READ or DB_WRITE. This value
34 is not actually used so far.
35 * Partial code for categories and Smarty template-based skins is in the tree
36 but disabled.
37 * Parts of Article.php have been moved to EditPage.php and ImagePage.php.
38
39 New translations:
40 * fi - Finnish
41 * ia - Interlingua
42 * no - Norwegian
43 * sk - Slovak
44 * ta - Tamil
45
46 === Database changes ===
47
48 "linkscc" table added. If upgrading manually (rather than with update.php),
49 run maintenance/archives/patch-linkscc.sql to create the table.
50
51 Older releases were dated snapshots from the old 'stable' branch:
52
53 == mediawiki-20031118 ==
54
55 * Image deletion fixed.
56 * Deletion of image old revisions now restricted to sysops
57 (this is an irreversible action and not well logged)
58 * Fixed maintenance scripts broken by last release's security fix
59 * Many errors in rebuildlinks script fixed.
60
61 == mediawiki-20031117 ==
62
63 * SECURITY FIX: stricter checking of include path
64 * Fixed user contributions next/prev bug
65 * Login cookies now have the database name prefixed to allow wikis
66 to coexist in the same domain. This will invalidate any old saved
67 password cookies.
68 * Update cache timestamp when talk pages are created
69 * Saving the login form in Mozilla no longer blanks password in prefs.
70 * Check existence of source page before performing a move.
71 * Detect invalid titles in Special:Allpages
72 * Q-encode headers on outgoing inter-user e-mail
73 * Updates to some translations.
74 * Added table of contents border/bg to Cologne Blue, Nostalgia skins
75 * Protected pages no longer appear unprotected when visited via redirect
76 * Swapped old Wikipedia logo for the MediaWiki sunflower logo
77 * install.php, update.php print warning on old PHP versions,
78 added compatibility functions that might or might not help
79
80 No database changes since 20031107; upgrading should be clean.
81
82
83 == mediawiki-20031107 ==
84
85 * Fixed various bugs!
86 * Some speed improvements from tweaks to the table indexes
87 * Limited support for memcached (see below)
88 * New translations (see below)
89 * Interwiki link data now kept in database for flexibility
90 * Friendlier read-only source view if asked to edit a page when
91 the db is locked or the page is protected.
92 * Normal IP blocks auto-expire after 24 hours
93 * Optional support for blocking usernames
94 * Uploads disabled by default (see below)
95
96
97 === Security note ===
98
99 Uploads are now disabled by default. If you've set up a secure configuration
100 you can reenable uploads by putting:
101
102 $wgDisableUploads = false;
103
104 into LocalSettings.php.
105
106 Earlier versions of MediaWiki included a bug that potentially allows logged-
107 in users to delete arbitrary files in directories writable by the web server
108 user by manually feeding false form data; this is now fixed.
109
110 As a reminder, disable PHP script execution in the upload directory!
111 You may also wish to serve HTML pages as plaintext to prevent cookie-
112 stealing JavaScript attacks. Example Apache config fragment:
113
114 <Directory "/Library/MediaWiki/web/upload">
115 # Ignore .htaccess files
116 AllowOverride None
117
118 # Serve HTML as plaintext
119 AddType text/plain .html .htm .shtml
120
121 # Don't run arbitrary PHP code.
122 php_admin_flag engine off
123
124 # If you've other scripting languages, disable them too.
125 </Directory>
126
127
128 === Database updates ===
129
130 If you're using update.php, the necessary database changes should
131 be made automatically.
132
133 To manually upgrade your database from the 2003-08-29 release, run the
134 following SQL scripts from the maintenance subdirectory:
135
136 archives/patch-ipblocks.sql
137 archives/patch-interwiki.sql
138 archives/patch-indexes.sql
139 interwiki.sql
140
141 To copy in the Wikipedia language-prefix interwikis as well, add:
142
143 wikipedia-interwiki.sql
144
145
146 === Translations ===
147
148 New interface localization files are included for:
149 fy Frisian
150 ro Romanian
151 sl Slovene
152 sq Albanian
153 sr Serbian
154
155
156 === Memcached ===
157
158 Memcached is a distributed cache system. See http://www.danga.com/memcached/
159 MediaWiki can optionally use memcached to store some data between calls
160 to reduce load on the database. Currently this is limited to user and
161 talk page notification data, interwiki prefix/URL matches, and the
162 UTF-8 conversion tables.
163
164 MediaWiki includes version 1.0.10 of the (GPL'd) PHP memcached client by
165 Ryan Gilfether; if memcached is disabled it acts as a dummy object with
166 minimal overhead.
167
168 To use memcached you'll need PHP installed with sockets support (this is not
169 in the default configure options). See docs/memcached for some more details.
170
171 Additionally, you can store login session data in memcached instead of the
172 local filesystem, which can help to enable load-balancing by letting login
173 sessions transparently work on multiple front-end web servers. (The primary
174 other issue is with uploads, which requires some care in handling.)
175
176 To enable this, set $wgSessionsInMemcached = true; and set $wgCookieDomain
177 appropriately if exposing multiple hostnames. This system is new and may be
178 volatile; login sessions will fail dramatically if memcached is unavailable
179 when this option is turned on.
180
181
182 === Online documentation ===
183
184 Documentation for both end-users and site administrators is currently being
185 built up on Meta-Wikipedia, and is covered under the GNU Free Documentation
186 License:
187
188 http://meta.wikipedia.org/wiki/MediaWiki_User%27s_Guide
189
190
191 === Mailing list ===
192
193 A MediaWiki-l mailing list has been set up distinct from the Wikipedia
194 wikitech-l list:
195
196 http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
197
198
199 === UseModWiki import script ===
200
201 A stripped-down UseModWiki import script is available in the maintenance
202 subdirectory. It is incomplete and requires a lot of manual clean-up, but
203 does function for the brave and pure of heart.
204
205
206 === Test suite removed ===
207
208 The unmaintained Java-based test suite has been removed from the tarball
209 release. If you really want it you can check it out from CVS.
210
211
212 == mediawiki-20030829 ==
213
214 First release under MediaWiki name.