From 2f33a752aae4baba01dc95c39104e5b456a395c9 Mon Sep 17 00:00:00 2001
From: rurban <rurban@96ab9672-09ca-45d6-a79d-3d69d39ca109>
Date: Sat, 9 Jun 2007 19:01:11 +0000
Subject: [PATCH] ReleaseNotes for 1.3.13p1

git-svn-id: svn://svn.code.sf.net/p/phpwiki/code/trunk@5768 96ab9672-09ca-45d6-a79d-3d69d39ca109
---
 pgsrc/ReleaseNotes | 32 +++++++++++++++++++++++++++++---
 1 file changed, 29 insertions(+), 3 deletions(-)

diff --git a/pgsrc/ReleaseNotes b/pgsrc/ReleaseNotes
index 67e7d544f..28fc27e04 100644
--- a/pgsrc/ReleaseNotes
+++ b/pgsrc/ReleaseNotes
@@ -1,14 +1,38 @@
-Date: Mon, 28 May 2007 16:57:56 +0000
+Date: Sat, 9 Jun 2007 15:23:15 +0200
 Mime-Version: 1.0 (Produced by PhpWiki 1.3.13)
-X-Rcs-Id: $Id: ReleaseNotes,v 1.74 2007-06-02 20:57:05 rurban Exp $
+X-Rcs-Id: $Id: ReleaseNotes,v 1.75 2007-06-09 19:01:11 rurban Exp $
 Content-Type: application/x-phpwiki;
   pagename=ReleaseNotes;
-  pgsrc_version="2 $Revision: 1.74 $";
+  pgsrc_version="2 $Revision: 1.75 $";
   flags=PAGE_LOCKED;
   markup=2;
   charset=iso-8859-1
 Content-Transfer-Encoding: binary
 
+1.3.13p1 June, 9 2007, Reini Urban
+
+An immediate security fix for 1.3.13, plus some minor fixes.
+fixes:
+* LDAP Auth: Disallow empty passwords! Certain ldap implementations return true 
+  on empty passwords with ldap_bind().
+* LDAP Auth: fix password quoting
+* fix action=upgrade for dba, rename nosql to nodb
+* fixes SpamBlockList config file locations (config/two-level-tlds, config/whitelist)
+* enable $MailNotify->onChangePage
+* fix display of pagenames containing ":" in certain lists
+* fixed backend asArray access to iterators (DebugInfo with SQL)
+* fix wrong PhpWikiCvs InterWikiMap entry
+* fix syntax error in pgsrc/Help%2FActionPage
+* fix case in pgsrc/Help%2FAsciiSVGPlugin
+* fix links in pgsrc/Help%2FSemanticRelations
+* fix pgsrc/Help%2FWikiPlugin
+
+changes:
+* allow \n and single letter pages in {{ }} template syntax. 
+  patch #1732793 by AlJeux and ReiniUrban
+* with ENABLE_SPAMBLOCKLIST check only new external links: 
+  max 5, allow interwiki links, and improve failed output.
+
 1.3.13 June, 2 2007, Reini Urban
 
 This is major feature release which will be the base for the stable
@@ -20,6 +44,7 @@ charsets in pgsrc and Windows NTLM auth support via HttpAuth, a lot
 more plugins and enhancements. UTF-8 should work.
 
 fixes:
+* fix UpLoad to disallow all php extensions
 * DB: use ANSI SQL statements (oracle by Bob Peele & Christopher Jones, 
   postgresql by Reini Urban)
 * fixed blog, MonoBook, sidebar and wikilens theme layout
@@ -49,6 +74,7 @@ fixes:
 * fixed action=diff error with external links
 
 changes:
+* add UpLoad policy DISABLE_UPLOAD_ONLY_ALLOWED_EXTENSIONS, default: false
 * SemanticWeb: add linkrelation support, getPageLinks returns now an array of hashes. 
   optimize get_links for relations.
 * add new linksyntax "[:pagename]" inside square brackets only, not to store backlinks.
-- 
2.45.0