1 MoinMoin Version History
2 ========================
4 Please note: Starting from the MoinMoin version you used previously, you
5 should read all more recent entries (or at least everything marked with HINT).
8 already better than the previous stable release. Our release policy is not
9 trying to make a "perfect release" (as that release might NEVER get released),
10 but to make progress and don't delay releases too much.
14 * The GUI WYSIWYG editor has still some issues and limitations.
15 If you can't live with those, you can simply switch it off by using:
17 editor_default = 'text' # internal default, just for completeness
22 * Fixed major security issues in miscellaneous parts of moin.
23 HINT: if you have removed superuser configuration to workaround the issue
24 (following our security advisory), you may re-add it after installing this
25 moin release. If you don't need superuser capabilities often, it might be
26 wise to not have superusers configured all the time, though.
27 * Improved package security: cfg.packagepages_actions_excluded excludes
28 unsafe or otherwise questionable package actions by default now.
29 * wiki parser: fixed transclusion of (e.g. video) attachments from other
31 * Fixed edit locking for non-logged in editors and cfg.log_remote_addr=False.
33 * Process attachname in get/putAttachment similarly.
34 * revertPage: convert pagename to internal representation.
35 * Fixed config.umask usage for page packages.
36 * Fixed usage of i18n.wikiLanguages() on class level (moved to method),
37 failed when tools import the module (e.g. pydoc -k foo).
38 * SubProcess: fixed win32-specific parts, fixed imports (fixes calling of
39 external xapian index filters)
44 * Xapian indexing / indexing filters:
45 * fix deadlocks with well- and misbehaving external filters
46 * work around indexing run crashing when encountering encoding problems
47 with non-ascii filenames
48 * OpenOffice/OpenDocument filters: catch UnicodeDecodeErrors (happens
49 with password protected files)
50 * i18n: check if languages is not initialized yet, don't crash
51 * http_redirect: use 301 redirect for some cases
52 * do not use httponly session cookies, makes trouble with twikidraw and ACLs
53 * GetText2 macro: fix for named placeholder
54 * Fix SHA -> SSHA password hash upgrade for old user profiles.
55 * abort RenamePage if renaming of main page fails (do not try to rename
59 * search: improve search result ordering
60 * add MS Powerpoint indexing filter (needs catppt from catdoc package)
61 * migration scripts: make finding damaged edit-log entries easier
62 * SubscribeUser action: support username regexes and unsubscribing.
63 Usage (enter this into the input form field you get after invoking
64 SubscribeUser action from the "More Actions" menu:
65 [+|-][re:]username[,username,...]
67 +username: subscribes user <username> (+ is optional/default)
68 -username: unsubscribes user <username>
69 +re:username_re: subscribes users who match <username_re> regex.
70 -re:username_re: unsubscribes users who match <username_re> regex.
75 * Attachment links: fix processing of attributes (e.g. 'target', 'title')
76 * Upgrade FCKeditor from 2.6.4 to 2.6.4.1.
77 * PDF embedding: fix html, works better with PDF browser plugins now.
78 * Fix typo in rightsidebar CSS.
79 * Action revert: avoids reverting to a deleted current revision.
80 * Action diff: enable prev/next button only in the range of given revisions.
81 * Add a Auto-Submitted: auto-generated header to generated mails.
82 * Include comment in email notifies.
83 * mailimport: fix endless looping while trying to import a forwarded mail.
84 * fuid: keep same fake_mtime for intervals of max_staleness duration.
85 * Fixes a bug with empty list items in the GUI editor.
86 * Improve filesys.rename compatibility code (win32).
87 * Fix locking for CacheEntry.
88 * Xapian indexing: catch exception when a bad zip file is encountered.
89 * openidrp / botbouncer: fix param count for CancelLogin().
92 * Added CAS authentication.
93 * Added httponly cookie support and use it for session cookie.
96 * HTTP auth: added debug logging.
97 * Minor LDAP auth improvements.
98 * Data browser widget:
99 * Add (h)column<idx> css class to make it styleable.
100 * Include only necessary autofilter options.
101 * moin maint cleancache purges now drafts, too.
102 * Add gopher and apt protocols to url_schemas.
103 * Add .csv, .flv, .swf to MIMETYPES_MORE.
108 * ACL security: fix bug in hierarchical ACL processing, more restrictive
109 sub page ACLs did not work if the current user name did not give a match
110 within the sub page ACL (instead, the less restrictive parent page ACL
112 Non-hierarchical ACL processing (the default) is NOT affected.
113 * Creole parser: fix spaces in multiline elements.
114 * Use msie.css only for Internet Explorer older than version 8, fixes
115 e.g. the double rendering of link icons.
116 * http auth: do auth_type comparisons case-insensitively (spec-compliant)
119 * EmbedObject macro: changed default width value for PDF files to 100%
120 (use a recent Adobe Reader to make this work).
121 * CopyPage action: added a TextCha for it
124 * Creole parser: Add second license: BSD
128 * AttachFile XSS fixes: move escaping to error_msg / upload_form
129 * AttachFile move: add more escaping (maybe not XSS exploitable though)
130 * email attachments import with xapian indexing enabled: fix AttributeError
131 * fix wrong links in attachment notifications
132 * AttachFile do=view: quote filename and pagename params for EmbedObject
134 * AttachFile: fix exception when someone just clicks on upload, without
136 * ldap_login: use None as default value for ssl certs/keys (using '' for
137 the pathes lets it fail with Connect Error)
138 * release edit lock if someone saves an unchanged page
139 * fix sendmail.encodeAddress (do not [QP] encode blanks, do not un-
140 necessarily use [QP] encoding for pure ascii mail addresses)
141 * Fixed docs bug: see HINT about secrets configuration at version 1.8.0
142 (1.8.0 Other changes).
143 * backup action: add 'self' dummy argument for backup_exclude function
144 * login action: fix formatting of error messages
145 * unsubscribe action: add msg types so icons get displayed
146 * fix quoting for pagehits stats (info action) - was not working for pagenames with blanks
150 * added modernized_cms theme
151 * use url_prefix_fckeditor if you don't want to use the builtin FCKeditor
152 of moin, but a separate one at some specific url
153 * action.Load: added textcha feature
154 * add mumble protocol (nice and good quality F/OSS VOIP conference chat sw)
155 * ldap auth: new name_callback param to create a custom wiki username (not
156 the ldap login username).
159 * add compatibility code for set to xapwrap.index (fix py 2.6 warnings)
160 * wikiutil: MIMETYPES_MORE extended for .md5 as text/plain
165 * Fix AttachFile and antispam XSS issues.
166 * Modernized, modern and rightsidebar themes: make nonexistent or
167 badinterwiki links gray also when they are already visited.
168 * Fix anchor parsing for interwiki links and #redirect processing
170 * user.apply_recovery_token: key must be of type string (for Python 2.6).
172 * Fix autofilter javascript breakage caused by including a databrowser
174 * Use per-wiki i18n cache (fixes wrong links to other farm wikis).
175 * Made cfg.interwikiname and cfg.user_homewiki unicode objects (str only
176 worked for ascii names).
177 * Xapian search: fixed historysearch.
178 * Xapian search indexing:
179 * Fix index updating for trivial changes.
180 * With history search enabled and in update mode, do not try to re-index
181 old page revisions again.
182 * With history search enabled, index page attachments only once.
183 * Fix last modified time of xapian index (shown on SystemInfo page).
184 * Make logging handlers defined in logging.handlers work (e.g.
185 class=handlers.RotatingFileHandler)
186 * Jabber notifications:
187 * Use an RFC compliant message type.
188 * Fix user creation notifications.
189 * OpenID: Compatibility fix for python-openid 2.x.x (also works with
190 1.x.x), fixes crash when trying to associate moin user to OpenID.
191 * Have a wikiserverconfig.py in wiki/server/ so setup.py copies it.
192 * Fixed inconsistent handling of fragments / anchor IDs:
193 * Fixed creole and wiki parser, other parsers might need similar fixes.
194 * IDs with blanks, non-ASCII chars etc. are now sanitized in the same way
195 for links as well as for link targets, so the user editing a page won't
196 have to bother with it.
197 E.g. [[#123 foo bar]] will link to:
198 * <<Anchor(123 foo bar)>> (moin) or {{#123 foo bar}} (creole)
199 * headline = 123 foo bar = (moin / creole)
200 Simple rule: if the link and the target are consistent, it should work.
201 * The creole wiki parser created non-human-readable sha1 heading IDs
202 before 1.8.2, now it creates same (sometimes readable) heading IDs as
203 the moin wiki parser.
204 * TitleIndex/WordIndex now also use IDs sanitized in that way internally.
205 HINT: if you manually worked around the inconsistencies/bugs before, you
206 likely have to remove those workarounds now. Same thing if you used
207 creole's sha1 heading IDs or IDs on TitleIndex/WordIndex.
210 * Updated FCKeditor to 2.6.4 (== many bug fixes in the GUI editor).
211 * Enhanced privacy by a new setting: cfg.log_remote_addr (default: True),
212 it controls whether moin logs the remote's IP/hostname to edit-log and
213 event-log. Use log_remote_addr = False to enhance privacy.
214 * Streamline attachment_drawing formatter behaviour.
215 * Search results: only redirect to a single search result for titlesearch
216 (fuzzy goto functionality), but not for fulltext search results.
221 * Workaround win32 locking problems (caused by spurious access denied
222 exceptions on that platform).
223 * Fix unicode errors that happened when password checker failed a password
224 * WikiConfig/WikiConfigHelp: fixed wrong language table headings
225 * Themes: make the margins around trail line work properly
226 * "modernized" theme:
227 * make broken links gray
228 * add new right/center/left/justify css classes
230 * Standalone server: be more specific when catching socket exceptions,
231 treat socket errors in http header emission in the same way.
233 * Fix heading levels when inserting new headings.
234 * Fix headers already sent exception when using e.g. edit LOCKing.
235 * Xapian indexing: fixed missing import for execfilter (only happened on
236 non-posix platforms like win32)
240 * Make the TOC shrinkwrap, add white background to navigation macro.
241 The table of contents looked bad spanning the whole width of the page.
242 It's made to shrinkwrap now, so it will only get as wide, as the longest
243 heading. We use display:inline-table, so this won't work in MS IE6,
244 which still displays it the old way.
245 Navigation macro now has a white background, to make it more readable
246 when it's floating over a pre block or TOC.
247 * Make the numbers in lists in table of contents right-aligned.
248 * Refactored and extended theme.html_stylesheets() to make alternate
249 stylesheets possible. Stylesheet definitions now can either be:
250 2-tuples: (media, href) # backwards compatibility
252 3-tuples: (media, href, title) # new, for defining alternate stylesheets
253 This works within themes as well as in the wiki config.
254 See also: http://www.w3.org/Style/Examples/007/alternatives.html
258 Note: This is a reduced CHANGES, ommitting details from rc/beta test and
259 also less interesting minor changes and fixes. It shows changes
260 relative to 1.7.2 release.
261 If you want to see full detail, read it there:
262 http://hg.moinmo.in/moin/1.8/file/6130eab15936/docs/CHANGES
264 New Features: ==============================================================
265 * HINT: New "modernized" theme - if you use "modern" [default], try:
266 theme_default = 'modernized'
267 If you find problems with "modernized", please report them because we
268 want to use it as default theme in future.
270 * upgraded to use FCKEditor version 2.6.3
271 * user can insert and modify various types of MoinMoin links
272 * New plugin_dirs setting to allow multiple plugin pathes (additional to
273 the automatically configured plugin_dir [default: data_dir/plugin]).
274 * @EMAIL@ expands to a MailTo macro call with the obfuscated email address
276 * New macros "WikiConfig" and "WikiConfigHelp".
277 * Per-parser quickhelp, 'quickhelp' class variable of parser class.
278 * Secure session cookies for https (see cfg.cookie_secure).
279 * Added left/center/right/justify css classes to builtin themes.
282 this content is justified....
285 Removed Features: ==========================================================
286 * HINT: url_prefix setting (use url_prefix_static or just use the default)
287 * traceback_log_dir setting (we just use logging.exception)
288 * editor_quickhelp setting (replaced by per-parser quickhelp)
289 * Restoring backups with the backup action and related settings (while
290 creating backups is no big issue and should work OK, restoring them
291 had fundamental issues related to overwriting or not-overwriting of
292 existing files - thus we removed the "restore" part of the action and
293 recommend that you just contact the wiki server admin in case of trouble,
294 give him your wiki backup file and let him carefully restore it.)
295 * Removed unmaintained DesktopEdition (moin 1.5.x style) and phpwiki
296 migration scripts from contrib/ directory.
298 Bug Fixes: =================================================================
299 * GUI Editor - fixed lots of bugs.
300 * Fixing https detection for servers using HTTPS=1 and also for WSGI
301 servers not using HTTPS/SSL_ environment, but just wsgi.url_scheme.
302 * Search results: link to 'view' rendering of found attachments.
303 * Standalone server: fix serverClass and interface argument processing,
304 announce used serverClass in log output.
305 * mointwisted: fixed Twisted start script.
307 * Use logging framework for messages emitted by warnings module (e.g.
308 DeprecationWarning), silence some specific warnings.
309 * Removed superfluous linefeeds in timing log output.
311 * Fixed editbar hidden comment link cosmetics for sidebar themes (hide the
312 complete list element).
314 action, if the wiki does not run in the root url of the site)
315 * Fixed backup action configuration (broke on win32).
317 * SyncPages: add workaround for callers calling log_status with encoded
319 * Fixed dbw_hide_buttons javascript.
320 * HINT: Jabber bot can now be configured to use an authentication realm
321 which is different from the server's hostname; the xmpp_node
322 configuration parameter can now contain a full JID and the xmpp_resource
323 parameter is no longer supported.
325 Other Changes: =============================================================
326 * HINT: new configuration for misc. secrets, please use either:
327 secrets = "MySecretLooongString!" # one secret for everything
330 'xmlrpc/ProcessMail': 'yourmailsecret', # for mailimport
331 'xmlrpc/RemoteScript': 'yourremotescriptsecret',
332 'action/cache': 'yourcachesecret', # unguessable cache keys
333 'wikiutil/tickets': 'yourticketsecret', # edit tickets
334 'jabberbot': 'yourjabberbotsecret', # jabberbot communication
336 Secret strings must be at least 10 chars long.
337 Note: mail_import_secret setting is gone, use
338 secrets["xmlrpc/ProcessMail"] instead of it.
339 Note: jabberbot secret setting is gone, use
340 secrets["jabberbot"] instead of it.
341 * HINT: user_autocreate setting was removed from wiki configuration and
342 replaced by a autocreate=<boolean> parameter of the auth objects that
343 support user profile auto creation.
344 * moin import irclog: use irssi parser to format logs, mapped .irc
345 extension to text/plain mimetype.
346 * HINT: backup action: backup_exclude (default: "do not exclude anything")
347 is now a function f(filename) that tells whether a file should be
348 excluded from backup.
349 You can get the old regex exclusion functionality by using:
350 backup_exclude = re.compile(your_regex).search
351 Be careful with your regex, you might need to use re.escape() to escape
352 characters that have a special meaning in regexes (e.g.: \.[] etc.).
353 If in doubt, maybe just leave backup_exclude at the default and don't
355 * Speed up javascript comments processing on IE by getElementsByClassName()
356 * Added sk (slovak) i18n, updated i18n.
361 * Secure session cookies for https, see cfg.cookie_secure.
362 * Add left/center/right/justify classes to builtin themes.
365 * Python 2.3 compatibility fixes.
366 * Fixed https detection for servers using HTTPS=1 and also for wsgi servers
367 not using HTTPS/SSL_ environment, but just wsgi.url_scheme.
369 * Fix crash when editing a page with non-ASCII pagename and inserting a link
370 * Fix "headers already sent exception" with edit LOCKs.
371 * i18n.__init__: Bug fix for wiki language not installed.
372 * Fixed URLs given by sitemap action, if the wiki does not run at / URL.
373 * Search results: link to 'view' rendering of found attachments
375 * Removed superfluous linefeed in timing log output.
376 * Use logging framework for messages emitted by warnings module (e.g.
377 DeprecationWarning), silence some specific warnings.
378 * Fix dbw_hide_buttons javascript.
380 * fix serverClass argument processing
381 * fix --interface="" argument processing
383 * added missing pidFile parameter
384 * better use Config.name for pidFile to avoid conflicts and keep same
385 behaviour as in the past
386 * Jabber bot can now be configured to use an authentication realm which
387 is different from the server's hostname
392 * Fix leakage of edit-log file handles (leaked 1 file handle / request!).
394 * Wiki parser: avoid IndexError for empty #! line
395 * MonthCalendar macro: fix parameter parsing / url generation
396 * Xapian indexing filters (MoinMoin/filter/ or data/plugin/filter/):
397 Some indexing filter scripts (e.g. for MS Word documents or PDF files)
398 failed on windows because of the single-quote quoting we used (that
399 works on Linux and other Posix systems). The fix introduces platform-
400 dependant automatic quoting, using double-quotes on win32 and single-
402 HINT: if you use own filter plugins based on execfilter, you have to
403 update them as the filename quoting (was '%s') is now done automatically
404 and must not be part of the command string any more (now just use %s).
405 See MoinMoin/filter/ for some up-to-date code (esp. the PDF filter).
406 * Prevent CategoryTemplate being listed as a category (it is a Template,
407 but matched also the category regex) - added to sample wikiconfig.
408 * LDAP auth: fix processing of TLS options
409 * UpdateGroup xmlrpc server side: fix wrong arg count error
410 * UpdateGroup client: use multicall / auth_token, refactor code so that
411 updateGroup function is reusable.
412 * Improve Python 2.3 compatibility, add notes where 2.4 is required.
417 * New 'cache' action (see developer notes).
420 * Security fix: XSS fix for advanced search form
421 * Avoid creation of new pagedirs with empty edit-log files by just
422 accessing a non-existant page. If you used 1.7 before, you likely have
423 quite some trash pagedirs now and you can clean them up by using:
424 moin --config-dir=... --wiki-url=... maint cleanpage
425 This will output some shell script (please review it before running!)
426 that can be used to move trash pages into some trash/ directory and also
427 moves deleted pages into some deleted/ directory. Maybe keep a copy of
428 those directories for a while just for the case.
429 * Server specific fixes:
430 * standalone (wikiserver.py): fix --pidfile and --group option, fix
431 operation without a wikiserverconfig.py (use builtin defaults).
432 * mod_python: work around mod_python 3.3.1 problems with file uploads.
433 Note: if you are still using mod_python, we strongly recommend you
434 try out mod_wsgi (in daemon mode) - it has less bugs, better
435 security, better separation, WSGI is a Python standard, and moin
436 developers also use WSGI. See HelpOnInstalling/ApacheWithModWSGI.
437 * revert action: fixed for deleted pages.
439 * Xapian indexing: Removed crappy "hostname" tokenization.
441 Also tokenize CamelCase parts of non-wikiwords.
442 * Make query parser reject more invalid input.
443 * If query parsing raises a BracketError, at least tell what the problem
444 is (and not just raise empty ValueError).
445 * Category search: ignore traling whitespace after ----
447 * Fixed sort() usage in UnitArgument to be Python 2.3 compatible.
450 * TableOfContents: skip outer-most <ol> levels when page isn't using
454 * OpenID RP: make it compatible to python-openid 2.2.x
455 * PackagePages.collectpackage: removed encoding from file name of zipfile
456 * Surge protection: exclude localnet no matter whether user is known or not.
458 * Script moin account create/disable/resetpw: checks for already existing
462 * Prevent CategoryTemplate being listed as a category (it is a Template)
463 by changing the default page_category_regex.
466 * New MoinMoin.action.cache - can be used to cache expensively rendered
467 output, e.g. generated images). Once put into the cache, moin can emit
468 a http response for that content very fast and very efficient (including
469 "304 not changed" handling.
470 * New file-like API in MoinMoin.caching (good for dealing with medium
471 to large files without consuming lots of memory).
472 * wikiutil.importPlugin supports getting the whole plugin module object
473 by giving function=None.
477 Note: This is a reduced CHANGES, ommitting details from rc/beta test and
478 also less interesting minor changes and fixes. It shows changes
479 relative to 1.6.3 release.
480 If you want to see full detail, read it there:
481 http://hg.moinmo.in/moin/1.7/file/76265568e8d3/docs/CHANGES
483 New Features: ==============================================================
484 * HINT: we added generic UPDATE instructions as docs/UPDATE.html.
486 * HINT: Standalone server usage changed:
487 * Standalone server can now be started via the "moin" script command,
488 optionally backgrounding itself.
489 See: moin server standalone --help
490 * In the toplevel dir, we have renamed moin.py to wikiserver.py (it was
491 often confused with the moin scripting command).
493 * wikiserver.py - to start the standalone server
494 * wikiserverconfig.py - to configure the standalone server
495 * wikiserverlogging.conf - to configure logging for it (default config
496 is ok for all day use, but can easily be modified for debugging)
497 * wikiconfig.py - to configure the wiki engine
498 * Removed old moin daemonizing script (replaced by moin server standalone
500 * We now provide the "moin" script command also for people not using
501 setup.py, see wiki/server/moin.
504 * New powerful and flexible logging, please see wiki/config/logging/ -
505 HINT: you have to upgrade your server adaptor script (e.g. moin.cgi)
506 and load a logging configuration that fits your needs from there, or
507 alternatively you can also set MOINLOGGINGCONF environment variable
508 to point at your logging config file.
509 If you use some of our sample logging configs, make sure you have a
510 look INTO them to fix e.g. the path of the logfile it will use.
511 * Moin now logs the path from where it loaded its configuration(s).
513 * Authentication / Sessions:
514 * HINT: New authentication plugin system, see HelpOnAuthentication. If
515 you do not use the builtin default for 'auth' list, you likely have to
516 change your configuration. See wiki/config/snippets/ for some samples.
517 * HINT: New session handling system (no moin_session any more, now done
518 internally and automatically), see HelpOnSessions for details.
519 * Added OpenID client and server support.
520 See: HelpOnAuthentication and HelpOnOpenIDProvider.
521 * cfg.trusted_auth_methods is a list of auth methods that put an
522 authenticated user into the "Trusted" ACL group.
524 * User profiles / password recovery / notification:
525 * New newacount action for creating new user accounts/profiles. If you
526 don't want users creating new accounts on their own, you can add this
527 action to actions_excluded list.
528 * New recoverpass action for password recovery:
529 If you forgot your password, recoverpass sends you an email with a
530 password recovery token (NOT the encrypted password) that is valid
532 * New moin account resetpw script for resetting a user's password by
534 * New preferences plugin system, see MoinMoin/userprefs/__init__.py.
535 * New notification system with an optional jabber notification bot, see
536 HelpOnNotification. HINT: wiki users have to check their notification
537 settings, esp. if they want to receive trivial update notifications.
539 * The diff action now has navigation buttons for prev/next change and also
540 a revert button to revert to the revision shown below the diff display.
541 * ThemeBase: support Universal Edit Button, see there for details:
542 http://universaleditbutton.org/
543 * ?action=info&max_count=42 - show the last 42 history entries of the page.
544 max_count has a default of default_count and a upper limit of
545 limit_max_count - you can configure both in your wiki config:
546 cfg.history_count = (100, 200) # (default_count, limit_max_count) default
547 * The CSV parser can sniff the delimiter from the first CSV line so other
548 delimeters than ";" can be used.
549 * Admonition support. Added styling for tip, note, important, warning
550 and caution in the modern theme. For more info see HelpOnAdmonitions.
552 * supports HTML entities like → and ☃
553 * supports the FootNote macro
554 * supports bulletless lists
555 * support for admonitions
556 * will export the wiki page's edit history as the generated article's
557 revision history. Doesn't add history of included pages.
558 * supports for the MoinMoin comment element, though only inline comments
559 are likely to be valid since the DocBook remark is an inline element.
560 * New Hits macro: shows the total hits for the page it is used on.
562 Removed Features: ==========================================================
563 * HINT: Removed attachments direct serving (cfg.attachments - this was
564 deprecated since long!). Use AttachFile action to serve attachments.
565 * Duplicated file attachment upload code was removed from Load action (just
566 use AttachFile action to deal with attachments).
567 * Removed 'test' action. If you like to run unit tests, use py.test.
568 * Removed Login macro.
570 Bug Fixes: =================================================================
571 * Better handling of ImportErrors (farmconfig, macros, wikiserverconfig).
572 * Fix failure of detection of on-disk cache updates.
573 * Fix traceback in filesys.py on Mac OS X when "import Carbon" fails.
575 * AttachFile action / file up- and download / zip support:
576 * WSGI: use wsgi.file_wrapper (or a builtin simple wrapper). Fixes memory
577 consumption for sending of large file attachments.
