Movable Type 4.01 Beta
By Byrne Reese and posted in 4.01 on August 22, 2007.
Overview Type: Bug Fix, one XSS vulnerability affecting a portion of users addressed. Mandatory? Highly Recommended for all MT4.0 users, and strongly recommended for users affected by the listed issues, but not required. Performance Implications: Expect performance increase. Some critical performance improvements to MT 4.0. Users expect to see performance increase in the application and in publishing. Plugins Affected: None that we are aware of -- all MT4.0 plugins should work in MT 4.01. However, this is a release that focuses on addressing issues with the Movable Type Perl API, so impacts are possible. Templates Affected: No changes in your templates are required. The default search results template was modified slightly to be compliant with W3C standards. Licensing considerations: None. MT 4.01 is a free upgrade for users of any version of MT 4.0 Download This release is no longer in beta; MT 4.01 is available through the standard download process. Known Issues Here is a list of known issues that we intend on fixing prior to this release. Several users have reported the upgrade process being run and re-run somewhat randomly. We are still investigating. If anyone encounters this issue please, please, please report it so that we can...
Read more
Downloading MTOS
By Byrne Reese and posted in Open Source Project on December 10, 2007.
Users wishing to obtain the absolutely most recent code of MTOS can check code out directly from the source code repository. To do so requires that you have a git client installed on your machine. You can check out the latest from the github repository: % git clone http://github.com/movabletype/movabletype.git Once you have cloned the source code, you will need to run the following command to process the build and ready it for the web: % cd movabletype % make me Note: it is our goal to remove the need for this last step, but for the time being it is required in order to set the default language of the checked out files. GitHub is the most popular Git hosting, and it also provides social networking functions such as feeds, followers and the network graph to display how the team works on the repository. We believe that this transition will help our community a lot. The development process will be more transparent, easier to try the bleeding edge version of the code, and of course, you can fork your own projects ! movabletype/movabletype - GitHub...
Read more
Project Status
By Byrne Reese and posted in Open Source Project on December 11, 2007.
The Movable Type Open Source Project is still in the process of evolving to meet our users needs. As a result some aspects of the project are still in flux and/or being developed. This page is meant to give an overview of the project's road map and milestones, the status of each, and when we think they will be completed. In time, all of these issues will be addressed by Six Apart and the Community. In the mean time, use this page to track the progress of each of the major tasks associated with fully realizing the Movable Type Open Source Project. MTOS Availability Status: Complete MTOS is now available through subversion. Nightly builds are available as well. Nightly Builds Status: Complete Check the nightly build directory for updates shortly after midnight. Subversion Code Repository Status: Complete Primary development of Movable Type has been successfully migrated to the public subversion repository. As of the first code push, the active development branch is release-NN. Stable Builds Status: Available Release Date: January 24, 2008 You can download the latest stable release from our download page. Bug Tracking System Status: Available at http://bugs.movabletype.org/ Release Date: May 2008 Update: December 20, 2007 - an...
Read more
MTOS Subversion Tips
By Byrne Reese and posted in Tips & Tricks on December 26, 2007.
Developers looking to stay plugged into the bleeding edge of Movable Type without having to depend upon nightly builds may like the following tip which shows how one can always access the following builds reliably and predictably without having to worry about branches, tags or anything else about how the source code is organized: The last official release that one can download from our web site The last stable release, which includes minimally tested milestone beta builds The most recent source code in active development Pointers to each of these are maintained for your convenience by the development team. Simply execute the following command and you will check out three copies of Movable Type corresponding to each of the above states of the source code (the source code will be placed within a directory called mtos-latest): svn co http://code.sixapart.com/svn/movabletype/latest mtos-latest When that is complete you can navigate to the dev directory found within the mtos-latest directory that was just created for you and execute svn up to update to the most recent code in development. Executing the following command will reveal that this is made possible through a set of three svn:externals: svn propget svn:externals http://code.sixapart.com/svn/movabletype/latest In layman's terms, these...
Read more
Security Update for Movable Type
By Byrne Reese and posted in News on January 17, 2008.
Cross posted from the "announcement":http://www.movabletype.com/blog/2008/01/movable-type-security-update.html found at the "Official Movable Type News blog":http://www.movabletype.com/blog/: Today we are releasing a mandatory security update for all Movable Type users, to address a potential security issue which has been reported by a third party. A detailed description of the vulnerability can be found later in this post, but to summarize: In affected versions of Movable Type, there are certain circumstances in which a blog template may be rendered dynamically via CGI in an otherwise static publishing context. If you use Movable Type to publish PHP files (or JSP or ASP pages) and have embedded within your Movable Type templates sensitive information (such as database connection information), then that sensitive information could potentially be exposed and viewed publicly. There is no record of a customer having been affected by this vulnerability. Here's the Update Advisor, a simple scorecard to let you evaluate this new release. Movable Type Update Advisor: Version 4.01a and 3.36 Release Type: Security Release. The potential vulnerability has not yet been exploited in the wild. Mandatory? This is a mandatory update for all users of Movable Type. Performance Implications: None. Plugins Affected: None. Templates Affected: No changes in your templates are required....
Read more
Movable Type 4.1 Release Candidate 1
By Byrne Reese and posted in News on January 17, 2008.
