gecko-dev/webtools/bugzilla
justdave%syndicomm.com 482db0c87a Fix for bug 95535: the token generator for password resets is allowing the & character to be used for tokens, but wasn't escaping them for the URL it emailed to users to use to get in to reset their password.
Patch by Dave Miller <justdave@syndicomm.com>
r= myk@mozilla.org
2001-08-16 06:52:55 +00:00
..
Bugzilla Fix for bug 95535: the token generator for password resets is allowing the & character to be used for tokens, but wasn't escaping them for the URL it emailed to users to use to get in to reset their password. 2001-08-16 06:52:55 +00:00
contrib Fix for bug 73249: perl warnings under 5.6.0. 2001-06-01 08:34:45 +00:00
docs Compiled HTML/TXT check-in. For some reason, it keeps thinking my darn 2001-08-10 22:27:11 +00:00
.cvsignore re-fix bug 76154: permissions weren't being set correctly on the .htaccess files when checksetup.pl was run again. Also adding .htaccess to .cvsignore so it won't show up as ? in cvs diffs and updates. 2001-07-25 07:26:42 +00:00
1x1.gif
Bug.pm fix for 47726: Doesn't display properly in IE5.5 because bug url & are not encoded 2001-02-26 23:46:01 +00:00
CGI.pl Fix for bug 87779: thanks to the new password reset code, there was no clear way to create a new Bugzilla account from the login screen. There is now a link to createaccount.cgi from the login screen, and the text around the password reset button has been edited so it doesn't sound like you can get a new account by using it (because you can't) 2001-08-16 06:43:21 +00:00
README Updates to README from bug 94846. 2001-08-11 19:56:40 +00:00
RelationSet.pm Fix for bug 72862: fixes more Perl warnings in RelationSet.pm and globals.pl 2001-06-01 02:14:23 +00:00
Token.pm Fix for bug 95535: the token generator for password resets is allowing the & character to be used for tokens, but wasn't escaping them for the URL it emailed to users to use to get in to reset their password. 2001-08-16 06:52:55 +00:00
UPGRADING CHANGES move to "UPGRADING-pre-2.8" 2001-08-10 22:35:22 +00:00
UPGRADING-pre-2.8 CHANGES move to "UPGRADING-pre-2.8" 2001-08-10 22:35:22 +00:00
ant.jpg
booleanchart.html Deflect email away from me. 2000-08-16 23:07:37 +00:00
bug_form.pl Fix for bug 39816: Anyone in CC, Reporter, QA Contact, or Asigned To fields can now be given access to view a bug even if the permissions on that bug are set to a group that would normally exclude those people. 2001-08-13 00:46:20 +00:00
bug_status.html fix for 47790 : A bug to track which bugs Zach's bugzilla patch resolves. 2000-08-28 17:48:59 +00:00
buglist.cgi re-fix for bug 55161: buglist works again if you search for change history on a bug 2001-07-23 02:34:08 +00:00
bugwritinghelp.html Contribution by Eli Goldberg <eli@prometheus-music.com> -- generic 2000-03-07 18:00:24 +00:00
bugzilla.dtd add error attribute to <bug> 2000-05-26 06:34:45 +00:00
changepassword.cgi Reworked preferences UI. Added ability to turn off "My bugs" link at 2000-01-25 07:54:57 +00:00
checksetup.pl Fix for bug 39816: Anyone in CC, Reporter, QA Contact, or Asigned To fields can now be given access to view a bug even if the permissions on that bug are set to a group that would normally exclude those people. 2001-08-13 00:46:20 +00:00
colchange.cgi Fix for bug 57848, perl warnings in several files. 2001-06-01 02:07:28 +00:00
collectstats.pl Fix for bug 21253: removing all single-parameter system() calls from Bugzilla 2001-06-06 21:17:42 +00:00
confirmhelp.html fix for 47790 : A bug to track which bugs Zach's bugzilla patch resolves. 2000-08-28 17:48:59 +00:00
createaccount.cgi Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password. 2001-07-11 05:29:21 +00:00
createattachment.cgi Fix for bug 53696: periods(.) and plusses(+) were not being accepted as valid in mime-types, which are legal per RFC2045 and RFC2048. 2001-04-03 20:42:58 +00:00
