= MediaWiki release notes = Security reminder: MediaWiki does not require PHP's register_globals setting since version 1.2.0. If you have it on, turn it *off* if you can. == MediaWiki 1.6 pre-pre-pre-pre-alpha == Misc work going on..... Big things to note: * MySQL 3.23.x is no longer supported. == Changes since 1.5 == * please fill in for the last couple weeks * Rearranged Special:Movepage form to reduce confusion between destination title and reason input boxes * (bug 2527) Always set destination filename when new file is selected * (bug 3056) MySQL 3 compatibility fix: USE INDEX instead of FORCE INDEX * PHP 4.1 compatibility fix: don't use new_link parameter to mysql_connect if running prior to 4.2.0 as it causes the call to fail * (bug 3117) Fix display of upload size and type with tidy on * (bug 3076) Support MacBinary-encoded uploads from IE/Mac * (bug 2323) Remove "last" tabindex from history page * (bug 3141) Partial support for Breton language (thanks Fulup). * Partial support for Basque language (from wikipedia and meta) * (bug 3116) Division by zero on [[Image:Foo.png|123x123px|]] * Fix display of read-only lockfile message * Update all stats fields on recount.sql * Include software-visible client IP address in Special:Version comment as a proxy debugging aid * (bug 3170) Page Title failed to obey MediaWiki:Pagetitle. wikititlesuffix was removed * (bug 3177) Estonian date formats not implemented in LanguageEt.php * Add ability to break off certain debug topics into additional log files; use $wgDebugLogGroups to configure and wfDebugLog() to log. * Finnish date format was hardcoded, now implemented properly * (bug 3190) Added some date format choices for language sr * (bug 1334) LanguageGa.php update * (bug 1020) Changing user interface language does not work immediately * (bug 2753) Some namespaces were not translated in LanguageTa.php (Tamil) * (bug 3204) Fix typo breaking special pages in fy localization * Oracle support * Edit conflict on recreation of deleted page * (bug 3210) Fix Media: links with remote image URL path * (bug 1956) Hide bot uploads from Special:Newimages * (bug 3216) Don't show empty warning page when no warnings. * (bug 3218) Use proper quoting on history Compare Revisions button * (bug 3220) Fix escaping of block URLs in Recentchanges * (bug 3227) Fix SQL injection introduced in experimental code * Move ArticleSave hook execution into Article insert/update functions, so they get called on non-EditPage actions that use these functions to create or update pages. * Fix table prefix usage in Block::enumBlocks * (bug 3244) Fix remote image loading hack, JavaScript injection on MSIE * Fix upgrade from 1.4 due to version number check breakage [for rc future] * Fix upgrade from 1.4 with no old revisions * Remove "info" editing toolbar that was shown in browsers which do not fully support the editing toolbar, but was found to be too confusing. * (bug 2554) Tell users they are uploading too large file * (bug 3271) Updated LanguageNn.php for HEAD * (bug 3280) Respect 'move' group permission on page moves * (bug 2613) Clear saved passwords from the form * Finally dropped MySQL 3.23.x support * Experimental feature to allow translation of block expiry times Implementation only for Finnish currently * (bug 3284) Ipblocklist paging, substring search * Allow filtering of robot edits in Special:Watchlist by stting $wgFilterRobotsWL = true. * (bug 2885) More PHP 5.1 fixes: skin, search, log, undelete * Fix interlanguage links on special pages when extra namespaces configured * IP privacy fix for blocklist search on autoblocks * Support for a license selection box on Special:Upload, configurable from MediaWiki:Licenses * Security fix for * Security fix for tables * Security fix for Special:Upload license selection list * Don't override edit conflict suppression on section edits; section merging should provide the expected transparency here and fits usage patterns better. * (bug 3292) Fix move-over-redirect test when current entries are not plaintext * (bug 2078) Don't hide watch tab on preview * (bug 3306) Document $wgLocalTZoffset * (bug 3304) Language file for Croatian (LanguageHr.php) * (bug 2143) Update Vietnamese interface * Add 'reupload' and 'reupload-shared' permission keys to restrict new uploads overwriting existing files; default is the old behavior (allowed). * Use strval() to make sure we don't accidentally get null on bad revision text loads or other fields mucking up XML export output * Add UploadVerification hook for custom file upload validation/security checks * (bug 3063) Remove some hardcodings from Hebrew localisation * Support SVG