CHANGELOG

   1 Change Log for Dev-Editor
   2 =========================
   3
   4 Version 3.2 (201x-xx-xx):
   5 =========================
   6
   7  Disabling commands:
   8  -------------------
   9  Added new configuration option "disable_commands" for disabling commands of
  10  Dev-Editor.
  11
  12  Start directory:
  13  ----------------
  14  Added new configuration option "startdir" which defines the default directory
  15  instead of "/".
  16
  17  HTTP download:
  18  --------------
  19  You may now execute a HTTP download of a file.
  20
  21  Small changes:
  22  --------------
  23  - Added a checkbox for editing a file after creating it.
  24
  25
  26 Version 3.1 (2009-05-12):
  27 =========================
  28
  29  Removing multiple files:
  30  ------------------------
  31  In the directory listing, there are now checkboxes for selecting files and a
  32  button for removing them.
  33
  34  Better distinction of objects in directory listing:
  35  ---------------------------------------------------
  36  For a better distinction of the objects in directory listing, every second
  37  object has a grey background now.
  38
  39  Remote name for uploaded files:
  40  -------------------------------
  41  When uploading a file, you can now specify a name for the file on the server.
  42
  43  Prefilled form fields:
  44  ----------------------
  45  If you want to copy or rename/move a file or a directory or save a file using
  46  a different name, the form field for the new filename is prefilled with the
  47  old one. Additionally, the entered path is no more relative to the directory
  48  of the original file.
  49
  50  Hide dot files:
  51  ---------------
  52  When the new configuration option "hide_dot_files" is set to 1, every file or
  53  directory beginning with a "." is not shown in the directory listing. But you
  54  can still access the file / directory by typing its name into the "Go to
  55  directory/file" box.
  56  This option is also available in the user-dependent configuration.
  57
  58  Copyright note:
  59  ---------------
  60  In the header of each file, there is a now a copyright note and a reference to
  61  the Artistic License.
  62
  63  Template class updated:
  64  -----------------------
  65  The template class was updated to version 2.0.
  66
  67 Version 3.0.1 (2005-11-10):
  68 ===========================
  69
  70  Accessing files above the virtual root directory:
  71  -------------------------------------------------
  72  It was possible to access files and directories above the virtual root
  73  directory beginning with the same string as the root directory.
  74  For example:
  75  If your root directory is "/var/www/user1" it was possible to access
  76  "/var/www/user10", "/var/www/user11" and so on.
  77
  78 Version 3.0 (2005-10-18):
  79 =========================
  80
  81  Editing function changed:
  82  -------------------------
  83  - The concept of locking the file for other users before editing it is not very
  84    good, causes some problems and makes it difficult to add new features. So I
  85    decided to remove it.
  86  - When Dev-Editor shows the form for editing a file, it calculates the MD5
  87    checksum and places it in the editing form. Before saving the file, the MD5
  88    checksum is calculated again and compared to the submitted one. If the two
  89    sums don't match, Dev-Editor does not save the file and shows the editing
  90    form.
  91  - In the edit dialogue, there is also a new submit button allowing to continue
  92    editing the file after saving it.
  93  - Removed the possibility of encoding ISO-8859-1 HTML entities when saving a
  94    file. I don't know if anybody used this function.
  95
  96  Copy directories:
  97  -----------------
  98  Dev-Editor is now able to copy a directory.
  99
 100  Forbid file access:
 101  -------------------
 102  The administrator may now define a list of files the user is not allowed to
 103  access.
 104
 105  Individual configuration:
 106  -------------------------
 107  Now, Dev-Editor is able to switch some configuration values depending on the
 108  current HTTP Auth user.
 109  This is controlled by a separate configuration file containing sections like
 110  Windows INI files (thus the configuration file parser is now able to parse
 111  files containing sections in square brackets).
