f417e3b2fe
Bug 281181: [SECURITY] It's way too easy to delete versions/components/milestones etc... - Patch by Fr�d�ric Buclin <LpSolit@gmail.com> r=mkanat a=myk
2006-10-14 22:02:13 +00:00
38b51c8676
Bug 347291: Make Bugzilla::User use Bugzilla::Object
...
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
2006-08-10 23:44:49 +00:00
7d976ba23d
Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by Fr�d�ric Buclin <LpSolit@gmail.com> r=mkanat a=myk
2006-06-21 00:44:48 +00:00
74634f1822
Bug 339862: Move Bugzilla::BugMail::MessageToMTA() in a separate module - Patch by Fr�d�ric Buclin <LpSolit@gmail.com> r=mkanat a=justdave
2006-06-02 10:50:15 +00:00
31d81c4061
Bug 300410: Bugzilla::Auth needs to be restructured to not require a BEGIN block
...
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
2006-05-12 02:41:22 +00:00
8bdf98ed2d
Bug 332906: Wrong parameters passed to sudo sessions when trying to bypass validation checks - Patch by Fr�d�ric Buclin <LpSolit@gmail.com> r/a=justdave
2006-04-06 22:17:41 +00:00
7d8cc00179
Patch for bug 328379: Fix spelling: 'visitng' -> 'visiting' in relogin.cgi; r=LpSolit, a=myk.
2006-02-24 00:49:37 +00:00
f85a9bd79d
Bug 315524: When an invalid action is passed to relogin.cgi, ThrowTemplateError() is called instead of ThrowCodeError() - Patch by Fr�d�ric Buclin <LpSolit@gmail.com> r=wicked a=justdave
2005-11-21 19:17:12 +00:00
51ce3bd5d9
Bug 312441: relogin.cgi allows you to impersonate user accounts you are not allowed to see when 'usevisibilitygroups' is on - Patch by A. Karl Kornel <karl@kornel.name> r=LpSolit a=justdave
2005-11-20 01:31:37 +00:00
916cb2bfa4
Bug 312439: The user being impersonated has "moral" rights to keep informed - Patch by A. Karl Kornel <karl@kornel.name> r=LpSolit a=justdave
2005-11-04 16:11:46 +00:00
733a2fdb5a
Bug 312307: Misused Throw*Error tags in code and templates - Patch by Dennis Melentyev <dennis.melentyev@infopulse.com.ua> r=LpSolit a=justdave
2005-10-23 21:47:51 +00:00
82932d7be9
Bug 204498 Add su (setuser) function
...
Patch by A. Karl Kornel <karl@kornel.name>
r=joel, a=justdave
2005-10-13 23:58:26 +00:00
e815df2e27
Bug 302644: relogin.cgi may ask you to login... before logging you out - Patch by Fr�d�ric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave
2005-08-13 14:14:39 +00:00
a8d486f572
Bug 301508: Remove CGI.pl - Patch by Fr�d�ric Buclin <LpSolit@gmail.com> r=mkanat,wicked a=justdave
2005-08-10 01:30:41 +00:00
6f3fb84923
Fix for bug 234175: Remove deprecated ConnectToDatabase() and
...
quietly_check_login()/confirm_login() calls. Cleans up callsites
(consisting of most of our CGIs), swapping (where appropriate) for calls
to Bugzilla->login. Patch by Teemu Mannermaa <wicked@etlicon.fi>.
r=bbaetz, kiko. a=justdave.
2004-03-27 03:51:44 +00:00
95422a2e5a
Bug 226324: Move relogin.cgi code to Bugzilla::Auth::CGI. Provide a
...
logout() method that is proxied through Bugzilla.pm's logout(), and fix
callers to use it. r=justdave, bbaetz, a=justdave
2003-11-27 01:01:00 +00:00
c1e4afb682
Bug 180635 - Enhance Bugzilla::User to store additional information
...
r=myk,jake
2003-06-03 09:48:15 +00:00
325350ad59
Bug 201816 - use CGI.pm for header output
...
r=joel, a=justdave
2003-05-05 01:15:38 +00:00
3c915014e3
Bug 196433 - Bugzilla now uses /usr/bin/perl as the shebang line
...
r=justdave
a=justdave
2003-03-27 00:07:02 +00:00
2b781fd427
Bug 76923 - Don't |use diagnostics| (its really expensive at startup time)
...
r=joel x2
2002-08-26 06:17:26 +00:00
fa7ca28a6c
Bug 158658 - relogin.cgi should use a template. This also adds the ability to localise messages. Patch by gerv; r=burnus.
