gnu-social/extlib
Brion Vibber baae319aef extlibs updates: PEAR::Mail to 1.2.0, PEAR::Net_SMTP to 1.4.2 (need to go together as a pair)
PEAR::Mail updated to 1.2.0 from 1.1.4, fixes deprecation warnings on PHP 5.3, as well as:
1.2.0:
• QA release - stable.
• Updated minimum dependencies (Net_SMTP, PEAR, PHP)
• Doc Bug #15620 Licence change to BSD
• Bug #13659 Mail parse error in special condition
• Bug #16200 - Security hole allow to read/write Arbitrary File
_hasUnclosedQuotes() doesn't properly handle a double slash before an end quote (slusarz@curecanti.org, Bug #9137).
• Make sure Net_SMTP is defined when calling getSMTPObject() directly (slusarz@curecanti.org, Bug #13772).
• Add addServiceExtensionParameter() to the SMTP driver (slusarz@curecanti.org, Bug #13764).
• Add a method to obtain the Net_SMTP object from the SMTP driver (slusarz@curecanti.org, Bug #13766).

PEAR::Net_SMTP updated to 1.4.2 from 1.3.1, needed to support updated PEAR::Mail:
1.4.2:
• Fixing header string quoting in data(). (Bug #17199)
1.4.1:
• The auth() method now includes an optional $tls parameter that determines whether or not TLS should be attempted (if supported by the PHP runtime and the remote SMTP server). This parameter defaults to true. (Bug #16349)
• Header data can be specified separately from message body data by passing it as the optional second parameter to ``data()``. This is especially useful when an open file resource is being used to supply message data because it allows header fields (like *Subject:*) to be built dynamically at runtime. (Request #17012)
1.4.0:
• The data() method now accepts either a string or a file resource containing the message data. (Request #16962)
1.3.4:
• All Net_Socket write failures are now recognized. (Bug #16831)
1.3.3:
• Added getGreeting(), for retrieving the server's greeting string. (Request #16066) [needed for PEAR::Mail]
• We no longer attempt a TLS connection if we're already using a secure socket. (Bug #16254)
• You can now specify a debug output handler via setDebug(). (Request #16420)
1.3.2:
• TLS connection only gets started if no AUTH methods are sent. (Bug #14944)
2010-12-10 10:47:22 -08:00
..
Auth Provisional OAuth, OpenID token check timing attack patches 2010-07-19 16:47:49 -07:00
Console Revert "Revert "Add Console_Getopt"" 2009-06-22 16:18:41 -07:00
DB include DB_DataObject 1.9.0 2009-12-08 15:32:50 -05:00
HTTP Drop PEAR HTTP_Request library -- no longer used since Services_oEmbed was dropped. 2010-11-19 12:15:28 -08:00
MIME Revert a OS X-specific change to PEAR MIME_Type that I accidentally commited. 2009-11-05 05:59:46 +00:00
Mail extlibs updates: PEAR::Mail to 1.2.0, PEAR::Net_SMTP to 1.4.2 (need to go together as a pair) 2010-12-10 10:47:22 -08:00
Net extlibs updates: PEAR::Mail to 1.2.0, PEAR::Net_SMTP to 1.4.2 (need to go together as a pair) 2010-12-10 10:47:22 -08:00
PEAR add missing PEAR_Exception file 2009-03-12 00:02:25 -04:00
Stomp Bump to version 1.0.0 2009-11-16 11:14:00 -05:00
System Add System_Command so MIME type fallback works for uploaded files 2009-06-23 05:16:23 -07:00
XMPPHP Update XMPPHP to last upstream release (r77), includes an XML quoting fix. 2010-04-30 13:37:40 -07:00
htmLawed Sanitize html returned by oEmbed providers to protect laconica from XSS attacks 2009-07-27 13:42:03 -04:00
libomb Updated OMB_Yadis_XRDS for compatibility with php-openid 2.2.2: Auth_Yadis_XRDS::parseXRDS() is now declared static, and PHP 5.3 demands it say so on the subclass too. 2010-06-29 15:03:50 -04:00
php-gettext Fix a logic error in php-gettext's setlocale() check; if setlocale() failed to return, we fall back to checking LANG environment variable. Now actually works when doing a setlocale *check* instead of a *set*. 2009-10-16 11:19:52 -07:00
Apache2.0.txt add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
DB.php some extlibs that were missing from 0.6.0 2008-09-30 09:38:47 -04:00
Mail.php extlibs updates: PEAR::Mail to 1.2.0, PEAR::Net_SMTP to 1.4.2 (need to go together as a pair) 2010-12-10 10:47:22 -08:00
OAuth.php Upgrade OAuth.php to the latest version. 2010-10-06 13:39:58 -07:00
OAuth_LICENSE.txt add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
PEAR.php Cleanup for bug 1813: workaround sometimes-missing dl() in PHP 5.3 by defining our own bogus function rather than attempting to patch upstream libs. This keeps our fix across upstream versions (or when loading upstream library from outside extlib) 2009-11-16 15:45:15 -08:00
PHP_License_2_02.txt add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
PHP_License_3.01.txt add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
PHP_Markdown_License.text add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
README add a README warning devs from fracking around in extlib/ 2009-10-31 13:35:20 -04:00
Stomp.php Bump to version 1.0.0 2009-11-16 11:14:00 -05:00
Validate.php Added PEAR Services/oEmbed and its dependencies for multimedia integration. 2009-02-03 21:35:25 +00:00
get_temp_dir.php Add a sys_get_temp_dir substitute to extlib for easier installation on versions that lack it 2008-09-24 11:08:28 -04:00
gpl-2.0.txt add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
lgpl-2.1.txt add LGPL 2010-01-02 22:46:50 -10:00
markdown.php include external libs in a subdir to make install easier 2008-08-22 09:17:14 -04:00

