Serendipity PHP Weblog System

File Release Notes and Changelog

Release Name: 0.8.1

Notes:
The Serendipity Team is happy to announce the immediate availability 
of the 0.8.1 maintenance release.

This new release mostly addresses some bugs and security issues
discovered in Serendipity 0.8.

Serendipity users who are running their blog with multiple and maybe
not trustworthy authors are urged to upgrade to this new Release
because of authors being able to upload special files without 
privileges.

The other important fix addresses possible XSS injections for the
templatedropdown and shoutbox plugins.

Other non-critical fixes include:
 * Fix pagination of Entries by Author
 * Fix RSS 1.0 feed validation
 * Deactivated GZIP encoding in certain environments
 * Fix some missing allowed BBCode special characters
 * Some IIS/Windows server compatibility fixes
 
No new features of our 0.9 development release have been ported
into this release. If you are eager to try our new features like
viewing/selecting multiple categories to read, new plugin hooks
for the media selector, uploading X images in one go and others -
feel free to try our nightlies available on www.s9y.org

On top to that new release, the following new plugins
have been published since the release of Serendipity 0.8:

 * serendipity_event_aggregator: A "Planet"-like plugin that
   turns a Serendipity installation into a RSS Aggregator
 * serendipity_event_customarchive: A user-sortable view on
   your archived entries
 * serendipity_event_cachesimple: A full-page caching plugin
 * serendipity_event_todolist: A todolist sidebar plugin
   with maintanable project/todo states
 * serendipity_event_userprofiles: Display and maintain personal
   user profiles
   
The upgrade from a previous release is as easy as ever: Download
the new version, unpack the files into your existing directory,
open your Blog's admin interface and you will see the automatic
upgrader. No SQL updates or function calls need to be made for this
maintenance release, so the upgrade will only update your
serendipity_config_local.inc.php file to set your new version string
to 0.8.1.

Have fun with the new release,
The Serendipity Team.

Changes:
    * Fix missing PDF thumbnail creation (imagemagick only)
      (garvinhicking)

    * Fix possible arbitrary media file upload for editors
      (garvinhicking, sesser, nohn)

    * Fix possible XSS when using the templatedropdown or shoutbox
      plugins (garvinhicking)

    * Fix pagination of "Entries by Author" (garvinhicking)

    * Fix RSS 1.0 missing top-level namespace (garvinhicking)

    * Deactivated gzip compression by default, as in certain server
      setups it creates problem with double-encoding or missing
      ob_gzhandlers. (garvinhicking)

    * Allow the serendipity_event_trackback additional trackbacks plugin
      to send trackbacks even if your entry did not contain at least one
      link. Also fix not sending trackbacks containing "#" fragments
      (garvinhicking)

    * Do not display Sidebar titles if they are not set for the bundled
      default, kubrick and wp templates (sidebar.tpl) (garvinhicking)

    * Fix error "Warning: ob_start(): output handler 'ob_gzhandler'
      cannot be used after 'URL-Rewriter'" which can occur on installations
      where session.use_trans_sid is activated and Serendipity's gzip
      compression is used. (garvinhicking)

    * Adjusted checking for "convert" binary in installation for
      Windows servers. Thanks to BobRock! (garvinhicking)

    * BBCode plugin: Allow =, ~ and ! URL characters (garvinhicking)

    * Added romanian translation by Alexandru Szasz

    * Some IIS webserver compatibility for $_SERVER variables. This should
      ensure most basic operations. (garvinhicking)

    * RSS feed does no longer initialize a session and thus now causes
      proper cachability for Conditional Get (garvinhicking)

    * Fix issues on Windows installations: %T strftime-Option not known
      when saving a plugin and emitting timestamp (was empty),
      redirecting to a wrong URL for installation with '\' instead of
      '/' path indicators. Thanks to Hendy Irawan! (garvinhicking)