2002-07-26 20:49:04 +00:00
4950c6bca3
Bug 140437 - clean up parameters. Patch by gerv; 2xr=justdave.
2002-05-08 04:40:35 +00:00
2743a43bf1
Bug 140435 - Templatise GetCommandMenu. Patch by gerv; r=bbaetz, justdave.
2002-05-07 21:28:52 +00:00
3bc9d4ca2b
Bug 138588 - change to use new template structure. Patch by gerv, r=myk, afranke.
2002-04-24 07:24:50 +00:00
8342994a7f
Bug 126791 - templatise relogin.cgi
2002-02-24 08:54:14 +00:00
12965a910a
Bug 95732 - remove logincookies.cryptpassword, and invalidate cookies from
...
the db when required instead.
(Also fixes bug 58242 as a side effect)
r=myk, kiko
2002-02-04 12:23:05 +00:00
e24c04e22a
Fix for bug 108982: enable taint mode for all user-facing CGI files.
...
Patch by Brad Baetz <bbaetz@student.usyd.edu.au>
r= jake, justdave
2002-01-20 01:44:52 +00:00
f11f9cd823
Fix for bug 120817 - Log Out and %commandmenu% in bannerhtml, r=justdave,dkl
2002-01-18 20:04:32 +00:00
66cd4cbf7f
Fix for bug 19910: Bugzilla installs on the same server would interfere with each others' cookies. Cookies now have a path value that can be set to indicate which bugzilla install they belong to. Browsers will only send the cookie to the appropriate installation. The path can be set in the 'cookiepath' parameter in editparams.cgi.
...
Patch by Dave Lawrence <dkl@redhat.com>
r= myk, justdave
2001-10-13 00:40:41 +00:00
d8faddd660
Footer wasn't displaying new state after clicking "log out".
2000-01-18 14:41:00 +00:00
f5e622daa8
Patch by Ramon Felciano <felciano@ingenuity.com>, with many tweaks by
...
me. Added a footer to every page. Add some options to do things like
display checkboxes instead of scrolling lists, and a new formatting
for email diffs, and show list items capitalized instead of all upper
case.
2000-01-14 22:35:49 +00:00
2db9bdbbbe
updated license boilerplate
1999-11-01 23:33:56 +00:00
92745287f7
Patch by holger@holger.om.org (Holger Schurig) -- put the fancy header on several pages that were missing it.
1999-09-23 19:08:03 +00:00
9c52e0e834
Assorted minor UI cleanups (mostly putting navigation headers in, and
...
rewording "return to query page" for pages where that is not always true.
Also add two options to the main index.html
1999-06-15 04:29:05 +00:00
ca1d736df9
Backed out Andrew's patch -- turns out it was doing quoting sublty wrong.
1998-11-20 19:18:37 +00:00
68314873bf
Patch by Andrew Anderson <andrew@redhat.com>. Many minor bugfixes and cleanup.
1998-11-16 19:43:50 +00:00
c5465798e0
Everything has been ported to now run under Perl.
1998-09-15 21:49:26 +00:00
1644915b59
Changed the way password validation works. We now keep a
...
crypt'd version of the password in the database, and check against
that. (This is silly, because we're also keeping the plaintext
version there, but I have plans...) Stop passing the plaintext
password around as a cookie; instead, we have a cookie that references
a record in a new database table, logincookies.
IMPORTANT: if updating from an older version of Bugzilla, you must run
the following commands to keep things working:
./makelogincookiestable.sh
echo "alter table profiles add column cryptpassword varchar(64);" | mysql bugs
echo "update profiles set cryptpassword = encrypt(password,substring(rand(),3, 4));" | mysql bugs
1998-09-02 18:54:54 +00:00
0be4b6cf6d
Bugzilla source.
1998-08-26 06:14:20 +00:00
lpsolit%gmail.com
mkanat%bugzilla.org
jocuri%softhome.net
karl%kornel.name
bugreport%peshkin.net
kiko%async.com.br
bbaetz%acm.org
jake%bugzilla.org
bbaetz%student.usyd.edu.au
gerv%gerv.net
justdave%syndicomm.com
dkl%redhat.com
terry%mozilla.org
dmose%mozilla.org
bryce-mozilla%nextbus.com
terry%netscape.com