1 = MediaWiki release notes =
3 Security reminder: MediaWiki does not require PHP's register_globals
4 setting since version 1.2.0. If you have it on, turn it *off* if you can.
8 THIS IS NOT A RELEASE YET
10 MediaWiki is now using a "continuous integration" development model with
11 quarterly snapshot releases. The latest development code is always kept
12 "ready to run", and in fact runs our own sites on Wikipedia.
14 Release branches will continue to receive security updates for about a year
15 from first release, but nonessential bugfixes and feature developments
16 will be made on the development trunk and appear in the next quarterly release.
18 Those wishing to use the latest code instead of a branch release can obtain
19 it from source control: http://www.mediawiki.org/wiki/Download_from_SVN
21 === Configuration changes in 1.14 ===
23 * $wgExemptFromUserRobotsControl is an array of namespaces to be exempt from
24 the effect of the new __INDEX__/__NOINDEX__ magic words. (Default: null, ex-
25 empt all content namespaces.)
26 * $wgForwardSearchUrl has been removed entirely. Documented setting since 1.4
27 has been $wgSearchForwardUrl.
28 * (bug 15080) $wgOverrideSiteFeed has been added. Setting either
29 $wgSiteFeed['rss'] or 'atom' to a URL will override the default Recent Changes
30 feed that appears on all pages.
31 * $wgSQLiteDataDirMode has been introduced as the default directory mode for
32 SQLite data directories on creation. Note this setting is separate from
33 $wgDirectoryMode, which applies to all normal directories created by MediaWiki.
34 * $wgGroupsAddToSelf and $wgGroupsRemoveFromSelf now work more like
35 $wgAddGroups and $wgRemoveGroups, where the user must belong to a specified
36 group in order to add or remove those groups from themselves.
37 Backwards compatibility is maintained.
38 * $wgRestrictDisplayTitle controls if the use of the {{DISPLAYTITLE}} magic
39 word is restricted to titles equivalent to the actual page title. This
40 is true per default, but can be set to false to allow any title.
41 * $wgSpamRegex may now be an array of multiple regular expressions.
42 * $wgAjaxSearch has been removed; use $wgEnableMWSuggest instead.
43 * Editing the MediaWiki namespace is now unconditionally restricted to people
44 with the editinterface right, configuring this in $wgNamespaceProtection
46 * $wgAllowExternalImagesFrom may now be an array of multiple strings.
47 * Introduced $wgEnableImageWhitelist to toggle the on-wiki external image
49 * Added $wgRenderHashAppend to append some string to the parser cache and the
50 sitenotice cache keys.
52 === Migrated extensions ===
53 The following extensions are migrated into MediaWiki 1.14:
55 * Special:DeletedContributions to show deleted user contributions (was extension
57 * Special:Log/newusers recording new users (was extension Newuserlog)
58 * Special:LinkSearch to search for external links (was extension LinkSearch)
61 === New features in 1.14 ===
63 * New URL syntaxes for Special:ListUsers - 'Special:ListUsers/USER' and
64 'Special:ListUsers/GROUP/USER', in addition to the older syntax
65 'Special:ListUsers/GROUP' where GROUP is a valid group name.
66 * Configurable per-namespace and per-page notices for the edit form,
67 respectively MediaWiki:Editnotice-# where # is the namespace number, and
68 MediaWiki:Editnotice-#-PAGENAME where # is the page's namespace number and
69 PAGENAME is the page name minus the namespace prefix.
70 * (bug 8068) New __INDEX__ and __NOINDEX__ magic words allow user control of
71 search engine indexing on a per-article basis.
72 * Handheld stylesheet options
73 * Added 'DoEditSectionLink' hook as a cleaner unified version of the old
74 'EditSectionLink' and 'EditSectionLinkForOther' hooks. Note that the
75 'EditSectionLinkForOther' hook has been removed, but 'EditSectionLink' is
76 run in all cases instead, so extensions using the old hooks should still work
77 if they ran roughly the same code for both hooks (as is almost certain).
78 * Signature (~~~~) "cleaning", i.e. template removal, can be disabled with
79 $wgCleanSignatures=false
80 * Extensions can use the SkinBuildSidebar hook to modify the content of the
81 sidebar and add custom portlets to it
82 * Added 'MakeGlobalVariablesScript' hook for extensions to be able to add vari-
83 ables into into the output of Skin::makeVariablesScript
84 * (bug 13846) Added $wgAddGroups and $wgRemoveGroups display on
85 Special:ListGroupRights
86 * (bug 14377) Add a date selector to history pages
87 * (bug 15007) New 'pagetitle-view-mainpage' message allows the HTML <title> of
88 the main page to be customized
89 * Added $wgDisableTitleConversion to disabling the conversion for all pages on
91 * Added 'noconvertlink' toggle that can be set per user preferences, also
92 added 'convertlink=no|yes' on GET requests whether have the link titles
93 being converted or not
94 * (bug 14921) Special:Contributions/: add user name to <title>
96 * Unescape more "safe" characters when producing URLs, for added prettiness
97 * Introduced a new hook 'SkinAfterContent' that allows extensions to add text
98 after the page content and article metadata. Updated all skins and skin
99 templates to work with that hook.