Tonight we released the first release candidate for Movable Type 4.1. This release signals that the product is converging upon a final and shippable version of the product. You can download it now from http://movabletype.org/beta/. Important changes in this release include: a clean upgrade path for user's of the Custom Fields plugin wishing to move to Movable Type 4.1 a fix that addresses a vulnerability posted about previously userpics are now embedded by default in Movable Type's default templates a change to Movable Type search results template has sped up search results considerably Read the complete change log to familiarize yourself with all the other fixes found in this most recent release. In the spirit of full disclosure we are planning a release of a second release candidate early next week. The scope of this release includes one final and additional feature for paid users of Movable Type in addition to our final translations and localization changes for Movable Type 4.1. But even if there is one more release candidate planned, this is still the perfect opportunity for all those people waiting for a more stable release to try out the latest features of Movable Type. And here's a tip...
Read more
Building Action Streams
By Clifton and posted in Plugins on January 30, 2008.
As my LiveJournal friends know, I’m reading Bowling Alone, Robert Putnam’s 2001 book about the decline in civic engagement in the US since the generation that fought World War II. Without going into his arguments, he shows that the behavior we expect from a civil society has been evaporating since roughly the dawn of television, leaving us with brittle institutions and less resilient lives. There are both a mighty need and a grand opportunity for us to knit our society back together, and I expect us to use the internet to do that. Putnam mentions the idea that the internet lets us connect in ways we haven’t before, but rightly views the utterly unproven possibility with skepticism. I’ve yet to adequately articulate myself on the topic, and I’m still not able to do so here, so instead let’s discuss a meager tilt I took at that windmill: the new Action Streams plugin for Movable Type 4.1....
Read more
Report a Bug
By Byrne Reese and posted in feedback on February 4, 2008.
window.location = 'http://bugs.movabletype.org/default.asp?pg=pgPublicEdit'; The following form is for bug reports only. To ensure a timely response to your inquiry, please do not use this form for general inquiries or support requests. All fields are required. Your name: Your email address: Subject: Bug Report: Version: Attachment: Important! Please upgrade to the latest version and test before submitting a bug. Please limit the size of your attachments to 500k. Please include a link to your mt-check.cgi if possible Please include a link to the specific page on your blog if the bug you are reporting can be seen there. Again, we would like to thank you for taking the time to report this issue and send us this feedback. With your help we are making Movable Type the best blogging product on the market....
Read more
Detailed Changes from MT4.1 and MT4.2 Beta 1
By Byrne Reese and posted in 4.2 on April 4, 2008.
hAtom rel='tag' for category links Revision: 1286 Bug(s): 66652 updating the MTTagSearchLink function to produce a link having the tag at the end of the url & simplifying the template code based upon default behavior of the function Revision: 1287 Bug(s): 66652 removing redundant 'vcard' class and wrapping pipe separators with 'separator' class Revision: 1288 Bug(s): 66652 Merging commits from release-28 changesets 1274 to 1306 Revision: 1308 standarize js comment tag escape. Revision: 1309 Bug(s): 58265 Added 'type' parameter into the blog selector link for creating template. Revision: 1317 Bug(s): 66610 Fixed default listing rows value. Revision: 1319 Bug(s): 66603 Fixed * Changed schemeversion to 4.0037 * Added basename column to MTAuthor * Assigning basename when author saved * Changed to use MTAuthorBasename instead of MTAuthorDisplayName Revision: 1333 Bug(s): 65812 Added the end of directory separator for default site path. Revision: 1334 Bug(s): 66326 Fixed * Never use category filter when category class was not folder. Revision: 1335 Bug(s): 66853 Hide 'System Information' menu if blog_id is specified. Revision: 1336 Bug(s): 65280 Added status comments filter for working magnifier icon on edit screen. Revision: 1339 Bug(s): 66382 Fixed * Generate user-pic when user-pic was not found Revision: 1340 Bug(s): 66594...
Read more
MT 4.2 Beta 2 Change Log
By Byrne Reese and posted in 4.2 on April 10, 2008.
Added ability to filter search by author and/or category. Revision: 1708 Bug(s): 69286 Merged the latest checkins to release-32 branch to the current dev branch. svn merge -r1669:1708 http://code.sixapart.com/svn/movabletype/branches/release-32 . Revision: 1709 Comment reply should not have assumed the existence of template modules even if it was one of default templates. Revision: 1710 Bug(s): 67976 Do not set loaded flag when it's not loaded. Revision: 1711 Bug(s): 68601 Typo! Revision: 1712 Fix templates' ids stored in plugindata table for widget managers upon restore. Revision: 1713 Bug(s): 74983 'view' mode is the standard. This eliminates the need to add two mode handlers in plugins and addons. Revision: 1714 Webmaster can save pages in batch. Revision: 1715 Bug(s): 67906 Added locale specific default value to TimeOffset config directive. Revision: 1716 Bug(s): 67724 Added locale specific default value to TimeOffset config directive. Revision: 1717 Bug(s): 67724 Only register the CommentThrottleFilter callback once. Revision: 1718 Prevent touches to blog for MT::Touch objects. Revision: 1719 Fixed usage of COMMENTER_COOKIE constant. Revision: 1720 Bug(s): 69872 Fix for warnings from SpamLookup. Revision: 1721 Bug(s): 65586 Change for indexes for TheSchwartz::Error. Revision: 1722 Added non-cacheable flag for MT::Touch. Revision: 1723 Issue blog->touch calls for XMLRPC updates. Revision: 1724...
Read more