README

DO NOT "FIX" CODE IN THIS DIRECTORY.

ONLY UPSTREAM VERSIONS OF SOFTWARE GO IN THIS DIRECTORY.

This directory is provided as a courtesy to our users who might be
unable or unwilling to find and install libraries we depend on.

If we "fix" software in this directory, we hamstring users who do the
right thing and keep a single version of upstream libraries in a
system-wide library. We introduce subtle and maddening bugs where
our code is "accidentally" using the "wrong" library version. We may
unwittingly interfere with other software that depends on the
canonical release versions of those same libraries!

Forking upstream software for trivial reasons makes us bad citizens in
the Open Source community and adds unnecessary heartache for our
users. Don't make us "that" project.

FAQ:

Q: What should we do when we find a bug in upstream software?

A: First and foremost, REPORT THE BUG, and if possible send in a patch.

   Watch for a release of the upstream software and integrate with it
   when it's released.

   In the meantime, work around the bug, if at all possible. Usually,
   it's quite possible, if slightly harder or less efficient.

Q: What if the bug can't be worked around?

A: If the upstream developers have accepted a bug patch, it's
   undesirable but acceptable to apply that patch to the library in
   the extlib dir. Ideally, use a release version for upstream or a
   version control system snapshot.

   Note that this is a last resort.

Q: What if upstream is unresponsive or won't accept a patch?

A: Try again.

Q: I tried again, and upstream is still unresponsive and nobody's
   checked on my patch. Now what?

A: If the upstream project is moribund and there's a way to adopt it,
   propose having the StatusNet dev team adopt the project. Or, adopt
   it yourself.

Q: What if there's no upstream authority and it can't be adopted?

A: Then we fork it. Make a new name and a new version. Include it in
   lib/ instead of extlib/, and use the StatusNet_* prefix to change
   the namespace to avoid collisions.

   This is a last resort; consult with the rest of the dev group
   before taking this radical step.