100 * (bug 14929) removeUnusedAccounts.php now supports 'ignore-touched' and
101 'ignore-groups'. Patch by Louperivois
102 * (bug 15127) Work around minor display glitch in Opera.
103 * By default, reject file uploads that look like ZIP files, to avoid the
104 so-called GIFAR vulnerability.
105 * (bug 15141) Give ability to only list protected pages with the cascading
106 option enabled on Special:ProtectedPages
107 * (bug 15157) Special:Watchlist has the same options as Special:Watchlist:
108 Show/Hide logged in users, Show/Hide anonymous, Invert namespace selection
109 * Added hook 'UserrightsChangeableGroups' to allow modification of what
110 groups may be added or removed via the Special:UserRights interface.
111 * HTML entities like now work (are not escaped) in edit summaries.
112 * (bug 13815) In the comment for page moves, use the colon-separator message
113 instead of a hardcoded colon.
114 * Allow <gallery> to accept image names without an Image: prefix
115 * Add tooltips to rollback and undo links
116 * BMP images are now displayed as PNG
117 * (bug 13471) Added NUMBERINGROUP magic word
118 * (bug 11884) Now support Flash EXIF attribute
119 * Show thumbnails in the file history list, patch by User:Agbad
120 * Added support of piped wikilinks using double-width brackets
121 * Added an on-wiki external image whitelist. Items in this whitelist are
122 treated as regular expression fragments to match for when possibly
123 displaying an external image inline.
124 * (bugs 15405, 15436) Sort more currency types correctly in sortable tables
125 * (bug 15422) Sort more different types of numbers in sortable tables
126 * (bug 2889) MediaWiki:Print.css applies to the printable version
127 * Category counts (e.g. from {{PAGESINCATEGORY:}}) should be more accurate for
129 * After logging in, automatically redirect to wherever you logged in from
130 * (bug 5619) Break messages used in Special:Statistics down further
131 * (bug 11029) Add link to Special:Listusers?group=sysop etc at
133 * (bug 15514) Setting $wgRightsText without $wgRightsUrl now produces a
134 plaintext copyright notice. Patch by Juliano F. Ravasi.
135 * (bug 15551) Deletion log excerpt is now shown whenever a user vists a
136 deleted page, even if they are unable to edit it.
137 * Added Wantedfiles special pages, allowing users to find image links with no
139 * (bug 12650) It is now possible to set different expiration times for different
140 restriction types on the protection form.
141 * (bug 8440) Allow preventing blocked users from editing their talk pages
142 * Improved upload file type detection for OpenDocument formats
143 * (bug 15739) Add $wgArticlePathForCurid to make links with only curid=# as the
144 query string use the article path, rather than the script path
147 === Bug fixes in 1.14 ===
149 * (bug 14907) DatabasePostgres::fieldType now defined.
150 * (bug 14659) Passing the default limit param to Special:Recentchanges no more
151 falls back to the user option
152 * (bug 14954) Fix regression in Modern and Simple skins
153 * Recursion loop check added to Categoryfinder class
154 * Fixed few performance troubles of large job queue processing
155 * Not setting various parameters in Foreign Repos now fails more gracefully
156 * (bug 2333) Redirects are properly rendered when previewing an edit.
157 * (bug 14972) Use localized alias of Special:Search on all search forms
158 * (bug 11035) Special:Search should have descriptive <title>
159 * Special pages are now not subject to special handling for "self-links"
160 * (bug 15053) Syntactically incorrect redirects with another link in them
161 no longer redirect to the second link
162 * (bug 15049) Fix for CheckUser extension's log search: usernames containing
163 a "-" were incorrectly turned into bogus IP range searches.
164 Patch by Max Semenik.
165 * (bug 15055) Talk page notifications no longer attempt to send mail when
166 user's e-mail address is invalid or unconfirmed
167 * (bug 12370) Add throttle on password attempts. Defaults to max 5 attempts in 5
169 * (bug 15016) 'Templates used on this page' list in view source should be
170 wrapped in a div with class "templatesUsed"
171 * (bug 14868) Setting $wgFeedDiffCutoff to 0 now disables generation of the diff
172 entirely, not just the display of it.