578 * FastCGI: flush often. Fixes memory consumption for sending of large
580 * Use the open temporary file for receiving file attachment uploads
581 (fixes big memory consumption for large file uploads).
582 * Catch runtime errors raised by zipfile stdlib modules when trying to
583 process a defective zip.
584 * When unzipping member files, decode their filenames from utf-8 and
585 replace invalid chars.
586 * Make error msg less confusing when trying to overwrite a file attachment
587 without having 'delete' rights.
589 * HINT: page_*_regex processing had to be changed to fix category search.
590 If you don't use the builtin (english) defaults, you will have to change
592 old (default): page_category_regex = u'^Category[A-Z]'
593 new (default): page_category_regex = ur'(?P<all>Category(?P<key>\S+))'
594 As you see, the old regex did work for detecting whether a pagename is
595 a category, but it could not be used to search for a category tag in the
596 page text. The new regex can be used for both and identifies the complete
597 category tag (match in group 'all', e.g. "CategoryFoo") as well as the
598 category key (match in group 'key', e.g. "Foo") by using named regex
599 groups. \S+ means the category key can be anything non-blank.
600 If you like to simultaneously support multiple languages, use something
601 like this: ur'(?P<all>(Kategorie|Category)(?P<key>\S+))'
602 HINT: after changing your configuration, please rebuild the cache:
604 * moin ... maint cleancache
606 If you don't do this, your groups / dicts will stop working (and also
607 your ACLs that use those groups). You better do a test whether it works.
609 * Xapian search / indexing / stemming:
610 * Use text/<format> as mimetype for pages.
611 * Index also major and minor for mimetypes, so it will find 'text' or
612 'plain' as well as 'text/plain'
613 * Fix searching for negative terms.
614 * Improve result list ordering.
615 * Index filters: redirect stderr to logging system.
616 * Remove crappy num regex from WikiAnalyzer, improve tokenization.
617 * Fix AttributeError that happened when trying to access an attribute only
618 used with xapian search (but regex search is not done by xapian)
619 * Fix IndexErrors happening when pages are renamed/nuked after the index
621 * Fixed indexing of WikiWords (index "WikiWords", "Wiki" and "Words").
622 * Fix crash if default language is un-stemmable.
623 * xapian_stemming: removed some strange code (fixes search
624 title:lowercaseword with xapian_stemming enabled)
625 * Fixed category indexing (index CategoryFoo correctly as CategoryFoo, not
626 Foo - for all languages, see page_*_regex change above).
627 * Builtin search: support mimetype: search for pages for the builtin search
628 engine (using text/<format>).
631 * Wiki: fix subscript parsing (was broken for cases like 'a,,1,2,,').
632 * Docbook: fixed detection of WikiWords.
633 * All: Add ssh protocol to url_schemas for ssh:... URLs.
636 * Fix xmlrpc request.read() call to use content-length, if available,
637 fixes hangs with wsgiref server.
638 * Wiki xmlrpc getPageInfoVersion() fixed:
639 * works correctly now for old page versions (was unsupported)
640 * works correctly now for current page version (reported wrong
641 data when a page had attachment uploads after the last page
643 * returns a Fault if it did not find a edit-log entry
645 Other Changes: =============================================================
646 * Using better ACLs and comments on system/help pages now, just taking
647 away 'write' permission, but using default ACLs for everything else.
648 * HINT: If you want to use xapian based indexed search, you need to have
649 Xapian >= 1.0.0 (and you can remove PyStemmer in case you have installed
650 it just for moin - we now use the stemmer built into Xapian as it
651 supports utf-8 since 1.0.0).
652 * Changed default value of cfg.search_results_per_page to 25.
653 * Surge Protection: If a user is authenticated by a trusted authentication
654 (see also cfg.auth_methods_trusted) then he/she won't trigger surge
655 protection, but moin will just log a INFO level log msg with the user's
656 name so you can find the culprit in case he/she is overusing ressources.
657 * HINT: Added MyPages and CopyPage to actions_excluded because MyPages
658 doesn't work without special SecurityPolicy anyway and CopyPage has
659 questionable behaviour.
660 * Load action now just creates a new revision of the target page, the
661 target pagename defaults to the current page name and can be edited.
662 If the target pagename is empty, moin tries to derive the target pagename
663 from the uploaded file's name.
664 Load tries to decode the file contents first using utf-8 coding and, if
665 that fails, it forces decoding using iso-8859-1 coding (and replacing
667 * HINT: cfg.show_login is gone, see code in theme/__init__.py, this may
669 * HINT: a new userprefs/ plugin directory will be created by the usual
670 "moin migration data" command.
672 * generates a valid DOCTYPE
673 * table support has been improved
674 * handling of definitions and glossaries is more robust
675 * supports program language and line numbering in code areas
676 * HINT: ldap_login behaves a bit different now:
677 In previous moin versions, ldap_login tended to either successfully
678 authenticate a user or to completely cancel the whole login process in
679 any other case (including ldap server down or exceptions happening).
680 This made subsequent auth list entries rather pointless.
681 Now it behaves like this:
682 * user not found in LDAP -> give subsequent auth list entries a
683 chance to authenticate the user (same happens if it finds multiple
684 LDAP entries when searching - it logs an additional warning then).
685 * user found, but wrong password -> cancel login
686 * ldap server not reachable or other exceptions -> give subsequent
687 auth list entries a chance
688 So please make sure that you really trust every auth list entry you have
689 configured when upgrading or it might maybe change behaviour in a
690 unexpected or unwanted way.
691 * ldap_login now supports failover: if it can't contact your LDAP server
692 (e.g. because it is down or unreachable), it will just continue and
693 try to authenticate with other authenticators (if there are any in
694 cfg.auth list). So if you have some mirroring LDAP backup server, just
695 put another authenticator querying it there:
696 ldap_auth1 = LDAPAuth(server_uri='ldap://mainserver', ...)
697 ldap_auth2 = LDAPAuth(server_uri='ldap://backupserver', ...)
698 auth = [ldap_auth1, ldap_auth2, ]
700 Developer notes: ===========================================================
701 * Page.last_edit() is DEPRECATED, please use Page.edit_info().
702 * Page._last_edited() is GONE (was broken anyway), please use
703 Page.editlog_entry().
704 * New request.send_file() call, making it possible to use server-specific
706 * getText's (aka _()) 'formatted' keyword param (default: True in 1.6 and
707 early 1.7) was renamed/changed: it is now called 'wiki' and defaults to
708 False. Example calls:
709 _('This will NOT get parsed/formatted by MoinMoin!')
710 _('This will be parsed/formatted by MoinMoin!', wiki=True)
711 _('This will be used as a left side of percent operator. %s',
712 wiki=True, percent=True)
713 * Page.url 'relative' keyword param (default: True in 1.6 and early 1.7)
714 was changed to default False).
715 * The themedict no longer contains 'page_user_prefs' and 'user_prefs',
716 this may affect custom themes.
717 * The rst-parser's admonition class names are no longer prepended with
718 "admonition_". Instead the class names are now for example "note"
719 and not "admonition_note".
724 * Security fix: a check in the user form processing was not working as
725 expected, leading to a major ACL and superuser priviledge escalation
726 problem. If you use ACL entries other than "Known:" or "All:" and/or
727 a non-empty superuser list, you need to urgently install this upgrade.
728 * Security fix: if acl_hierarchic=True was used (False is the default),
729 ACL processing was wrong for some cases, see
731 * For {{transclusion_targets}} we checked the protocol to be http(s),
732 this check was removed (because file: and ftp: should work also) and
733 it's not moin's problem if the user uses silly protocols that can't
734 work for that purpose.
735 * Fixed TableOfContents macro for included pages.
736 * server_fastcgi: added Config.port = None. If you want to use some port
737 (not a fd), you can set it now in your Config, e.g. port = 8888.
738 * category: search matches categories even if there are comment lines
739 between the horizontal rule and the real categories, e.g.:
740 ... some page text ...
742 ## optionally some comments, e.g. about possible categories:
743 ## CategoryJustACommentNotFound
744 CategoryTheRealAndOnly
746 Note: there might be multiple comment lines, but all real categories
747 must be on a single line either directly below the ---- or
748 directly below some comment lines.
751 * Added 'notes' to config.url_schemas, so you can use notes://notessrv/...
752 to invoke your Lotus Notes client.
753 * After creating a new user profile via UserPreferences, you are logged
754 in with that user (no need to immediately enter the same name/password
755 again for logging in).
760 * Security fix: check the ACL of the included page for the rst parser's
762 * Potential security/DOS fix: we removed cracklib / python-crack support
763 in password_checker as it is not thread-safe and caused segmentation
764 faults (leading to server error 500 because the moin process died).
765 * Fix moin_session code for auth methods other than moin_login (e.g. http).
766 If you have worked around this using moin_anon_session, you can remove
767 this workaround now (except if you want anon sessions for other reasons).
768 * Fix moin_session code to delete invalid session cookies and also create
769 a new session cookie if it got a valid user_obj at the same time.
770 * Fix xmlrpc applyAuthToken: give good error msg for empty token.
771 * Fixed category search, use category:CategoryFoo as search term.
772 * xapian_stemming = False (changed default) to workaround some problems
773 in the code enabled by it. Fixes the problems when searching for
774 lowercase or numeric titles or word fragments with the builtin search.
775 * Fix trail for anon users without a session, do not show a single page.
777 * Wiki parser: fixed strange insertion of unwanted paragraphs.
778 * Wiki parser: fix interwiki linking:
779 Free interwiki links did not change since 1.5 (they still require to match
780 [A-Z][A-Za-z]+ for the wikiname part, i.e. a ASCII word beginning with an
782 Bracketed interwiki links now behave similar to how they worked in 1.5:
783 Moin just splits off the part left of the colon - no matter how it looks
784 like. It then tries to find that in the interwiki map. If it is found,
785 a interwiki link gets rendered. If it is not found, moin will render a
786 link to a local wiki page (that has a colon in the pagename). It will
787 also render a local wiki page link if there is no colon at all, of course.
789 [[lowercasewikiname:somepage]] does an interwiki link (if in the map).
790 [[ABC:n]] does a local link to page ABC:n (if ABC is NOT in the map).
791 * Wiki parser: fix interwiki linking for the case that there are query args
792 in the interwiki map entry and you give additional query args via link
793 markup (uses correct query arg separator now), e.g.:
794 [[Google:searchterm|search this|&foo=bar]]
795 * Creole parser: fixed bug that prevents images inside links.
796 * Python parser: catch indentation error.
797 * PageEditor: fixed copyPage for write restricted pages.
798 * GUI editor: fixed javascript error with too complex word_rule regex,
800 * Fixed FCKeditor dialog boxes for FireFox3.
801 * NewPage macro/newpage action: fixed for non-ascii template pagenames.
803 * EmbedObject macro: bug fix for image mimetype
805 * fix TWikiDraw saving a drawing by also evaluating the query args.
806 * work around unpythonic WSGI 1.0 read() API, fixing broken xmlrpc
807 putPage with mod_wsgi
809 * Fix logfile code for EACCESS errors.
810 * Removed the "logging initialized" log messages because it was issued once
814 * Show "Comments" toggling link in edit bar only if the page really
816 * Made default configuration of surge protection a bit more forgiving,
817 especially for edit action which is currently also used for previews.
818 * Updated i18n, system/help pages, added Macedonian system text translation.
819 * Improved moin xmlrpc write command's builtin docs and auto-append
820 ?action=xmlrpc2 to the target wiki url given.
825 * Improved params for [[target|label|params]]:
826 Added accesskey link tag attribute, e.g.: [[target|label|accesskey=1]].
827 Additionally to specifying link tag attributes (like class=foo), you can
828 now also specify &key=value for getting that into the query string of
830 The "&" character is important, don't forget it or it won't get into the
832 E.g. for an attachment, you can use:
833 [[attachment:foo.pdf|Direct download of foo.pdf|&do=get]]
834 E.g. for linking to some specific diff, you can use:
835 [[SomePage|see that diff|&action=diff,&rev1=23,&rev2=42]]
836 See also the updated HelpOnLinking page!
837 * AdvancedSearch: make multipe categories/languages/mimetype selections possible
838 * Added a configuration directive to only do one bind to the LDAP server.
839 This is useful if you bind as the user the first time.
840 ldap_bindonce = False # default
843 * Fix XSS issue in login action.
844 * Fix wrong pagename when creating new pages on Mac OS X - that was a big
845 showstopper for moin 1.6.0 on Mac OS X.
846 * Fixed 1.6 migration script:
847 Make sorting python 2.3 compatible.
848 Just skip corrupted event log lines.
849 Fix link conversion by using data.pre160 as data_dir.
850 Fix bad /InterWiki pagenames when encountering interwiki links with bad
852 Improve ImageLink conversion by using its argument parser code.
853 Added STONEAGE_IMAGELINK (default: False) switch to wiki markup converter,
854 toggle it if you had a very old ImageLink macro in production and the
855 converter output has target and image interchanged.
856 Fixed UnicodeDecodeError for wrongly encoded attachment filenames.
858 Fix parsing of link/transclusion description and params.
859 Fix relative attachment targets.
860 Fix supported URL schemes (some got lost since 1.5.8).
861 Showing an upload link for non-existing non-text/non-image transclusions
862 now (like e.g. *.pdf).
863 * RST parser: fix attachment: and drawing: processing
864 * Fix quickhelp when editing RST markup pages.
865 * Fix Despam action: editor grouping was broken, increase time interval
867 * Fix AdvancedSearch domain:system search crashing.
868 * Only switch off xapian search if we didn't use it because of missing index.
869 * Fix saving twikidraw drawings by removing 'java' from spider regex.
870 * Fix classic theme's unsubscribe icon's action link.
871 * Fix AttachFile action: don't show unzip for packages, only show install
873 * Fix "su user" troubles on UserPreferences.
874 * Removed unit tests from ?action=test (due to changes in our test
875 environment, using py.test now, this was broken).
876 * Duplicated the top directories' moin.py to wiki/server/moin.py so it gets
877 installed by setup.py.
885 * I18n texts, system and help pages updated, please update your underlay
886 directory (see wiki/underlay/...).
887 * Improved "moin" script help, invoke it with "moin ... package command --help".
888 * Added some .ext -> mimetype mappings missing on some systems (like Mac OS X).
889 * Removed ImageLink macro, as this can be easily done with moin wiki link
890 syntax now - see HelpOnMacros/ImageLink (the 1.6 migration scripts convert
891 all ImageLink calls to moin wiki link syntax).
892 * Updated EmbedObject macro.
896 * This is a reduced CHANGES, ommitting details from rc/beta test and also
897 less interesting minor changes and fixes. If you want to see full detail,
898 read it there: http://hg.moinmo.in/moin/1.6/file/640f21787334/docs/CHANGES
900 It took MoinMoin development a lot of work and time to implement all the new
901 and fixed stuff, so please, before asking for support:
902 * take the time to read all the stuff below
903 * read the new help pages (copy them from wiki/underlay/ directory)
905 * HINT: If you are upgrading from a older moin version and want to keep your
906 existing data directory, it is essential that you read and follow
907 README.migration because the wiki markup and user profiles changed significantly.
908 See also more HINTs below...
910 New features: ==============================================================
912 User interface: ------------------------------------------------------------
913 * Removed "underscore in URL" == "blank in pagename magic" - it made more
914 trouble than it was worth. If you still want to have a _ in URL, just
915 put a _ into pagename.
916 * Discussion pages, see FeatureRequests/DiscussionAndOrCommentPages.
917 * cfg.password_checker (default: use some simple builtin checks for too
918 easy passwords and, if available, python-crack).
919 Use password_checker = None to disable password checking.
920 * We now have a drafts functionality (no */MoinEditorBackup pages any
922 * If you edit a page and cancel the edit, use preview or save, a draft
923 copy gets saved for you to a internal cache area (data/cache/drafts/).
924 * If it is a save what you did and it succeeds, the draft copy gets
925 killed right afterwards.
926 * If you accidentally used cancel or your browser or machine crashes
927 after you used preview, then just visit that page again and edit it.
928 the editor will notify you that there is a draft of this page and you
929 will see a "Load draft" button. Click on it to load the draft into the
930 editor and save the page.
931 * The draft storage is per user and per page, but only one draft per page.
932 * cfg.quicklinks_default and cfg.subscribed_pages_default can be used to
933 preload new user profiles with configurable values.
934 * attachment links for non-existing attachments look different now:
935 the note about the non-existing attachment moved to the link title,
936 the link is shown with nonexistent class (grey).
937 * attachment embeddings for non-existing attachments show a grey clip
938 * The list of InterWiki sites is editable in the wiki (page InterWikiMap),
939 it is getting reloaded every minute.
940 * We support some new languages and also have new underlay pages, thanks
941 to all translators and people helping with the docs!
943 Actions: -------------------------------------------------------------------
944 * Synchronisation of wikis using the SyncPages action.
945 * Xapian (see http://xapian.org/) based indexed search code.
947 * Install xapian-core and xapian-bindings on your machine.
948 We used 0.9.4, but newer code should hopefully work, too.
949 * cfg.xapian_search = True
950 * Execute this to build the index:
951 $ moin ... index build # indexes pages and attachments
952 $ moin ... index build --files=files.lst # same plus a list of files
953 You should run those commands as the same user you use for your wiki,
954 usually this is the webserver userid, e.g.:
955 $ sudo -u www-data moin --config=... --wiki-url=wiki.example.org/ \
956 index build --files=files.lst
958 - LanguageSearch: language:de
959 - CategorySearch: category:Homepage
960 - MimetypeSearch: mimetype:image/png (for attachments/files)
961 - DomainSearch: domain:underlay or domain:standard
962 - History Search: available in advanced ui
963 Note: Some currently only available when Xapian is used.
964 * New config options and their defaults:
965 xapian_search False enables xapian-powered search
966 xapian_index_dir None directory for xapian indices
967 (can be shared for wiki farms)
968 xapian_stemming True toggles usage of stemmer, fallback
969 to False if no stemmer installed
970 search_results_per_page 10 determines how many hits should be
971 shown on a fullsearch action
972 xapian_index_history False indexes all revisions of pages to
973 allow searching in their history
974 * Speeded up linkto search by avoiding read locks on the pagelinks file.
976 * The action menu now calls the actions for the revision of the page you
977 are currently viewing. If you are viewing the current page revision, you
978 get the same behaviour as in moin 1.5, but if you are viewing an old
979 page revision, action "raw" will now show you the raw text of this OLD
980 revision (not of the current revision as moin 1.5 did it).
981 Note that not every action does evaluate the rev=XX parameter it gets.
982 Also please note that the edit, info, ... links in the editbar do NOT
983 use the rev parameter, but operate on the latest page revision (as
984 they did in moin 1.5).
985 * Info action lost the links for "raw", "print" and "revert" actions,
986 because you can now just view an old revision and select those actions
989 * ?action=sitemap emits a google sitemap (XML), listing all your wiki pages
990 and the wiki root URL.
991 Page Priority / Frequency / Last modification
992 --------------------------------------------------------------------
993 / 1.0 / hourly / <now>
994 cfg.page_front_page 1.0 / hourly / page last edit
995 TitleIndex,RecentChanges 0.9 / hourly / <now>
996 content pages 0.5 / daily / page last edit
997 system/help pages 0.1 / yearly / page last edit
999 * Action DeletePage and RenamePage can now be used for subpages of a page, too.
1000 * Added Action CopyPage so you can use now an existing page or page hierarchy
1001 as template for a new page, see FeatureRequests/CloneOrCopyPages.
1002 * "Package Pages" action supports attachments now.
1003 * Added SisterPages support:
1004 * action=sisterpages will generate a list of url pagename lines for all
1005 pages in your moin wiki.
1006 * action=pollsistersites will poll all sister sites listed in
1007 cfg.sistersites = [(wikiname, fetchURL), ...]
1008 The fetch URL for the sistersites depends on the wiki engine, e.g.:
1010 ('MoinExample', 'http://moin.example.org/?action=sisterpages')
1011 # oddmuse based wiki:
1012 ('EmacsWiki', 'http://www.emacswiki.org/cgi-bin/test?action=sisterpages')
1013 # JspWiki based wiki:
1014 ('JspWiki', 'http://www.jspwiki.org/SisterSites.jsp')
1015 * If the current page exists on some sister wiki, a link to it will be
1016 added to the navibar.
1017 You can use sister wikis for adding another dimension to your wiki UI: use
1018 it for simple multi language support, or for comments, or anything else
1020 TODO: add sistersites_force with sister sites we link to even if they do not
1021 have the page yet (will work only for moin as we don't know
1022 pagename>url transformation of other wikis)
1023 * showtags action that lists all tags related to a page.
1024 * action=view does use mimetypes of EmbedObject too and text files will be shown
1025 by using their colorized parsers
1027 Macros: --------------------------------------------------------------------
1029 * If a change has happened after your bookmark, the updated/new/renamed
1030 icon links to the bookmark diff.
1031 * If a page does not exist any more (because it was deleted or renamed),
1032 we link the deleted icon to the diff showing what was deleted (for the
1033 delete action). For the rename action, we just show the deleted icon.
1034 * Conflict icon in RecentChanges is shown if a edit conflict is detected.
1035 * Enhanced SystemAdmin's user browser, so a SuperUser can enable/disable
1037 * Included EmbedObject macro for embedding different major mimetypes:
1038 application, audio, image, video, chemical, x-world.
1039 You are able to change the defaults of allowed mimetypes in the config
1040 var mimetypes_embed. The config var mimetypes_xss_protect is used to deny
1041 mimetypes. The order of both variables is Allow, Deny (mimetypes_embed,
1042 mimetypes_xss_protect).
1043 * Added support for @SELF to the NewPage macro.
1044 * GetText2 macro that allows to translate messages that contain data.
1045 * Make the FootNote macro filter duplicates and display a list of numbers
1046 instead of a list of identical footnotes. Thanks to Johannes Berg for the
1049 Parsers: -------------------------------------------------------------------
1050 * Moin Wiki parser: Changed markup for links, images and macros, see these
1051 wiki pages: HelpOnLinking, HelpOnMacros
1052 * New wiki markup for /* inline comments */ - they get rendered as a span
1053 with class="comment", see next item:
1054 * There is a new item in the edit bar: "Comments". If you click it, the
1055 visibility of all class "comment" tags will be toggled. There is a user
1056 preferences item "show_comments" to set if the default view shows them or not.
1057 * The wiki parser can be used with css classes now:
1059 This will render output within a div with class "comment".
1060 You can use any wiki markup as usual.
1062 You can also combine multiple css classes like this:
1063 {{{#!wiki red/dotted/comment
1064 This will render a red background, dotted border comment section.
1066 The same thing will work for any other css classes you have.
1067 If the css classes contain the word "comment", they will trigger some
1068 special feature, see next item:
1069 * Wiki nested parser/pre sections work now, using this syntax:
1070 a) just use more curly braces if you have 3 closing in your content:
1072 }}} <- does not terminate the section!
1074 b) use {{{ + some magic string:
1076 }}} <- does not terminate the section!
1078 c) {{{whatever#!python
1081 Pitfall: stuff like below does not work as it did in 1.5:
1089 * Added support for ircs: URLs (secure IRC).
1090 * New text/creole parser that allows you to use WikiCreole 1.0 markup,
1092 * HTML parser (called "html") that allows you to use HTML on the page.
1093 Thanks to the trac team for the nice code.
1094 * Added the diff parser from ParserMarket, thanks to Emilio Lopes, Fabien
1095 Ninoles and Juergen Hermann.
1097 XMLRPC: --------------------------------------------------------------------
1098 * actions_excluded now defaults to ['xmlrpc'] - this kind of disables the
1099 built-in wiki xmlrpc server code (not completely: it will just answer
1100 with a Fault instance for any request). If you want to use xmlrpc v1 or
1101 v2, you have to remove 'xmlrpc' from the actions_excluded list (for
1102 example if you want to use wikisync, mailimport or any other feature
1103 using xmlrpc). If you enable xmlrpc, it will be possible that someone
1104 changes your wiki content by using xmlrpc (it will of course honour ACLs).
1105 * New XMLRPC methods (see doc strings for details):
1107 * system.multicall -- multicall support
1108 * Authentication System: getAuthToken/appyAuthToken
1109 * getDiff -- method to get binary diffs
1110 * mergeDiff -- method to local changes remotely
1111 * interwikiName -- method to get the IWID and the interwiki moniker
1112 * getAllPagesEx -- method to get the pagelist in a special way (revnos,
1113 no system pages etc.)
