GitLab

- large commit of everything else that has been queued in my backlog:
  it's not 100% stable yet

- nodified index.php:
    the index page will only display stories for now but this will/can
    change in the near future
- all other files now thinks in terms of nodes, rather then stories

- forgot to commit this last night but this should fix deekayen's small
  Windows glitch

- applied David Norman's patch to turn all <?'s into fully qualified
  <?php's.

A rather large and important update:

revised most of the SQL queries and tried to make drupal as secure as possible (while trying to avoid redundant/duplicate checks).  For drupal's sake, try to screw something up.  See the mail about PHPNuke being hacked appr. 6 days ago.  The one who finds a problem is rewarded a beer (and I'm willing to ship it to Norway if required).  I beg you to be evil.  Try dumping a table a la "http://localhost/index.php?date=77778;DROP TABLE users" or something. ;)

- fixed small translation glitch in format_interval
- added a couple of missing t() functions
- improved the comments module, fixed the score problem Jeroen
  reported earlier -> it's slicker but I hope it won't break anything

- updated CHANGELOG

- locale module: added documentation (first draft)
- locale module: improved administration interface
- headline module: fixed small visual glitch in export function
- account: small improvements

- added fine-grained user permission system which allows us to give
  certain users access to specific administration sections only.
    Ex. a FAQ maintainer can only edit the FAQ, and members of an
        "editorial board" can only edit comments, diaries and
         stories, ..
- code review => rewrote include/user.inc which is much easier now
- fixed 4 small bugs

- More updates on the translation support

- initial import of the preliminary translation code.
- added timer.inc for benchmarking purpose
- bugfix for php-clean
- bugfix for account.php
- removed redundant format_data
- ...

- small updates

- a 2nd batch of various updates

- fixed small typo

I know, I know, it is getting nasty lately but I have another large commit after nothing but code.

This time I redid the "category"-stuff.  Categories - from now on called sections - are now maintained from the admin pages, can have their own post, dump and timout thresholds as discussed earlier (some weeks ago).  By tomorrow evening users will be able to enable or disable section as well - i.e. to customize the content of drop.org.

- fixed some bugs in the new comment/discussion code and added a few
  enhancements

- fixed MySQL bug in account.php

- updated/improved discussion engine: it needs additional fine-tuning
  though but I think this is stable enough for public consumption and
  real-life testing.
   ==> a first big step towards a flexible comment engine.

IMPORTANT:
  - Required theme updatins:

    UnConeD: check your $theme->controls() as I added a very, very
             dummy implementation

  - Required database updates:

    alter table users modify mode tinyint(1) DEFAULT '' NOT NULL;
    alter table comments change sid lid int(6) DEFAULT '0' NOT NULL;
    alter table comments add link varchar(16) DEFAULT '' NOT NULL;
    update comments set link = 'story';

- rewrote the block placement stuff and updated the themes.
  IMPORTANT: you have to drop 2 tables "blocks" and "layout"
             and you have to recreate them again with those
             in database/database.mysql
- integrated the documentation written by UnConeD

- fixed 2 small bugs in account.php
- drastically improved administration section
- drastically revamped story administration:
  added new feature to schedule the publishing of stories
- applied correct naming conventions to submission.php
- fixed 1 small glitch in boxes
- somewhat expanded the documentation
= changed one SQL table
- updated the faq with info on drupal
- ... and more things I forgot about

- the diary module is truly modular now
- the faq has been spell checked

A batch of preparations for release candidate 2:

 - expanded documentation
   (written by Jeroen)
 - fixed bug in includes/module.inc
 - fixed bug in modules/backend.class
 - renamed some of the SQL tables (!)
 - started making the diary.module truly modular (not finished yet)
 - renamed "admin_blocks" to "boxes"
 - added new functionality to "boxes": apart from PHP boxes, you
   can now create ASCII boxes as well as HTML boxes for those who
   are not confident with PHP.
   (requested by stalor)
 - added drupal-site module to keep track of known drupal sites
 - added small Perl script to generate encrypted CVS passwords

- fixed PHP4.0.4 problem in discussion.php.
- some improvements to account.php and theme.inc.
- updated the documentation (again, again and again)
- added INSTALL file
- removed redundant files

- Fixed bug in account.php.
- Updated the documentation (again): I spent most of the day writing
  documentation which might well be considered plain boring.

- fixed small bug in account.php
- added documentation

- here a bunch of changes to make "drupal" (for now) work with PHP 4.0.4
- tidied up some of the code and mainly working on the documentation

- some improvements and code polishing
- added a few extra blocks to choose from

- small typoe

Yet another large batch of updates:

 - I rearranged some of the code and clean-up some of the mess.

 - Added "blocks" which can be user defined/controlled: check
   to see.  The positioning of blocks is rather basic for the
   moment, so I'm all open for input on that.

- fixed broken link to diary pages from account.php

Again, a large batch of updates - I'm twisting things around here:

 1. improved .htaccess to be more "secure": to keep prying
    eyes out

 2. rewrote the administration section from scratch using a
    modular approach

 3. improved the information gathered by error.php - we can
    now (hopefully) track what bots are crawling us.

 4. fixed a bug in submit.php, fixed a bug in theme zaphod,
    fixed a bug in theme marvin.

 5. rewrote cron from scratch - it now interfaces with
    modules as it should have been from the beginning.
    Very cool if you ask me - it can use UNIX/Linux
    crontabs.

 6. updated widget.inc to be module aware - needs more
    work though - maybe this afternoon?

 7. updated most modules: small bugfixes, improvements, and
    even the documentation

 8. removed diary.php and made it a module - you can now
    run a drop.org site without a diary system if someone
    would prefer so

 9. updated all themes to use the new modules where
    appropriate

 10. added a robots.txt because the error message in the
     watchdog become annoying.

 11. added the new configuration system (mutliple vhosts
     on the same source tree) - use hostname.conf instead
     of config.inc

 12. removed calendar.inc and made it a module

 13. added format_interval() to functions.inc (UnConeD)

 14. whatever I forgot ...

- fixed bug in the timezone functionality:
  an Australian user reported that he lived in GMT +13 - after verifying
  this rumor GTM +13 happens to exists so here goes.

- Redid most of account.php and fixed quite some bugs!
  Check out your new user account stuff and give me some feedback.

  - fixed bug in story section
account.php:
  - removed death code, clean-up, reorganization
  - added "lost password?" functionality
faq.php:
  - clean-up
watchdog.inc:
  - improvements
  - end of input-limit test period
error.php:
  - improvements, still crappy layout though

Another batch with a lot of internal updates, yet no visual changes to the
site:

- watchdog (rewrite):
   + the collected information provides more details and insights
     for post-mortem research
   + input limitation
- database abstraction layer:
   + mysql errors are now verbose and is no longer displayed in a
     browser - fixes a possible security risk
- admin.php:
   + updated watchdog page
   + fixed security flaw
- diary.php:
   + fixed nl2br problem
- themes:
   + fixed comment bug in all 3 themes.
- misc:
   + renamed some global variables for sake of consistency:
      $sitename  -->  $site_name
      $siteurl   -->  $site_url
   + added input check where (a) exploitable and (b) possible
   + added input size check
   + various small improvements
   + fixed various typoes

... and much, much more in fact.