aboutsummaryrefslogtreecommitdiffstats
path: root/Bugzilla/Token.pm
Commit message (Collapse)AuthorAgeFilesLines
* Bug 705474 - CSRF vulnerability in createaccount.cgi allows possible ↵Reed Loden2011-12-131-2/+7
| | | | | | unauthorized account creation e-mail request [r=mkanat a=mkanat]
* Bug 677522: IssueEmailChangeToken() should get the old login name from the ↵Frédéric Buclin2011-08-171-4/+4
| | | | | | user object r=timello a=LpSolit
* Bug 677901: Bugzilla crashes when no token is passed to token.cgi but the ↵Frédéric Buclin2011-08-161-6/+4
| | | | | | script expects one, because tokens are incorrectly validated r/a=mkanat
* Bug 678959: Make GenerateUniqueToken work for all tablesByron Jones2011-08-151-1/+1
| | | | r=LpSolit, a=LpSolit
* Bug 589128: Adds a preference allowing users to choose between text or htmlByron Jones2011-07-251-3/+3
| | | | | for bugmail. r=LpSolit, a=LpSolit
* Bug 602165: Change sql_interval to sql_date_math, in preparation forMax Kanat-Alexander2010-10-071-14/+14
| | | | MS-SQL and SQLite support.
* Bug 508823: Make it so that you don't ever have to reset template_inner (likeMax Kanat-Alexander2010-02-281-3/+0
| | | | | Bugzilla->template_inner("")). r=LpSolit, a=LpSolit
* Bug 527586: Use X-Forwarded-For instead of REMOTE_ADDR for trusted proxiesmkanat%bugzilla.org2009-12-311-2/+2
| | | | Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 477513: md5_hex() fails if a saved search has UTF8 characters in it - ↵lpsolit%gmail.com2009-02-091-1/+7
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
* Bug 26257: [SECURITY] Bugzilla should prevent malicious webpages from making ↵lpsolit%gmail.com2009-02-021-2/+52
| | | | bugzilla users submit changes to bugs - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
* Bug 452519: Fix timezones in emails - Patch by Frédéric Buclin ↵lpsolit%gmail.com2009-01-081-7/+9
| | | | <LpSolit@gmail.com> r=wicked a=LpSolit
* Bug 405946: Some emails are not sent in the language chosen by the addressee ↵lpsolit%gmail.com2008-04-021-41/+42
| | | | - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=LpSolit
* Bug 399163: Bugzilla/*.pm should use transactions for database interaction - ↵lpsolit%gmail.com2007-11-191-6/+2
| | | | Patch by Emmanuel Seyman <eseyman@linagora.com> r/a=mkanat
* Bug 366466 - "flag notification mail has canceled spelled incorrectly" ↵reed%reedloden.com2007-03-111-3/+3
| | | | [p=reed r=timeless a=mkanat]
* Fix nits about bug 316797lpsolit%gmail.com2006-11-211-3/+3
|
* Bug 316797: Token.pm needs POD - Patch by Frédéric Buclin ↵lpsolit%gmail.com2006-11-211-0/+181
| | | | <LpSolit@gmail.com> r/a=myk
* Bug 340538: Insecure dependency in exec while running with -T switch at ↵wurblzap%gmail.com2006-10-211-1/+0
| | | | | | | /usr/lib/perl5/site_perl/5.8.6/Mail/Mailer/sendmail.pm line 16. Patch by Marc Schumann <wurblzap@gmail.com>, r=LpSolit, a=myk
* Bug 281181: [SECURITY] It's way too easy to delete ↵lpsolit%gmail.com2006-10-151-3/+54
| | | | versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 350120: undefined value when creating a new user account - Patch by ↵lpsolit%gmail.com2006-08-261-1/+1
| | | | Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 87795: Creating an account should send token and wait for confirmation ↵lpsolit%gmail.com2006-08-201-16/+46
| | | | (prevent user account abuse) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=bkor a=myk
* Bug 343338: Eliminate "my" variables from the root level of modulesmkanat%bugzilla.org2006-07-141-4/+4
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 338375: Use Bugzilla->params everywhere instead of Param().mkanat%bugzilla.org2006-07-041-1/+0