1114 * getAuthToken -- make and authentication token by supplying username/password
1115 * applyAuthToken -- set request.user for following xmlrpc calls (within the
1117 * getUserProfile -- method to get user profile data for request.user
1118 * Added XMLRPC methods for attachment handling. Thanks to Matthew Gilbert.
1119 * XMLRPC putPage method adjusted to new AuthToken, config vars
1120 xmlrpc_putpage_enabled and xmlrpc_putpage_trusted_only removed.
1122 Scripts / Commandline interface: -------------------------------------------
1123 * moin export dump now better conforms to the theme guidelines.
1124 * Added a --dump-user option to the moin export dump command.
1125 Thanks to Oliver O'Halloran.
1127 Security / Auth / AntiSpam / etc.: -----------------------------------------
1128 * Hierarchical ACLs are now supported, i.e. pages inheriting permissions
1129 from higher-level pages. See HelpOnAccessControlLists.
1130 * If you have "#acl" (without the quotes) on a page, this means now:
1131 "this page has own (empty) ACLs, so do not use acl_rights_default here"
1132 Please note that this is COMPLETELY DIFFERENT from having no ACL line at
1133 all on the page (acl_rights_default is used in that case).
1134 * Antispam master url is now configurable via cfg.antispam_master_url.
1135 The default is to fetch the antispam patterns from MoinMaster wiki.
1136 * Antispam now checks the edit comments against BadContent also.
1137 * TextCHAs (text-form CAPTCHAs).
1138 Due to increasingly annoying wiki spammers, we added the option to use
1139 TextCHAs (for page save (not for preview!), for attachment upload, for
1140 user creation (not for profile save)).
1141 This function is disabled by default. If you run a wiki that is editable
1142 by anonymous or non-approved users from the internet (i.e. All: or Known:
1143 in ACL terms), you should enable it in your wiki config by:
1144 textchas = { # DO NOT USE EXACTLY THESE QUESTIONS!!!
1146 u'H2O is ...': u'water', # bad: too common
1147 u'2 apples and three bananas makes how many fruits?': ur'(five|5)', # good
1148 u'2 apples and three pigs makes how many fruits?': ur'(two|2)', # good
1149 u'2+3': ur'5', # bad: computable
1152 'de': { # for german users
1153 u'H2O ist ...': u'wasser',
1156 This means that english users will get some random question from the 'en'
1157 set, german users will get some from the 'de' set. If there is no 'de'
1158 set configured, moin will fallback to language_default and then to 'en',
1159 so make sure that you at least have a 'en' set configured (or whatever
1160 you have set as language_default).
1161 You need to use unicode for the questions and answers (see that u"...").
1162 For the answer, you need to give a regular expression:
1163 * In the easiest case, this is just some word or sentence (first en
1164 example). It will be matched in a case-insensitive way.
1165 * For more complex stuff, you can use the power of regular expressions,
1166 e.g. if multiple answers are correct (second en example). Any answer
1167 matching the regular expression will be considered as correct, any
1168 non-matching answer will be considered as incorrect.
1170 Tipps for making it hard to break for the spammers and easy for the users:
1171 * Use site-specific (not too common) questions.
1172 * Don't use too hard questions (annoys legitimate users).
1173 * Don't use computable questions.
1174 * Don't reuse textchas from other sites.
1176 textchas_disabled_group = None # (default)
1177 Set this to some group name and noone in this group will get textchas.
1178 E.g.: textchas_disabled_group = u'NoTextChasGroup'
1180 * The login page gives now the possibility to recover a lost password, thanks to
1181 Oliver Siemoneit. This is especially useful for wikis where access to user
1182 preferences is restricted by acl.
1183 * Session handling for logged-in users and (not by default due to expiry
1184 problems) anonymous users.
1185 * Updated the ldap_login code from 1.5 branch, supports TLS now.
1186 See MoinMoin/config/multiconfig.py for supported configuration options
1187 and their defaults (and please just change what you need to change,
1188 in your wikiconfig).
1189 * Interwiki auth: You need to define cfg.trusted_wikis and
1190 cfg.user_autocreate to use it. Logging in works by entering:
1191 Name: RemoteWikiName RemoteUserName
1192 Password: remotepass
1193 Then moin contacts RemoteWikiName after looking it up in the interwiki
1194 map and tries to authenticate there using RemoteUserName and remotepass.
1195 If it succeeds, the remote wiki will return the remote user profile items
1196 and your local moin will autocreate an account with these values.
1198 Server / Network / Logging: ------------------------------------------------
1199 * The standalone server script moved to the toplevel directory. This makes
1200 it possible to directly start moin.py without additional configuration
1201 to run a MoinMoin DesktopEdition like wiki setup.
1202 Be careful: DesktopEdition uses relaxed security settings only suitable
1203 for personal and local use.
1204 * Added TLS/SSL support to the standalone server. Thanks to Matthew Gilbert.
1205 To use TLS/SSL support you must also install the TLSLite library
1206 (http://trevp.net/tlslite/). Version 0.3.8 was used for development and
1209 * cfg.log_reverse_dns_lookups [default: True] - you can set this to False
1210 if rev. dns lookups are broken in your network (leading to long delays
1211 on page saves). With False, edit-log will only contain IP, not hostname.
1212 * Added support for "304 not modified" response header for AttachFile get
1213 and rss_rc actions - faster, less traffic, less load.
1215 * Added logging framework, using stdlib's "logging" module. Just do
1216 import logging ; logging.debug("your text"). Depending on configuration
1217 in the server Config class, your stuff will be written to screen (stderr),
1218 to a moin logfile, to apache's error.log, etc.:
1219 logPath = None # 'moin.log'
1220 loglevel_file = None # logging.DEBUG/INFO/WARNING/ERROR/CRITICAL
1221 loglevel_stderr = None # logging.DEBUG/INFO/WARNING/ERROR/CRITICAL
1222 NOTE: this is NOT in wikiconfig, but e.g. in moin.cgi or moin.py or ...
1224 * Added some experimental and disabled code, that uses x-forwarded-for
1225 header (if present) to get the right "outside" IP before a request
1226 enters our chain of trusted (reverse) proxies.
1227 This code has the problem that we can't configure it in wikiconfig, so
1228 if you want to use it / test it, you have to edit the moin code:
1229 MoinMoin/request/__init__.py - edit proxies_trusted (near the top).
1230 We will try to make this easier to configure, but there was no time left
1231 before 1.6.0 release for doing bigger code refactorings needed for that.
1233 Mail: ----------------------------------------------------------------------
1234 * You can send email to the wiki now (requires xmlrpc), see:
1235 FeatureRequests/WikiEmailIntegration, HelpOnConfiguration/EmailSupport
1237 * Mail notifications contain a link to the diff action so the user
1238 can see the coloured difference more easily. Thanks to Tobias Polzin.
1240 Other changes: =============================================================
1241 * HINT: please copy a new version of your server script from the wiki/server/
1242 directory and edit it to match your setup.
1243 * HINT: instead of "from MoinMoin.multiconfig import DefaultConfig" you
1244 need to use "from MoinMoin.config.multiconfig import DefaultConfig" now.
1245 You need to change this in your wikiconfig.py or farmconfig.py file.
1246 See MoinMoin/multiconfig.py for an alternative way if you can't do that.
1247 * HINT: you need to change some imports (if you have them in your config):
1248 Old: from MoinMoin.util.antispam import SecurityPolicy
1249 New: from MoinMoin.security.antispam import SecurityPolicy
1250 Old: from MoinMoin.util.autoadmin import SecurityPolicy
1251 New: from MoinMoin.security.autoadmin import SecurityPolicy
1252 * HINT: you need to change your auth stuff, the new way is:
1253 from MoinMoin.auth import moin_login, moin_session
1254 from MoinMoin.auth.http import http
1255 auth = [http, moin_login, moin_session]
1256 Do it in a similar way for other auth methods.
1257 * HINT: you need to change your url_prefix setting in 2 ways:
1258 1. The setting is now called url_prefix_static (to make it more clear
1259 that we mean the static stuff, not the wiki script url).
1260 2. The strongly recommended (and default) value of it is '/moin_static160'
1261 for moin version 1.6.0 (and will be ...161 for moin 1.6.1). It is
1262 possible and recommended to use a very long cache lifetime for static
1263 stuff now (Expires: access plus 1 year), because we require to change
1264 the URL of static stuff when the static stuff changes (e.g. on a
1265 version upgrade of moin) to avoid problems with stale cache content.
1266 Your moin will be faster with lower load and traffic because of this.
1267 For standalone server, we use 1 year expiry for static stuff now.
1268 For Apache, Lighttpd and other "external" servers, you have to care
1269 for configuring them to use a long expiry and change url_prefix_static
1270 related configuration on upgrade.
1271 HINT: if you run standalone or Twisted server, the easiest way to get a
1272 working configuration (with server configuration matching wiki
1273 configuration) is to NOT set url_prefix_static at all. Moin will
1274 use matching configuration defaults in this case.
1275 * url_prefix_action ['action'] was introduced for lowering load and traffic
1276 caused by searchengine crawlers. Up to now, crawlers where causing a high
1277 load in internet moin wikis because they tried to get about everything,
1278 including all actions linked from the user interface.
1279 Known crawlers only get 403 for most actions, but nevertheless they first
1280 tried. There was no means keeping them away from actions due to the rather
1281 braindead robots.txt standard. You can only disallow pathes there, but
1282 moin's actions were querystring based, not path based (this would need
1283 regex support in robots.txt, but there is no such thing).
1284 This changed now. Moin is able to generate action URLs you can handle in
1285 robots.txt, like /action/info/PageName?action=info. So if you don't want
1286 bots triggering actions, just disallow /action/ there. Keep in mind that
1287 attachments are handled by /action/AttachFile, so if you want attached
1288 files and pictures indexed by search engine, don't disallow
1289 /action/AttachFile/ in your robots.txt. In order to use this feature,
1290 set url_prefix_action in your wikiconfig to e.g. "action".
1291 * We use (again) the same browser compatibility check as FCKeditor uses
1292 internally, too. So if GUI editor invocation is broken due to browser
1293 compatibility issues or a wrong browser version check, please file a bug
1294 at FCKeditor development or browser development.
1295 * HINT: We removed Lupy based indexed search code. If you were brave enough
1296 to use cfg.lupy_search, you maybe want to try cfg.xapian_search instead.
1298 Developer notes: ===========================================================
1299 * We moved the IE hacks to theme/css/msie.css that gets included after all
1300 other css files (but before the user css file) using a conditional
1301 comment with "if IE", so it gets only loaded for MSIE (no matter which
1302 version). The file has some standard css inside (evaluated on all MSIE
1303 versions) and some * html hacks that only IE < 7 will read.
1304 HINT: if you use custom themes, you want to update them in the same way.
1305 * autofilters for databrowser widget. Thanks to Johannes Berg for the patch.
1306 * changed formatter.attachment_link call (it is now more flexible,
1307 because you can render the stuff between link start and link end yourself)
1308 * Page.url() does not escape any more. You have to use wikiutil.escape()
1309 yourself if you want to write the URL to HTML and it contains e.g. &.
1310 * The testing wikiconfig moved to tests/wikiconfig.py, the testing wiki
1311 is now created in tests/wiki/...
1312 * HINT: Killed "processors" (finally), formatter method changed to:
1313 formatter.parser(parsername, lines)
1314 * Refactored some actions to use ActionBase base class.
1315 * Moved "test" action from wikiaction to MoinMoin/action/
1316 (and use ActionBase).
1317 * Moved MoinMoin/config.py to MoinMoin/config/__init__.py.
1318 * Moved MoinMoin/multiconfig.py to MoinMoin/config/multiconfig.py.
1319 * Moved "SystemInfo" macro from wikimacro to MoinMoin/macro/.
1320 * Moved wikiaction.py stuff to MoinMoin/action/__init__.py.
1321 * Moved wikimacro.py stuff to MoinMoin/macro/__init__.py.
1322 * Moved wikirpc.py stuff to MoinMoin/xmlrpc/__init__.py.
1323 * Moved wikitest.py stuff to action/test.py (only used from there).
1324 * Moved formatter/base.py to formatter/__init__.py (FormatterBase).
1325 * Moved util/ParserBase.py to parser/ParserBase.py.
1326 * Moved / splitted request.py into MoinMoin/request/*.
1327 Most stuff will be broken, please help fixing it (usually some imports
1328 will be missing and the adaptor script will need a change maybe):
1329 Tested successfully: CGI, CLI, STANDALONE, FCGI, TWISTED
1330 * Moved security.py to security/__init__.py.
1331 * Moved wikiacl.py to security/__init__.py.
1332 * Moved logfile/logfile.py to logfile/__init__.py.
1333 * Moved mailimport.py to mail/mailimport.py.
1334 * Moved util/mail.py to mail/sendmail.py.
1335 * Moved auth.py to auth/__init__.py.
1336 Moved util/sessionParser.py to auth/_PHPsessionParser.py.
1337 teared auth code into single modules under auth/* - moin_session handling
1338 and the builting moin_login method are in auth/__init__.py.
1339 * Added wikiutil.MimeType class (works internally with sanitized mime
1340 types because the official ones suck).
1341 * Renamed parsers to module names representing sane mimetypes, e.g.:
1342 parser.wiki -> parser.text_moin_wiki
1343 * Added thread_monitor debugging aid. It can be activated using:
1344 from MoinMoin.util import thread_monitor; thread_monitor.activate_hook()
1345 and then triggered by requesting URL ...?action=thread_monitor - please
1346 be aware that monitoring threads has a big performance impact on its own,
1347 so you only want to temporarily enable this for debugging.
1348 By default, it dumps its output to the data_dir as tm_<timestamp>.log,
1349 you can change this at bottom of action/thread_monitor.py if you want to
1350 see output in your browser.
1351 * Introduced scope parameter to CacheEntry() - if you specify 'farm', it
1352 will cache into a common directory for all wikis in the same farm, if you
1353 specify 'wiki', it will use a cache directory per wiki and if you specify
1354 'item', it will use a cache directory per item (== per page).
1355 Creating a CacheEntry without explicit scope is DEPRECATED.
1356 * Smileys moved from MoinMoin.config to MoinMoin.theme.
1357 * Removed all _ magic in URLs and filenames.
1358 * request.action now has the action requested, default: 'show'.
1359 * Cleaned up duplicated http_headers code and DEPRECATED this function
1360 call (it was sometimes confused with setHttpHeaders call) - it will
1361 vanish with moin 1.7, so please fix your custom plugins!
1363 request.emit_http_headers(more_headers=[])
1364 This call pre-processes the headers list (encoding from unicode, making
1365 sure that there is exactly ONE content-type header, etc.) and then
1366 calls a server specific helper _emit_http_headers to emit it.
1367 Tested successfully: CGI, STANDALONE, FCGI, TWISTED
1368 * setResponseCode request method DEPRECATED (it only worked for Twisted
1369 anyway), just use emit_http_headers and include a Status: XXX header.
1370 Method will vanish with moin 1.7.
1371 * cfg.url_prefix is DEPRECATED, please use cfg.url_prefix_static.
1372 * d['title_link'] is not supported any more. You can easily make that link
1373 on your own in your theme, see example in MoinMoin/theme/__init__.py,
1375 * There is a new Page method called Page.get_raw_body_str that returns
1376 the encoded page body. This is useful if you just deal with byte data
1377 (e.g. while generating binary diffs).
1378 * The TagStore/PickleTagStore system is used to store the syncronisation tags.
1379 * XMLRPC functions may return Fault instances from now on
1380 * Moin got multicall support, including a module that makes it usable on the
1381 client-side without requiring Python 2.4
1382 * Added no_magic to text_html formatter to disable tag autoclosing.
1383 * MOIN_DEBUG can be set in the environment to let MoinMoin ignore exceptions
1384 that would lead to a traceback in the browser. Thanks to Raphael Bossek.
1385 * There is a new MoinMoin.Page.ItemCache class now with automatic cache
1386 invalidation based on global edit-log. We currently use it to cache page
1387 acls, speedup Page.get_rev and reading the page local edit-log.
1388 * Added wikiutil.renderText parse and format raw wiki markup with all page elements.
1389 * The user file format has changed, old files will be read correctly but
1390 will silently be upgraded to the new format so old versions will not
1391 read the new files correctly (this only affects 'subscribed_pages' and
1392 'quicklinks' which will be lost when downgrading.)
1397 * Added timing.log to help performance debugging. Use cfg.log_timing = True
1398 to update <data_dir>/timing.log (default is False, meaning no logging).
1400 Example log entries:
1403 Timestamp PID Timing Flag action URL
1404 -----------------------------------------------------------------------------
1405 20070512 184401 22690 vvv None moinmoin.wikiwikiweb.de/RssFeeds
1406 20070512 184401 22690 0.267s - show moinmoin.wikiwikiweb.de/RssFeeds
1408 Timestamp: YYYYMMDD HHMMSS (UTC)
1409 PID: the process ID of the moin process
1410 Timing: when action starts, it will be "vvv"
1411 when it ends, it logs the total time it needed for execution
1412 Flag (some are only logged at end of action):
1414 - Page does not exist
1415 B user agent was recognized as bot / spider
1416 !x! Action took rather long (the higher the x, the longer it took - this
1417 makes it easy to grep for problematic stuff).
1418 Action: action name (None is when no action was specified, moin assumes
1419 "show" for that case)
1420 URL: the requested URL
1422 For more information about tuning your moin setup, see:
1423 http://moinmoin.wikiwikiweb.de/PerformanceTuning
1424 * Added support for ircs, webcal, xmpp, ed2k and rootz protocols - we
1425 moved all protocols to config.url_schemas, so this is not empty any more.
1426 It is possible to use these protocols now on wiki pages and in the
1427 navi_bar. We just generate the URLs, it is up to your browser what it
1428 does when clicking on those links.
1429 * cfg.traceback_show (default: 1) can be used to disable showing tracebacks.
1430 cfg.traceback_log_dir (default: None) can be used to set a directory
1431 that is used to dump traceback files to. Your users will get a notice to
1432 which (random) file in that directory the traceback was been written.
1433 NOTE: while you can feel free to set traceback_show = 0 and
1434 traceback_log_dir = None, we will also feel free to reject bug reports
1435 when you (or your site's users) don't give us enough information (like a
1436 traceback file) to debug the problem. If you set traceback_show = 0,
1437 we recommend pointing traceback_log_dir to a directory with reasonable
1438 free space and putting a page onto your wiki that describes who has to
1439 get contacted (usually the wiki server admin) in case a traceback happens.
1440 The admin can then locate the traceback file and submit it to moin
1442 Of course we will also need all the other details of a bug report, not
1443 only the traceback file.
1446 * Updated spider agents list.
1447 * Reduce bot/spider cpu usage for SystemInfo, OrphanedPages, WantedPages,
1448 PageHits, PageSize, WordIndex macros (we just return nothing for bots).
1451 * XSS fixes, see http://secunia.com/advisories/24138/ (item 1 and 2).
1452 * ACL security fixes:
1453 * MonthCalendar respects ACLs of day pages now.
1454 * Check the ACL for the rst markup include directive.
1455 * Fixed cleaning of edit comments (control chars in there could damage
1457 * Fixed in-process caching of antispam patterns (didn't update the cache
1458 for multi-process, persistent servers).
1459 * Correct encoding/decoding for surge-log data, fixes leftover
1460 surge-logXXXXXXX.tmp files in data/cache/surgeprotect.
1461 * Fixed mode of cache files (mkstemp creates them with 0600 mode).
1462 * Symbolic entities with numbers (like ²) did not work, fixed.
1463 * We open data/error.log earlier now and we also use it for FastCGI.
1464 * Fixed unicode cfg.page_group_regex.
1465 * Fixed moin.spec to use english date format.
1466 * GUI converter: fixed conversion of relative wiki links.
1467 * Fixed NewPage macro button label to not be formatted as wiki text.
1471 * added url_prefix_local which is used for stuff that must be loaded from
1472 same site as the wiki engine (e.g. FCKeditor GUI editor applet), while
1473 url_prefix can be a remote server serving the static files (css/img).
1474 If not set (or set to None), url_prefix_local will default to the value
1476 * We save some CPU and disk I/O by having EditTemplates and LikePages macro
1477 (both used on MissingPage) check whether the requesting entity was
1478 identified as a spider (e.g. search engine bot) and do nothing in that
1479 case. Normal users won't see any difference.
1480 * For AttachFile, you can now choose to overwrite existing files of same
1481 name (nice for updating files).
1485 * fixed unescaped page info display.
1486 * fixed unescaped page name display in AttachFile, RenamePage and
1487 LocalSiteMap actions
1488 * WantedPages listed existing pages that are not readable for the user,
1489 but are linked from pages that ARE readable for the user (so this is NOT
1490 a privacy/security issue). We now don't list those pages any more as it
1491 is pointless/confusing, the user can't read or edit there anyway.
1494 * GUI editor/converter:
1495 * ignore <col>/<colgroup>/<meta> elements
1496 * support <a> within blockquote
1497 * Remove generated=... attribute from pagelink html output (this attr is
1498 for internal use only). w3c validator is now happier again.
1499 * Fixed css class "userpref" (not: "userprefs") of the Login form.
1500 * Fixed the version number check in the xslt parser for 4suite >= 1.0.
1501 * We reset the umask to the wanted value every request. This should fix
1502 wrong file modes when used with Twisted (twistd uses a hardcoded 0077
1503 umask in daemonize()).
1504 * Avoid trouble when saving pages with antispam function when MoinMaster
1505 wiki is having troubles (catch xmlrpc Fault).
1508 * Standalone server does not do reverse DNS lookups any more (this is a
1509 standard feature of BaseHTTPServer stdlib module, but we override this
1510 now and just print the IP).
1511 * We moved the IE hacks to theme/css/msie.css that gets included after all
1512 other css files (but before the user css file) using a conditional
1513 comment with "if IE", so it gets only loaded for MSIE (no matter which
1514 version). The file has some standard css inside (evaluated on all MSIE
1515 versions) and some * html hacks that only IE < 7 will read.
1516 HINT: if you use custom themes, you want to update them in the same way.
1517 * Improved ldap auth:
1518 * cfg.ldap_name_attribute was removed because of new cfg.ldap_filter.
1519 If you had ldap_name_attribute = 'sAMAccountName' before, just use
1520 ldap_filter = '(sAMAccountName=%(username)s)' now.
1521 * New cfg.ldap_filter used for the ldap filter string used in the ldap
1522 search instead of the rather limited, partly hardcoded filter we used
1523 before. This is much more flexible:
1524 ldap_filter = '(sAMAccountName=%(username)s)'
1525 You can also do more complex filtering expressions like:
1526 '(&(cn=%(username)s)(memberOf=CN=WikiUsers,OU=Groups,DC=example,DC=org))'
1527 * Added some processing to filter out result entries with dn == None.
1528 * We set REFERRALS option to 0 before initializing the ldap server
1529 connection (this seems to be needed for Active Directory servers).
1530 * We support self-signed ssl certs for ldaps - completely untested.
1531 * New cfg.ldap_surname_attribute (usually 'sn'), was hardcoded before.
1532 * New cfg.ldap_givenname_attribute (usually 'givenName'), hardcoded before.
1533 * New cfg.ldap_aliasname_attribute (usually 'displayName') - if this
1534 attribute is not there or empty (in the results of the ldap lookup for
1535 the user), we just make up the aliasname from surname and givenname
1537 * We only request the attributes we need from ldap (was: all attrs).
1538 * We deny user login (and break out of auth chain) for the following cases:
1539 * if a user is not found by ldap lookup
1540 * if we find more than one matching entry
1541 * if the password is empty or incorrect
1542 * if some exception happens
1543 * Please note that there is an updated ldap sample config in directory
1544 wiki/config/more_samples/.
1545 * Added experimental LDAP SSL/TLS support (untested, please help testing),
1546 see also the sample config.
1547 * Work around a IE7 rendering problem with long pages getting more and
1548 more narrow. We just applied the same "fix" as we used for IE6, using
1549 "display: none" for span.anchor for IE browsers.
1551 * We used to emit a <link> tag for the action=rss_rc RSS feed on any
1552 page. This was changed, we now emit that link only on RecentChanges and
1553 the current user's language translation of RecentChanges.
1554 This was changed because Google Toolbar requests the RSS feed linked
1555 by such a link tag every time it sees one. Thus, if you used the wiki
1556 normally, it requested the RSS feed every few seconds and caused
1557 problems due to surge protection kicking in because of that.
1558 * HINT for custom theme users: if your theme code calls
1559 rsslink(), then you need to change that to rsslink(d) for 1.5.7+.