 112  You may overwrite the following configuration values:
 113  - fileroot
 114  - httproot
 115  - forbidden (you may also clear the default "forbidden" list)
 116
 117  Configuration files renamed:
 118  ----------------------------
 119  The extension of the configuration files is "conf" now.
 120
 121  Names of error messages changed:
 122  --------------------------------
 123  I changed the names of some error messages:
 124  binary        -> binary_file
 125  cmd_unknown   -> command_unknown
 126  dir_read_fail -> dir_read_failed
 127  create_ar     -> create_above_root
 128  not_exist     -> not_found
 129
 130  File names containing a "+" sign:
 131  ---------------------------------
 132  If a file name contained a "+" sign, Dev-Editor was sometimes not able to
 133  access the file, because the "+" was interpreted as a space.
 134
 135  Check octal numbers:
 136  --------------------
 137  Before changing the permissions of a file, Dev-Editor now checks if the user
 138  entered a valid octal number.
 139
 140  Encoding of HTML entities:
 141  --------------------------
 142  - All HTML in output is now properly encoded
 143  - HTML::Entities is a little bit slow and does currently not support very much
 144    encodings. Now, we just encode the HTML control characters (<, >, & and ").
 145    This also means that Dev-Editor now does not require any CPAN module.
 146
 147  Template class updated:
 148  -----------------------
 149  The template class was updated to version 1.5.
 150
 151  Small changes:
 152  --------------
 153  - Don't show the "Copy" link if a file is not readable
 154  - Added checkboxes in the "Copy" and "Rename" dialogues for immediately
 155    overwriting an existing file
 156  - Preserve the directory listing filter if the user changes the directory using
 157    the input field at the bottom of the directory listing
 158
 159 New in version 2.3.2 (2005-04-23)
 160 ---------------------------------
 161
 162  Copying a file out of a directory:
 163  ----------------------------------
 164  Fixed a really strange bug occuring only on Windows systems.
 165  Dev-Editor was not able to copy (or move) a file out of a directory if the
 166  path, the user entered in the corresponding dialogue, was beginning with "../".
 167
 168  Empty root directory causes incomplete HTML table:
 169  --------------------------------------------------
 170  Dev-Editor now does not create an incomplete HTML table if the root directory
 171  is completely empty or no files are matching against the current wildcard.
 172
 173  move() instead of rename():
 174  ---------------------------
 175  Dev-Editor now uses the move() function from the File::Copy module to move or
 176  rename files and directories. move() is more reliable than the rename()
 177  function.
 178
 179  No error message if reading of a directory failed:
 180  --------------------------------------------------
 181  If reading of a directory failed, no error message was shown. I thought this
 182  bug was fixed...
 183
 184  Template class updated:
 185  -----------------------
 186  The template class was updated to version 1.4a.
 187
 188 New in version 2.3.1 (2005-02-19)
 189 ---------------------------------
 190
 191  Handling of symbolic links changed:
 192  -----------------------------------
 193  For security reasons, I completely changed the handling of symbolic links:
 194  Symbolic links are now treated as files, no matter where they point to. The
 195  user is just allowed to see the path where the link points to, he is allowed to
 196  delete the link, to rename it and to overwrite it by renaming an other file.
 197  Nothing else is allowed.
 198  Accessing a symbolic link pointing to a directory caused also a very strange
 199  effect: It was possible to access this directory, but you could not access
 200  the objects in it.
 201  I had to do it in this way because of the very stupid behaviour of abs_path()
 202  from the Cwd module: This function is just able to detect the absolute path of
 203  directories.
 204  Hard links are not affected by this, because it is not possible to detect them
 205  (at least I don't know how to detect them).
 206
 207  Root directory must not be a symbolic link:
 208  -------------------------------------------
 209  Now, the root directory must not be a symbolic link.
 210  Sorry for this, I really would have liked to allow the root directory to be a
 211  symbolic link, but if I would allow this, Dev-Editor would not be able to
 212  create files in the root directory. I'm looking for an alternative...
 213
 214  Use Greenwich Mean Time:
 215  ------------------------
 216  You may now use Greenwich Mean Time (GMT/UTC) in dates instead of the local
 217  time.
