amend $_SERVER to $INPUT->server

use empty() where array values might not be set

use http_sendfile correct

remove 'infos' misspelling

http://english.stackexchange.com/questions/117552/why-does-information-not-have-a-plural-form

fix signatures and old by references

not assign object from plugin_load by reference

FS#2751 - self deletion of user account

introduced http_status() for sending HTTP status code FS#1698

It seems, some servers require a special Status: header for sending the
HTTP status code from PHP (F)CGI to the server. This patch intro

introduced http_status() for sending HTTP status code FS#1698

It seems, some servers require a special Status: header for sending the
HTTP status code from PHP (F)CGI to the server. This patch introduces a
new function (adopted from CodeIgniter) for simplifying the status
handling.

show more ...

store choices for recent changes and diff views in cookie (FS#2438 and
FS#2700)

Note: These changes don't work yet. The cookie is not set and deletes the old
one.

removed data parameter in subscription_handle_post()

now the data parameter, which really is a timestamp is only handled
internally of the subscription class

Merge branch 'master' into subscription

* master: (175 commits)
some coding style improvements
added .idea project folder to gitignore
use correct setUp method and parent calls.
Correct Germ

Merge branch 'master' into subscription

* master: (175 commits)
some coding style improvements
added .idea project folder to gitignore
use correct setUp method and parent calls.
Correct German plugin manager translation (download != install)
correct return in sendDigest()
Fix case-insensitive match in ACL checking
GeSHi update to 1.0.8.11
ignore empty header on mail sending
remove empty BCC/CC mail headers
Galician language update
some welcome page changes
Combine subsequent calls to strtr into a single transformation
changed semicolon to colon in link to welcome page to make it less confusing
fixed wrong sidebar showing in namespaces when sidebar is disabled
Typo fix for TL;DR
removed a bunch of outdated and irrelevant networking acronyms
added another place to look for logo to make it more consistent (FS#2656)
French language update
Czech language update
compat js findPosX/y more closely mimic historical function
...

Conflicts:
inc/auth.php
inc/common.php
inc/subscription.php
lib/exe/indexer.php

show more ...

Add PHPDoc comments, type hints and ignore return value of act_sitemap()

Disable compression when a compressed sitemap might be delivered FS#2576

Compressing a gzip file again for transport is standards compliant, but
some clients assume that the file is only compressed

Disable compression when a compressed sitemap might be delivered FS#2576

Compressing a gzip file again for transport is standards compliant, but
some clients assume that the file is only compressed once then and don't
remove the outer compression layer. This could disable compression in
too many cases theses cases should be rare and shouldn't cause any
problems.

show more ...

fixed subscription management

now adding and removing subscriptions works again

use $INPUT in inc/actions.php

replaced use of basename() with utf8_basename() FS#2015

changed all doctypes to html5 doctype

Fix act_validate()

Split act_clean() into two functions so that plugins may use action
string sanitization even for their own new actions

Input wrapper for action.php

Fix for FS#2522 / Now all places of $lang['restored'] are covered with the restored-date information

don't rely on metadata for conflict detection

This also fixes a problem wiht PHP 5.4 when there is metadata but the
date key is empty.

Restore page versions - add timestamp of the restored version to to the summary field.
This allows easier identifying of which version has been restored. (FS#2522)

Remove references to (un)?subscribens.

bind security token to username

This makes the security token more robust agains session fixation
attacks. A CSRF warning will no longer abort a page save but lead to the
preview mode to avoid infor

bind security token to username

This makes the security token more robust agains session fixation
attacks. A CSRF warning will no longer abort a page save but lead to the
preview mode to avoid information loss when a user logs in during
editing (eg in another tab).

show more ...