1563 A general security notice:
1564 Check your Python version, there was a buffer overflow issue in Python
1565 recently! Details: http://moinmoin.wikiwikiweb.de/PythonUnicodeEscapeBug
1568 * Fix AttributeError traceback with Standalone server (if_modified_since)
1569 * Fix AttachFile "304 not modified" and redirect status code for Twisted
1570 * http auth: we now decode username and password to unicode (using
1571 config.charset == utf-8). Same for SSL client cert auth and CN.
1572 * Avoid infinite recursion in Page.parsePageLinks.
1573 * Fixed standalone server failing to shutdown if interface == "".
1574 * Now MoinMoin does not think anymore that every page links to various user
1576 * Made the irssi parser more tolerant (Thanks to "TheAnarcat").
1577 * Now multiple formatters can be used per request, the send_page code was
1578 not reentrant to this regard. Fixes "empty" search results.
1579 * Fixed problem with "=" in ImageLink macro links.
1580 * Not a moin bug, but a silly stdlib os.tempnam function made trouble to
1581 some people because it lets you override the path given in the code
1582 by setting the environment variable TMP(DIR). We now use a different
1583 function to avoid renaming trouble when TMP(DIR) points to a different
1585 * Fixed antispam update on every save (Thanks to "TheAnarcat").
1586 * GUI converter: don't throw away rowclass for tables.
1587 * GUI editor formatter: allow height for table cells.
1588 * GUI editor formatter: comment texts are output using the formatter now.
1591 * Mail notifications contain a link to the diff action so the user
1592 can see the coloured difference more easily. Thanks to Tobias Polzin.
1593 * FeatureRequests/MoveAttachments - you can move attachments from one
1594 page to another (and also rename the attachment at the same time).
1595 Thanks to Reimar Bauer.
1596 * Added support for linking to attachment: and inline: URLs with ImageLink.
1597 * Added UNIX socket support for FastCGI, just set the port to some (socket)
1599 * [[Attachlist(pagename,mimetype)]] lists attachments of pagename (default:
1600 current page) with optional mimetype restriction (default: all).
1601 Thanks to Reimar Bauer.
1604 * Minor performance improvements (might be noticeable if you have many
1605 custom navi_bar entries and high server load).
1606 * Avoid usage of no-cache because it breaks attachment download on IE6.
1607 This is a IE bug, not a moin bug.
1608 * Added XHTML to the unsafe list.
1609 * Changed the rst parser to be compatible to the new docutils interface
1611 * Updated EmbedObject macro.
1616 * fixed ticket creation to only use constant values
1619 HINT: read docs/README.migration.
1620 HINT: there was NO change in the underlay/ pages since 1.5.4.
1621 HINT: If you experience problems with the reStructured Text (rst) parser,
1622 please downgrade docutils to "0.4" because there were major interface
1623 breaking API refactorings on the docutils trunk.
1629 * Not a moin bug, but it severely annoyed IE users and also was less
1630 comfortable for users of other browser: since about 1.5.4, we served
1631 attachments with Content-Disposition: attachment - so that the user has
1632 to save them to disk. This was to fix a possible XSS attack using attached
1633 HTML files with Javascript inside for stealing your moin cookie or doing
1634 other nasty things. We improved this by using different behaviour depending
1635 on the potential danger the attached file has when served inline:
1636 mimetypes_xss_protect = ['text/html', 'application/x-shockwave-flash', ]
1637 This is the default value. If you know more dangerous stuff, please just
1638 add the mimetypes there to protect your users and file a bug report
1639 telling us what we missed.
1642 * Make tickets used for some actions more safe.
1645 * edit_ticketing [True] - we protect page save by a ticket (same stuff we
1646 already use for DeletePage and RenamePage action).
1647 NOTE: If you don't use your browser for editing, but some tool like
1648 "editmoin" or "MoinMoin plugin for jEdit", you'll need an update
1649 of them supporting the ticket.
1650 Alternatively, you can use edit_ticketing = False setting - this
1651 is not recommended for internet wikis as it will make spamming them
1653 * If we detect some spammer, we kick him out by triggering surge protection
1654 (if surge protection is not disabled).
1659 * Fixed gui editor converter confusing of `` and {{{}}} markup.
1660 * Fixed emission of HTTP headers (esp. Vary: Cache-Control:).
1661 * Fixed a bad crash that happens (on ANY page!) when you put a *Dict
1662 page's name as a member into a *Group page.
1663 * Fix MyPages action title to use an unformatted string.
1664 * Fix double quoted-printable encoding in generated emails (note: this is
1665 not a moin bug - this just works around bugs in python stdlib).
1666 * Fix mode of drawing files (use config.umask).
1667 * Fix trouble with /?action= urls by dropping getPageNameFromQueryString
1669 * Fixed sre unpickle issues seen on some machines by avoiding to pickle
1671 * Fix Clock code, add more timers.
1672 * Worked around FastCGI problem on Lighttpd: empty lines in the error log.
1673 * Fix (add) locking for caching's .remove() call, small fixes to lock code.
1674 * Print error message when --target-dir=path is missing from moin export
1678 * Added support for "304 not modified" response header for AttachFile get
1679 and rss_rc actions - faster, less traffic, less load.
1680 * Limit rss with full diffs to 5 items.
1681 * Allow surge_action_limits = None to disable surge protection.
1682 * moin.fcg improved - if you use FastCGI, you must use the new file:
1683 * can self-terminate after some number of requests (default: -1, this
1684 means "unlimited lifetime")
1685 * the count of created threads is limited now (default: 5), you can use
1686 1 to use non-threaded operation.
1687 * configurable socket.listen() backlog (default: 5)
1688 * Added indonesian i18n (id).
1689 * Some measures against spammers trying to brute force their spam into moin.
1690 * EmbedObject macro: added mov, mpg and midi support
1691 * moin ... export dump --target-dir=PATH --page=PAGENAME_REGEX
1692 You must specify --target-dir (where dump will write the html files to)
1693 and you may specify --page and either a page name or a regex used to
1694 match all pages you want to export. Default is to export all pages.
1698 * more efficient locking code on POSIX platforms, we do much less I/O
1700 * removed most chmod calls in favour of a single os.umask call
1701 * Improved Python 2.5 compatibility. Note: if you think that MoinMoin
1702 is using too much RAM, you might want to look at Python 2.5 because
1703 of its improved memory management.
1704 * Throw away SAVE comments longer than 200 chars (you can't enter those by
1705 the user interface, so only spammer using automatic POSTs do them).
1706 * Updated spider user agent list.
1707 * BadContent and LocalBadContent now get noindex,nofollow robots header,
1709 * Standalone opens it logfile unbuffered from now on, thanks to
1711 * Avoid trouble when request.write() data contains None, just skip it -
1712 thanks to Juergen Hermann.
1713 * Instead of showing a ConfigurationError, moin now emits "404 Not found"
1714 http headers and a hint about what could be wrong. This won't fill up
1715 your logs just because of typos and spiders still trying old URLs.
1719 HINT: read docs/README.migration.
1720 Version 1.5.4-current:
1721 * increased maxlength of some input fields from 80 to 200
1723 Version 1.5.current:
1725 * We switched to Mercurial SCM, see here for more infos:
1726 http://moinmoin.wikiwikiweb.de/MoinDev/MercurialGuide
1729 * fix MonthCalendar macro for non-ASCII pagenames (thanks to Jonas Smedegaard)
1730 * remove 'search' and 'google' from bot user agent list and add some more
1732 * Fix the forgotten password email login URL and also properly encode the
1733 email body. Thanks to Robin Dunn for the patch.
1734 * Applied a patch by Matthew Gilbert for increased compatiblity with
1740 * Added CSS classes for TableOfContents macro.
1743 * GUI editor / GUI editor converter:
1744 * Fixed missing GUI editor link in edit bar.
1745 * Fixed table/row/cell style spaces.
1746 * Changed <p> generation for macros.
1747 * Fixed handling of subpages.
1748 * Fixed processing of complex list elements (thanks to Craig Markwardt).
1749 * Fixed processing of html \n (thanks to Craig Markwardt).
1750 * Fixed joining of comment lines with text below them.
1751 * Fixed table height attribute crash.
1752 * Fixed sslclientcert auth.
1753 * Added some missing files to i18n processing, translatable strings more
1755 * Change <p> generation from self-closing (<p />) to auto-closing (only
1756 emit <p>, let browser find place for </p>).
1757 * Fix eating of newline before tables.
1758 * Fixed incorrect login hint for not logged-in users trying a disallowed
1760 * Fixed nasty missing or double </a> formatter bug (mostly happening when
1761 user has enabled questionmarks for nonexisting pages).
1764 * We catch and ignore html to wiki conversion errors in case of hitting
1765 the cancel button, so you can get out of the error screen.
1769 * Modified SystemInfo macro to give human readable units and disk usage
1770 * cfg.editor_quickhelp makes the quick help below the editor configurable
1771 (at least as far as the default_markup is concerned). If set to None,
1772 it doesn't display any quickhelp. Thanks to Seth Falcon for the patch.
1775 * Fixed double class attribute for nonexistent links
1776 * Fixed double </a> with qm_noexist option
1777 * Fixed table xxx="yyy" style attribute parsing
1778 * If not (editor_force and editor_default == 'text') then display GUI mode
1779 switch button (this is only a partial fix, but enough to deny the GUI
1780 mode to your users completely)
1781 * Fixed XSS issue which could lead to cookie theft etc.
1782 * Fixed definition list "same level" indenting.
1783 * Fixed pagename in log for PackagePages action.
1784 * Made <p> self-closing and line-anchors more well-behaved, thanks to
1785 Martin Wilck for the patch. I didn't apply the <ol> patch, because this
1786 is no real problem, just a problem of a bad standard.
1787 * Fixed gui editor *bgcolor crash.
1788 * Support/Fix tableclass attr with gui editor.
1791 * Moved back UserPreferences action link from menu to top of page (renaming
1792 it to "Preferences"), added "Cancel" button to make it possible to return
1793 to the previous page without saving preferences.
1794 * Removed formatter.url "attrs" keyword arg that took premade html, we use
1795 separate kw args per attribute now.
1796 * Moved broken tests to MoinMoin/_tests/broken (= disabling them).
1797 All "active" tests run ok now.
1798 If you want to compare, I included the output of this test run:
1799 $ make test >tests/make_test.out
1805 * HINT: please read README.migration
1806 * Login and Logout are actions now, therefore you stay on the page where
1808 * UserPreferences is also an action now and moved from top border (in
1809 modern theme) to the "more actions" dropdown menu. You also stay on the
1811 * There is also a [[Login]] macro now. You can put it on any page you want
1812 and if the user is not logged in, it renders the login form. If the user
1813 is logged in, it doesn't render anything.
1814 * We check cfg.superuser to be a list of user names (as documented) and
1815 deny superuser access if it is not. This avoids security issues by
1816 wrong configuration.
1817 * auth methods changed:
1818 HINT: if you wrote own auth methods, please change them as you see in
1819 MoinMoin/auth.py and test them again before relying on them.
1820 * now get a user_obj kw argument that is either a user object returned
1821 from a previous auth method or None (if no user has been made up yet).
1822 The auth method should either return a user object (if it has
1823 determined one) or what it got as user_obj (being "passive") or None
1824 (if it wants to "veto" some user even if a previous method already has
1825 made up some user object).
1826 * return value of continue_flag is now True in most cases (except if
1827 it wants to "veto" and abort).
1828 * moin_cookie auth method now logs out a user by deleting the cookie and
1829 setting user_obj.valid = 0. This makes it possible to still get the
1830 user's name in subsequent auth method calls within the same request.
1831 * added ldap_login and smb_mount auth methods, see MoinMoin/auth.py and
1832 wiki/config/more_samples/ldap_smb_farmconfig.py
1833 * MonthCalendar now takes an additional argument for specifying a template
1834 to use to directly invoke the page editor when clicking on non-existing
1836 * Added ImageLink macro. Thanks to Jeff Kunce, Marcin Zalewski, Reimar
1837 Bauer and Chong-Dae Park for working on it.
1838 * Lupy stuff (still experimental, partly broken and disabled by default):
1839 * Attachment search using lupy (lupy_search = 1 in your config)
1840 Title search will also search attachment filenames.
1841 Full text search will also search attachment contents.
1843 Some filters depend on external converters that might not be available
1844 for any platform (see Depends: line in filter plugin).
1845 Feel free to contribute more filter plugins, especially if you wrote
1846 some nice platform independant filter in Python for some popular file
1847 format! Filters implemented so far (depending on):
1848 MS Word, RTF, MS Excel (antiword, catdoc)
1850 OpenOffice.org XML based data formats (-)
1853 JPEG's EXIF data (-)
1855 * As you might know, Lupy is "retired" (that means it isn't developped
1856 by its authors any more). We are currently evaluating Xapian as new
1857 indexing search engine in moin.
1858 If we succeed, we will replace Lupy stuff by some Xapian interface
1860 But: the filters will likely stay, as we also need them with Xapian.
1862 * A new MoinMoin script interface was introduced:
1864 Syntax: moin [options] <cmdmodule> <cmdname> [options]
1867 moin --config-dir=/my/cfgdir --wiki-url=wiki.example.org/ \
1868 export dump --page=WikiSandBox
1870 This will call the "moin" script, which will use the --config-dir and
1871 --wiki-url options to initialize, then it will go to MoinMoin.script
1872 module, import the export.dump module from there and run it, providing
1873 the additional --page value to it.
1875 The old scripts that have not been migrated to this new interface can
1876 still be found in MoinMoin/script/old/ - including the old migration
1878 * moin ... account create --name=JoeDoe --email=joe@doe.org
1879 * moin ... account disable --name=JoeDoe
1880 * moin ... acount check <-- this is what usercheck script was before
1881 * moin ... maint cleancache <-- this is what cachecleaner script was
1882 * moin ... maint cleanpage <-- this is what pagescleaner script was
1885 * cookie_lifetime didn't work comfortable for low values. The cookie was
1886 created once on login and never updated afterwards. So you got logged
1887 out cookie_lifetime hours later, no matter whether you were active at
1888 that time or not. This has been changed, we update the cookie expiry now
1889 on every request, so it will expire cookie_lifetime after your last
1890 request (not after login).
1891 * Fixed logout problems when using cfg.cookie_path.
1892 * Fixed cookie_path for root url wikis.
1893 * Lupy search now behaves a bit less funky. Still no guarantees...
1894 * We lowered the twisted server timeout to 2 minutes now (was: 10) because
1895 it just used up too many files (open TCP connections until it timeouts)
1897 * The algorithm used for processing the farmconfig.wikis list was changed
1898 to work for big farms (>= 50 wikis), too. This works around the python
1899 "re" module limitation of having a maximum of 100 named groups in a RE.
1900 * Fixed a TypeError which occurred for formatters that dislike None values.
1902 * Fixed GUI editor converter error for https:... image URLs.
1903 * ThemeBase (use by modern/rightsidebar): removed duplicate AttachFile from
1904 actions menu (we already have it in editbar).
1905 * Speedup group/dicts scanning for persistent servers.
1906 * Implemented HEAD requests for standalone server, this should fix some of
1907 the strange effects happening when using "Save as" on attachments.
1908 * Not a moin bug, but rather a workaround for non-standard non-ASCII DNS
1909 hostnames: we just use the IP instead of crashing now.
1910 * Spurious cyclic usage error in i18n fixed.
1911 * Fixed antispam for python 2.5a xmlrpclib.
1912 * I18n for linenumber toggle in listings.
1913 * All action menu entries are translatable now.
1916 * Added css classes for the rst admonitions. Thanks to TiagoMacambira!
1921 * Added FullSearchCached macro which is statically cached.
1922 Use it if you do not depend on fresh search results but prefer raw speed.
1923 * Added surge protection, see HelpOnConfiguration/SurgeProtection.
1924 * Allow hex and symbolic entities.
1925 * If there is a user with empty password, we just generate a random one
1926 when he requests it getting sent by mail. Thanks to Reimar Bauer.
1927 * The superuser now can switch to another user using UserPreferences -
1928 nice to help your users when they forgot their password or need other
1929 help. You need to logout/relogin to use your own userid afterwards.
1930 This function only works correctly if you use moin_cookie authentication.
1931 Thanks to Reimar Bauer.
1932 * Add new markup for bulletless lists: just use a "." instead of "*".
1935 * Added "voyager" to bot useragent list.
1936 * Added locking for caching subsystem.
1937 * Deron Meranda's formatter API cleanup.
1938 * Added div and span to formatter API.
1939 * Removed old unfinished form and export code.
1943 * Fixed table attribute parsing.
1944 * Fixed cookie handling wrt properties adherance.
1945 * The new "." list markup makes it possible to have a bulletless list with
1946 elements on the same level. Before this change and only using indentation
1947 with blanks, that would get merged into a single paragraph.
1948 * It is possible now to have multiple paragraphs in the same list element,
1949 just leave an empty line in between the paragraphs.
1950 * Fixed GAP processing for ordered lists.
1951 * Fix text_gedit formatter's invalid list nesting.
1952 * Fixed hr crash in blockquote (but needs more work).
1953 * Fixed FootNote's formatter usage.
1954 * Fixed rst's headline levels.
1957 * Fixed that macros were followed by a wrong <p>.
1958 * Added <blockquote> to the block elements in the text_html formatter,
1959 so it does not close it erratically when you close a inner <p>.
1960 * GUI editor converter now also accept http: urls without // (relative or
1962 * Fixed the DocBook parser in cases where the pagename was non-ascii.
1969 * Fixed rst parser docutils version check
1970 * Repaired attachment unzipping feature.
1971 * Fixed the AddRevision command of the PackageInstaller.
1972 * improved the migration scripts (used to migrate pre-1.3 wikis to 1.3+):
1973 * do not crash on empty lines in event log
1974 * fix edit log format for very old moin data (like 0.11)
1975 * workaround for an ugly win32 operating system bug leading to wiki text
1976 file mtime not matching edit logs timestamp values if there was some
1977 timezone change since last edit (e.g. a daylight saving tz switch),
1978 but differing 3600s.
1979 This affected pre-1.3 moin wiki servers running on win32 OS only.
1980 We now try to correct those inconsistencies in mig05 by fuzzy matching.
1981 * fixed bracketed link scheme icon (css class)
1982 * we included a modified copy of Python 2.4.2's copy.py as some previous
1983 python versions seem to have problems (2.3.x, x < 5 and also 2.4[.0]),
1985 Our own copy.py was slightly modified to run on 2.3.x and 2.4.x.
1986 * Fixed the problem of not being able to change the date/time format back
1987 to "Default" (UserPreferences).
1988 * We generate the GUI editor footer now the same way as the text editor
1990 * Include a CSS workaround for yet another IE bug, see:
1991 MoinMoinBugs:InternetExplorerPeekABooBugInRightSideBar
1992 * classic theme: added GUI editor link
1993 * classic theme: added pagename header to editor screen
1994 * the "mail enabled" check now also checks whether mail_from is set
1997 * Updated FCKeditor to current CVS (2006-01-08 == 2.2+)
1998 * Split up show_hosts into show_hosts and show_names
1999 * attachment:file%20with%20spaces.txt in attachment list
2000 * added support for file:// in GUI editor link dialogue, see also:
2002 * cfg.mail_smarthost now supports "server:port" syntax, the default port
2004 * removed unused kwargs showpage/editable/form from wikiutil.send_footer
2005 * updated i18n (translation texts, additional languages)
2006 * removed interwiki:pagename from print view's top of page, added it to
2007 the "lasted edited" line at bottom right.
2011 HINT: 1.5.0 uses the same data/pages format as 1.3.x. The only thing you want
2012 to check is whether the 1.5.x version you are upgrading to has NEW mig
2013 scripts compared to the version you are running now (e.g. in 1.3.5 we
2014 added some scripts that fixed some small problems).
2015 See the MoinMoin/scripts/migration/ directory.
2016 You must run every mig script in sequence and only ONCE ever.
2018 * Fix <x=y> table attributes parsing. Thanks to Reimar Bauer.
2019 * Fixed a few bugs in the reStructured text parser. Note that you
2020 need to install docutils 0.3.10 or newer (snapshot from December 2005
2021 or newer) to make reStructuring parsing work:
2022 * Case preservation for anonymous links
2023 * MoinMoin links get the appropriate CSS class
2024 * Images do not get special CSS markup anymore
2025 Thanks to Matthew Gilbert.
2026 * Fixed a bug in the WSGI code which led to incorrect exception handling.
2027 * Removed all nationality flags. They used to be used for indicating some
2028 specific language (NOT nationality) and this was simply wrong and a bad
2030 * Fixed some header rendering issues (CSS).
2031 * SystemAdmin macro now checks against cfg.superuser list.
2034 * Added turkish i18n. To be considered as alpha as it got in last minute.
2038 This is the first release candidate of MoinMoin 1.5.0.
2041 * fixed broken logs when a DeletePage (maybe also RenamePage) comment
2042 contained CR/LF characters (could happen when using copy&paste)
2043 * fixed GUI editor MoinEditorBackup page containing HTML instead of wiki
2045 * fixed invalid HTML in FootNotes
2046 * fixed HTML source in EditorBackup after canceling GUI editor
2047 * Footnotes of included pages are not shown at the bottom of the including page.
2048 * Bug in Dict handling that often breaks first entry
2052 * Added SSO module for PHP based apps. Currently supported: eGroupware 1.2.
2053 No need to login in two systems anymore - MoinMoin will read the PHP session
2057 * Improved rendering of bullet lists and external links in Restructured text.
2058 Thanks to Matthew Gilbert.
2059 * Fixed modern theme rendering, including some fixes and workarounds for
2061 * When checking for email uniqueness, do not compare with disabled user
2063 * Fix sending of HTTP headers for Despam action.
2064 * Add some margin left and right of the link icons.
2067 * Made it easier for auth methods needing a user interface (like ldap or
2068 mysql stuff). Unlike http auth, they usually need some "login form".
2069 We made UserPreferences login form values (name, password, login, logout)
2070 available as kw args of the auth method, so it is easy and obvious now.
2071 * Make login and logout show at the same place. Is only shown when
2072 show_login is True (default).
2073 * Disabled login using &uid=12345.67.8910 method. Please use name/password.
2074 * Made builtin moin_cookie authentication more modular: the cookie is now
2075 touched by MoinMoin.auth.moin_cookie only, with one minor discomfort:
2076 When creating a user, you are not automatically logged in any more.
2077 * We now use the packager for additional help and system pages in all other
2078 languages except English. The packages are attached to SystemPagesSetup
2079 page and can be installed from there after getting "superuser" powers.
2080 The "extra" package contains a collection of orphan pages not listed on
2081 some SystemPagesIn<Language>Group page.
2086 * Fixed a minor user interface bug: it showed RenamePage and DeletePage
2087 actions in the menu if you only had write rights and then complained
2088 when you really tried when you had no delete rights additionally.
2089 * We don't remove RenamePage and DeletePage from menu any more if user is
2090 unknown. This stuff is only driven by ACLs now.
2091 * Some fixes to Despam action.
2092 * Fixed moin_dump (broken by some recent theme init change).
2093 * Fixed a few tests by moving the theme init from moin_dump to RequestCLI.
2094 * removed old_onload reference from infobox.js
2095 * Fixed MoinMoin logo for IE.
2096 * search: fixed whitespace handling in linkto: search terms
2097 * Increased stability of the tests system by outputting results to sys.stdout
2098 instead of request. Note that this changes the semantics for e.g. mod_py or
2100 * Fixed packaging system in the case of AddRevision that does not alter the page.
2101 * Fixed a few bugs in the XML formatters (dom_xml, text_xml, xml_docbook).
2102 * Fixed link icons. We now just use a.xxx.before where xxx is the link scheme,
2103 e.g. a.http.before. See theme's common.css.
2104 * Hopefully fixed some issue with non-ASCII attachment filenames.
2105 * Workaround for Opera 8.5 making silly "No addition" categories.
2106 * Do not show GUI editor for non-wiki format pages, because we only have a
2107 converter from html to wiki right now.
2108 * Fix the modern CSS issues for editbar, when it shifted content far right.
2109 Also removed the absolute height value that never was right.
2110 * Fix mod_python adaptor bugs failing to handle Location correctly.
2111 See: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=339543
2114 * Added irc:// to the builtin supported link schemas. You can remove it
2115 from config.url_schemas in case you have patched it in there.
2116 * Added cfg.user_autocreate (default: False). Use True to enable user
2117 profile autocreation, e.g. when you use http authentication, so your
2118 externally authenticated users don't need to create their moin profile
2119 manually. The auth method (see cfg.auth list) must check this setting
2120 if it supports auto creation.
2121 * Added user_autocreate support for auth.http and auth.sslclientcert.
