GitLab

- Patch #11312 by killes: fixed problems with menu caching.

- Patch #11138 by Al: fixed GUI problem with deleting users.

- Patch #10845 by James: fixed the user/help page.

  address as required fields.  This makes for more consistent behavior, as the
  profile module might add required fields that are marked as such.

- Usability improvement: made the status messages use <em>foo</em> rather than "foo".

- Patch #6500 by Mathias with help from Steven: made it possible to add fields to the registration form.  This feature used to exist.

- Patch #10922 by drumm: usability improvment: tabified the user account pages (login, register, request new password).

- Adding a drupal_goto to the block admin.

- Patch #10896 by ccourtne: user access rules for name were not enforced due to an incorrect URL.

- Patch #8179 by JonBob: reintroduced menu caching.

- Fixed stupid 'SELECT u.* FROM users u WHERE LOWER(u.uid) = 'S' AND  u.status < N LIMIT N, N' query.

- Patch #10777 by ccourtne: performance improvement: the user module executes a query and never uses the results.

- Patch #10718 by drumm: bugfix: it was possible to save a user with no roles assigned when the form clearly said at least one was required. The result of saving that was silently leaving the roles unchanged, which is rather bad.

- Modified patch #10644 by drumm: fixed some broken URLs.  Patch modified to
  use /user/$uid instead of /user/$uid/edit (where possible).

Upload.module
- Fixing a bug caused by the PHP5 patches.
Beware: PHP4's array_merge() will silently accept objects and convert them to arrays. We should not depend on this behaviour in the future.

File.inc / file-using modules:
- Removing the constant FILE_SEPARATOR: forward slashes work fine on Windows, and it was being used incorrectly as an URL separator sometimes.
- Adding @ to mkdir and chmod to supress ugly PHP errors. They are already reported with drupal_set_message().
- Fixing default for variable 'file_directory_temp'.
- Clarifying the help tip for 'file_directory_temp' in admin > settings.

- Patch by JonBob: for consistency and readability, add brief descriptions of each source file inside the @file comment block at the head of the file. This helps with Doxygen indexing, and also allows neophytes to see what a file does immediately on opening the source, regardless of the organization of the hooks.

- Changing theme('image') so the automatic image size fetching can be toggled independently from attributes. Specifying attributes and autosizing are 2 different things.
- Suppressing PHP errors from getimagesize() using @. drupal_set_message() is used to report these errors already and in a much prettier way.
- #9958: Fixing broken displaying of avatars.
- Don't show the default avatar in 'edit my account' if the user has no avatar of his/her own.
- Added ability to delete avatars (without having to replace them).

- Code improvements by Stefan: use capital letters for header titles (and added some missing t() functions).

- Code improvements by Stefan: made all status messages consistent (and easier to translate).

- The upload (filehandler) module has landed!

- Patch #9983 by Stefan: usability improvement: made sure all status messages start with a capital letter.

- Removed the offline users feature.

   * Refactored the "brains" of user_login() to user_authenticate($user, $pass) so that blogapi (and others) can authenticate users (including those using DistAuth) without all the html and drupal_goto calls
   * Updates blogapi_validate_user to use user_authenticate.

   * Adds missing quotes around the username in "session closed" watchdog messages from user.module (session opened has quotes, but session closed does not).
   * Changed "view detals" after watchdog entries to "details".

  I had some trouble adding this feature but realized that the "who's online" block is a geek think, and therefore it won't hurt to add some more geekiness.  If you don't know what "offline users" means, you would not have understood "online users" in the first place.  Either way, I think most people who have the block enabled, will find this an interesting addition.

- Patch #9983 by Stefan: various code style improvements.

- Patch #9330: ucfirst() gives problem when used with multibyte charset.
  Replaced the use of ucfirst() with a CSS-based solution.