rendering with rsvg * Cap arbitrary SVG renders to given image size or $wgSVGMaxSize pixels wide * (bug 3127) Render large SVGs at image page size correctly * Fix regressions in ChangesList traditional layout * Fix edit on double-click for move-protected pages in Classic skin * Fix scaling of non-integer SVG unit sizes * (bug 3408) Bulgarian formatNum corrected * (bug 3448) Set page_len on undelete * (bug 3405) Don't use raw letters as aliases of MSGNW: and SUBST: * (bug 2800) Don't scale up small images on |thumb| without explicit size * Use the real file link instead of the default-size rasterized version for large SVG images on image description page * Include the file name/type/size line for non-resized images * (bug 1512) Disable x-code interp on Esperanto URLs for now, it does more harm than good under current system by breaking incoming URLs with "ux". (Editing is not affected, just URLs.) * (bug 3412) Clean up date format handling so ~~~~-sigs work with default format as designed. Documentation comments updated. * (bug 1423) LanguageJa.php update * Clean up duplicate code for selection of changeslist style * (bug 3475) anon contrib links on Special:Newpages * Correct blob caching to reduce redundant blob loads on backups * (bug 3485) Fix bogus warning about filename capitalization when off * (bug 2792) Update rebuildrecentchanges.inc for new schema * Special:Import/importDump fixes: report XML parse errors, accept * (bug 3489) PHP 5.1 compat problem with captioned images * (bug 2570) Add 'watch this page' checkbox on uploads, watch uploads by default when 'watchdefault' option is on * Skip update of disused 'rc_cur_time' field (todo: discard the field) * (bug 3506) Avoid MySQL error when Listusers returns no results * (bug 3182) Clear link cache during import to prevent memory leak * Add options to dumpBackup.php for making split/partial dumps by page id * Fix language name for dv * (bug 3503) Update LanguageSq.php from sq.wikipedia.org messages * Added EditFilter hook, and output callback on EditPage::showEditForm() for a place to add in captcha-type extensions in the edit flow * Added filter options, compression piping, and multiple output streams for dumpBackup.php * (bug 3595) Warn and abort if importDump.php called in read-only mode. * (bug 3598) Update message cache on message page deletion, patch by Tietew * Added separate noarticletext and newarticletext messages for logged in and anon users. * Blacklist additional MSIE CSS safety tricks * (bug 3332) Installation now uses Monobook, validates, plus usability improvements. * (bug 3629) Fix date & time format for Frisian * (bug 3643) Fix image page display of large images with resizing disabled * (bug 3334) Namespace changes for Polish * (bug 3660) Update diff3 detection to work with Windows/Cygwin * Fix meta robots tag on Special:Version again to avoid listing vulnerable versions for convenient harvesting by automated worms * (bug 3580) Change default Dutch language file to more neutral * (bug 3656) LanguageHr.php - added convertPlural * (bug 3414) LanguageBe.php - added convertPlural * (bug 3163) Full translation of LanguageBr * (bug 3617) Update for portuguese language (pt) * Namespaces hacks on LanguagePl * New preferences design and reorganisation * (bug 2585) Return proper 404 code when pages don't exist * (bug 3684) Fix typo in fatal error backtraces in Hooks.php * (bug 3682) LanguageSr.php - added convertPlural * (bug 2369) Add separate message for input box on Special:Prefixindex === Caveats === Some output, particularly involving user-supplied inline HTML, may not produce 100% valid or well-formed XHTML output. Testers are welcome to set $wgMimeType = "application/xhtml+xml"; to test for remaining problem cases, but this is not recommended on live sites. (This must be set for MathML to display properly in Mozilla.) For notes on 1.5.x and older releases, see HISTORY. === Online documentation === Documentation for both end-users and site administrators is currently being built up on Meta-Wikipedia, and is covered under the GNU Free Documentation License: http://meta.wikipedia.org/wiki/Help:Contents === Mailing list === A MediaWiki-l mailing list has been set up distinct from the Wikipedia wikitech-l list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-l A low-traffic announcements-only list is also available: http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce It's highly recommended that you sign up for one of these lists if you're going to run a public MediaWiki, so you can be notified of security fixes. === IRC help === There's usually someone online in #mediawiki on irc.freenode.net