Removing eXecutable flag from non executables like text files or php scripts
Adding eXecutable flaf to a bash script
Updated the INSTALL.md to create a copy of apache config files

A link would allow the web-scripts to edit the entire server configuration.
Reduce the write access to the Specific folder seems to be sufficient.
Update card.php

extended switch for using BasicAuth for Windows Phone and DigestAuth e.g. when iPhone tries to connect. Now Baikal is more flexible to support iPhone and Windows Phone on the fly.
Update cal.php

extended switch for using BasicAuth for Windows Phone and DigestAuth e.g. when iPhone tries to connect. Now Baikal is more flexible to support iPhone and Windows Phone on the fly.
Make calendar description optional
Make HTML5 shiv a local resource

Including the HTML5 shiv directly from googlecode.com is considered bad practice:

1) It causes an additional DNS lookup
2) The ressource from SVN is not cacheable and not served compressed.

see: http://zoompf.com/blog/2012/05/html5shiv-and-serving-content-from-code-repositories
Improve application security

- Make session cookies only available via HTTP (prevent access from JavaScript)
- only log PHP errors instead of displaying them in production.
  Displaying errors may give attackers hints how to exploit the application

Set HTTP headers:

X-Frame-Options: DENY
Prevent Clickjacking attacks, see: http://en.wikipedia.org/wiki/Clickjacking

X-Content-Type-Options: nosniff
Prevent code injection via mime type sniffing
Fix line endings
Make user contributed installation more readable
Improve security: Limit rights for Baïkal's MySQL user
Merge pull request #183 from fhemberger/documentation

Update installation docs: Limit rights for Baïkal's MySQL user (for security reasons)
Thanks to @fhemberger
Merge pull request #181 from fhemberger/security

Improve application security
Thanks @fhemberger, this is great. Wasn't aware of such exploits.
Merge pull request #180 from fhemberger/html5shiv

Performance: Make HTML5 shiv a local resource
Merge pull request #179 from fhemberger/patch-176

Make calendar description optional, fixes #176
Thanks @fhermberger
Merged fhemberger-patch-132
Merging #175 from @Jentsch
Merge pull request #173 from altima/master

added Windows Phone authentication to cal and card php file
Thanks @altima
Fixed #139 using var_export; thank you @janpieper and @evert