gecko-dev

Bugzilla

Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password.

2001-07-11 05:29:21 +00:00

contrib

Fix for bug 73249: perl warnings under 5.6.0.

2001-06-01 08:34:45 +00:00

docs

addition to 2.12 release notes

2001-04-27 19:32:27 +00:00

.cvsignore

re-fix bug 76154: permissions weren't being set correctly on the .htaccess files when checksetup.pl was run again. Also adding .htaccess to .cvsignore so it won't show up as ? in cvs diffs and updates.

2001-07-25 07:26:42 +00:00

1x1.gif

…

ant.jpg

…

booleanchart.html

Deflect email away from me.

2000-08-16 23:07:37 +00:00

bug_form.pl

Refix bug 80289. Don't print header for groups if there aren't any groups to display (was printing a header without groups in rare instances).

2001-06-28 15:42:30 +00:00

bug_status.html

fix for 47790 : A bug to track which bugs Zach's bugzilla patch resolves.

2000-08-28 17:48:59 +00:00

Bug.pm

fix for 47726: Doesn't display properly in IE5.5 because bug url & are not encoded

2001-02-26 23:46:01 +00:00

buglist.cgi

re-fix for bug 55161: buglist works again if you search for change history on a bug

2001-07-23 02:34:08 +00:00

bugwritinghelp.html

…

bugzilla.dtd

…

CGI.pl

Fix for bugs 55161 and 12819. The activity log now stores only what's changed in multi-value fields.

2001-07-20 15:18:30 +00:00

changepassword.cgi

…

CHANGES

…

checksetup.pl

Fix for bug 90933: inconsistant field types for profiles.disabledtext

2001-07-25 17:55:29 +00:00

colchange.cgi

Fix for bug 57848, perl warnings in several files.

2001-06-01 02:07:28 +00:00

collectstats.pl

Fix for bug 21253: removing all single-parameter system() calls from Bugzilla

2001-06-06 21:17:42 +00:00

confirmhelp.html

fix for 47790 : A bug to track which bugs Zach's bugzilla patch resolves.

2000-08-28 17:48:59 +00:00

createaccount.cgi

Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password.

2001-07-11 05:29:21 +00:00

createattachment.cgi

Fix for bug 53696: periods(.) and plusses(+) were not being accepted as valid in mime-types, which are legal per RFC2045 and RFC2048.

2001-04-03 20:42:58 +00:00

defparams.pl

Fix for bug 87701: Invalid username in bug changes echoed back without escaping HTML data

2001-07-04 07:06:00 +00:00

describecomponents.cgi

Fix for bug 82781: describecomponents.cgi now checks viewing permissions to make sure you can see a product

2001-06-06 04:32:45 +00:00

describekeywords.cgi

…

doeditparams.cgi

Re-fix for bug 28458: AddFDef always replaces the fielddefs every time you run checksetup.pl, so the change to them during doeditparams was nullified if you updated. Other recent changes have nullified the reason for changing it in editparams anyway, so just backing that part out.

2001-06-21 15:03:11 +00:00

doeditvotes.cgi

Fix for bug 39557: doeditvotes.cgi will no longer create a vote record for a nonexistant bug if the HTML is tampered with or other bugs cause bad bug numbers in the submitted form.

2001-06-06 04:51:55 +00:00

duplicates.cgi

Add strikethrough to resolved bug numbers. Bug 79816. r=jake.

2001-07-01 20:17:28 +00:00

editcomponents.cgi

Fix for bug 71396 - $::db->do isn't needed anymore

2001-06-16 14:51:16 +00:00

editgroups.cgi

Fix for bug 75482: adding the capability to deactivate a group without deleting it (prevent new bugs from being placed into that group, but don't remove the group restriction from bugs already in it).

2001-06-06 03:16:52 +00:00

editkeywords.cgi

stupid lamo fix for 69621: Keyword cache not updated on keyword rename/delete.

2001-02-26 23:25:22 +00:00

editmilestones.cgi

Fix for bug 71396 - $::db->do isn't needed anymore

2001-06-16 14:51:16 +00:00

editparams.cgi

…

editproducts.cgi

Fix for bug 71396 - $::db->do isn't needed anymore

2001-06-16 14:51:16 +00:00

editusers.cgi

Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password.

2001-07-11 05:29:21 +00:00

editversions.cgi

Refixing bug 71396. Each PushGlobalSQLState() needs a PopGlobalSQLState() and this file instead had two "pushes".

2001-06-19 01:37:02 +00:00

enter_bug.cgi

Fix for bug 87596: improper definition of $::components in globals.pl

2001-07-01 02:00:56 +00:00

globals.pl

Fix for bugs 55161 and 12819. The activity log now stores only what's changed in multi-value fields.

2001-07-20 15:18:30 +00:00

help.html

…

helpemailquery.html

…

how_to_mail.html

…

importxml.pl

fix for bug 91903: insecure dependency in require in importxml.pl under taint mode only in Perl 5.005.