 218  I don't know if anyone needs this, but it could be useful.
 219
 220  Handle errors produced by File::UseList:
 221  ----------------------------------------
 222  - Check if unlocking of the list of files in use was successful
 223  - Check if a file could be successfully added to the list of files in use
 224  - Check if a file could be successfully removed from the list of files in use
 225
 226  Saving to non-existing files:
 227  -----------------------------
 228  The file saving process was aborted if the user wanted to write text data using
 229  the edit function into a file that does not exists.
 230  The reason was that Dev-Editor thought that this non-existing file was a binary
 231  file.
 232
 233  Template class updated:
 234  -----------------------
 235  The template class was updated to version 1.4.
 236  This fixes the problem of the infinitive loops produced by incorrectly nested
 237  {IF} blocks.
 238
 239  Small changes:
 240  --------------
 241  - Files locked with the flock() function are now unlocked by the close()
 242    function due to security reasons (see
 243    http://forum.de.selfhtml.org/?t=101375&m=622582)
 244  - Changed the names of two error messages:
 245    dircopy -> dir_copy
 246    editdir -> dir_edit
 247  - Fixed various small errors in some template files
 248  - The regular expression used by file_name() and upper_path() to detect Windows
 249    drive letters was not case-insensitive
 250
 251 New in version 2.3 (2005-01-08)
 252 -------------------------------
 253
 254  Filter directory listing:
 255  -------------------------
 256  Dev-Editor is now able to filter the directory listing using DOS-style
 257  wildcards.
 258  I think that is a little bit incomplete, Dev-Editor should be able to
 259  "remember" the filter wildcard during the actions.
 260  The code for parsing DOS-style wildcards is from the File::DosGlob module by
 261  Gurusamy Sarathy.
 262
 263  flock():
 264  --------
 265  Dev-Editor now uses flock().
 266  flock() is called using a wrapper function which checks if it is really
 267  available.
 268
 269  check_path() broken on Windows:
 270  -------------------------------
 271  On Windows systems the check_path() routine was heavily broken (this routine
 272  checks if someone tries to access a path above the virtual root directory). It
 273  was possible to access files above the root directory by accessing a path with
 274  "..." or "...." or something like that as the last path component. This bug was
 275  caused by the rewrite of check_path() in Dev-Editor 2.2.
 276
 277  "." or ".." as end of a path:
 278  -----------------------------
 279  If you enter a path with "." or ".." as the last path component, Dev-Editor
 280  showed a really strange behaviour by allowing to enter a path like
 281  "something/." or "something/..". This was also caused by the (poor) rewrite of
 282  check_path(). The problem is fixed now.
 283
 284  Paths beginning with "/../" caused problems:
 285  --------------------------------------------
 286  When composing the temporary virtual path for a new file, don't call
 287  clean_path(). It is unnecessary and it also caused a problem if this path would
 288  begin with /../, because on UNIX systems, canonpath() removes /../ at the
 289  beginning of a path. So if a user wanted to create the file /../file.ext (but
 290  he wasn't allowed to), he created /file.ext.
 291
 292  Deny changing file properties in some cases:
 293  --------------------------------------------
 294  - Do not allow to change the properties of the root directory
 295  - Do not allow to change the properties of a file in use
 296
 297  Deny overwriting files:
 298  -----------------------
 299  - While processing a file upload, check if the user wants to replace a
 300    directory or overwrite a write-protected file
 301  - If the user wants to copy or rename a file, check if he wants to overwrite a
 302    write-protected file
 303  - Do not allow to upload a file if a file with the same virtual name is
 304    currently in use
 305
 306  Validate file uploads:
 307  ----------------------
 308  Dev-Editor now tries to validate a file upload by checking the handle created
 309  by the CGI module.
 310
 311  Improved configuration file parser:
 312  -----------------------------------
 313  - The parser now ignores lines like that:
 314       = Value
 315    Such lines could lead to properties with empty keys in the configuration
 316    hash.
