summaryrefslogtreecommitdiffstats
path: root/relogin.cgi
AgeCommit message (Collapse)AuthorFilesLines
2010-08-04Bug 450013: (CVE-2010-2757) [SECURITY] Can sudo a user without sending emailFrédéric Buclin1-2/+6
r=glob a=LpSolit
2010-05-20Bug 565879: Merge ThrowCodeError("action_unrecognized"), ↵Frédéric Buclin1-1/+1
ThrowUserError("no_valid_action") and ThrowCodeError("unknown_action") r=ghendricks a=LpSolit
2010-03-01Bug 508823: Make it so that you don't ever have to reset template_inner (likeMax Kanat-Alexander1-1/+0
Bugzilla->template_inner("")). r=LpSolit, a=LpSolit
2009-04-15Bug 480862: relogin.cgi now just throws an error by default (should redirect ↵lpsolit%gmail.com1-2/+6
to index.cgi) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=ghendricks a=LpSolit
2009-03-02Bug 121601: Have logout display index.cgi, not just a message on relogin.cgi.mkanat%bugzilla.org1-15/+1
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
2008-04-03Bug 405946: Some emails are not sent in the language chosen by the addressee ↵lpsolit%gmail.com1-4/+4
- Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=LpSolit
2007-10-19Bug 399954: Make Bugzilla able to hold its dependencies in a local directorymkanat%bugzilla.org1-1/+1
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
2006-10-15Bug 281181: [SECURITY] It's way too easy to delete ↵lpsolit%gmail.com1-2/+2
versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
2006-08-11Bug 347291: Make Bugzilla::User use Bugzilla::Objectmkanat%bugzilla.org1-1/+1
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
2006-06-21Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by ↵lpsolit%gmail.com1-2/+0
Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
2006-06-02Bug 339862: Move Bugzilla::BugMail::MessageToMTA() in a separate module - ↵lpsolit%gmail.com1-2/+2
Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave
2006-05-12Bug 300410: Bugzilla::Auth needs to be restructured to not require a BEGIN blockmkanat%bugzilla.org1-3/+2
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
2006-04-07Bug 332906: Wrong parameters passed to sudo sessions when trying to bypass ↵lpsolit%gmail.com1-2/+2
validation checks - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=justdave
2006-02-24Patch for bug 328379: Fix spelling: 'visitng' -> 'visiting' in relogin.cgi; ↵jocuri%softhome.net1-1/+1
r=LpSolit, a=myk.
2005-11-22Bug 315524: When an invalid action is passed to relogin.cgi, ↵lpsolit%gmail.com1-0/+5
ThrowTemplateError() is called instead of ThrowCodeError() - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave
2005-11-20Bug 312441: relogin.cgi allows you to impersonate user accounts you are not ↵karl%kornel.name1-93/+62
allowed to see when 'usevisibilitygroups' is on - Patch by A. Karl Kornel <karl@kornel.name> r=LpSolit a=justdave
2005-11-05Bug 312439: The user being impersonated has "moral" rights to keep informed ↵karl%kornel.name1-7/+24
- Patch by A. Karl Kornel <karl@kornel.name> r=LpSolit a=justdave
2005-10-24Bug 312307: Misused Throw*Error tags in code and templates - Patch by Dennis ↵lpsolit%gmail.com1-1/+1
Melentyev <dennis.melentyev@infopulse.com.ua> r=LpSolit a=justdave
2005-10-14Bug 204498 Add su (setuser) functionbugreport%peshkin.net1-12/+186
Patch by A. Karl Kornel <karl@kornel.name> r=joel, a=justdave
2005-08-13Bug 302644: relogin.cgi may ask you to login... before logging you out - ↵lpsolit%gmail.com1-1/+2
Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave
2005-08-10Bug 301508: Remove CGI.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> ↵lpsolit%gmail.com1-4/+4
r=mkanat,wicked a=justdave
2004-03-27Fix for bug 234175: Remove deprecated ConnectToDatabase() andkiko%async.com.br1-4/+2
quietly_check_login()/confirm_login() calls. Cleans up callsites (consisting of most of our CGIs), swapping (where appropriate) for calls to Bugzilla->login. Patch by Teemu Mannermaa <wicked@etlicon.fi>. r=bbaetz, kiko. a=justdave.