173 * (bug 6387) Introduced new setting $wgCategoryPrefixedDefaultSortkey which
174 allows having the unprefixed page title as the default category sortkey
175 * (bug 15079) Add class="ns-talk" / "ns-subject" to <body>. Also added
176 ns-special to special pages.
177 * (bug 15052) Skins should add their name as a class in <body>
178 * (bug 14165, bug 14294) Wikimedia specific configuration in convertGrammar()
179 for several languages was removed. The settings have been put in extension
180 WikimediaMessages. Patch for Czech by Danny B.
181 * (bug 15101) Displaying only bots edits in Special:Recentchanges now works
183 * (bug 13770) Fixed incorrect detection of PHP's DOM module
184 * (bug 14790) Export of category pages when using Category: prefix now actually
186 * Avoid recursive crazy expansions in section edit comments for pages which
187 contain '/*' in the title
188 * Fix excessive memory usage when parsing pages with lots of links
189 * $wgSpamRegex now matches the edit summary and page move descriptions in
190 addition to body text.
191 * Navigation links to images available from a shared repository (like Commons)
192 from their local talk pages no longer appear as redlinks
193 * Action=purge on ForeignApiFiles now works (purges their thumbnails and
195 * (bug 15303) Title conversion for templates wasn't working in some cases.
196 * (bug 15264) Underscores in Special:Search/Foo_bar parameters were taken
197 literally; now converting them to spaces per expectation.
198 * (bug 15342) "Invert" checkbox now works correctly when selecting main
199 namespace in Special:Watchlist
200 * (bug 15172) 'Go' button of Special:Recentchanges now on the same line as the
201 last input element (like Special:Watchlist too)
202 * (bug 15351) Fix fatal error for invalid section fragments in autocomments
203 * Fixed intermittent deadlock errors involving objectcache table queries.
204 Use a separate database connection for the objectcache table to avoid
205 long-lasting locks on that table.
206 * Respect file restrictions in the file history list
207 * (bug 15399) Odd/even classes on sortable tables' rows could be slow for large
208 tables, and have been disabled by default.
209 * (bug 15482) Special:Recentchangeslinked has no longer two submit buttons
210 * (bug 15292) New message notification for unregistred users now works again
211 * (bug 14398) mwsuggest.js: Let width of container be configurable
212 * (bug 15543) Only include user touched timestamp to generated CSS
213 * (bug 15497) Removed encoding attribute from <?xml ?> tag
214 * (bug 12284) Special:Preferences now sets a returnto parameter on the link to
215 Special:Userlogin. Patch by Marooned.
216 * Fixed the HTTP accept language string detection length in
217 LanguageConverter.php, instead of the fixed length language codes.
218 * Special:Recentchangeslinked no longer shows outgoing links for nonexistent pages
219 even if there are broken link records with source article id 0 in the database
220 * (bug 15598) Special:Newpages default limit uses user preference for recentchanges
221 limit instead of hardcoded 50.
222 * (bug 15617) $wgFeedClassesOutputPage::getHeadLinks() respects $wgFeedClasses,
223 instead of hardcoding rss and atom. Patch by Juliano F. Ravasi.
224 * (bug 14638) Special:Blockip now provides a link to the block log if the user
225 has been blocked more than 10 times. Patch by Matt Johnston.
226 * (bug 12678) Skins don't show Upload link if the user isn't allowed to upload.
227 * Fixed incorrect usage of DB_LAST in Special:Export. Deprecated DB_LAST.
228 * (bug 15642) Blocked sysops can no longer block other users
229 * Http::request() now respects $wgHTTPtimeout when not using cURL
231 === API changes in 1.14 ===
233 * Registration time of users registered before the DB field was created is now
234 shown as empty instead of the current time.
235 * API search now falls back to fulltext search by default when using Lucene
236 or other engine which doesn't support a separate title search function.
237 This means you can use API search on Wikipedia without explicitly adding
238 &srwhat=text to the query.
239 * Added iiprop=bitdepth to imageinfo and aiprop=bitdepth to allimages
240 * (bug 14713) API-specific permissions (such as 'writeapi' and 'apihighlimits'
241 are now listed on action=help
242 * (bug 15044) Added requestid parameter to api.php to facilitate distinguishing
244 * (bug 15048) Added limit field for multivalue parameters to action=paraminfo
246 * When the limit on multivalue parameters is exceeded, a warning is issued
247 * list=search doesn't list missing pages any more
248 * (bug 15178) Added clshow to prop=categories to allow filtering for hidden/
249 non-hidden categories
250 * (bug 15228) Combining revids= and redirects now throws a warning instead of an
251 error, and still resolves redirects generated by the generator.