2122 * Added "." and "@" to allowed characters in usernames. This is needed
2123 e.g. when using mod_pubcookie for authentication. mod_pubcookie returns
2124 userids like "geek@ANDREW.CMU.EDU" (e.g. the Kerberos domain is part of
2125 the id). Thanks to Brian E. Gallew for his patch, which we used for
2126 inspiration for user autocreation changes.
2127 * Changed auth method to return a tuple (user_obj, continue_flag), see
2128 comments in auth.py.
2129 * auth methods now create user objects with kw args auth_method and
2130 auth_attribs, so that moin knows later how the user was authenticated
2131 and which user object attributes were determined by the auth method.
2132 * Added MoinMoin/scripts/import/IrcLogImporter.py to import supybot's
2133 IRC logs into a moin wiki. We use MonthCalendar compatible page names,
2134 so you can use the calendar for showing / navigating the logs.
2135 * Removed packager binary from FCKeditor (fixing a Debian policy problem).
2136 * Worked around .png transparency bugs of IE with the new logo. We ship
2137 two logos: moinmoin.png without an alpha channel (IE compatible) and
2138 moinmoin_alpha.png which has an alpha channel and looks better on
2139 browsers with full .png support.
2140 * Allow a .zip file to have a directory in it if it is the only one.
2144 * use <span class="anchor"> instead of <a> for line-xxx anchors, this
2145 fixes some rendering problems on IE
2146 * Fixed the ReStructured text parser when it was used with non-HTML
2147 formatters. Increased compatiblity with new docutils code.
2148 (Thanks to Matt Gilbert.)
2150 * cfg.stylesheets = [] (default). You can use this on wiki or farm level
2151 to emit stylesheets after the theme css and before the user prefs css.
2152 The list entries must be ('screen', '/where/ever/is/my.css') style.
2153 * Added sample code for auth using an external cookie made by some other
2154 program. See contrib/auth_externalcookie/*. You need to edit it to
2155 fit whatever cookie you want to use.
2159 * fixed editor preview throwing away page content for new pages
2160 * require POST for userform save and create* action
2161 * use request.normalizePagename() while collecting pagelinks
2162 * do not offer gui editor for safari
2164 * tell user if account is disabled
2165 * added support for linking to .ico and .bmp
2166 * attachment methods for the text_xml and xml_docbook formatters
2168 * updated i18n (fixed nl, did nobody notice this?) and underlay
2169 * changed show_interwiki default to 0
2174 * fix gui editor (converter) crash on save
2177 * Avoid destroying existing page content if editor is called with
2178 template parameter for an existing page.
2179 * fix countdown javascript for browser status line in editor
2180 * added page title display for editor
2181 * added header div for classic theme
2183 Authentication and related:
2184 * Added a WhoAmI.py wiki xmlrpc plugin to check whether auth works
2185 correctly for xmlrpc. There is a counterpart script WhoAmI.py that
2186 uses http auth when calling the xmlrpc plugin, so you can use it to
2190 * Requirements changed to require Python >= 2.3. We recommend that
2191 you use the latest Python release you can get. The reason we
2192 dropped 2.2.2 support is because no developer or tester uses this
2193 old version any more, so incompatibilities crept in the code
2194 without anybody noticing. Using some recent Python usually is no
2195 real problem, see there for some hints in case you still run an
2196 old python: http://moinmoin.wikiwikiweb.de/NewPythonOnOldLinux
2197 The hint also does apply to other POSIX style operating systems,
2199 * We recommend you use MoinMoin/scripts/cachecleaner.py to clean the
2200 wiki's cache (see comments at top of the script).
2201 The cache will automatically be rebuilt (some operations may take
2202 some time when first being used, e.g. linkto: search, so be patient!).
2205 * there is a file CHANGES.config with just the recently changed stuff
2208 * page_front_page old: u"FrontPage" new: u"HelpOnLanguages"
2209 please just read the help page in case you see it :)
2210 * bang_meta old: 0 new: 1
2211 * show_section_numbers old: 1 new: 0
2212 * some regexes that used to be [a-z]Uxxxx$ are now [a-z0-9]Uxxxx$
2213 * navi_bar has no page_front_page as first element any more
2214 * removed settings and code [new behaviour]:
2216 * allow_extended_names [1]
2217 * allow_numeric_entities [1]
2219 * allow_subpages [1]
2221 * cfg.mail_sendmail = "/usr/sbin/sendmail -t -i" can be used if sending
2222 via SMTP doesn't work on your server. Default is None and that means
2224 * language_default replaces the old default_lang setting (just renamed).
2225 * language_ignore_browser = True can be used to let moin ignore the
2226 user's browser settings (e.g. if you run a local-language only wiki
2227 and your users use misconfigured or buggy browsers often). Default is
2228 False. Don't forget to set language_default when using this.
2230 * Wiki Editor changes / new WYSIWYG editor
2231 * fully imported the javascript based LGPLed FCKeditor (many thanks
2232 to Fred CK for his great work). See http://fckeditor.net/ for details.
2233 * config for FCKeditor is at wiki/htdocs/applets/moinfckeditor.js
2234 * added cfg.interwiki_preferred (default = []) to set a list of wikis to
2235 show at the top of the wiki selection list when inserting an
2236 interwiki link (just use the same wiki name as in interwiki
2237 map). If the last list item is None, then the preferred wikis
2238 will not be followed by the entries of the interwiki map.
2239 * moved save/preview/... buttons to the top so that they can be
2241 * reduced edit_rows default to 20 lines
2242 * Added support for edit by doubleclick in the diff view
2244 * Improved wiki farm support
2245 * make user files sharable between several wikis in a farm
2246 * allow/use interwiki subscriptions
2247 * use interwiki links in page trail
2248 * save bookmark per wiki name
2249 * cfg.cookie_domain can be used to set a cookie valid for a complete
2250 domain (default: None == only for this host). If you use '.domain.tld',
2251 the cookie will be valid for all hosts *.domain.tld - good for host
2253 * cfg.cookie_path can be used to set a cookie valid for a wiki farm under
2254 some base path (default: None == only for this wiki's path). If you use
2255 '/wikifarm', the cookie will be valid for all wikis
2256 server.tld/wikifarm/* - good for path based wiki farms.
2257 * Interwiki user homepage (if you have MANY users)
2258 Generated links for usernames are interwiki now, use cfg.user_homewiki
2259 (default: 'Self') to specify in which wiki the user home pages are
2260 located. Note: when pointing this to another wiki, the /MoinEditorBackup
2261 functionality will be disabled.
2262 @SIG@ also uses interwiki when needed.
2264 * Authentication, ACLs and related
2265 * Modular authentication: cfg.auth is a list of functions that return a
2266 valid user or None, use it like this:
2267 from MoinMoin.auth import http, moin_cookie
2268 auth = [http, moin_cookie]
2269 * cfg.auth_http_enabled was removed, please use cfg.auth instead.
2270 * http auth now supports "Negotiate" scheme, too
2271 * Added sslclientcert auth method (Apache: untested, Twisted: not
2272 implemented, IIS: no idea). See MoinMoin/auth.py for details.
2273 Submit a patch if you have improvements.
2274 * cfg.superuser is a list of unicode usernames. It is used by some
2275 critical operations like despam action or PackageInstaller.
2276 * removed allowed_actions, we now use actions_excluded only and it
2277 defaults to [], that means, no action is excluded, everything is
2278 allowed (limited by ACLs). In case of RenamePage and DeletePage,
2279 this shouldn't be a problem as both can be reverted. In case you
2280 did not allow attachments, you now have to use:
2281 actions_excluded = ['AttachFile']
2282 * special users (All, Known, Trusted) in Groups are now supported
2283 * MoinMoin.security.autoadmin SecurityPolicy added
2284 When using this security policy, a user will get admin rights on his
2285 homepage (where pagename == username) and its sub pages. This is needed
2286 for the MyPages action, but can also get used for manual ACL changes.
2287 It can also be used for Project page auto admin functionality, see the
2288 comments in the script for details.
2289 Further it can automatically create the user's group pages when the
2290 user saves his homepage.
2291 * there is a UpdateGroup xmlrpc call, see MoinMoin/xmlrpc/UpdateGroup.py -
2292 you can use this to update your *Group pages e.g. when generating them
2293 from an external group database.
2295 * UserPreferences changes
2296 * Alias name: is used for display purposes, when "name" is cryptic. It is
2297 shown e.g. in the title attribute of userid links (displayed when
2298 moving the mouse over it).
2299 * "Publish my email (not my wiki homepage) in author info" - use this
2300 if you don't have a wiki homepage, but if you want to be contactable
2301 by email. When you edit a page, your email address will be published
2302 as mailto: link on RecentChanges, at bottom of page (last editor) and
2303 in page info. If the wiki runs publically on the internet, be careful
2304 using this or your email address might be collected by spammers.
2305 * Preferred Editor: whether you want to use the text editor (as in
2306 previous moin versions), the gui editor (new!) or both (you will get
2307 2 edit links in that case).
2308 * a user can add/remove the current page to/from his quicklinks with an
2309 appropriate action now
2310 * if cfg.user_email_unique = False, we don't require user's email
2311 addresses to be unique
2312 * removed show_fancy_links user preferences setting to simplify code and
2313 caching. Displaying those icons is now done by CSS styles (see
2314 common.css). Maybe needs fixing for non-standard themes and RTL langs.
2317 * added strikethrough markup: --(striked through text here)--
2318 * @ME@ expands to just the plain username (no markup added) on save
2321 * when a user accesses his own non-existing homepage (pagename ==
2322 username), the wiki will present the MissingHomePage system page
2323 content, explaining what a user homepage is good for and offer
2324 one-click editing it with content loaded from HomepageTemplate
2325 * creation of homepage subpages is assisted by the MyPages action, which
2326 offers rw, ro page creation (and a related group) or creation of private
2327 pages. If you are not in the user_homewiki, you will get redirected
2330 Other changes/new features:
2331 * Added PackageInstaller and unzipping support (see wiki page
2332 HelpOnActions/AttachFile for further details). PackageInstaller requires
2333 the user to be in cfg.superuser list.
2334 * Added an PackagePages action to simplify the package creation.
2335 * Added location breadcrumbs - when you are on some subpage, the page
2336 title parts link to the corresponding parent pages, the last part does
2337 the usual reverse linking.
2338 * added WSGI server support, thanks to Anakim Border, see:
2339 wiki/server/moinwsgi.py (moin as WSGI app, uses the flup WSGI server,
2340 see http://www.saddi.com/software/flup/)
2341 MoinMoin/server/wsgi.py (adaptor code)
2342 * added a "Despam" action to make de-spamming a wiki easy (mass revert
2343 bad changes done by a single author or bot). You need to be in
2344 cfg.superuser to use it.
2345 * Better diffs with links to anchors to the changed places
2346 * Enhanced table support in the DocBook formatter.
2347 * Added 'moin' daemon script, that let you run moin standalone
2348 server as daemon and control the server with simple command line
2349 intreface: moin start | stop | restart | kill
2350 * Add 'restart' option to mointwisted script
2351 * Add properties option to standalone server config. Allow
2352 overriding any request property like in other server types.
2353 * Add support for running behind proxy out of the box with out
2355 See HelpOnConfiguration/IntegratingWithApache
2356 * added a WikiBackup action, configure it similar to this:
2357 data_dir = "/path/to/data"
2358 backup_include = [data_dir, ] # you can add other dirs here
2359 backup_users = ["BackupUserName", ] # only TRUSTED users!
2360 You usually don't need to change the default backup_exclude setting.
2361 The default backup_include list is EMPTY and so will be your
2362 backup in case you don't configure it correctly.
2363 If you put your data_dir there, the backup will contain private
2364 user data like email addresses and encrypted passwords.
2365 * Added a SubscribeUser action which allows the administrator to subscribe users to the
2367 * Added thread count to SystemInfo macro.
2368 * Added Petr's newest patch against the DocBook code. It allows you to use macros (esp. the include macro) in DocBook pages in order to build larger documents.
2369 * Added a RenderAsDocbook action which redirects to the DocBook formatter.
2370 * Added searching for wiki-local words lists under <data_dir>/dict/.
2371 They are used additionally to the global lists in MoinMoin/dict/.
2372 * moin_dump now also dumps attachments referenced from the page.
2373 It doesn't dump stuff that is just attached, but not referenced!
2374 * On RecentChanges we now force the comment to be breakable, this improves
2375 rendering of over-long words or on narrow browser windows - especially
2376 for themes with limited content width like rightsidebar.
2377 * We now have the "new" icon on RecentChanges clickable, just links to the
2379 * Print view now shows "interwikiname: pagename" (for show_interwiki = 1).
2381 International support:
2382 * mail_from can be now a unicode name-address
2383 e.g u'Jürgen wiki <noreply@jhwiki.org>'
2386 * logo_string is now should be really only the logo (img).
2387 If you included your wiki's name in logo_string you maybe want to remove
2388 it now as it is shown as part of the location display now anyway (if
2389 you set show_interwiki = 1).
2390 * You maybe want to remove page_front_page from your navi_bar - we link to
2391 that page now from the logo and (new, if you set show_interwiki = 1) from
2392 the interwiki name displayed in location display, so you maybe don't need
2393 it in navi_bar, too.
2394 * If you have a custom theme, you should / may:
2395 * sync modern/css/screen.css #pagelocation #pagetrail stuff to your
2396 screen.css or pagelocation display (title()) will look strange (like a
2398 * remove "#title h1 ..." CSS (or any other CSS assuming h1 is a page
2399 title and not just a first level heading), it is not used any more.
2400 * we now render = heading = as <h1> (was <h2> before 1.5),
2401 == heading == as <h2> (was <h3>), etc.
2402 * maybe move both title() and trail() to header area, like the builtin
2404 * there is a new interwiki() base theme method that optionally (if
2405 show_interwiki = 1) shows the interwiki name of this wiki and links to
2406 page_front_page. The css for it is #interwiki.
2409 * Plugin API was improved. When plugin module is missing,
2410 wikiutil.PluginMissingError is raised. When trying to import a
2411 missing name from a plugin module, wikiutil.PluginMissingError is
2412 raised. You must update any code that use wikiutil.importPlugin.
2413 Errors in your plugin should raise now correct tracebacks. See
2414 http://moinmoin.wikiwikiweb.de/ErrorHandlingInPlugins
2415 * pysupport.importName was changed, it does not check for any
2416 errors when trying to import a name from a module. The calling
2417 code should check for ImportError or AttributeError. Previous
2418 code used to hide all errors behind None.
2419 * Its easier now to customize the editbar by overriding
2420 editbarItems() in your theme, and returning a list of items to
2421 display in the editbar. To change a single editbar link, override
2422 one of the xxxLink methods in your theme.
2425 * request.formatter (html) is available for actions now
2426 * theme API's d['page_home_page'] is gone (sorry) and replaced by
2427 d['home_page'] which is either None or tuple (wikiname,pagename).
2428 It is better to use the base classes function for username/prefs anyway.
2429 * introduced cfg.hacks for internal use by development, see comment in
2430 multiconfig.py and file HACKS.
2431 * added IE7 (v0.9) from Dean Edwards (see http://dean.edwards.name/IE7/) -
2432 that should fix quite some IE bugs and annoyances (on Win32).
2433 * for enabling IE7, use cfg.hacks = { 'ie7': True }
2434 * reducewiki now also copies all attachments (we use that to make underlay
2435 directory from moinmaster wiki's data_dir)
2438 * Fixed a typo in xslt.py which led to a traceback instead of an
2439 error message in case of disabled XSLT support.
2440 * Fixed crash in twisted server if twisted.internet.ssl is not
2442 * Fixed wrong decoding of query string, enable wiki/?page_name urls
2443 with non ascii page names.
2444 * Fixed wrong display of non ascii attachments names in
2445 RecentChanges and page revision history.
2446 * Fixed a crash when trying to run standalone server on non posix os.
2447 * Fixed highlight of misspelled words in Check Spelling action.
2448 * Fixed case insensitivity problems on darwin (Mac OS X). See
2450 * Added RecentChanges (only the english one) to the pages getting
2451 html_head_index headers
2452 * text_html cache files written with this code will invalidate themselves
2453 if they detect to be older than the wikiconfig. Note: you should remove
2454 all old text_html cache files once after upgrading, they will then be
2455 rebuilt automatically with the new code.
2457 * Fixed the word_rule: a word like AAAbbAbb isn't teared into two parts
2458 any more (was: AA<link>AbbAbb</link>)
2459 * Fixed false positive InterWiki markup for languages like Finnish.
2460 InterWiki links are only rendered if the left side has an appropriate
2461 entry in the interwiki map, otherwise it is rendered as simple text.
2462 * Fixed unicode error when uploding non-ascii file name using mod
2464 * Fixed error handling of wikirpc requests, should give more
2465 correct errors and prevent no error output and blocking the
2466 client in some cases.
2467 * Fixed the "lost password" mail processing. If a user entered some email
2468 address unknown to the system, he was not notified of this, but just got
2469 a useless mail with no account data in it. Now the system directly tells
2470 the user that he entered an unknown email address.
2471 * Fixed SystemInfo, it now also lists parsers in data/plugin/parser dir.
2472 * Fix error handling on failure, improved error display
2473 * Fix error handling when importing plugins or importing modules
2474 dynamically. The fix is not backward compatible with older plugins.
2475 * Fix chart action, returns a page with error message when chart
2477 * Fixed formatter usage in the ShowSmileys macro.
2478 * Fixed updating pagelinks cache for [:page:text] or [wiki:Self:page text],
2479 fixes display of LocalSiteMap and rendering of such links.
2480 * Hopefully fixed urllib problems (esp. with py 2.4.2, but also before) by
2481 using our own urllib wrapper that handles encoding/decoding to/from
2482 unicode, see wikiutil.py. Also made a similar fix for making and parsing
2484 * Fixed MonthCalendar tooltips when containing special chars like quotes.
2485 * Added html escaping for diff text for RSS feed with diff=1.
2486 * The distance between page content beginning and the first = heading =
2487 was much too much. Fixed.
2491 We used that version number for an internal and early development version
2492 for what will be called moin 2.0 at some time in the future.
2493 There will never be a 1.4.x release.
2496 Version 1.3.5 (2005-08-04, Revision moin--main--1.3--patch-883)
2499 * small CSS fix for rightsidebar theme
2500 * applied some Debian patches (thanks to Jonas!):
2501 * de i18n spelling fixes
2502 * AttachFile fix, we strip CR in .draw files now
2503 * when loading spellcheck dictionaries, we want utf-8, but we make
2504 a 2nd try with iso-8859-1 encoding.
2508 * enabled using https with the Twisted server:
2509 You need to use port 443, have PyOpenSSL (+ ssl libs it depends on)
2510 installed and have some site key and certificate PEM files configured in
2511 your twistedmoin.py file:
2512 sslcert = ('/whereever/cert/sitekey.pem', '/whereever/cert/sitecert.pem')
2515 Version 1.3.5rc1 (2005-07-31, Revision moin--main--1.3--patch-865)
2519 * Fixed security bug when acl of deleted page was ignored. See:
2521 * AttachFile did not display the original filename plus there
2522 was a confusion in input field labelling ('Rename to').
2523 * Fixed shortcut link non-existent page detection.
2524 * Fixed non-working bookmark function on python 2.2.x.
2525 * Fixed wikirpc getPageInfo call on python 2.2.x.
2526 * Fixed the failing import of plugins from the data/plugin/
2527 directories if run in zipimport environments.
2528 * Fixed traceback which occurred on negated searches.
2529 * Fixed crash when trying to render error message on twisted, fast
2531 * Fixed error message with modpy, used to show wrong errors below
2533 * Fixed search and goto text fields for better compatibility with
2534 dark themes and better control through css.
2535 * Show an edit link if MissingPage is missing and a warning in the
2537 * Fixed missing footer in the editor.
2538 * Fixed indented (invalid) headings with broken links in table of
2540 * Fixed crash when file name is too long, show standard error message.
2541 * Save trail file in a safe way, should be enough for normal use.
2542 * Fixed remember_last_visit user preferences option when show_trail
2544 * Fixed the tests for Standalone, Twisted, FastCGI and Mod_Python.
2545 Run with ?action=test from any page.
2546 * Fixed rare bug when wrong search type was performed when pasting
2547 search term in Safari.
2548 * Fixed crash for custom formatters and dom_xml (which occurred if
2549 smileys were in the page).
2550 * Editor opens on double click in pages with single quote in the
2551 name, like "Ben's Wiki".
2552 * '/.' in page names are not replaced any more by '/(2e)'
2553 * Fixed the long delays while saving pages using RequestCLI.
2554 * Fixed variable expanding for users with non WikiName.
2555 * Fixed MonthCalendar's calculation of "today" to use the user's
2557 * Fixed moin_dump script, use same configuration options as other
2559 * Fixed url_mappings to work in proxied setups and sent mails
2560 again. Also fixed for image links. Thanks to JohannesBerg.
2561 * Fixed page shown after saving a drawing (esp. when saved from a
2562 sub page). Fixed help link for drawings.
2563 * Fixed mig10 script to run on Python < 2.3.
2564 * The twisted server defaulted to a socket timeout of 12 hours!
2565 We reduced that to a more sane 10 minutes, that should still be more
2566 than enough. This fixed the "too many open files" problem we
2567 encountered quite often recently. Thanks to Helmut Grohne!
2572 * Added cz, pt and pt-br i18n.
2573 * We send a 404 http status code for nonexisting wiki pages now,
2574 maybe this will repell some search engines from requesting gone
2575 pages again and again. The wiki user still sees the MissingPage
2576 wiki stuff, so a user usually won't notice this change.
2577 * Return 500 error code on failure and exceptions.
2578 * Added some more bot / leech tool user agent strings.
2579 * Prevent page floating elements from floating out of the page over
2580 the footer, in modern, rightsidebar and classic themes.
2581 * Encode URLs in a safer way
2582 * We allow usernames with ' character in them now (like Tim O'Brian).
2583 * Added support for the new security flags in docutils 0.3.9.
2584 * @MAILTO@ expands now to safer [[MailTo()]] macro.
2585 * Clarified and i18ned lost password mails.
2586 * Added 'TitleIndex' and 'SiteNavigation' (+ translation) to the
2587 list of pages that use html_head_index (so that robots
2588 "index,follow"). Please make sure to have either FindPage,
2589 TitleIndex or SiteNavigation in your navi_bar or in your
2590 page_front_page content if you want search engines to find all
2592 * Make it possible to send account data when being logged in (for
2593 future reference or whatever purpose).
2594 * Speed up when running with persistent servers, the wiki config
2595 does only get loaded once and misc. stuff is being cached between
2597 * The unit tests are disabled when using multi threading, because
2598 the wiki configuration is shared between diffrent threads.
2599 * The main code path (using standalone server) of MoinMoin runs on
2601 * Formatters do automatically transform HTML to plain text if they are
2602 called with raw HTML code.
2603 * Using larger socket backlog on Standalone and FastCGI servers
2604 should be more reliable on high load.
2605 * We now strip leading path from attachments uploaded by IE (this is
2606 a bug in IE, not in MoinMoin). Better use a sane browser, like Firefox.
2607 * added "teleport" to the user agent blacklist
2611 * Integrated Lupy indexer for better search performance. It is disabled
2612 by default as of 1.3.5 as it still has known issues.
2613 See multiconfig.py if you want to test it.
2614 * Integrated MonthCalendar 2.1, with some new features:
2615 * a mouseover bubble that shows first level headlines of the linked
2617 * all calendars with same pagename move when using cal navigation,
2618 thanks to Oliver Graf
2619 * included AnnualMonthlyCalendar patch of Jonathan Dietrich
2620 (use [[MonthCalendar(Yearly,,,+1,,6,1)]] syntax for birthdays and
2621 other annually repeating stuff)
2622 Make sure you remove old MonthCalendar.* from data/plugin/macro so that
2623 moin will use the new code in MoinMoin/macro/MonthCalendar.py.
2624 Maybe also clear the text_html cache.
2625 * Added the new XSLT parser and the DocBook parser. This should increase
2626 the 4suite compatiblity. See HelpOnXmlPages for details.
2627 It now should run on 4suite 1.0a4 and 1.0b1. Thanks to Henry Ho!
2628 * Added the DocBook formatter. This will let you generate DocBook markup
2629 by writing simple wiki pages. It needs PyXML.
2630 * It is now possible to customize parts of the UserPreferences page in
2631 your wikiconfig (changing defaults, disabling fields, removing fields):
2632 * Use user_checkbox_* for the checkboxes.
2633 * Use user_form_* for other fields.
2634 * See MoinMoin/multiconfig.py for the built-in defaults.
2635 * New standalone server classes: ThreadPoolServer using pool of
2636 threads, ThreadingServer with thread limit and ForkingServer.