 317  - Allow configuration options with empty values
 318  - If a option is defined twice, the line number of the second one is shown in
 319    the error message
 320
 321  Output changes:
 322  ---------------
 323  - More encoding of HTML entities
 324  - In directory listing, the "Edit" link of files in use were not greyed (very
 325    nasty)
 326  - Show the name of the lock file in error messages even if it has not been
 327    defined in the configuration file
 328
 329  Small internal changes:
 330  -----------------------
 331  - The file saving process is now completely centralized in File::Access
 332  - When generating a redirection header, check if we really have to create a
 333    query string
 334  - Fixed a bug occuring if the "curdir" CGI parameter had no trailing slash and
 335    the "newfile" parameter had no leading slash
 336  - Dev-Editor now takes more care of Windows drive letters
 337  - Trying to increase speed of the script by surrounding static values by single
 338    quotes
 339  - Code cleaning
 340
 341 New in version 2.2a (2004-11-29)
 342 --------------------------------
 343
 344  File uploads did not work:
 345  --------------------------
 346  Dev-Editor normally tests if it has enough permissions to upload a file to a
 347  directory. But the condition was missing and so Dev-Editor always aborted file
 348  uploads and didn't even display the dialogue.
 349
 350 New in version 2.2 (2004-11-27)
 351 -------------------------------
 352
 353  `chgrp` system command and numerical group names:
 354  -------------------------------------------------
 355  When changing the group, Dev-Editor is now using the `chgrp` system command.
 356  This allows to use numerical group names. Before, Dev-Editor handled numerical
 357  values as group IDs.
 358
 359  Checking root directory:
 360  ------------------------
 361  Dev-Editor now checks if the root directory exists and if it may be accessed.
 362  This fixed also bug where it was possible to access the physical root directory
 363  if Dev-Editor could not enter the virtual root directory.
 364
 365  Checking directory permissions:
 366  -------------------------------
 367  Dev-Editor does some simple checks of directory permissions now:
 368  - Inaccessible directories are greyed in directory listing. You cannot access
 369    them, but the actions are not disabled, because they may work.
 370  - Actions needing write access to a directory are aborted if Dev-Editor has no
 371    write access.
 372
 373  Access a directory structure similar to the root directory:
 374  -----------------------------------------------------------
 375  The path the user wants to access must now BEGIN with the root directory. The
 376  old check made it possible to access a directory structure outside the root
 377  directory similar to the root directory.
 378
 379  Changing mode of a directory with mode 000:
 380  -------------------------------------------
 381  It was not possible to change the mode of a directory with mode 000.
 382
 383  Upload only to directories:
 384  ---------------------------
 385  Dev-Editor now checks if the user really uploads a file to a directory.
 386
 387  Improved About dialogue:
 388  ------------------------
 389  - Dev-Editor now only shows the main group ID of the process user.
 390  - Dev-Editor also shows the current umask of the process.
 391  - Special chars in most values are now encoded to entities.
 392
 393  Added <label> tags:
 394  -------------------
 395  For a better usability in some browsers, I added <label> tags for the
 396  checkboxes and radio buttons in file edit and file upload dialogue.
 397
 398  Directory links in error messages:
 399  ----------------------------------
 400  Some error messages generated by the main program now contain a link to the
 401  root directory.
 402
 403  Bugs in HTML generation:
 404  ------------------------
 405  - If Dev-Editor could not read a directory, it did neither display an error
 406    message nor a directory link.
 407  - Some error messages had problems with {DIR} variables. Thus the variable in
 408    error.htm which will be replaced by a back link is now called "{BACK}".
 409  - When viewing a file, Dev-Editor inserts the contents of the file into the
 410    viewfile.htm template file AFTER parsing the "editable" {IF}-block, because
 411    Dev-Editor showed a very ugly behaviour when viewing this template file.
 412
 413  Code cleaning:
 414  --------------
 415  I tried to clean the source code of Dev-Editor a little bit. Some parts of the
 416  code were optimized.
 417
 418 New in version 2.1a (2004-10-22)
 419 --------------------------------
 420
 421  Changed file saving error handling:
 422  -----------------------------------
 423  Now we already unlock the file saving process, because if an error occurs
 424  during this process, the file keeps locked.
 425  This is not a perfect solution, there are still problems. I have to figure out
 426  another one.