defparams.pl Fix for bug 26194: There are now substitution parameters available for use in newchangedmail which will include the reason(s) 2001-08-13 17:06:38 +00:00
describecomponents.cgi Fix for bug 82781: describecomponents.cgi now checks viewing permissions to make sure you can see a product 2001-06-06 04:32:45 +00:00
describekeywords.cgi Patch by Klaas Freitag <freitag@suse.de>, with modifications by me -- 2000-01-22 16:51:49 +00:00
doeditparams.cgi Fix for bug 95082 - Param('shutdownhtml') doesn't completely shut down bugzilla. 2001-08-13 19:11:35 +00:00
doeditvotes.cgi Fix for bug 39557: doeditvotes.cgi will no longer create a vote record for a nonexistant bug if the HTML is tampered with or other bugs cause bad bug numbers in the submitted form. 2001-06-06 04:51:55 +00:00
duplicates.cgi Fix for bug 95304: Add a buglist link to the top of duplicates.cgi 2001-08-16 02:54:49 +00:00
editcomponents.cgi Fix for bug 71396 - $::db->do isn't needed anymore 2001-06-16 14:51:16 +00:00
editgroups.cgi Fix for bug 75482: adding the capability to deactivate a group without deleting it (prevent new bugs from being placed into that group, but don't remove the group restriction from bugs already in it). 2001-06-06 03:16:52 +00:00
editkeywords.cgi stupid lamo fix for 69621: Keyword cache not updated on keyword rename/delete. 2001-02-26 23:25:22 +00:00
editmilestones.cgi Fix for bug 71396 - $::db->do isn't needed anymore 2001-06-16 14:51:16 +00:00
editparams.cgi Fix for bug 95082 - Param('shutdownhtml') doesn't completely shut down bugzilla. 2001-08-13 19:11:35 +00:00
editproducts.cgi Fix for bug 71396 - $::db->do isn't needed anymore 2001-06-16 14:51:16 +00:00
editusers.cgi Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password. 2001-07-11 05:29:21 +00:00
editversions.cgi Refixing bug 71396. Each PushGlobalSQLState() needs a PopGlobalSQLState() and this file instead had two "pushes". 2001-06-19 01:37:02 +00:00
enter_bug.cgi Fix for bug 87596: improper definition of $::components in globals.pl 2001-07-01 02:00:56 +00:00
globals.pl Fix for bug 92593: Changing a bugs product will no longer remove the votes from that bug unless the number of votes for a given user is beyond what is allowed per-bug on the new product. Only the per-bug vote count is checked. If the user is beyond the per-product vote limit for the new product, it is left alone, on the theory that it's better to preserve the votes on the bug. The user will be forced to reduce their votes to fit the product limit the next time they try to vote on something. 2001-08-16 02:46:15 +00:00
help.html Invalid html, added trailing /html tag. 2000-01-21 22:01:11 +00:00
helpemailquery.html
how_to_mail.html
importxml.pl fix for bug 91903: insecure dependency in require in importxml.pl under taint mode only in Perl 5.005. 2001-07-25 20:12:00 +00:00
index.html fix for 69793: check in new files for QuickSearch 2001-02-28 23:07:26 +00:00
localconfig.js fix for 69793: check in new files for QuickSearch 2001-02-28 23:07:26 +00:00
long_list.cgi Fixing bug #46897 2000-08-07 22:59:55 +00:00
move.pl Fix for bugs 55161 and 12819. The activity log now stores only what's changed in multi-value fields. 2001-07-20 15:18:30 +00:00
new_comment.cgi Turning off tag support in quips because some assholes have nothing better do than fuck with my tool 2000-07-27 20:10:16 +00:00
notargetmilestone.html fix for 47790 : A bug to track which bugs Zach's bugzilla patch resolves. 2000-08-28 17:48:59 +00:00
post_bug.cgi Fixing "used only once" errors flagged by tinderbox on the last checkin. 2001-06-27 02:31:55 +00:00
process_bug.cgi Fix for bug 39816: Anyone in CC, Reporter, QA Contact, or Asigned To fields can now be given access to view a bug even if the permissions on that bug are set to a group that would normally exclude those people. 2001-08-13 00:46:20 +00:00
processmail Fix for bug 26194: There are now substitution parameters available for use in newchangedmail which will include the reason(s) 2001-08-13 17:06:38 +00:00