2637 * New standalone server configuration options: serverClass,
2638 threadLimit, requestQueueSize.
2639 * Use "PythonOption Location" in mod_python setup to solve script_name
2644 * Theme can now override maxPagenameLength() method to control page
2646 * A search Match now provides access to the full re match via
2647 the re_match attribute (use to access groups of the match)
2648 * Underlay is not managed by arch any more. The tree contains an
2649 underlay tarball, and you should untar after you update from main.
2650 * "make update-underlay" will untar underlay
2651 * "make merge" will star-merge main into your tree
2652 * "make test" will now create and run in a fresh testwiki instace
2653 * "make clean" options added
2654 * _tests module does not have a global request any more. To refer to
2655 the current request in a test, use self.request.
2656 * _tests.TestConfig class require a request in the constructor.
2657 * "python tests/runtests.py test_module" will run only test_module
2658 * request.cfg stays between requests (for persistent servers).
2661 Version 1.3.4 (2005-03-13, Revision moin--main--1.3--patch-666)
2665 * Fixed ACL check in LikePages macro that caused links to unreadable
2667 * Fixed ACL check in newpage action.
2668 * Fixed a security problem when admin policy defined in a custom
2669 SecurityPolicy class was ignored.
2670 * Fixed ACL check in action=show so that a user who may not read a page
2671 also can't find out WHEN the protected page was updated.
2672 * Workaround on Windows 95, 98, ME in order to clear the dircache.
2673 This fixes some bugs related to an outdated page list and newly created
2674 pages that did not appear immediately.
2675 * Fixed decoding issues of page names on Windows, finally.
2677 * Fixed traceback on IIS.
2679 * Fixed wikirpc for standalone server.
2680 * Other fixes (encoding and str/unicode data type related) to wikirpc
2681 server, fixing some non-ascii issues hopefully.
2682 * Fixed broken query strings for Standalone installations.
2683 * Fixed backlinks - the result did not always show all links, often it
2685 * Fixed the acceptance of the show_hosts setting. Now you should be able
2686 to hide any IP or host name from being published by MoinMoin by enabling
2688 * Fixed wrong line endings on email messages.
2690 * Fixed crash when trail file is missing.
2691 * Fixed a traceback when searching for single ( or ).
2692 * Added mig10 script to fix crashes with uncoverted edit-locks and file
2693 attachments. Just use it as you did with mig1..mig9 before.
2694 * Added mig11 script to add __init__.py files to data/plugin (and below).
2695 * added some fixes for the xslt parser (thanks to fanbanlo), it might be
2696 still broken, but someone with deeper knowledge about xslt should fix it.
2697 * Replaced image link with W3C's "html 4.01 compliance" icon by a simple
2698 text link to avoid https: or config trouble.
2699 * Catch OverflowError backtrace when illegal date strings (e.g. <1970 or
2700 >2038) are fed to moinmoin's time routines. It will just output current
2701 date / time in those cases.
2702 * UserPreferences now also set a date_fmt preference and Date macro
2703 honours it. You may have to reset your UserPreferences value for that.
2704 * Fixed free parent and subpage links in interwiki notation.
2706 * Fixed a traceback for invalid ReST markup.
2707 * Fixed UnicodeError in SystemAdmin's Attachment Browser.
2711 * Optimized the IRC parser.
2712 * Support for zipimport of the MoinMoin package. This allows you to use
2713 py2exe and similar programs.
2714 * Show the editor's name in the mail subject.
2715 * Added the pragmas description and keywords. They will add <meta> headers
2717 * Added MoinMoin/scripts/xmlrpc-tools/putPageTest.py example script, useful
2718 as a starting point for importing data using wiki xmlrpc.
2719 * Optimised display on Opera browser.
2723 * The search modifier "linkto:" was introduced. You can use it to search
2725 * The NewPage macro now can take a PageTemplate parameter, see HelpOnMacros.
2726 * New config settings (so you don't need to edit wikirpc.py any more):
2727 xmlrpc_putpage_enabled = 0 (if 1, enables writing to arbitrary page names)
2728 xmlrpc_putpage_trusted_only = 1 (if 0, doesn't require users to be
2729 authenticated by http auth - DANGEROUS, DO NOT SET TO 0!!!)
2730 * Added support for Digest and NTLM authentication with CGI (e.g. if you
2731 use those Apache modules)
2732 * The datetime string accepted by Date and DateTime macros was extended to
2733 accept a timezone specification, so now +/-HHMM is also valid, e.g.:
2734 2005-03-06T15:15:57Z (UTC, same as +0000)
2735 2005-03-06T15:15:57+0000 (UTC)
2736 2005-03-06T16:15:57+0100 (same time given as local time for time zone
2737 with offset +0100, that is CET, e.g. Germany)
2738 2005-03-06T10:15:57-0500 (same time given as local time for time zone
2739 with offset -0500, EST, US Eastern Std. Time)
2740 The values given as macro argument will be transformed to UTC internally
2741 and then adapted again according to viewing user's UserPreferences, so
2742 the user will see the same moment in time but shown in his local time
2743 zone's time (at least if he set his UserPreferences correctly and didn't
2744 forget changing them twice a year for DST and non-DST).
2745 * Readded (now optional) editlink footer to Include macro. Add
2746 ',editlink' to call to enable this.
2747 * star "smileys" e.g. {*}{*}{*}{o}{o}
2750 Version 1.3.3 (2005-01-24, Revision moin--main--1.3--patch-595)
2754 * fixed ACL security problem in search
2755 * fix for IIS with CGI allowing page names that contain chars
2756 that are not in the system code page
2757 * fixed MoinEditorBackup revisions to start with 1 now
2758 * improved page locking ('current' file)
2759 * Unittests (normally shown at end of action=test output) are currently
2760 disabled for everything except CGI, because they only work reliably with
2761 CGI, giving wrong results for other request methods.
2764 Version 1.3.2 (2005-01-23, Revision moin--main--1.3--patch-587)
2768 * ACL bugfix for deleted pages with ACL protection.
2769 * ACL bugfix for "Default" acl.
2770 * Fixed updating of groups and dicts
2771 * Python 2.2.x related fixes (worked on 2.3+)
2772 * Fixed traceback in RecentChanges.
2773 * Fixed traceback with links browser.
2774 * Fixed 0 revision display in 'Show changes'.
2775 * Fixed traceback in Antispam which occurred when it could not connect
2776 to MoinMaster. Log the errors to stderr or error.log.
2777 * Fixed bug in Page init (no date, use rev). Fixes problem with
2779 * Fixed empty lists in empty search results.
2780 * Cosmetic fix for modern theme (when viewed with Internet Explorer).
2781 * Fixed migration 9 script, do not drop newline, do not drop error.log,
2782 note about missing error.log.
2783 * Fixed repair_language.py script, keep ending newline on revisions.
2784 * Show headings and macro content in correct direction when mixing content
2785 in several directions in the same page and using caching.
2786 * Fixed bug in standalone re farmconfig.
2787 * Fixed DOS condition in antispam code.
2788 * Use smaller margin in print mode to get better results with
2790 * Fixed some user input escaping issues.
2791 * Fixed a problem when one wiki plugin override other wikis plugins in
2793 * Fixed some broken tests.
2794 * Fixed recursive include in pstats.
2795 * Fixed bug in standalone - HTTP result code was 200 even when the access
2797 * Fixed traceback when trying to login with non-ascii password.
2798 * Fixed traceback when xml is not available, reported on Python 2.2.?
2799 * Fixed slideshow to show slides in sorted order again.
2800 * Fixed serving multiple wikis on same IP/different ports with twisted and
2802 * It is possible to run with data_underlay_dir = None for special
2803 application, but be aware that the wiki won't be usable unless you have
2804 at least some of the system pages from underlay/ available.
2805 * Files with Unicode characters in their filename are possible now.
2806 * Bugfix for broken [:page#anchor:text] links.
2807 * Workaround an instability of the gdchart module leading to
2808 stalled servers etc.
2809 * Fixed some event-log decoding issues that affect charts rendering.
2813 * Major speed improvement over 1.3.1. Many times faster title search,
2814 creating new page, opening page editor and any operation that list pages.
2815 See http://moinmoin.wikiwikiweb.de/MoinBenchmarks
2816 * Improved README.migration.
2817 * Cleaner design for login/register interface, login is always the default
2818 button when the user click Enter.
2819 * If there are problems found in the configuration, log the error
2820 and display helpful error messages in the browser.
2821 * More forgiving unicode configuration policy, you must use the u'string'
2822 format only for unicode values.
2823 * Added profiling to CGI.
2824 * The content of farmconfig.py is similar to wikiconfig.py now.
2825 * Unexpected errors while loading cache files are logged.
2826 * i18n for icon ALT tags.
2827 * Include request initialization code in the profile in standalone server.
2828 * When creating new theme, style sheets are inherited correctly, no need
2829 to override style sheets just to get them working.
2830 * Many times faster plugin system. Typical pages are about 35% faster,
2831 pages with many plugins can be many times faster.
2832 * Spiders are allowed to fetch attachments.
2833 * Old user files containing password hash encoded in pre 1.3 charset
2834 are auto repaired on first login.
2835 * data_dir defaults to './data', underlay_data_dir to './underlay' now.
2836 It is a good idea to replace those by absolute pathes in wikiconfig.py.
2837 * Renamed "Refresh" to "Delete Cache" - it was misused by users. The action
2838 was also moved into the action menu in the modern and rightsidebar themes.
2839 * Added a workaround for TableOfContents missing some links by making it
2840 uncacheable via a "time" dependency.
2841 * Removed interwiki icon and title attribute for wiki:Self:... links.
2842 * Unittests (normally shown at end of action=test output) are currently
2843 disabled because they worked unreliably, giving wrong results sometimes.
2847 * Create new pages easily using configurable interface and page templates
2848 with the new NewPage macro.
2849 * ReStructuredText (rst) support is built-in now. See HelpOnParsers.
2850 * New experimental feature in mointwisted.py - each interface may
2851 specify a port: '12.34.56.78:80'. Without a port, the port option
2857 * wikiutil.importPlugin's first argument is now a wiki config instance
2858 (request.cfg) and there is no path keyword.
2859 * Wiki plugins always override MoinMoin plugins. wikiutil.importPlugin
2860 implements this override.
2861 * util.pysupport.importName does not accept path - you should call
2862 it with correct module name, e.g 'wikiconfig.plugin.parser.wiki' for
2863 wiki plugins, or 'MoinMoin.parser.wiki'.
2864 * wikiutil.extensionPlugin was renamed to wikiPlugins and it gets config
2865 instance instead of path.
2866 * New function wikiutil.importWikiPlugin used to import wiki plugins
2867 using a cache in a thread safe way.
2868 * New config option config.use_threads is used to activate thread
2870 * New keyword arguments for getPageList, enable 10X faster operation
2871 for common cases by controlling page filtering.
2872 * New up to 100X times faster getPageCount
2875 Version 1.3.1 (2004-12-13, Revision moin--main--1.3--patch-434)
2879 * Fixed "Error Cyclic usage" crash when user had Italian (it), Korean
2880 (ko), Serbian (sr) or Vietnamese (vi) as user interface language.
2881 * Fall back to en (instead of crashing) when user uses a language moin
2882 does not support / does not support any more (like pt,sv,fi,sr).
2883 * In 1.3.0, people accidentally put iso-8859-1 chars into wiki configs,
2884 but those where expected to be pure utf-8 and thus it crashed.
2885 Fixed by using unicode strings (varname = u'whatever'), a matching
2886 encoding setting (see top of script comment) and, when decoding strings,
2887 using decode to ASCII with replace mode (this replaces non-ASCII chars,
2888 but at least it won't crash - and you get a warning to better use
2890 * Fixed long time broken table formatting. ||<style="see css spec" a||b||
2891 Now even generates valid HTML! The old markup for align, valign, width,
2892 bgcolor still works, but synthesizes style attribute data.
2893 * SystemAdmin macro shows attachments of ALL pages now.
2894 * Users without write acl rights will be able to see attachments again and
2895 also have AttachFile action in menu.
2896 * Fixed wrong match count in search results, find all matches in page
2897 titles, show all matches in contents in some rare cases.
2898 * Run about 200% faster with long running processes (standalone, Twisted),
2899 about 20% faster with cgi, by better internal data handling in wikidicts.
2900 * On SF, the dict files use utf-8 encoding now. We included them also in
2901 distribution, see contrib/dict/.
2902 * Fixed permissions to shared template stuff.
2903 * Speeded up search, fixed wrong match counts.
2904 * Speeded up internal data handling (wikidicts).
2905 * Fixed rare unicode error after deleting a page (reported only on SuSE
2906 Linux 9.0 / Python 2.3.0).
2907 * Fixed file permissions of files in the data dir.
2908 * Fixed some cosmetic problems in migration scripts and use sys.path.insert
2909 to get latest moin code when executing them.
2913 * Improved docs, system and help pages.
2914 * Updated translation files.
2918 * Internet Explorer renders our HTML/CSS in a suboptimal way.
2920 Workaround: use a non-broken browser like FireFox / Mozilla.
2921 Fixed in MoinMoin 1.3.2.
2922 * Passwords using non-ascii do not work.
2924 * The TOC macro is broken partly.
2927 * See also: http://moinmoin.wikiwikiweb.de/MoinMoinBugs
2930 Version 1.3.0 (2004-12-06, Revision moin--main--1.3--patch-400)
2932 As you see from the length of the 1.3 changes below, 1.3 is a major(!)
2933 upgrade. We could have also named it "2.0", but we decided against.
2934 So take the time for reading the informations thoroughly and do the
2935 migration exactly as we tell you - this is no 5 minutes upgrade!
2937 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2938 !!! We heavily changed configuration, data encoding, dir layout: !!!
2939 !!! * the default encoding changed to utf-8. !!!
2940 !!! * also, we changed the escaping for special chars to %XX%YY in !!!
2941 !!! URL and (xxyy) in file system. !!!
2942 !!! * layout of data dir changed completely !!!
2943 !!! If you upgrade an existing wiki, you must run the migration !!!
2944 !!! scripts or you will get data corruption or other problems. !!!
2945 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2947 HINT: Upgrading your wiki - critical information
2949 If you are NOT starting from scratch, you MUST convert your existing
2950 data - see README.migration for details.
2952 If you use ##language: xx comments on your OWN pages, you should also run
2953 repair_language script. Not needed for help/system pages as we already
2954 have done that for you.
2956 MoinMoin uses Unicode internally now (UCS-2 with 16 bits or UCS-4 with
2957 32 bits, depending on your Python installation). The encoding used
2958 for page files and html output is set by config.charset.
2960 Moin 1.3 uses utf-8 encoding only, there is NO SUPPORT for using a
2961 charset different from utf-8 with 1.3. If you try, you are on your own.
2965 Directory layout was heavily changed. Each page now is a directory,
2966 containing page revisions, attachments, cache files and edit-log.
2968 You can delete a page or move a page from one wiki to another
2969 easily. Look at the wiki/data directory to see.
2972 old: data/text/FrontPage
2973 new: data/pages/FrontPage/revisions/00000042
2974 data/pages/FrontPage/current (contains: 00000042)
2975 old: data/backup/FrontPage.xxxxxxxx
2976 new: data/pages/FrontPage/revisions/00000023
2978 For cleaning up cache files, use MoinMoin/scripts/cachecleaner.py
2979 (see comments in script).
2983 * For using RSS, you need to have PyXML installed:
2984 Python 2.4* -> PyXML 0.8.4 (cvs version)
2985 Python 2.3.x -> PyXML 0.8.3
2986 Python 2.2.2+ -> ???
2987 This will also make "Live Bookmarks" of Mozilla Firefox working.
2988 New: if you don't have PyXML installed, the RSS icon on RecentChanges
2989 will not be displayed any more. Python with no PyXML installed
2990 generates invalid RSS XML.
2994 * Handling of special characters in file names changed from _xx format
2996 * In URLs, moin now uses %xx%yy quoting, (because this is supported by
2997 browsers), and sub pages use "/" instead of the ugly "_2f".
2998 * Underscore character "_" is used now as a space character " " both
2999 in file names and URLs. " " and "_" will be handled equivalent at most
3000 places in the future (represented as "_", rendered as " ").
3001 * To prevent wiki abuse and user typing errors, page names are normalized
3002 in URLs, query strings, the "go" box and when renaming pages. This
3003 include leading, trailing and multiple slashes and white space. Certain
3004 invisible unicode characters are removed from page names.
3005 * Group page names are restricted even more, any non unicode alpha-numeric
3006 character is removed. This is done to enable changing acl syntax in
3007 the future. The restriction might be loosen on future versions.
3008 * You can edit config.page_invalid_chars_regex to control which characters
3009 are allowed in page names (Changing it is not supported).
3010 * When you enter page name, it is normalized and you are redirected to
3011 the normalized page, or if nothing left (e.g '/////'), to FrontPage.
3012 * When renaming a page to a name that can be normalized to an empty string,
3013 the new page name will be "EmptyName" and the user will not get an
3018 * Pages (especially system and help pages) are now located in an underlay
3019 directory (data_underlay_dir). You will see the pages there if they are
3020 NOT covered (overlayed) by a page in the normal pages directory
3021 (as set using data_dir).
3022 MAKE SURE THAT data_underlay_dir IS CORRECT OR YOU WILL SEE MANY EMPTY
3023 PAGES ONLY IN A NEW WIKI.
3024 * If you edit a page that is shown from underlay directory, it will be
3025 copied to the normal page directory on save (copy-on-write).
3026 * You can use one copy of the underlay directory shared by many
3027 wiki instances. Each wiki will then have only your local, self-made
3028 wiki pages in its data directory, and only system and help pages in the
3029 single, shared underlay directory - this simplifies upgrades a lot.
3030 * It is recommended to keep your underlay system and help pages immutable
3031 using acl, so you can upgrade your wiki easily. The default help and
3032 system pages already have those ACLs (using MoinPagesEditorGroup).
3033 * Do not forget to remove your old help and system pages after migrating
3034 your wiki. We don't provide a script for that as that would be
3035 dangerous for edited pages. Just use some file manager (e.g. mc) to
3036 clean the data/pages/ directory. As soon as you have removed the
3037 system pages there, you will see the new pages in the underlay dir.
3038 See the EditedSystemPages page for a list of pages that exist in both
3039 data and underlay directory (use this page as admin!).
3041 When updating from 1.2 or lower to 1.3 or higher, you will want to
3042 clean out the copies of the system pages in your {{{wiki/data}}}
3043 directory. All of these pages will now reside in the underlay
3044 directory. If you have system pages from 1.2 or lower in your
3045 wiki/data/ directory, they will overshadow the more up-to-date
3046 documentation. This can be done using the following manual procedure:
3047 1. You have just converted from 1.2 or lower to post-1.3.
3048 2. Go to your wiki's EditedSystemPages.
3049 3. Find all the pages that are MoinMoin system or help pages. You will
3050 know if it is one of those pages because it is not your page.
3051 4. Check if it is okay to delete by either:
3052 1. Using the this page "info" link and check the Revision History to
3053 see if it is greater than 1. If so, there are modifications, so do
3054 not delete the page and evaluate the modifications to see if they
3056 2. Using your file browser (Windows Explorer, etc) to go to your
3057 wiki/data/<<systemPage>>/revisions/ directory and to see if there
3058 are no modifications. If there are, do not delete the page and
3059 evaluate the modifications to see if they are necessary.
3060 5. Delete that wiki/data/<<systemPage>> using your file browser.
3064 * New file name quoting method allow 50% longer page names in languages
3065 that use more than one byte per character, like Hebrew, Korean etc.
3066 * Configuration file uses 'utf-8' encoding now. Certain values that are
3067 marked with [Unicode] can use any character in your language. Examples
3068 are page names in navi_bar, page types regular expressions and site name.
3069 * For configuration examples adopted to your language, check ConfigMarket
3070 in the MoinMoin wiki.
3071 * The system and help pages that come with moin are now in utf-8.
3072 * MissingPage system page localized, should display in your language.
3073 * We did many i18n (translation) updates.
3074 * CSS file use utf-8 encoding. User css is also expected to be utf-8.
3075 This is relevant only if you use non-ASCII values in the CSS file.
3076 * config.upperletters and config.lowerletters were removed.
3077 We now use a pre-made ucs-2 spanning set and you usually don't have to
3078 change it. See MoinMoin/util/chartypes.py if you're interested.
3079 * ACL works with any user name or group name in any language, even names
3081 * Now you can use any charset in config.charset. Note: only utf-8 is
3082 a supported configuration!
3083 * Improved url handling, now creating pages directly from the browser
3084 url box with non-ascii names works in most cases, even when
3085 config.charset is not utf-8.
3086 * When using non-utf-8 config.charset, characters in URLs that does
3087 fit in the charsets are replaced with "?" (instead of crashing).
3088 * All themes and most macros and actions are Right to Left friendly.
3089 Full RTL support planned for 1.3 release.
3090 * If page language is specified with #language processing instruction
3091 the page is displayed in the correct direction. Pages without
3092 language are displayed using the wiki default_lang.
3094 Multiple configurations
3096 * You can run multiple wikis from the same wiki directory or server.
3097 For example, you can run one Twisted server that serve multiple wikis,
3098 instead of running multiple servers. Samples of the new configuration
3099 are supplied in wiki/config/*.
3100 * You can't just use your old moin_config.py file. It is now called
3101 wikiconfig.py and the config variables now have to be in a class
3102 "Config" and that class must inherit from
3103 MoinMoin.multiconfig.DefaultConfig - see the provided wikiconfig.py
3105 This is very useful, e.g. you could derive a GermanConfig from
3106 DefaultConfig. After that, you can derive configs for wikiA and wikiB
3107 from that GermanConfig.
3108 * farmconfig.py contains a mapping attribute called "wikis" with pairs of
3109 wikiconfig module name and regular expression. The regular expression
3110 is matched against the URL of the request and the first matching entry
3111 determines the config module to be imported by MoinMoin.
3112 * If you use farmconfig.py's "wikis" mapping, then any wiki has a private
3113 config module, named after the wiki - e.g. wiki named moinmoin would
3115 * If you only have a single wiki, you do not need farmconfig.py. just make
3116 a wikiconfig.py and it will be used no matter what URL is requested.
3117 * There is one common global "config" that holds sitewide settings (like
3118 umask or charset) - you do not need to change settings there.
3119 This file is located in the MoinMoin code: MoinMoin/config.py.
3121 General configuration
3123 * SecurityPolicy now uses "write" instead of "edit" (so it is may.write
3124 now). This is to get it in sync with ACLs.
3125 * SecurityPolicy now automatically can use everything in acl_rights_valid.
3126 * There is a new config option "config_check_enabled". It will warn about
3127 any unknown variable name (probably typo) to stderr or error.log.
3128 If something doesn't work at all and changing the config does no
3129 difference, switch it on and look at the error message.
3130 * The sample config file comes with config_check_enabled = 1. If you
3131 introduce additional variables yourself, you definitely want to switch
3132 that check off or it will fill your log.
3133 * If you define "page_front_page" variable, this name will show in the
3134 navigation bar now, instead of the default "FrontPage".
3138 * Full text and title search do support multiple search terms now -
3139 see HelpOnSearching for details.
3140 * Regular expressions are still supported but have to be turned on per
3141 search term. Search terms in macros using regular expressions will have
3143 * The URL interface of the search engine has also changed. Links that
3144 point directly to search actions may be broken.
3148 * User names can not use group names, even if ACLs are not enabled.
3149 This will prevent error later, if you start to use acl in the future
3150 (acl is going to be mandatory in 1.5).
3151 * User names are not restricted any more to only CamelCase.
3152 * To prevent imposing as other users, leading, trailing and multiple
3153 whitespace in user names is not allowed. Only Unicode alpha numeric
3154 characters are allowed, with optional one space character between
3156 * When a user name with a group name or "bad" name is trying to
3157 access the wiki, he is redirected to the UserPreferences page and
3158 asked to create a new account.
3159 * When trying to login or create a new account with a bad name,
3160 correct error message is displayed in all cases.
3164 * You can not use your old moin.cgi file, as we removed cgimain.py
3165 (was deprecated since 1.2). Copy the new file from the server dir.
3167 Moin servers - Twisted and standalone
3169 * Configuration self checking on startup. Will raise an error in case
3170 of bad configuration or non-accessible directories.
3171 * Both use shorter and identical configuration options.
3172 * Server scripts contain detailed comments and examples.
3173 * Configuration defaults changed to fit most users.
3174 * There is memory profiler option for debugging, switched off by default.
3175 * If you perform a standard install, server scripts should run out
3176 of the box or with minimal change.
3180 * All code moved into the new server package, the server script
3181 contains only configuration options.