2003-11-27Bug 226324: Move relogin.cgi code to Bugzilla::Auth::CGI. Provide akiko%async.com.br1-25/+3
logout() method that is proxied through Bugzilla.pm's logout(), and fix callers to use it. r=justdave, bbaetz, a=justdave
2003-06-03Bug 180635 - Enhance Bugzilla::User to store additional informationbbaetz%acm.org1-1/+3
r=myk,jake
2003-05-05Bug 201816 - use CGI.pm for header outputbbaetz%acm.org1-6/+8
r=joel, a=justdave
2003-03-27Bug 196433 - Bugzilla now uses /usr/bin/perl as the shebang linejake%bugzilla.org1-1/+1
r=justdave a=justdave
2002-08-26Bug 76923 - Don't |use diagnostics| (its really expensive at startup time)bbaetz%student.usyd.edu.au1-1/+0
r=joel x2
2002-07-27Bug 158658 - relogin.cgi should use a template. This also adds the ability ↵gerv%gerv.net1-12/+6
to localise messages. Patch by gerv; r=burnus.
2002-05-08Bug 140437 - clean up parameters. Patch by gerv; 2xr=justdave.gerv%gerv.net1-2/+0
2002-05-08Bug 140435 - Templatise GetCommandMenu. Patch by gerv; r=bbaetz, justdave.gerv%gerv.net1-0/+1
2002-04-24Bug 138588 - change to use new template structure. Patch by gerv, r=myk, ↵gerv%gerv.net1-2/+1
afranke.
2002-02-24Bug 126791 - templatise relogin.cgigerv%gerv.net1-11/+14
2002-02-04Bug 95732 - remove logincookies.cryptpassword, and invalidate cookies frombbaetz%student.usyd.edu.au1-0/+19
the db when required instead. (Also fixes bug 58242 as a side effect) r=myk, kiko
2002-01-20Fix for bug 108982: enable taint mode for all user-facing CGI files.justdave%syndicomm.com1-1/+3
Patch by Brad Baetz <bbaetz@student.usyd.edu.au> r= jake, justdave
2002-01-19Fix for bug 120817 - Log Out and %commandmenu% in bannerhtml, r=justdave,dkldkl%redhat.com1-2/+5
2001-10-13Fix for bug 19910: Bugzilla installs on the same server would interfere with ↵justdave%syndicomm.com1-4/+3
each others' cookies. Cookies now have a path value that can be set to indicate which bugzilla install they belong to. Browsers will only send the cookie to the appropriate installation. The path can be set in the 'cookiepath' parameter in editparams.cgi. Patch by Dave Lawrence <dkl@redhat.com> r= myk, justdave
2000-01-18Footer wasn't displaying new state after clicking "log out".terry%mozilla.org1-0/+4
2000-01-15Patch by Ramon Felciano <felciano@ingenuity.com>, with many tweaks byterry%mozilla.org1-1/+1
me. Added a footer to every page. Add some options to do things like display checkboxes instead of scrolling lists, and a new formatting for email diffs, and show list items capitalized instead of all upper case.
1999-11-02updated license boilerplatedmose%mozilla.org1-14/+15
1999-09-24Patch by holger@holger.om.org (Holger Schurig) -- put the fancy header on ↵terry%mozilla.org1-1/+4
several pages that were missing it.
1999-06-15Assorted minor UI cleanups (mostly putting navigation headers in, andbryce-mozilla%nextbus.com1-13/+2
rewording "return to query page" for pages where that is not always true. Also add two options to the main index.html
1998-11-21Backed out Andrew's patch -- turns out it was doing quoting sublty wrong.terry%netscape.com1-4/+2
1998-11-17Patch by Andrew Anderson <andrew@redhat.com>. Many minor bugfixes and cleanup.terry%netscape.com1-2/+4
1998-09-16Everything has been ported to now run under Perl.terry%netscape.com1-16/+16
1998-09-03Changed the way password validation works. We now keep aterry%netscape.com1-0/+1
crypt'd version of the password in the database, and check against that. (This is silly, because we're also keeping the plaintext version there, but I have plans...) Stop passing the plaintext password around as a cookie; instead, we have a cookie that references a record in a new database table, logincookies. IMPORTANT: if updating from an older version of Bugzilla, you must run the following commands to keep things working: ./makelogincookiestable.sh echo "alter table profiles add column cryptpassword varchar(64);" | mysql bugs echo "update profiles set cryptpassword = encrypt(password,substring(rand(),3, 4));" | mysql bugs
1998-08-26Bugzilla source.terry%netscape.com1-0/+52
generated by cgit v1.2.3-24-g4f1b (git 2.32.0) at 2024-11-18 09:12:43 +0100