252 * list={backlinks,embeddedin,imageusage} now return arrays with keys 0, 1, 2,
253 etc. (AKA lists) instead of arrays with pageIDs as keys (AKA hash tables)
254 for consistency with other list modules.
256 * (bug 15275) apprefix and related parameters ignore spaces at the end
257 * action=edit no longer throws unknown error 228 when trying to create an empty
258 section with section=new
259 * Database replication lag doesn't cause all action=edit requests to return the
260 nochange flag any more
261 * (bug 15392) ApiFormatBase::formatHTML now uses $wgUrlProtocols.
262 * (bug 15444) action=edit returns "Unknown error: ``AS_END''" where it should
263 return just "Unknown error"
264 * (bug 15448) YAML output returns empty values instead of 0
265 * (bug 15445) Added action=patrol
266 * (bug 15466) Added action=purge
267 * (bug 15486) action=block ignores autoblock parameter
268 * (bug 15492) added rcprop=loginfo to list=recentchanges
269 * (bug 15527) action=rollback can now revert anonymous editors
270 * (bug 15535) prop=info&inprop=protection doesn't list pre-1.10 protections
271 if the page is also protected otherwise (1.10+ style or cascading)
272 * list=random now has rnredirect parameter, to get random redirects.
273 * Added APIAfterExecute, APIQueryAfterExecute and APIQueryGeneratorAfterExecute
274 hooks which allow for extending core modules in a cleaner way
275 * action=protect checks for invalid protection types and levels
276 * (bug 15673) Added indentation to format=wddxfm output and improved built-in
277 WDDX formatter to resemble PHP's more
278 * (bug 15706) Empty values for apprtype and apprlevel are now silently ignored
279 rather than causing an exception
280 * Added uiprop=preferencestoken to meta=userinfo
281 * (bug 15609) Add inprop=url and inprop=readable to prop=info
282 * Add ApiDisabled and ApiQueryDisabled classes so individual modules can
283 be disabled in LocalSettings.php
284 * (bug 15653) Add prop=duplicatefiles
286 === Languages updated in 1.14 ===
288 MediaWiki supports over 300 languages. Many localisations are updated
289 regularly. Below only new and removed languages are listed.
291 * Bakhtiari (bqi) (new)
292 * Fiji Hindi (Devanagari script) (hif-deva) (new)
294 * Lezghian (lez) (new)
298 * Plautdietsch (pdt) (new)
299 * Tarantino (roa-tara) (new)
300 * Serbo-Croatian (sh) (new)
305 MediaWiki 1.14 requires PHP 5 (5.1 recommended). PHP 4 is no longer supported.
307 PHP 5.0.x fails on 64-bit systems due to serious bugs with array processing:
308 http://bugs.php.net/bug.php?id=34879
309 Upgrade affected systems to PHP 5.1 or higher.
311 MySQL 3.23.x is no longer supported; some older hosts may need to upgrade.
312 At this time we still recommend 4.0, but 4.1/5.0 will work fine in most cases.
317 1.14 has several database changes since 1.13, and will not work without schema
320 If upgrading from before 1.11, and you are using a wiki as a commons repository,
321 make sure that it is updated as well. Otherwise, errors may arise due to
322 database schema changes.
324 If upgrading from before 1.7, you may want to run refreshLinks.php to ensure
325 new database fields are filled with data.
327 If you are upgrading from MediaWiki 1.4.x or earlier, some major database
328 changes are made, and there is a slightly higher chance that things could
329 break. Don't forget to always back up your database before upgrading!
331 See the file UPGRADE for more detailed upgrade instructions.
336 Some output, particularly involving user-supplied inline HTML, may not
337 produce 100% valid or well-formed XHTML output. Testers are welcome to
338 set $wgMimeType = "application/xhtml+xml"; to test for remaining problem
339 cases, but this is not recommended on live sites. (This must be set for
340 MathML to display properly in Mozilla.)
342 For notes on 1.13.x and older releases, see HISTORY.
345 === Online documentation ===
347 Documentation for both end-users and site administrators is currently being
348 built up on MediaWiki.org, and is covered under the GNU Free Documentation
349 License (except for pages that explicitly state that their contents are in
352 http://www.mediawiki.org/wiki/Documentation
357 A MediaWiki-l mailing list has been set up distinct from the Wikipedia
360 http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
362 A low-traffic announcements-only list is also available:
364 http://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
366 It's highly recommended that you sign up for one of these lists if you're
367 going to run a public MediaWiki, so you can be notified of security fixes.
372 There's usually someone online in #mediawiki on irc.freenode.net