3182 * Listen to more than one interface with "interfaces" list.
3183 * Code updated to new Twisted API.
3184 * Use mointwisted script to start and stop the server, using
3185 "mointwisted start" and "mointwisted stop".
3186 * The Twisted server runs as daemon by default.
3187 * All moin Twisted files are called now mointwisted instead of
3189 * Fixed getting username from Twisted request (http auth)
3193 * Configuration moved from moin_config.py to moin.py.
3194 * If run as root, you can set both user and group for the server.
3195 * Can use logfile instead of logging to stderr.
3196 * Fixed missing unquoting of query string (caused problems in rare cases).
3200 * moin_modpy server files renamed to moinmodpy.
3204 * '''strong''', ''em'' and __underline__ have now paragraph scope. You can
3205 set these attributes on words level. For multiple paragraphs, wrap each
3207 * If you leave unclosed ''', '' and __ markup, its is closed when the
3212 * Due to many changes in CSS files, the wiki may look "broken" until
3213 your reload once or twice, or empty your browser cache.
3214 * The "Send mail notification" checkbox is replaced by "Trivial change"
3215 checkbox. The default behavior did not change - regular edit is not
3216 a trivial change, and mail will be sent to subscribes. If you check
3217 trivial change, mail will be sent only to users who selected to
3218 get trivial changes in their user preferences.
3219 * New theme "modern" has been added, and used as default theme.
3220 * classic and rightsidebar improved.
3221 * viewonly theme removed, as any theme can be use now as viewonly
3222 by using #acl All:read in the wikiconfig.
3223 * All themes use new navibar, displaying both wiki links, user links
3224 and the current page.
3225 * navibar and pagetrail use now shortened page names, so very long
3226 names does not break the interface visually.
3227 * All themes have improved search interface at the top of the window.
3228 * Only avaiable actions are displayed, so most situations when a user
3229 try to do something he can't do are prevented.
3230 * When creating a new page, no action is available until the page
3231 is created. You can't attach files to non-existing page any more.
3232 * Non registered users get a "login" link. Registered uses get
3233 "username" link to their home page, and "user preferences" link.
3234 * Messages more clear using bold type, designed by css.
3235 * Few useless messages removed (but there are many more)
3236 * Default wiki logo uses the wiki name instead of the MoinMoin troll
3239 Other fixes and changes
3241 * Most generated html code is valid "html 4 strict". There are still
3242 some problems that still have to be fixed, mainly macros, table
3243 attributes, and inline markup crossing (<a><b></a></b>).
3244 * WantedPages can include and exclude system pages, which makes it
3246 * Fixed a bug in TitleIndex where not all system pages are excluded.
3247 * RenamePage action now renames everything, including backups, page
3248 history, attachments. It does not change toplevel editlog, though.
3249 After you rename a page, you are redirected to the new page.
3250 * Syntax colorization supports more languages (Java, C++, Pascal)
3251 * Inline: display of attachments was extended. A Parser now knows which
3252 extensions it can handle.
3253 * TableOfContents and Include macros now cooperate a bit better. There
3254 are still problems with multiple Includes of the same page.
3255 * Excluded actions at bottom of page are not displayed any more.
3256 * Editor: removed the columns size setting, just using 100% of browser
3257 window width (it didn't work because of that anyway). Also removed that
3258 "reduce editor size" link at top of editor as you would lose your
3259 changes when using it.
3260 * Removed the option to choose text smileys instead of images, this made
3261 more trouble than it was worth. The text version is still given in ALT
3263 * Moved stuff from contribution/ to MacroMarket page on MoinMoin wiki
3264 * Some nasty people try to use a running moin as a proxy (at least they
3265 did on moinmaster.wikiwikiweb.de:8000, maybe due to the magic port
3266 number). We changed the code to check for that and just return 403
3267 in that case. Moin can not be used as a proxy anyway.
3268 * moin.cgi?test was removed in favor of a new buildin test
3269 action. It works for all deployments, just use ?action=test.
3270 * Sending mail does use tls if server supports it.
3272 3rd party developer notes
3274 * Themes should be now sub class of MoinMoin.theme.ThemeBase. Sub
3275 classes will get automatically all new improved user interface
3277 * Theme authors should update their theme for 1.3. Some keys removed
3278 from them dict. See ThemeBase class in MoinMoin/theme/__init__.py.
3279 * Actions writers should call request.setContentLangauge with the
3280 correct language used by the action. This enable themes and other
3281 code to use correct direction.
3282 * The Formatter interface was changed. Formatters and parsers using
3283 the formatter interface have to be adjusted.
3284 * started deprecation of Processors: they are still recognized, but
3285 implementors should start to rewrite their Processors as Parsers.
3286 A processor with the same name as a parser in a pre #! section is
3287 currently preferred. This will change in the next release.
3291 * Processors are deprecated, see section above.
3293 * Using the cookie (or the login url with ID) only and not setting (or
3294 setting and not remembering) your email/password in UserPreferences
3295 is DEPRECATED. Those quite unsecure methods will likely be dropped
3296 in next moin version.
3298 * Operating with acl_enabled = 0 is also DEPRECATED. Due to some other
3299 improvements planned, we will have to operate with ACLs enabled ONLY
3300 in a future moin version, so this setting will likely be dropped.
3301 So clean up your user accounts (see moin_usercheck.py) and switch ACLs
3303 There are no drawbacks, so you will like it. Having ACLs enabled
3304 doesn't mean you really have to USE them on wiki pages...
3306 * allow_extended_names = 0 is deprecated (default was/is 1).
3307 Future versions will be able to use extended names (aka free links) in
3308 any case and the config setting will be removed.
3310 * allow_subpages = 0 is deprecated (default was/is 1).
3311 Future versions will be able to use subpages in any case and the config
3312 setting will be removed.
3314 * attachments = {...} - we would like to remove that setting because of
3316 * when not being extremely careful, this can easily lead to security
3317 problems (like when uploading a .php exploit and then executing it
3318 by accessing it directly via web server)
3319 * makes code more complicated - code that we want to change completely
3321 If you need that feature, speak up now and tell us your reasons WHY you
3325 Version 1.2.4 (2004-10-23, Revision 1.187)
3327 This will probably be the last 1.2.x release as we are soon doing release
3328 candidates for 1.3 release (with big internal changes) and are expecting
3329 release 1.3 in december 2004.
3332 * fixed "None" pagename bug in fullsearch/titlesearch
3333 * fixed projection CSS usage
3334 * the compiled page is removed when a page is deleted, so no ghost page
3335 appears after deletion
3336 * fixed AbandonedPages day-break problem
3337 * fixed [[GetVal(WikiDict,key)]]
3338 * the msg box is now outside content div on PageEditor, too
3339 * privacy fix for email notifications: you don't see other email addresses
3340 in To: any more. mail_from is now also used for To: header field, but
3341 we don't really send email to that address.
3342 * privacy fix for /MoinEditorBackup pages that were made on previews of
3343 pages that were not saved in the end
3344 * fix double content div on PageEditor preview
3347 * workaround for broken Microsoft Internet Explorer, the page editor now
3348 stops expanding to the right (e.g. with rightsidebar theme).
3349 Nevertheless it is a very good idea to use a non-broken and more secure
3350 browser like Mozilla, Firefox or Opera!
3352 * from MoinMoin.security.antispam import SecurityPolicy in your
3353 moin_config.py will protect your wiki from at least the known spammers.
3356 * xmlrpc plugin for usage logging, currently used for antispam accesses
3358 * (re-)added configurable meta tags:
3359 * html_head_queries = '''<meta name="robots" content="noindex,nofollow">\n'''
3360 * html_head_posts = '''<meta name="robots" content="noindex,nofollow">\n'''
3361 * html_head_index = '''<meta name="robots" content="index,follow">\n'''
3362 * html_head_normal = '''<meta name="robots" content="index,nofollow">\n'''
3364 * i18n updates/fixes
3366 * New UserPreferences switch:
3367 you may subscribe to trivial changes (when you want to be notified about ALL
3368 changes to pages, even if the author deselected to send notifications).
3370 * New AttachList and AttachInfo macros - thanks to Nigel Metheringham and
3373 Version 1.2.3 (2004-07-21, Revision 1.186)
3376 * fixed NameError "UnpicklingError" in user.py
3377 * fixed version number in moin.spec
3378 * reverts done by bots or leechers
3379 There was a bad, old bug that triggered if you did not use ACLs. In that
3380 case, moin used some simple (but wrong and incomplete) function to
3381 determine what a user (or bot) may do or may not do. The function is now
3382 fixed to allow only read and write to anon users, and only delete and
3383 revert to known users additionally - and disallow everything else.
3384 * avoid creation of unneccessary pages/* directories
3385 * removed double content divs in general info and history info pages
3386 * fixed wiki xmlrpc getPageHTML
3387 * fixed rightsidebar logout URL, also fixed top banner to link to FrontPage
3388 * use config.page_front_page and .page_title_index for robots meta tag
3389 (whether it uses index,follow or index,nofollow), not hardcoded english
3391 * ACL security fix for PageEditor, thanks to Dr. Pleger for reporting
3392 * default options for new users are same as for anon users
3394 Version 1.2.2 (2004-06-06, Revision 1.185)
3398 * own copy of difflib removed
3399 Until moin 1.2.1 we had our own copy of python 2.2.3's difflib coming
3400 with moin. This was to work around some problems with broken older 2.2
3401 python installations. We removed this now because if you have py 2.3,
3402 there is even a better difflib coming with python (and that fixes an
3403 extremely slow diff calculation happening in some rare cases).
3404 So the good news is that when you run python 2.3, you don't need to do
3405 anything and it will run great. If you run python 2.2.3, it will mostly
3406 work good and you also don't need to do anything. The bad news is that
3407 if you run an old and broken 2.2 installation (2.2.1, maybe 2.2.2) you
3408 will have to fix it on your own (just copy difflib.py from python 2.2.3
3409 over to your python 2.2.x installation).
3410 But better upgrade to python 2.3 (for debian woody, there's a backport),
3411 as 2.3 generally runs better and faster than 2.2.
3412 * scripts changed to use #!/usr/bin/env python (not /usr/bin/python2.2)
3414 * user accounts and ACLs:
3415 * we now require the user to specify a password for a new account (you
3416 were not able to login without a password anyway)
3417 * it is not allowed any more to create user accounts with user names
3418 matching config.page_group_regex - please check manually that you do
3419 not already have such users existing (like a user named "AdminGroup"):
3420 cd data/user ; grep name=.*Group * # there should be no output!
3421 * subscription email sending now honours ACLs correctly
3423 * markup / rendering / user interface fixes:
3424 * fixed merging multiple lines indented by the same amount of blanks
3425 * ## comments don't break tables in two parts
3426 * added a "remove bookmark" link to RecentChanges
3427 * fixed action=titleindex (added \n after each entry)
3430 * non-ASCII characters should work now
3431 * RSS feed (Recentchanges?action=rss_rc) gives UTC timestamps now
3432 * removed attribute breaking RSS feed on RecentChanges
3434 * better email generation:
3435 * if you use python >=2.2.2, we add a Message-ID header to emails
3436 * if you use python 2.2.1, there is no email.Header. Instead of crashing
3437 (like previous moin 1.2.x releases), we just use the subject "as is" in
3438 that case. If it is not ASCII, this is not standards compliant.
3439 * If you have >=2.2.2 it will use email.Header to make standards compliant
3441 * use config.mail_from as sender address when sending "lost my password"
3445 * fixed for standalone server
3446 * attachment URLs (when handled by moin) don't include server name
3447 * fixed some wrong &amp; in html src
3449 * better themeability:
3450 * some entries in dict "d" where only present in header theme calls, some
3451 only in footer theme calls. Now almost all is present in both calls.
3452 * added some missing "content" divs so sidebar themes look better
3454 * fixed some crashes producing backtraces:
3455 * no IOError when diffing against deleted page
3456 * no backtrace in xml footnote generation
3457 * no SystemInfo crash when no editlog exists in new wikis
3458 * xmlrpc.getRecentChanges fixed
3460 * MoinMoin.util.filesys.rename is now a wrapper around os.rename that
3461 fixes os.rename on broken win32 api semantics
3464 * saving traffic and load by improved robot meta tag generation:
3465 * "noindex,nofollow" on queries and POSTs
3466 * "index,follow" on FrontPage and TitleIndex (give robots a chance ;))
3467 * "index,nofollow" on all other pages (hopefully saving lots of senseless
3468 requests for page?action=...)
3469 * removed config.html_head_queries (was used for same stuff)
3470 * added russian i18n (utf-8)
3471 * misc. other translation updates / fixes
3472 * added rightsidebar theme
3473 * TitleIndex now folds case, so "APage" and "anotherPage" are both under
3475 * added macro/PageHits.py - it calculates the hits each page gets since
3476 beginning of logging
3479 * Full text and title search do now support multiple search terms -
3480 see HelpOnSearching for details
3482 * The Formatter interface was changed. Formatter and parser using
3483 the formatter interface have to be adjusted.
3485 Version 1.2.1 (2004-03-08, Revision 1.184)
3488 * minimum requirement to run moin 1.2/1.2.1 is python 2.2.2
3489 * not: 2.2(.0), as this does not have True/False
3490 * not: 2.2.1, as this does not have email.Header. You maybe can work
3492 * getting the python 2.2.x (x>=2) /usr/lib/python2.2/email directory
3493 * putting it into directory 'x' (whereever you like)
3494 * doing a sys.path[0:0] = ['x'] in moin.cgi [or other appropriate place]
3495 No guarantee, this is untested.
3496 * Twisted: the http headers missed the charset data, fixed
3497 * mod_python: fixes for mod_python 2.7
3498 * wiki/data/plugin/__init__.py added - fixes not working plugin modules
3499 * plugin processors work now, too
3500 * fixed displaying non-existent translations of SiteNavigation in footer
3501 * fixed zh-tw iso name (wrong zh_tw -> correct zh-tw)
3502 * fixed reversed diffs in RecentChanges RSS
3503 * fixed "last change" info in footer (wasn't updated)
3504 * fixed event.log missing pagename (and other) information
3505 * fixed horizontal line thickness >1
3506 * fixed setup.py running from CVS workdir
3507 * fixed crash when doing action=info on first revision of a page
3508 * fixed hostname truncation in footer
3510 * fixed clear msg links (they missed quoting, leading to strange page
3511 names when you click on some of them)
3512 * fixed python colorizer processor
3513 * fixed quoting of stats cache filenames
3514 * catched "bad marshal data" error when switching python versions
3517 * updated danish (da) i18n
3518 * updated japanese (ja) i18n
3519 * added serbian (sr) i18n
3520 * added chinese (zh) i18n
3521 * added a simple "viewonly" theme based on classic theme - you can use
3522 this as default theme, so anonymous users won't get the usual wiki stuff,
3523 but a far simpler (and less powerful) user interface.
3524 It also displays the navibar at the left side.
3525 * added moin.spec for building RPMs
3526 * included MoinMoin/i18n/* into distribution archive (nice for translators)
3527 * included some stuff under MoinMoin/scripts - xmlrpc-tools and account
3528 checking stuff. removed some version control clutter from the dist
3531 * code colorization was refactored and some new languages (Java, C++,
3532 Pascal) where added.
3533 * inline: display of attachments was extended. A Parser now knows which
3534 extensions it can handle.
3536 Version 1.2 (2004-02-20, Revision 1.183)
3539 * MoinMoin now requires Python >=2.2.2., we recommend to use Python >=2.3.2
3540 (with 2.3.x, MoinMoin runs about 20-30% faster).
3541 * by refactoring request processing, we made it possible to run moin under
3542 persistent environments:
3543 * twisted-web (http://twistedmatrix.com)
3544 * httpdmain.py (use moin.py for starting this mini server)
3547 Of course, CGI is still possible.
3548 * wiki pages will be compiled to bytecode now (by default), so no need for
3549 slow parsing/formatting on every view ("WASP", see caching_formats)
3550 * when using a persistent environment (like twisted) and WASP, you get up
3551 to 20x speed - compared to CGI and moin 1.1
3552 * added support for diffs between arbitrary revisions.
3553 * removed requirement of the external diff utility
3554 * config.auth_http_enabled (defaults to 0) - use this to enable moin
3555 getting your authenticated user name from apache (http basic auth,
3556 htpasswd) - if you enable this, your basic auth username has to be the
3557 same as your wiki username.
3558 Should work with CGI, FCGI and maybe even with mod_python.
3559 Does not change behaviour of moin under twisted or standalone server.
3560 * config.tz_offset = 0.0 sets a default timezone offset (in hours
3562 * config.cookie_lifetime (int, in hours, default 12) sets the lifetime of
3564 == 0 --> cookie will live forever (no matter what user has configured!)
3565 > 0 --> cookie will live for n hours (or forever when "remember_me")
3566 < 0 --> cookie will live for -n hours (forced, ignore "remember_me"!)
3567 * added themeing and some themes (if you improve the existing themes or
3568 make nice new ones, please contribute your stuff!). The default theme is
3569 set by config.theme_default (and defaults to 'classic').
3570 * now supporting plugin directory for parsers, processors, themes, xmlrpc.
3571 * action=info now defaults to showing page revision history again
3572 * all actions accessing the logfile (as RecentChanges or history) are now
3574 * #refresh processing instruction, config.refresh
3575 * config.refresh = (minimum_delay, target_allowed)
3576 * minimum delay is the minimum waiting time (in seconds) allowed
3577 * target_allowed is either 'internal' or 'external', depending on
3578 whether you want to allow only internal redirects or also
3579 external ones. For internal redirects, just use the Wiki pagename,
3580 for external, use http://... url.
3581 * #refresh 3 == refresh this page every 3 seconds
3582 * #refresh 5 FrontPage == internal redirect to FrontPage in 5s
3583 * #refresh 5 http://google.com/ == redirect to google in 5s
3584 Use very carefully! Allowing a low minimum_delay and putting a #refresh
3585 on RecentChanges might slow down your wiki significantly, when some
3586 people just let their browser refresh and refresh again. Also, it does
3587 cause quite some traffic long-term. So better do not use this without
3588 good reason! Default is None (switched off).
3589 * hide most UserPreferences options before user has logged in, less
3590 confusing for new users
3591 * "config.page_dict_regex" defines what pages are dictionary definitions
3592 Currently dictionaries are used for UserHomePage/MyDict where you can
3593 define key:: value pairs that get processed like @DATE@ expansion when
3594 saving a page. The 2 "@" will be added to your keys automatically.
3595 Please do not use @xxx@ strings on the right side (value), results may
3597 You can also access wiki dictionaries by using the internal macro
3598 [[GetVal(page,key)]]" - that will go to page "page" and return the
3599 value (right side) corresponding to "key".
3600 Implementation note: groups are a subset of the dictionary functionality.
3601 * standalone server should work now (see server/moin.py), so you don't
3602 need to setup apache or twisted for a local personal wiki, you only need
3603 python and moin for that now, no additional stuff any more!
3604 * if you run your wiki with charset = "utf-8" (the default is still
3605 iso8859-1), you might want to have a look at contributions/utf8-pages/
3606 to see if there are already translated system pages for your language.
3609 * new importPlugin routine (the old one didn't work correctly)
3610 * removed 0xA0 characters breaking utf-8
3611 * system page recognition now uses wiki groups (see AllSystemPagesGroup),
3612 fixing the long-time broken system page exclusion on TitleIndex.
3613 * mostly HTML 4.01 Strict compliant HTML
3614 * design is done by CSS now, HTML is semantic markup only
3615 * removed target attribute from links, also [^NewWindow] markup - this
3616 is a HTML 3.2 feature and not valid in HTML 4.01
3617 * updated TWikiDrawPlugin to 20021003 version, with further modifications
3618 including source. It can draw imagemaps now and saves PNG. On display a
3619 GIF will be searched if no PNG is found. We recommend changing all GIFs
3620 to indexed PNGs cause this fallback might disappear in later versions.
3622 Sample code using bash and ImageMagick (be sure you know what you do):
3623 for draw in `find /path/to/wiki/data -name \*.draw`; do
3624 file=`dirname $draw`/`basename $draw .draw`
3625 if [ -e "${file}.gif" ]; then
3626 echo "Converting ${file}.gif to ${file}.png"
3627 convert "${file}.gif" "${file}.png"
3631 * fixed email headers and encoding
3632 * Changed moin-usercheck to adhere to scripting standards; no
3633 proprietary config changes needed any more (added --config);
3634 --wikinames is now part of the usage message.
3635 * config.umask now defaults to 0770 - if you give world r/w access, ACLs
3636 could be rather pointless...
3638 Removed config variables:
3639 * external_diff (not needed any more, we have internal diff now)
3640 * shared_metadb (wasn't implemented for long - we will re-add it, when it is)
3641 * title1/2 (please use page_header1/2)
3644 Changed config variables:
3645 * changed_time_fmt (removed some html and brackets around time from default)
3646 * html_head (default is empty string now)
3647 * page_footer1/2 (default is empty string now)
3648 * page_icons (is now a list of icon names, not html any more)
3649 * umask (default is 0770 now, not world r/w any more == more secure)
3651 New config variables (see MoinMaster:HelpOnConfiguration):
3660 * page_license_enabled
3667 * lots of internal code refactoring and optimization
3668 * began moving src code documentation to epydoc, see "make epydoc"
3669 * the URL for the RecentChanges RSS feed changed. It now only works with
3673 * theme support is neither complete (although covering most important
3674 stuff) nor perfect - work on that will continue...
3675 * we removed some html from system messages (the boxes at top of page you
3676 get after some actions), so it currently looks less nice than before.
3677 * html is not completely validating and it is not xhtml - this will be
3678 fixed as soon as we have the infrastructure for that (other parser, DOM)
3679 * problems with rtl (right-to-left) languages, will be fixed in 1.3
3680 * if you change moin_config or switch themes, moin will still use already
3681 cached page content. For the config this can be fixed by touching
3682 MoinMoin/version.py (or simply deleting everything in
3683 data/cache/Page.py). If you get more annoyed by this than pleased by
3684 caching speedup, you can also switch off caching (see docs on
3687 Themeing and HTML/CSS cleanup:
3688 * Browsers with completely broken CSS support (like e.g. Netscape 4.x) are
3689 no longer supported. If you still need to support them, do not upgrade to
3690 moin 1.2. If you still use these browsers, we recommend that you upgrade
3691 your browser first (Mozilla 1.5 has nice and standards compliant HTML and
3692 CSS support and is available as Free Software for Windows, Linux and Mac).
3693 * If you changed any html in code or by config you will have to check if it
3694 still works. For the usual stuff, look into `MoinMoin/theme/classic.py`
3695 and `classic/css/screen.css`. For config defaults of the html fragments,
3696 read `MoinMoin/config.py`. If you want to modify a theme, don't simply
3697 change classic, but copy or subclass it under a new theme name.
3698 * because of the new theme support the layout of the `htdocs` directory
3700 * Instead of using icons under `img/` and css under `css/`, there will
3701 be an additional `themename/` directory in between, e.g. `classic/img/`
3702 and `classic/css/`. If you added own icons, you may have to copy them
3703 to the themes directory.
3704 * The filename of the CSS file has changed to the media type, so the
3705 normal one used for screen output has changed name from `moinmoin.css`
3706 to `screen.css`. There also were quite some changes and enhancements to
3707 the CSS files, so better use the new ones.
3708 * config.css_url was removed
3711 * we use a new plugin loader that requires a correct `__init__.py` file in
3712 the plugin directories. See the directory `wiki/data/plugin/` in the
3713 distribution archive and just copy it over to your wiki's plugin directory.
3716 Version 1.1 (2003-11-29, Revision 1.178)
3718 Version 1.1 requires Python 2.0 or higher, we recommend to use Python 2.2
3719 (version 2.2.2 if that is available on your host) or even better >= 2.3.2
3720 (with 2.3.x, MoinMoin runs about 20-30% faster).
3724 * config.default_lang lets you set a default language for users not
3725 having specified language in their browser or UserPreferences
3726 * "config.page_category_regex" defines what pages are categories
3727 * replaced `config.page_template_ending` by a more flexible setting
3728 named `config.page_template_regex`
3729 * the same with config.page_form_regex (was: page_form_ending)
3730 * "config.page_group_regex" defines what pages are group definitions
3731 Currently groups are used for "user groups" (see ACLs) and "page
3732 groups" (see AllSystemPagesGroup).
3733 * robot exclusion from all pages except the standard view action,
3734 via the config.ua_spiders regex (reduces server load)
3735 * "maxdepth" argument for the TableOfContents macro
3736 * config.title1, config.title2, config.page_footer1,
3737 config.page_footer2 can now be callables and will be called with
3738 the "request" object as a single argument (note that you should
3739 accept any keyword arguments in order to be compatible to future
3741 * "config.html_pagetitle" allows you to set a specific HTML page
3742 title (if not set, it defaults to "config.sitename")
3743 * navi_bar / quicklinks can now contain free-form links, i.e.