 427
 428 New in version 2.1 (2004-10-14)
 429 -------------------------------
 430
 431  Overwrite files during file upload:
 432  -----------------------------------
 433  In file upload dialogue, there is a new checkbox which allows to overwrite
 434  files during file upload if they already exist.
 435
 436  Improved file saving:
 437  ---------------------
 438  The process of file saving has been improved:
 439  - Saving even works if the file has to be created first.
 440  - Dev-Editor is now checking if the user wants to write text data into a binary
 441    file.
 442  - If the user just entered spaces as filename (detection works for other
 443    commands using the "newfile" CGI parameter too), we use the original
 444    filename.
 445
 446  Don't copy a directory:
 447  -----------------------
 448  Dev-Editor now denies copying a directory.
 449
 450  Check before manually unlocking:
 451  --------------------------------
 452  Dev-Editor now checks if the file is really locked before displaying the
 453  dialogue for manually unlocking a file. If it is not locked, Dev-Editor returns
 454  to directory view. Dev-Editor also behaves in this way if it is trying to
 455  unlock a file.
 456
 457  Wrong error messages:
 458  ---------------------
 459  Something definitely went wrong when I remade the copy and the rename
 460  functions: They printed a wrong error message if the destination already
 461  existed and if it was a file.
 462
 463 New in version 2.0 (2004-08-10)
 464 -------------------------------
 465
 466  File uploads:
 467  -------------
 468  Dev-Editor is now able to process HTTP file uploads. The files may be
 469  transferred in ASCII or binary mode (similar to FTP).
 470
 471  Change mode and group:
 472  ----------------------
 473  Dev-Editor is now able to change the mode and the group of a file or a
 474  directory.
 475
 476  HTTPS support and non-default ports:
 477  ------------------------------------
 478  Dev-Editor is now able to detect a HTTPS connection and if the web server
 479  doesn't listen on the default ports (necessary for reloading Dev-Editor).
 480
 481  Do not allow removing or renaming the root directory:
 482  -----------------------------------------------------
 483  Dev-Editor now denies removing or renaming the root directory.
 484
 485  Renaming files outside the root directory:
 486  ------------------------------------------
 487  There was a bug which caused Dev-Editor not to rename files outside the root
 488  directory if they already exist.
 489
 490  Improved file editing:
 491  ----------------------
 492  When the user wants to save an edited file using a different file name,
 493  Dev-Editor now unlocks the original file and checks if a file with this
 494  different name already exists and if it is locked.
 495
 496  Improved file creating:
 497  -----------------------
 498  The routine which creates empty files had a race condition which could set
 499  files to 0 if they already exist.
 500
 501  Maximum size for files:
 502  -----------------------
 503  The administrator may now define a maximum size for files in the main
 504  configuration file. If the user wants to view or edit a file larger than this
 505  defined size, Dev-Editor denies file access (but the file can still be copied,
 506  renamed or removed).
 507
 508  Form for creating new files or directories:
 509  -------------------------------------------
 510  In directory listing, when clicking on the buttons next to the fields for
 511  creating new files and directories without entering a file or directory name,
 512  the user got an error message which is a little bit strange.
 513  Now, the user will see a form for creating new files or directories.
 514
 515  Newlines are converted while reading:
 516  -------------------------------------
 517  Whenever Dev-Editor now reads a file for output, it converts any line separator
 518  to the system specific one.
 519
 520  Case-insensitive commands:
 521  --------------------------
 522  The commands are now case-insensitive, so the command "ShOw" is the same as
 523  "show".
 524
 525  About screen:
 526  -------------
 527  There is now a small "About" screen which shows some more or less useful
 528  information about Dev-Editor and the system.
 529
 530  Improvements for user interface:
 531  --------------------------------
 532  Made a lot of improvements for the user interface:
 533  - The directory listing is now built using tables.
 534  - When editing a file and the user wants to save a file using a different file
 535    name, the checkbox for saving the file using a different file name is
 536    activated using JavaScript.
 537  - In directory listing or when viewing a file, there is a new field for quickly
 538    jumping to a file or to a directory.