2001-07-25 20:12:00 +00:00

index.html

fix for 69793: check in new files for QuickSearch

2001-02-28 23:07:26 +00:00

localconfig.js

fix for 69793: check in new files for QuickSearch

2001-02-28 23:07:26 +00:00

long_list.cgi

Fixing bug #46897

2000-08-07 22:59:55 +00:00

move.pl

Fix for bugs 55161 and 12819. The activity log now stores only what's changed in multi-value fields.

2001-07-20 15:18:30 +00:00

new_comment.cgi

Turning off tag support in quips because some assholes have nothing better do than fuck with my tool

2000-07-27 20:10:16 +00:00

notargetmilestone.html

fix for 47790 : A bug to track which bugs Zach's bugzilla patch resolves.

2000-08-28 17:48:59 +00:00

post_bug.cgi

Fixing "used only once" errors flagged by tinderbox on the last checkin.

2001-06-27 02:31:55 +00:00

process_bug.cgi

Fix for bug 84714 and bug 88797: You can now change bug groups from the "change several bugs" form even if the bugs aren't all in the same groups. Also, the groups are no longer cleared when you make a change from the "change several bugs" form (unless you tell it to)

2001-07-22 00:29:45 +00:00

processmail

Fix for bugs 55161 and 12819. The activity log now stores only what's changed in multi-value fields.

2001-07-20 15:18:30 +00:00

query.cgi

Fix for bug 65190: add comparison type "all words as substrings" and "any words as substrings" to the text fields in query.cgi

2001-06-02 04:02:13 +00:00

queryhelp.cgi

Checking in the last of the changes for 76837 for 2.12. Good enough for government work.

2001-04-23 22:16:12 +00:00

quicksearch.html

fix for 69793: check in new files for QuickSearch

2001-02-28 23:07:26 +00:00

quicksearch.js

Re-fix for bug 77699: the undefined error affected other browsers than just IE5, so work around it for all browsers.

2001-07-20 08:25:30 +00:00

quicksearchhack.html

missed last documentation change

2001-02-28 23:08:52 +00:00

quips.cgi

Landing quips.cgi (bug 73191) by Owen Taylor <otaylor@redhat.com>

2001-05-29 04:01:48 +00:00

README

Mention the Bugzilla project page and where to report bugs

2001-05-24 12:58:33 +00:00

RelationSet.pm

Fix for bug 72862: fixes more Perl warnings in RelationSet.pm and globals.pl

2001-06-01 02:14:23 +00:00

relogin.cgi

…

reports.cgi

Make bug chart filenames other-OS friendly by removing colons. Bug 88179. r=jake.

2001-07-01 19:09:29 +00:00

robots.txt

If the application is set up at the server root (e.g. bugzilla.mozilla.org) then this robots.txt disallows robots from scanning the site except for the top level file.

2000-07-28 21:28:41 +00:00

sanitycheck.cgi

Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password.

2001-07-11 05:29:21 +00:00

show_activity.cgi

More leak pluggin. This one fixes bug 39526.

2001-06-01 13:38:01 +00:00

show_bug.cgi

Landing Myk's patch for bug #71767

2001-06-02 22:02:02 +00:00

showattachment.cgi

Users should only be able to view attachments if they can view the bug that the file is attached to (bug 70189)

2001-06-06 18:36:25 +00:00

showdependencygraph.cgi

Bugzilla was leaking information about bugs marked secure (using bug groups). This checkin fixes bugs 39524, 39527, 39531, and 39533.

2001-05-31 15:52:25 +00:00

showdependencytree.cgi

Bugzilla was leaking information about bugs marked secure (using bug groups). This checkin fixes bugs 39524, 39527, 39531, and 39533.

2001-05-31 15:52:25 +00:00

showvotes.cgi

Bugzilla was leaking information about bugs marked secure (using bug groups). This checkin fixes bugs 39524, 39527, 39531, and 39533.

2001-05-31 15:52:25 +00:00

syncshadowdb

Fix for bug 84596: Syncshadowdb wasn't using the db_user and db_pass from localconfig, which meant that it previously wouldn't run unless it was running under a user that had access to the bugs and shadowbugs dbs and didn't have a password. It now looks for db_user and db_pass and specifies them on the command line to mysqldump and mysql if they're in use.

2001-06-10 17:38:15 +00:00

token.cgi

Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password.

2001-07-11 05:29:21 +00:00

Token.pm

Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password.

2001-07-11 05:29:21 +00:00

userprefs.cgi

Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password.

2001-07-11 05:29:21 +00:00

votehelp.html

Fix for bug 55429: can't always vote more than once per bug, depending on product. Patch by Matthew Tuck <matty@box.net.au>

2001-01-25 04:56:14 +00:00

whineatnews.pl

…

xml.cgi

…