query.cgi Fix for bug 95082 - Param('shutdownhtml') doesn't completely shut down bugzilla. 2001-08-13 19:11:35 +00:00
queryhelp.cgi Checking in the last of the changes for 76837 for 2.12. Good enough for government work. 2001-04-23 22:16:12 +00:00
quicksearch.html fix for 69793: check in new files for QuickSearch 2001-02-28 23:07:26 +00:00
quicksearch.js Re-fix for bug 77699: the undefined error affected other browsers than just IE5, so work around it for all browsers. 2001-07-20 08:25:30 +00:00
quicksearchhack.html missed last documentation change 2001-02-28 23:08:52 +00:00
quips.cgi Landing quips.cgi (bug 73191) by Owen Taylor <otaylor@redhat.com> 2001-05-29 04:01:48 +00:00
relogin.cgi Footer wasn't displaying new state after clicking "log out". 2000-01-18 14:41:00 +00:00
reports.cgi Make bug chart filenames other-OS friendly by removing colons. Bug 88179. r=jake. 2001-07-01 19:09:29 +00:00
robots.txt If the application is set up at the server root (e.g. bugzilla.mozilla.org) then this robots.txt disallows robots from scanning the site except for the top level file. 2000-07-28 21:28:41 +00:00
sanitycheck.cgi Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password. 2001-07-11 05:29:21 +00:00
show_activity.cgi More leak pluggin. This one fixes bug 39526. 2001-06-01 13:38:01 +00:00
show_bug.cgi Landing Myk's patch for bug #71767 2001-06-02 22:02:02 +00:00
showattachment.cgi Users should only be able to view attachments if they can view the bug that the file is attached to (bug 70189) 2001-06-06 18:36:25 +00:00
showdependencygraph.cgi Bugzilla was leaking information about bugs marked secure (using bug groups). This checkin fixes bugs 39524, 39527, 39531, and 39533. 2001-05-31 15:52:25 +00:00
showdependencytree.cgi Bugzilla was leaking information about bugs marked secure (using bug groups). This checkin fixes bugs 39524, 39527, 39531, and 39533. 2001-05-31 15:52:25 +00:00
showvotes.cgi Bugzilla was leaking information about bugs marked secure (using bug groups). This checkin fixes bugs 39524, 39527, 39531, and 39533. 2001-05-31 15:52:25 +00:00
syncshadowdb Fix for bug 84596: Syncshadowdb wasn't using the db_user and db_pass from localconfig, which meant that it previously wouldn't run unless it was running under a user that had access to the bugs and shadowbugs dbs and didn't have a password. It now looks for db_user and db_pass and specifies them on the command line to mysqldump and mysql if they're in use. 2001-06-10 17:38:15 +00:00
token.cgi Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password. 2001-07-11 05:29:21 +00:00
userprefs.cgi Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password. 2001-07-11 05:29:21 +00:00
votehelp.html Fix for bug 55429: can't always vote more than once per bug, depending on product. Patch by Matthew Tuck <matty@box.net.au> 2001-01-25 04:56:14 +00:00
whineatnews.pl
xml.cgi 'Bug' data was in a global var. different bugs were sharing this and overwritig each other. 2000-06-12 06:52:41 +00:00

README

* This README is no longer used to house installation instructions.  Instead,
it contains pointers to where you may find the information you need.

* Installation instructions are now found in docs/, with a variety of document
types available.  Please refer to these documents when installing, configuring,
and maintaining your Bugzilla installation.  A helpful starting point is
docs/txt/Bugzilla-Guide.txt, or with a web browser at docs/html/index.html.

* Release notes for people upgrading to a new version of Bugzilla are
available at docs/rel_notes.txt.

* If you wish to contribute to the documentation, please read docs/README.docs.

* The Bugzilla web site is at "http://www.mozilla.org/projects/bugzilla/".
This site will contain the latest Bugzilla information, including how to
report bugs and how to get help with Bugzilla.