Einträge für Garvin Hicking – Serendipity

For a longe time, people complained that the Serendipity NL2BR plugin (which converts newlines to proper HTML linebreaks) occasionally converted too many newlines. For example, within "code" or "pre" or "table" tags it is not desired to have linebreaks.

For the same amount of long time, the Serendipity developers did not really have a chance to dig into the regular expression magic that was required to fix this. Luckily for us, the awesome Brendon K came around and improved the plugin for us. :-)

We have now committed his code into the official Serendipity SVN trunk, so that it will be contained in tomorrows Snapshots as well as the final Serendipity 1.1 version.

We hope that this will be useful for you, and many thanks to Brendon - we hope there will be many other cool patches you can send to us. :-)

Google seems to have changed their URLs where pings to the sitemap webmaster helper tool are sent to.

Thus, the Serendipity Google Sitemap plugin requires you to either manually update to the right URL. The updated plugin in Spartacus has been committed today and should be available tomorrow.

The new URL to use is: http://www.google.com/webmasters/tools/ping?sitemap=%s (see this thread)

Because of the issue with PHP 5.2.0 mentioned before, and the 1.1 release not hastily being pushed out the barnyard, the Serendipity Team has decided to release a 1.0.3 version that fixes the mentioned problem.

We have also decided to backport some other bugfixes from the 1.1 release tree:

1. Fix a problem where spartacus did not properly assign configured permissions to downloaded directories, thanks to danilo from the forums!
2. Fix possible integer wraparound in comment count leading to a gazillion counter state. Also now show links to the entries within the administration comment panel. Thanks to Julian Finn!
3. Fix bug with using %username% in author permalinks, thanks to oeli from the forums!
4. Move trackback sending logic to the end when saving an entry. Should get rid of event plugins not operating when trackbacks painfully fail. Thanks to isotopp.
5. Fixed bug that prevented native imports from other blog system to recode ISO-charsets into UTF-8. Major thanks to Jan of blog.salid.de.

If you are affected by any of those fixed bugs and/or running PHP 5.2.0, we suggest you to update. Else, you are not required to upgrade your Serendipity 1.0.2 installations and can wait happily ever after until we get the 1.1 release polished for release (hopefully in December). If you are a foreign language speaker and want to contribute to Serendipity, please drop us a line in the Serendipity forums to help us in getting all translations up to date.

Download the new release here

Serendipity 1.0.x an PHP 5.2.0 currently do not go well together because of the new PHP ext/filter extension. In the early PHP 5.2.0 cycles this provided a function 'input_name_to_filter' which was later dropped, but not removed from Serendipity 1.0

Serendipity 1.1 beta versions already use a function_exists() check to prevent this, but it had not made it into the 1.0 release cycle.

Thus, to make s9y work with PHP 5.2.0, you have three options:

1. Disable the ext/filter extension in your php.ini configuration,
2. Upgrade to Serendipity 1.1-beta versions or
3. edit your serendipity include/compat.inc.php file and replace the string "extension_loaded('filter')" with "extension_loaded('xfilter')", which will effectively disable the follow-up code to take effect

The upcoming Serendipity 1.1 final version will of course integrate a more thorough fix. The serendipity Team is sorry for this confusion it may cause for PHP 5.2.0 users.

Time again for a new release!

Serendipity 1.0.2 mainly features a XSS injection attack on the admin backend which could happen if registered authors can be tricked into following a specially crafted URL. This bug was detected by the ever-restless Stefan Esser, many thanks for notifying us. Users of previous version of Serendipity are urged to upgrade to be secure. Note though that this bug requires your own interaction and thus exploits of this depend on how well you can stay away from clicking links that you do not know what they do exactly. ;-)

Serendipity 1.1-beta5 features the following new changes since 1.1-beta1:

1. Prevent XSS backend injection attack (see above)
2. Themes can now support custom amounts and positions of any number of sidebars (top, bottom, left, right etc.) (more)
3. Usergroups can now configure which plugins/events a group is allowed to execute (more)
4. Added the options to use HTTP-Authentication for your login, which enables you to use secured RSS-Feeds with login credentials
5. Some permalinks oddities when using % in URLs and some other minor fixes

Serendipity 1.1 is getting very close to getting finalized (targets mid-December). New major features will be added to a 1.2 version branch, so expect no more major changes here. Please help us by trying out the latest version and report bugs/issues!

Upgrading is easy as ever: Download, unpack, go to your Admin panel, done. Read more here: Serendipity FAQ. The download is available here: Serendipity Download Page

Have fun!

I've committed a new plugin to Spartacus that allows users to use a very simply Notification System.

Users can create text (HTML formatting configurable) that will appear on the Admin Backend. A small goodie is a feature that notifications are subject to specific usergroups - only the usergroups for which the creator intentionally posted the message will see it.

The plugin also allows to configure whether normal users are allowed to use the messaging system. In the future this could be enhanced for more granular control, but for the time being it should proove a nice tool. The display of the messages can be controlled via a bundled notes.css CSS file.

CSS formatting also allows to format new incoming messages differently. Now try it out and have fun