================================= Wacintaki Poteto Revision History ================================= ===================================================================== v1.4.1 - August 11, 2008 CHANGES: - Fixed Chibi Paint layers file not always being read into applet with regular image. - Profile viewer will now hide location and chat information from non-members. - Slight XHTML update for URLs shown in profile viewer. ===================================================================== v1.4.0 - August 2, 2008 CHANGES: - Chat now prints guest IP/host only for admins. - Chat comments limited to 200 characters. - Slight cleanup of code layout in memberlist. - Memberlist now properly encodes website URLs. - Fixed picture recovery not properly deleting WIP post files. - Changed subject line from nifty2_convert() to w_html_chars() in mailread.php. - Fixed XSS issue with language and template selections. - Fixed urlencoding of Javascript parameter in mailout.php. - Changed HTML filtering in functions to prevent double-encoding of comments. - DB rowcount added to editpic.php and comment.php. - Fixed missing in editavatar.php. - Fixed missing in niftyusage.php. - Fixed leftover tag in addusr.php. - Cleaned up NiftyToo markup system to handle HTML encoding without breaking URLs. - Corrected anti-spam test to handle/count BBCode links. - Owners can now change profiles without having to change age statement. - Birth year capped to > 1900 || < 3000. - Fixed PaintBBSCallback() issue with noteBBS.php and paintBBS.php. - Minor NoteBBS JavaScript cleanup. - Rearranged order of applets in draw.php and upload.php. - Removed some error masking in paintsave.php to help diagnose GDlib problems with large picture uploads. - Fixed userflag assignment when an admin edits another user's profile. - Increased cutoff in clean_picture_slots() from 10 to 30. - Update to paintsave.php to handle Chibi Paint layers file cleanup (incomplete). - Fixed old bug where picture recovery could not play animations. - Owners may now change permissions of other owners directly in modflags.php (for diagnostic reasons). FEATURES: - The Chibi Paint layers file is now supported, which makes retouching much easier. - Diagnostics screen now shows statistics about pictures folder, including space used. - Board now allows custom background color with thumbnails (in the hacks file) so images with an alpha channel won't be black. - NiftyToo now works more like BBcode, so you can use both '=' and ':'. - NiftyToo now supports quoted, big, and small text, and double brackets. - Chinese simplified language pack fully updated by Kevin (http://3eye.ws/blog/). - Current picture now added to editpic.php. - Save routine now checks for truncated PNG files. ===================================================================== v1.3.14 - July 6, 2008 Hotfix 7/12/08: - Fixed major problem with URL encoding that prevented some people from posting pictures with PaintBBS or ShiPainter. These applets are not compatible with encoded URLs. - Corrected updater so verification of 1.3.12 database completes without printing version conflict error. - Changed memberlist to restrict number of searchable fields in database. - Default sorting in memberlist fixed. - Memberlist now supports sort by e-mail and rank. CHANGES: - Corrected a number of old HTML/CSS compliance issues w/HTML Tidy. - Rewrote all applet parameters to be properly URL/HTML encoded. - Fixed excess table tags and missing alt attributes in profile viewer. - Fixed table parsing bugs in memberlist, mailbox, and mailout. - Fixed longstanding encoding bug with canvas imports and public retouch. - Added more bad characters to the badChars() filter. - E-mail address and URL filters integrated into w_gcp(). - Removed logging of empty functions.php requests. - Closed several XSS attacks. The code is now pretty clean, thanks to the XHTML rewrite. - Size cap for comments and titles, so pages won't break. Needs to be expanded. - Stand-alone scripts (which do not use header.php) now set charset server headers. - Fixed log issue when archiving pictures. - Spam link count marker changed from "h://" to "://" to allow for video links and SSL. - Updated the manual and readme files. Fixed some links, added Chibi Paint info. FEATURES: - Chibi Paint support! Yes, a new applet! Caution: some people are having trouble when using JTablet with Chibi Paint. - Wacintaki is now XHTML Transitional, so Lightbox/Slimbox mods are supported. - Purge button added to View Pending list. - Confirmation when deleting comments on index page. - Hacks override for comment delete dialog. ===================================================================== v1.3.13 - June 8, 2008 CHANGES: - Started converting board to be PHP6 compatible. - Draw screen shows proper default dimensions with custom canvas previews. - Header now shows current artist being searched (previously omitted as an interface feature). - w_exit() wrapper for exit() closes database if open. - Log now tracks self-bumps on retouch. - Added more testing for troublesome passwords when editing profiles. - Removed old PHP "MAX_FILE_SIZE" flag from animation uploader, since it is a global flag and doesn't really do anything. - Fixed some HTML encoding issues with the pending registration list, memberlist, and profile viewer. - Updated the Wacintaki manual with some new info and clarifications. - Verified updater to handle Wax 5.6.0 updates to Wacintaki. Wax and Wacintaki now have identical config/db/hacks resources. - Fixed artist and sort encoding when using drop-down menus. - Closed several XSS attacks. - Removed logging of empty functions.php requests. - Removed new_chat system. New browsers won't work with it anymore due to HTML parsing issues. ===================================================================== v1.3.12 - May 5, 2008 CHANGES: - New hacks.php file (still 1.2.0 compatible). - Picture upload now works properly with multiple WIPs. - Picture count now works correctly when deleting WIPs. - Adjusted humanity test so first option (the default) will never be the correct answer. - Corrected JavaScript error with Maximize applet (no CSS units). - Small change to "comment.php" to allow control over how many smilies are displayed. - Updater cleaned up, fixed a very old version detection bug. - Updated error reporting when trying to post a comment on a picture that does not exist. - Updated ban code to ignore hosts file if host lookup fails or is disabled. - Improved reminders when members have more than one WIP saved. - Confirmation for install and update script removal. - Changed variable reference usage in common.php and paintsave.php. - Fixed cookie corruption issue when changing password in profile editor. - Finally fixed the "new window" code so pop-ups have toolbars, since Firefox's tabbed browsing feature causes flow issues. - Changed cookie/login handling in paint capture code (again) to help prevent PHP errors from interfering with return codes for applets. - Members may now upload animations if they have animation access. Previously, only admins could upload animations. - 404 returned when posting comment on non-existent picture to help kick spambots. - Updated the Wacintaki manual to cover new features. - Updated the .htaccess file to include short tag support. FEATURES: - New resize buttons on paint screens allow applets to be bigger than the screen. - Admins may now edit member profiles and avatars via the Modify Permissions menu, and the profile viewer. - Profile option to hide e-mail. - Profile option to disable smilies. - New logging system tracks system/admin/member activity, including deletes, edits, bumps, archives, and more. - Registration form now enforces age declaration. - Minimum age for adult browsing is now adjustable in hacks.php file. Default is still 18. - Registrations may now be rejected without sending rejection e-mail (anti-spam measure). ===================================================================== v1.3.11 - January 2, 2008 NOTES: - "Modders" don't have to update to the new header.php or footer.php. CHANGES: - Adjusted orphaned file cleanup in updater for better accuracy with JPEGs. - Forced registration will now login properly before redirecting to profile editor. - "Time invested" on upload screen now allows values higher than just 3 hours (bug). - Updated credits in footer to correct a spelling error. - Corrected some variable scope issues with noteBBS.js. - 1.3.8b: header.php now uses updated JavaScript