3744 entries of the form "[url linktext]" just like in wiki pages
3745 * if a quick link starts with '^', it opens in a new window; help
3746 now opens in a new window also
3747 * `config.smileys` for user-defined smileys (default: `{}`) - a dict
3748 with the markup as the key and a tuple of width, height, border, image
3750 * `config.hosts_deny` to forbid access based on IP address
3751 * `config.mail_login` can be set to username and password separated by
3752 a space, e.g. "username userpass", if you need to use SMTP AUTH
3753 * `config.edit_locking` can be set to None (old behaviour, no
3754 locking), 'warn <timeout mins>' (warn about concurrent edits, but
3755 do not enforce anything), or 'lock <timeout mins>' (strict locking)
3756 * optionally showing a license text on editor page, use:
3757 config.page_license_enabled = 1
3758 Optionally use these to customize what is shown there:
3759 config.page_license_text = "... your text ..."
3760 config.page_license_page = "MyLicensePage"
3761 See the default values in MoinMoin/config.py for details and
3762 override them in moin_config.py, if needed.
3763 * `config.shared_intermap` can be a list of filenames (instead of a
3765 * If you have added your own `SecurityPolicy`, the class interface for
3766 that has changed (see `security.py`).
3768 Authenticaton / Authorization:
3769 * added ACL support, written by Gustavo Niemeyer of Conectiva and
3770 Thomas Waldmann. See HelpOnAccessControlLists for more infos.
3771 You should use MoinMoin/scripts/moin_usercheck.py before activating
3772 ACLs or some users with bad or duplicate accounts might get into
3774 * A user account can be disabled using moin_usercheck.py or
3775 UserPreferences page. Disabling, but keeping it is good for edit
3777 * changed security default: deletion only available to known users
3778 * support for Basic authentication (Apache style: AUTH_TYPE="Basic",
3779 REMOTE_USER="WikiUserName"). If authentication is there, user
3780 will be in ACL class "Trusted".
3781 * support for username / password login
3782 The username / password login will ONLY work, if you define a
3783 password. With an empty password, username / password login is not
3784 allowed due to security reasons. Passwords are stored encrypted
3785 (format similar to Apache SHA) and can also be entered in the
3786 UserPreferences form in this format. When requesting login
3787 information by email, the password is also sent in this encrypted
3788 format (use copy&paste to fill it in the form).
3789 ...?action=userform?uid=<userid> is still possible, so if you have
3790 bookmarks, they will still work). The input field for the ID was
3792 NOTE: using the userid for login purposes is DEPRECATED and might
3793 be removed for better security soon.
3794 * after logging in, you will get a cookie valid until midnight.
3795 The next day, the cookie will expire and you will have to login
3796 again. If you don't want this, you can check the "remember me
3797 forever" option in UserPreferences.
3798 * if the page file is read-only, you get a message (i.e. you can now
3799 protect pages against changes if you're the wiki admin).
3800 Note: you can do that easier using ACLs.
3802 Markup / Macros / Actions:
3803 * RandomQuote macro (and even parses Wiki markup now)
3804 * `[[Navigation]]` macro for slides and subpage navigation
3805 * [[ShowSmileys]] displays ALL smileys, including user-defined ones
3806 * the Include macro has new parameters (from, to, sort, items) and
3807 is able to include more than one page (via a regex pattern)
3808 * `MailTo` macro for adding spam-safe email links to a page
3809 * if a fancy link starts with '^' (i.e. if it has the form
3810 "[^http:... ...]"), it's opened in a new window
3811 * because of that, the NewWindow macro was removed from contrib
3812 * "#pragma section-numbers 2" only displays section numbers for
3813 headings of level 2 and up (similarly for 3 to 6)
3814 * ../SubPageOfParent links
3818 * Page creation shows LikePages that already exist
3819 * editor shows the current size of the page
3820 * editor returns to including page when editing an included page
3821 * Visual indication we're on the editor page (new CSS style)
3822 * selection to add categories to a page in the editor (use preview
3823 button to add more than one category)
3824 * if user has a homepage, a backup of save/preview text is saved as
3825 a subpage UsersHomePage/MoinEditorBackup
3826 * added "revert" link to PageInfo view (which makes DeletePage more
3827 safe in public wikis, since you can easily revive deleted pages
3829 * Selection for logged in users (i.e. no bots) to extend the listing
3830 of recent changes beyond the default limits
3831 * Activated display of context for backlinks search
3832 * Subscriber list shown on page info
3833 * LikePages shows similar pages (using difflib.get_close_matches)
3834 * last edit action is stored into "last-edited" file, and
3835 displayed in the page footer
3836 * reciprocal footnote linking (definition refers back to reference)
3837 * "Ex-/Include system pages" link for title index
3838 Note: system/help pages algorithm is still mostly broken.
3839 * list items set apart by empty lines are now also set apart
3840 visually (by adding the CSS class "gap" to <li>)
3841 * "save" check for security.Permissions
3842 * Added Spanish, Croatian and Danish system texts
3843 * Added flag icons for the languages supported in "i18n"
3844 * updated help and system pages, more translations, see also
3846 * there was quite some work done on wiki xmlrpc v1 and v2 - it
3847 basically works now.
3849 Tools and other changes:
3850 * moin-dump: New option "--page"
3851 * there are some scripts MoinMoin/scripts/* using wiki xmlrpc for
3852 backup and wiki page copying applications
3853 * Updated the XSLT parser to work with 4Suite 1.0a1
3854 * more infos in cgi tracebacks
3855 * UPDATE.html is a HTML version of MoinMaster:HelpOnUpdating
3857 Unfinished or experimental features:
3858 * user defined forms
3859 * XML export of all data in the wiki
3860 * RST parser (you need to install docutils to use this)
3864 * do not use / display user's email address in public places
3867 * Removed two cross-site scripting vulnerabilities reported by "office"
3870 * Bugfix for PageList when no arguments are given
3871 * Disallow full-text searches with too short search terms
3872 * [ 566094 ] TitleIndex now supports grouping by Hangul Syllables
3873 * fix for multibyte first char in TitleIndex
3874 * Footnotes were not HTML escaped
3875 * Numbered code displays are now in a table so that you can cut the
3876 code w/o the numbers
3877 * Bugfix for wrong mail notifications
3878 * Create unique anchors for repeated titles
3879 * [ 522246 ] Transparently recode localized messages
3880 * [ 685003 ] Using "preview" button when editing can lose data
3881 * use gmtime() for time handling
3882 * fixed negative gmtime() arguments
3883 * [[Include]] accepts relative page names
3884 * fixed ||NotInterWiki:||...||
3886 -----------------------------------------------------------------------------
3887 Version 1.0 (2002-05-10, Revision 1.159)
3889 THIS IS THE LAST RELEASE WITH PYTHON 1.5.2 SUPPORT! If severe bugs
3890 should occur, a maintenance release will fix them.
3892 Some optional features (like statistics) already require Python 2.0.
3895 * security fix: "allow_xslt" has to be set to 1 in order to enable
3896 XSLT processing; note that this defaults to 0 because XSLT is able
3897 to insert arbitrary HTML into a wiki
3898 * "action=content" for transclusion into static web pages; emits the
3899 pure page content, without any <html>, <head>, or <body> tags
3900 * "?action=links&mimetype=text/plain" works like MeatBall:LinkDatabase
3901 * "Preferred language" and "Quick links" user settings
3902 * Added "processor" concept, processors work on the data in "code
3903 displays" and are called by a bangpath in the first line of data
3904 * Processors: Colorize, CSV (see HelpOnProcessors)
3905 * New icons: "{OK}", "(./)", "{X}", "{i}", "{1}", "{2}" and "{}"
3907 * FullSearch now displays context information for search hits
3908 * DeletePage offers a textentry field for an optional comment
3909 * Email notifications are sent in the user's language, if known from
3911 * @PAGE@ is substituted by the name of the current page (useful
3914 Unfinished features:
3915 * user defined forms
3916 * XML export of all data in the wiki
3917 * RST parser (you need to install docutils to use this)
3921 * Syntax warning with Python 2.2 fixed
3922 * Macro-generated pagelinks are no longer added to the list of links
3923 * error codes returned by "diff" are reported
3924 * fix for attachments on pages with non-USASCII names
3925 * correct handling of spaces in attachment filenames and URLs
3927 -----------------------------------------------------------------------------
3928 Version 0.11 (2002-03-11, Revision 1.151)
3930 Most important new features: file attachments, definition list markup
3931 (glossaries), change notification via email, variable substitution when
3932 saving pages, edit preview, and improved documentation.
3934 Note that the RSS features require a recent PyXML (CVS or 0.7) due to
3935 bugs in the namespace handling of xml.sax.saxutils in earlier versions.
3936 This is (hopefully) automatically detected on every installation.
3938 Statistical features are NOT designed to work with Python 1.5.2 and
3939 require Python 2.0 or higher. Overall, MoinMoin 0.11 is not explicitely
3940 tested for 1.5.2 compatibility.
3943 * XML formatting now (most often) produces well-formed, and, depending
3944 on proper layout of the wiki page, valid StyleBook XML
3945 * Headers are now automatically numbered, unless you set the config
3946 item 'show_section_numbers' to 0
3947 * "#pragma section-numbers off" (or "0") switches that off explicitely,
3948 and "on" or "1" enables numbering
3949 * Added a "contributions" directory for 3rd party extensions
3950 * AttachFile action, contributed by Ken Sugino; note that you have
3951 to enable this action because of the possibility of DoS attacks
3952 (malicious uploads), by adding this to your moin_config:
3953 allowed_actions = ['AttachFile']
3954 * "attachment:" URL scheme allows access to attachments, to get files
3955 from other pages use "attachment:WikiName/filename.ext".
3956 * New macros: Date(unixtimestamp) and DateTime(unixtimestamp) to
3957 display a timestamp according to system/user settings
3958 * Variable substitution when a page is saved, note that saving
3959 template pages does NOT expand variables. Supported are:
3960 @DATE@ Current date in the system's format
3961 @TIME@ Current date and time in the user's format
3962 @USERNAME@ Just the user's name (or his domain/IP)
3963 @USER@ Signature "-- loginname"
3964 @SIG@ Dated Signature "-- loginname date time"
3965 @MAILTO@ A fancy mailto: link with the user's data
3966 * Copied some new emoticons from PikiePikie
3967 || {{{ :-? }}} || :-? || tongue.gif ||
3968 || {{{ :\ }}} || :\ || ohwell.gif ||
3969 || {{{ >:> }}} || >:> || devil.gif ||
3970 || {{{ %) }}} || %) || eyes.gif ||
3971 || {{{ @) }}} || @) || eek.gif ||
3972 || {{{ |) }}} || |) || tired.gif ||
3973 || {{{ ;)) }}} || ;)) || lol.gif ||
3974 * AbandonedPages macro
3975 * Added definition list markup: {{{<whitespace>term:: definition}}}
3976 * Added email notification features contributed by Daniel Sa� * SystemInfo: show "Entries in edit log"
3977 * Added "RSS" icon to RecentChanges macro and code to generate a
3978 RecentChanges RSS channel, see
3979 http://www.usemod.com/cgi-bin/mb.pl?UnifiedRecentChanges
3981 * Added config.sitename and config.interwikiname parameter
3982 * Better WikiFarm support:
3983 * <datadir>/plugin/macro and <datadir>/plugin/action can be used
3984 to store macros and actions local to a specific wiki instance
3985 * config.shared_intermap can contain a pathname to a shared
3986 "intermap.txt" file (i.e. one stored outside the datadir)
3987 * added `backtick` shortcut for {{{inline literal}}} (has to be
3988 enabled by "backtick_meta=1" in the config file); note that ``
3989 is then a shorter replacement for '''''' escaping
3990 * added inline search fields (at the bottom of each page)
3991 * Added preview to the editor, including spell checking
3992 * New languages: Chinese (Changzhe Han) and Portuguese (Jorge
3993 Godoy), updated French (Lucas Bruand), added Korean (Hye-Shik
3994 Chang) and Italian (Lele Gaifax)
3995 * New SystemAdmin macro
3996 * `[[Anchor(anchorname)]]` macro to insert anchors into a page,
3997 and [#anchorname Anchor Links].
3998 * User option to open editor view via a double-click
3999 * Added commentary field to editor, recent changes and page info
4000 * Page trails (user option)
4001 * UserPreferences: checkboxes for double-click edit, page trail,
4002 fancy links, emoticons, jump to last page visited, and some
4003 other yes/no options
4004 * "config.nonexist_qm" is now the default for a user setting
4005 * `[[GetText(text)]]` macro loads I18N texts (mainly intended
4006 for use on Help pages)
4007 * table attributes via "||<attrlist> ... ||", more details on
4008 http://purl.net/wiki/moin/HelpOnTables
4009 * PythonFaq interwiki tag and support for $PAGE placeholder
4010 * event logging, as the basis for future statistics
4011 * "moin-dump" command line tool to create a static copy of
4013 * "config.external_diff" allows to set an exact path to the
4014 command, or change the name to for example "gdiff" if GNU
4015 diff is not a native command in your UNIX flavour
4016 * `[[PageSize]]` macro
4017 * the interwiki name "Self" now always points to the own wiki
4018 * config.title1 and config.title2 are inserted into the output
4019 right before and after the system title html code (title1
4020 is right after the <body> tag and normally undefined, title2
4021 defaults to the "<hr>" above the page contents)
4022 * Additional link on diff pages to ignore whitespace changes
4023 * Subpages (config.allow_subpages, config.page_icons_up)
4024 * super^script^, sub,,script,, and __underline__ markup
4025 * `[[FootNote]]` macro
4026 * many other new config options, see HelpOnConfiguration for
4028 * [[StatsChart(type)]] shows statistical charts (currently
4029 defined types: hitcounts, pagesize, useragents)
4030 * 'inline:' scheme works like 'attachment:', but tries to
4031 inline the content of the attachment into the page;
4032 currently knows about "*.py" sources and colorizes them
4033 * support for Java applet "TWikiDrawPlugin" via
4034 drawing:<drawingname> URL scheme (you need to activate
4035 the AttachFile action if you want drawings)
4036 * numeric entities (&#nnnnn;) are now optionally NOT escaped,
4037 which allows you to insert more characters into a Latin-1
4038 page, especially the Euro symbol
4039 * navi_bar is now a list of page names which should be linked
4041 * test.cgi is now rolled into moin.cgi, and can be called
4042 by adding "?test" to the wiki base URL. Also, as a security
4043 feature, the server's environment is only shown for requests
4044 local to the web server.
4046 Unfinished features:
4047 * user defined forms
4048 * XML export of all data in the wiki
4051 * extended the online help ("Help*" pages)
4052 * German help pages (thanks to Thomas Waldmann)
4055 * #425857: python Parser bug on the second call
4056 * #424917: Caching control
4057 * #465499: Two HTTPS problems
4058 * #491155: FrontPage hardcoded
4059 * Handling of inbound UTF-8 encoded URIs (only with Python >= 2.0)
4060 * Fix for subtle changes in "re" of Python 2.2
4061 * User-provided URLs are now never URL-escaped, which allows appending
4062 #anchors and using %20 for spaces in InterWiki links
4064 -----------------------------------------------------------------------------
4065 Version 0.10 (2001-10-28, Revision 1.134)
4067 This version is still Python 1.5.2 compatible, but it's not extensively
4068 tested for that version and some parts of the system might not work
4069 there, especially seldom used macros and actions. Bug reports welcome!
4072 * "#deprecated" processing instruction
4073 * config entry "SecurityPolicy" to allow for customized permissions
4074 (see "security.py" for more)
4075 * added distutils support
4076 * though not extensively tested, the standalone server now does POST
4077 requests, i.e. you can save pages; there are still problems with
4078 persistent global variables! It only works for Python >= 2.0.
4079 * "bang_meta" config variable and "!NotWikiWord" markup
4080 * "url_mappings" config variable to dynamically change URL prefixes
4081 (especially useful in intranets, when whole trees of externally
4082 hosted documents move around)
4083 * setting "mail_smarthost" and "mail_from" activates mailing
4084 features (sending login data on the UserPreferences page)
4085 * very useful for intranet developer wikis, a means to view pydoc
4086 documentation, formatted via a XSLT stylesheet, for details see
4087 http://purl.net/wiki/python/TeudViewer?module=MoinMoin.macro.TeudView
4088 or MoinMoin/macro/TeudView.py
4089 * "LocalSiteMap" action by Steve Howell <showell@zipcon.com>
4090 * Added FOLDOC to intermap.txt
4093 * Full config defaults, import MoinMoin now works w/o moin_config.py
4094 * Better control over permissions with config.umask
4095 * Bugfix for a UNIX time billenium bug (affecting RecentChanges
4096 sorting and page diffs)
4097 * data paths with directory names containing dots caused problems
4099 -----------------------------------------------------------------------------
4100 Version 0.9 (2001-05-07)
4103 * XML page input (pages that start with "<?xml") and XSLT formatting
4104 * Page caching, for now limited to XSLT processing (where it's
4105 absolutely needed); new code & API to add the "RefreshCache" link
4106 * Selection of common date/time formats in UserPreferences
4107 * New action "titleindex" to support wiki introspection (MetaWiki);
4108 see the new links below the index bar in "TitleIndex"
4109 * UserPreferences: editable CSS URL for personal styles
4110 * PageInfo: the editor's name or IP is shown for each change
4111 * WantedPages: a new macro that lists links to non-existent pages
4112 * OrphanedPages: a new macro that lists pages no other page links to
4113 * Extensions to the FullSearch macro (see HelpOnMacros)
4114 * Python syntax highlighting
4115 * "DeletePage" action (has to be activated, see MoinMoinFaq)
4116 * "Remove trailing whitespace from each line" option in the editor
4117 * I18N (currently German and Swedish)
4118 * Config option "url_schemas" to extend the supported URL types
4119 * Improved tracebacks by using Ka-Ping's "cgitb"
4122 * The editor now sends a "no-cache" HTTP header
4123 * "PageList" results are now sorted
4124 * New config parameter "html_head_queries": send additional header
4125 for all pages EXCEPT the "normal" view; main usage is to have
4126 only the normal pages indexed by a spider, not the edit, print,
4127 etc. views (which cause multiple hits on the same information)
4128 * Store the modification time of the page file in the editlog, not
4129 the current time when the log entry is created
4131 -----------------------------------------------------------------------------
4132 Version 0.8 (2001-01-23)
4135 * Page templates (create a new page using a template page, by Richard)
4136 * Pluggable actions (by Richard)
4137 * Added "diff since bookmark"
4138 * Only "normal" URLs (outside of brackets) are converted to inline images
4139 * Show number of backups in SystemInfo macro
4140 * Show info on installed extension macros and actions
4141 * New macro: [[BR]] for line breaks
4142 * New action "LikePages" (again, Richard)
4143 * Highlighting of search results, and of bad words when spellchecking
4144 * Support for "file:" URLS
4145 * "SpellCheck" action (Richard, me, and Christian)
4146 * [[Include]] macro (you guessed it, Richard)
4149 * Update bookmark with load time, not click time
4150 * Changed CSS styles to better suit Netscape's broken handling of CSS
4152 -----------------------------------------------------------------------------
4153 Version 0.7 (2000-12-06)
4156 * RecentChanges bookmarking
4160 * Non-greedy extended WikiNames
4162 -----------------------------------------------------------------------------
4163 Version 0.6 (2000-12-04)
4166 * [[UserPreferences]] macro and associated functions
4167 * [[TableOfContents]] macro
4168 * Mechanism for external macros (user extensions)
4169 * Numbered list types and start offsets
4172 * Search dialogs did not work on the FrontPage
4173 * Add newline to text if last line has none (better diffs)
4175 -----------------------------------------------------------------------------
4176 Version 0.5 (2000-11-17)
4179 * Major refactoring: code is now broken up into modules within the
4181 * Diagnosis of installation via a "test.cgi" script
4183 * "#format" processing instruction
4185 * [[RandomPage]] and [[RandomPage(number)]] macro
4186 * configurable footer ("page_footer1" and "page_footer2")
4187 * "#redirect" processing instruction
4190 * Bugfix for broken CGI environment of IIS/4.0
4191 * URLs and InterWiki links are now less greedy (punctuation at the end
4192 is excluded, and "<" ends them, too)
4194 -----------------------------------------------------------------------------
4195 Version 0.4 (2000-11-01)
4198 * Table markup "||a||b||c||"
4199 * Headlines "= H1 =", "== H2 ==", and so on up to H5
4200 * [[PageCount]] macro
4201 * Added [[Icon(image)]] macro and macro arguments
4202 * [[PageList(title-regex)]] macro
4203 * New help system (set of help pages describing all features)
4206 * Create complete URL for "Clear message" link
4207 * Inline code spans needed cgi.escape
4208 * Better fix for Python 1.6 "re" problems
4209 * Fix for uppercase extensions in inline images ("foo.JPG")
4210 * Fixed colspan in RecentChanges
4211 * HR size is now limited to 8
4212 * "}" ends an URL pattern (fixes URLs right at the end of code displays)
4214 -----------------------------------------------------------------------------
4215 Version 0.3 (2000-10-25)
4218 * Check for inline images with InterWiki links (Spam:eggs.gif)
4219 * New config variable "allow_extended_names", which enables markup for
4220 wiki names containing ANY character like this: ["any chars"]
4221 * New config variable "html_head"
4222 * New macro [[SystemInfo]]
4223 * Added inline code ("{{{" and "}}}" on the same line)
4224 * Support for new config variable "max_macro_size"
4227 * Don't treat sequences with a double colon (CPP::Namespace) as an
4229 * The local part of InterWiki links is now correctly URL-escaped
4230 * Quickfix for a bug in 1.6's regular expressions
4231 * Fixed "SpamSpamSpam" bug (multiple entries in word list)
4232 * Anchor names get quoted in WordIndex and TitleIndex
4233 * Filtering of filenames in page_list() corrected
4234 * Escape &, <, > when sending the editor
4235 * Final(?) fix for japanese wiki names
4237 -----------------------------------------------------------------------------
4238 Version 0.2 (2000-08-26)
4241 * When saving, a datestamp saved in the form and that of the file are
4242 compared now; so, accidently saving over changes of other people is
4243 not possible anymore (saving still needs file locking though, for
4245 * if the directory "backup" exists in the data dir, pages are saved
4246 there before a new version is written to disk
4247 * Removed the "Reset" button from EditPage
4248 * Added "Reduce editor size" link
4249 * Added Latin-1 WikiNames (JürgenHermann ;)
4250 * Speeded up RecentChanges by looking up hostnames ONCE while saving
4251 * Show at most 14 (distinct) days in RecentChanges
4252 * Added icons for common functions, at the top of the page
4253 * Added a printing preview (no icons, etc.)
4254 * Added bracketed (external) URLs
4255 * Added support for quoted URLs ("http://...")
4256 * Added styles for :visited links to CSS
4257 * Embed image if an URL ends in .gif/.jpg/.png
4258 * No markup detection in code sections
4259 * Grey background for code sections
4260 * Added handling for numbered lists
4261 * the edit textarea now grows in width with the browser window
4262 (thanks to Sebastian Dau�for that idea)
4263 * Added page info (revision history) and viewing of old revisions
4264 * Added page diff, and diff links on page info
4265 * Added InterWiki support (use "wiki:WikiServer/theirlocalname"; the list
4266 of WikiServers is read from "data/intermap.txt")
4267 * Added "normal" InterWiki links
4268 * Added "action=raw" to send the raw wiki markup as text/plain (e.g. for
4269 backup purposes via wget)
4272 * Removed an exception when saving empty pages
4273 * Fixed bold nested into emphasis ('''''Bold''' Italic'')
4275 -----------------------------------------------------------------------------
4276 Version 0.1 (2000-07-29)
4278 Improvements over PikiPiki 1.62:
4279 * Moved configuration to "moin_config.py"
4280 * Added "edit_rows" setting
4281 * Added navigation bar
4282 * Improved HTML formatting
4283 * Added timing comment (page created in xx secs)
4284 * ISO date and time formats by default
4285 * Formatted RecentChanges with HTML tables
4286 * Uppercase letters for the index pages
4287 * Added PythonPowered logo
4290 * Javadoc comments now get formatted properly in {{{ }}} sections
4291 * Remove \r from submitted pages (so we get PORTABLE wiki files)
4292 * chmod(0666) eases manual changes to the data dir
4294 -----------------------------------------------------------------------------