 539  - Separated "Work with directory" and "Work with file" into different options
 540    in directory listing ("Copy", "Rename", "Delete", "Unlock"). The options also
 541    have their own dialogues.
 542  - In directory listing, there is a new link for viewing a file or a directory
 543    in the browser.
 544  - When viewing a file and if the file is editable, there is a new link to edit
 545    this  file.
 546  - Files and directories in directory listing are now sorted case-insensitively.
 547
 548  Configuration files:
 549  --------------------
 550  The settings of Dev-Editor are now stored in extern configuration files: There
 551  is one file for general settings, one for the error messages and one for the
 552  paths to the template files.
 553
 554  Templates:
 555  ----------
 556  The output of Dev-Editor is now controlled by template files. The source code
 557  became much cleaner :-)
 558
 559 New in version 1.2 (2003-12-29)
 560 -------------------------------
 561
 562  Removing directories:
 563  ---------------------
 564  Dev-Editor is now able to completely remove a directory.
 565
 566  "Work with directories":
 567  ------------------------
 568  In directory listing, next do a directory, there is a new link called "Work
 569  with directory". When you select this link, you get a form to remove or
 570  rename/move the directory.
 571  Additionally, the link "Do other stuff" was renamed to "Work with file".
 572
 573  Overwriting existing files:
 574  ---------------------------
 575  If you want to copy a file, and the destination file already exists, you will
 576  be asked to overwrite the file. If the destination points to a directory,
 577  copying will be aborted completely.
 578  If you want to rename a file or a directory, and the destination file already
 579  exists, you will be asked to overwrite the file. If the destination points to a
 580  directory, renaming will be aborted completely.
 581
 582  Confirmation for removing files:
 583  --------------------------------
 584  If you want to remove a file, a confirmation dialog will be displayed first.
 585
 586  Fixed open() calls:
 587  -------------------
 588  It seems that some systems don't support the FILEHANDLE,MODE,FILENAME version
 589  of open(). Now we don't use it any more.
 590
 591  Default permissions for mkdir():
 592  --------------------------------
 593  Set the permissions for mkdir() to 0777. I thought it is optional (as described
 594  in "perlfunc"), but some systems need it.
 595
 596 New in version 1.1 (2003-11-15)
 597 -------------------------------
 598
 599  Newlines are converted:
 600  -----------------------
 601  Any line seperator will now be converted to the system specific line seperator
 602  if you save a text file.
 603
 604  File permissions are checked:
 605  -----------------------------
 606  Dev-Editor now runs some simple checks on the file permissions when it creates
 607  a directory listing, tries to view or edit a file and when it copies a file.
 608
 609  Tool tips for file status:
 610  --------------------------
 611  In directory listing, when a file cannot be viewed or edited, a tool tip on the
 612  "View" or "Edit" link will show the reason why it is so.
 613
 614  File permissions are saved:
 615  ---------------------------
 616  When the user saves a text file, the file permissions were destroyed. The
 617  reason was that a temporary file was used, which was renamed to the originally
 618  file. Now this is fixed, but if saving of the file now fails, the file could be
 619  damaged...
 620
 621  Links in error messages:
 622  ------------------------
 623  Some error messages now contain a link to go back to the directory containing
 624  the file which caused the error.
 625
 626  Typos fixed:
 627  ------------
 628  There were a lot of typos in the output, the comments and the ReadMe file.
 629
 630  Dates fixed:
 631  ------------
 632  The dates of the last modification in the head comment of the files had the
 633  wrong format. They had the format MM-DD-YYYY, but they should have YYYY-MM-DD.
 634  Sorry, that was VERY embarassing...
 635
 636 New in version 1.0 (2003-10-08)
 637 -------------------------------
 638
 639  First public release:
 640  ---------------------
 641  This is the first public release of Dev-Editor.
 642
 643 ------------------------------------------------
 644
 645 (C) 1999-2000 Roland Bluethgen, Frank Schoenmann
 646 (C) 2003-2009 Patrick Canterino
 647
 648 E-Mail: patrick@patshaping.de
 649 WWW:    http://devedit.sourceforge.net/