WackoWiki 6.3.0 — Major Feature Release

This release represents a architectural overhaul, bringing modern JavaScript tooling, a completely rewritten editor experience, hardened security defaults, and a flexible new syntax highlighter.

Headline Features

WikiEdit: Complete Rewrite (ES2023 + ES Modules)

The editor has been modularized into ES6 modules with a dedicated state management layer and a AbortController for all fetch calls.

Dev Note: Complex legacy helpers (MarkUp, _LSum, _RSum, _TSum) have been refactored. Autocomplete selection bugs are fixed.

Security & Platform Hardening

• Content Security Policy (CSP) Nonces: All inline scripts now use strict nonces.
• Cookie Prefixes (RFC 6265bis): __Host- and __Secure- prefixes applied for session integrity.
• Native Clipboard API: Removed Clipboard.js dependency; uses modern navigator.clipboard with robust fallback.
• Fixed Invalid Selector Tokens: Patched potential broken "Copy to Clipboard" handlers.

Core Architecture & Routing

UI & Theming

• Dark Mode: First-class support with OS detection (prefers-color-scheme) and manual toggle.
• Double-Click Edit Comments: Rapid inline editing for comment sections.

Syntax & Markup Extensions

Phiki Highlighter (v2.2.0)

Replaces the legacy Pear highlighter. Fast, modern, supports 350+ languages via TextMate grammars.

Migration Required: Obsolete highlighters removed (css, ini, html, java, pascal, sql).
Action: Run the admin_replace action to auto-migrate:

%%(css)   →  %%(hl css) %%(sql)   →  %%(hl sql) ... etc 

Table Markup Improvements

New attribute system for rows, cells, and tables.

New Syntax:

!| col | col |!            # Header row with attributes #|(attr=value)             # Row attributes 

Supported Attributes:

CSS Selectors Added:

• .alternate — Zebra striping
• .sticky — Fixed header on scroll
• .default[left|center|right|top|middle|bottom] — Global cell alignment
• .colN[...] — Column N alignment (1–25)
• .col-N[...] — Column N from right alignment (1–9)

Helper Functions

• New table_attr() parser for the extended markup.
• Wrapper page now accepts col option.

Internationalization (i18n)

New complete translations added:

• 🇭🇷 Croatian (hr)
• 🇹🇭 Thai (th)
• 🇹🇷 Turkish (tr)
• 🇻🇳 Vietnamese (vi)

Dependency Updates

Upgrade Guide

1. Run Composer: composer install --no-dev (populates vendor/).
2. Run Migrations: Execute the installer script.
3. Migrate Highlighters: Run the admin_replace action to convert %%(lang) → %%(hl lang).
4. Check Routes: If you have custom handlers or pages named edit, show, properties, etc., verify they resolve correctly under the new page/_* namespace.
5. Clear Cache: Delete cache/config/ and cache/template/ (or run admincache action).
6. Test CSP: Verify your web server passes the Content-Security-Policy header with nonces.

Credits

Huge thanks to contributors for the Phiki integration, the translation teams for HR/TH/TR/VI, and everyone testing the WikiEdit rewrite.

Full Changelog: 6.2.1...6.3.0
Documentation: wackowiki.org

Minor feature and bug fix release for 6.2.x series

• extend table markup allowing table caption, cell spans, width and cell attributes
  • ?| table caption |?
  • ^| header | cell ||
  • || cell ^ header ||
  • ||(attr=value) cell | cell ||
  • attributes:
    • align = [center|left|right|justify]
    • bgcolor = [blue|red|green|x11colors]
    • colspan = number
    • id = id_name
    • rowspan = number
    • scope = [row|col|rowgroup|colgroup]
    • valign = [top|middle|bottom]
    • width = number[px|%|em|rem]
• allows now [px|%|em|rem] with wrapper_width
• change markup syntax for subscript to ,,subscript,,
• make sess->date_pattern dependent on $this->user_lang
• x11colors.css
  • replace .mark-[blue|green|red] with [xblue|xgreen|xred] to not overwrite default definitions in wacko.css
• miscellaneous minor fixes
• Libs
  • PHPMailer 7.0.2

Full Changelog: 6.2.0...6.2.1

Major feature release

• SQLite support
  • add DbSqlite class
  • add backup & restore in admin panel for SQLite
  • rewrote SQL queries to work with MySQL as well as SQLite
  • register custom regexp function to use REGEXP with SQLite
  • add functions to abstract SQL syntax and function differences between MySQL and SQLite
    • utc_dt()
    • date_sub(int $value, string $interval)
    • binary()
    • collate()
    • limit()
• fix missing route case for CSS files in RECOVERY_MODE
• validates the namespace to prevent users from creating inaccessible pages when mode_rewrite is enabled
• add binary string search action (see community folder)
  • adds exact or regex search for registered users
• installer
  • add SQLite table creation script
  • add _t() function for $lang[] array
    • installer uses now English as fallback for missing message sets
  • add mandatory installer password protection
    • It is imperative to set the password for the installer in the config/lock_setup file.
  • add new system page with whatsnew action
  • add private system page with with the admincache and admin_recovery action and set it as bookmark for the admin
  • the installer sets now bookmarks for the admin account, therefore it no longer shows the default bookmarks for the admin in the menu by default
• actions
  • menu: fix not showing 'Set a bookmark' form
  • whatsnew:
    • add filter for pages, comments and files
    • show also edited comments in list
  • no longer use link table for mostcommented and mostpopular action
• miscellaneous minor fixes
• WikiEdit
  • replace var with const and let
• update libs
  • php-diff 2.5.0
  • PHPMailer 7.0.1
  • PHP Thumb Library 2.3.3
  • SimplePie 1.9.0

Full Changelog: 6.1.29...6.2.0

Minor feature and bug fix release for 6.1.x series

• removed deprecated Pragma: no-cache and Expires: header
• fixes If-Modified-Since conditional requests issues
• fixes invalid ETag
• fixes various Cache-Control header issues
• fixes missing height width value for external img links
• adds option to transliterate filenames to lowercase
• adds navigation action
• adds option to set the SameSite attribute , see constants.php
• adds option login_notice to hide recurring 'Welcome back' notice
• adds full words highlight mode
• miscellaneous minor fixes
• update libs
  • PHPMailer 6.9.1
  • svg sanitizer 0.18

Full Changelog: 6.1.24...6.1.25

Minor feature and bug fix release for 6.1.x series

• adds file_meta for file_cache
• uses :focus-within pseudo selector for dropdown
• adds CSS class btn-sm and btn-md
• English message sets fixes
• initial language files for Tamil
• re-check for anonymous user before storing cache
  • soft_login() may set sess->user_profile
• removes redundant setlocale() call
• adds db_vendor to primary config
• installer auto-detects db_vendor
  • either mariadb or mysql
  • uses server SQL mode for installer by default
  • in debug mode the db_vendor can be selected in the db config page along with the SQL mode
  • mainly to solve SQL mode incompatibilities between MariaDB and MySQL
• renames sql_mode_strict to sql_mode
  • 0 - server (default)
  • 1 - session lax
  • 2 - session strict
• fixes not showing read ACL $ pages in the default menu for logged in users with no own bookmarks defined
• miscellaneous minor fixes
• update libs
  • svg sanitizer 0.19
  • PhpThumb 2.3.1

Full Changelog: 6.1.25...6.1.26

bulk actions execute via single queries and redirect to manage Six dispatcher paths rewritten to call adapter batch methods instead of N+1 inline SQL/loops. Two latent bugs in the bulk-action form also fixed.

minor fixes

add Per-ResultCode breakdown to bb_summary

add message sets for BB module

minor fix