1 files changed, 98 insertions, 7 deletions

diff --git a/long_list.cgi b/long_list.cgi
index 04758729d..c3abbafcf 100755
--- a/long_list.cgi
+++ b/long_list.cgi
@@ -24,17 +24,108 @@
 use strict;
 use lib qw(.);
 
+use Bugzilla;
+
 require "CGI.pl";
 
-our $cgi;
+use vars qw($userid @legal_keywords);
+
+# Use global template variables.
+use vars qw($template $vars);
+
+Bugzilla->login();
+
+GetVersionTable();
+
+my $cgi = Bugzilla->cgi;
+
+my $generic_query = "
+  SELECT 
+    bugs.bug_id, 
+    COALESCE(bugs.alias, ''), 
+    classifications.name, 
+    products.name, 
+    bugs.version, 
+    bugs.rep_platform,
+    bugs.op_sys, 
+    bugs.bug_status, 
+    bugs.resolution, 
+    bugs.priority,
+    bugs.bug_severity, 
+    components.name, 
+    assign.login_name, 
+    report.login_name,
+    bugs.bug_file_loc, 
+    bugs.short_desc, 
+    bugs.target_milestone,
+    bugs.qa_contact, 
+    bugs.status_whiteboard, 
+    bugs.keywords,
+    bugs.estimated_time,
+    bugs.remaining_time,
+    date_format(creation_ts,'%Y.%m.%d %H:%i'),
+    date_format(bugs.deadline, '%Y-%m-%d')
+  FROM bugs,profiles assign,profiles report, classifications, products, components
+  WHERE assign.userid = bugs.assigned_to AND report.userid = bugs.reporter
+    AND bugs.product_id=products.id AND bugs.component_id=components.id
+    AND products.classification_id = classifications.id";
+
+my $buglist = $cgi->param('buglist') || 
+              $cgi->param('bug_id')  || 
+              $cgi->param('id')      || "";
+
+my @bugs;
 
-# Convert comma/space separated elements into separate params
-my @ids = ();
+foreach my $bug_id (split(/[:,]/, $buglist)) {
+    detaint_natural($bug_id) || next;
+    Bugzilla->user->can_see_bug($bug_id) || next;
+    SendSQL("$generic_query AND bugs.bug_id = $bug_id");
 
-if (defined $cgi->param('buglist')) {
-    @ids = split (/[, ]+/, $cgi->param('buglist'));
+    my %bug;
+    my @row = FetchSQLData();
+
+    foreach my $field ("bug_id", "alias", "classification", "product",
+                       "version", "rep_platform",
+                       "op_sys", "bug_status", "resolution", "priority",
+                       "bug_severity", "component", "assigned_to", "reporter",
+                       "bug_file_loc", "short_desc", "target_milestone",
+                       "qa_contact", "status_whiteboard", "keywords", 
+                       "estimated_time", "remaining_time", "creation_ts",
+                       "deadline")
+    {
+        $bug{$field} = shift @row;
+    }
+    
+    if ($bug{'bug_id'}) {
+        $bug{'comments'} = GetComments($bug{'bug_id'});
+        $bug{'qa_contact'} = $bug{'qa_contact'} > 0 ? 
+                                          DBID_to_name($bug{'qa_contact'}) : "";
+
+        push (@bugs, \%bug);
+    }
+
+    if (UserInGroup(Param("timetrackinggroup"))) {
+        SendSQL("SELECT SUM(work_time) FROM longdescs WHERE bug_id=$bug_id");
+
+        $bug{'actual_time'} = FetchSQLData();
+    }
 }
 
-my $ids = join('', map { $_ = "&id=" . $_ } @ids);
+# Add the list of bug hashes to the variables
+$vars->{'bugs'} = \@bugs;
+
+$vars->{'use_keywords'} = 1 if (@::legal_keywords);
+
+$vars->{'str2time'} = \&str2time;
+
+# Work out a sensible filename for Content-Disposition.
+# Sadly, I don't think we can tell if this was a named query.
+my @time = localtime(time());
+my $date = sprintf "%04d-%02d-%02d", 1900+$time[5],$time[4]+1,$time[3];
+my $filename = "bugs-$date.html";
+
+print $cgi->header(-content_disposition => "inline; filename=$filename");
 
-print $cgi->redirect("show_bug.cgi?format=multiple$ids");
+# Generate and return the UI (HTML page) from the appropriate template.
+$template->process("bug/show-multiple.html.tmpl", $vars)
+  || ThrowTemplateError($template->error());