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 342869: Use Bugzilla->params everywhere except templatesmkanat%bugzilla.org2006-07-041-7/+8
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by ↵lpsolit%gmail.com2006-06-211-3/+0
| | | | Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 339862: Move Bugzilla::BugMail::MessageToMTA() in a separate module - ↵lpsolit%gmail.com2006-06-021-5/+5
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave
* I forgot a "fix on checkin" (useless whitespaces)lpsolit%gmail.com2006-03-101-1/+1
|
* Bug 300551: Eliminate deprecated Bugzilla::DB routines from User.pm and ↵lpsolit%gmail.com2006-03-101-67/+60
| | | | Token.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave
* Bug 119524: SECURITY: predictable sessionid (Use a token instead of ↵lpsolit%gmail.com2006-01-031-1/+5
| | | | logincookie) - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=mkanat a=justdave
* Bug 301062: [PostgreSQL] whine.pl fails when using PostgreSQL 8.0.x - Patch ↵lpsolit%gmail.com2005-11-141-1/+1
| | | | by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=manu a=justdave
* Bug 312157: Remove $::template and $::vars from globals.pl - Patch by Olav ↵lpsolit%gmail.com2005-10-251-7/+7
| | | | Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave
* Bug 304582: Move GenerateRandomPassword() out of globals.pl - Patch by ↵lpsolit%gmail.com2005-09-021-2/+2
| | | | Frédéric Buclin <LpSolit@gmail.com> r=joel a=myk
* Bug 303669: Bugzilla mis-uses perl subroutine prototypesmkanat%kerio.com2005-08-131-3/+3
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 301508: Remove CGI.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> ↵lpsolit%gmail.com2005-08-101-2/+2
| | | | r=mkanat,wicked a=justdave
* Backout of bug 303669 which broke AppendComment and possibly a numberbugreport%peshkin.net2005-08-091-3/+3
| | | | of other items.
* Bug 303669: Bugzilla mis-uses perl subroutine prototypesmkanat%kerio.com2005-08-091-3/+3
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 285695: [PostgreSQL] Username checks for login, etc. need to be case ↵mkanat%kerio.com2005-07-081-1/+1
| | | | | | insensitive Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 297646: Write helper functions for Bugzilla::Token.pmbugzilla%glob.com.au2005-07-011-45/+80
| | | | Patch by Byron Jones <bugzilla@glob.com.au> r=LpSolit,a=justdave
* Bug: 284244: DATE_SUB and DATE_ADD are not ANSI SQLmkanat%kerio.com2005-03-031-2/+2
| | | | Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=wicked, a=justdave
* Bug 280502: Replace "INTERVAL" with Bugzilla::DB function callmkanat%kerio.com2005-02-201-1/+2
| | | | Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=mkanat, a=justdave
* Bug 280499: Replace "TO_DAYS()" with Bugzilla::DB function callmkanat%kerio.com2005-02-201-2/+3
| | | | Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=mkanat, a=justdave
* Bug 280497: Replace "LIMIT" with Bugzilla::DB function callmkanat%kerio.com2005-02-191-2/+3
| | | | Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=mkanat,a=justdave
* Bug 280503: Replace "LOCK/UNLOCK TABLES" with Bugzilla::DB function callmkanat%kerio.com2005-02-181-8/+14
| | | | Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=mkanat,a=myk
* Bug 59351 - move all calls to sendmail to a central place. Patch by mkanat; ↵gerv%gerv.net2005-01-011-14/+5
| | | | r=gerv,vladd; a=justdave.
* Bug 250897: Enforce a 10 minute waiting period between password reset ↵justdave%bugzilla.org2004-10-251-4/+12
| | | | | | | attempts to prevent the user getting mailbombed if the form is submitted multiple times. Patch by Joel Peshkin <bugreport@peshkin.net> r=kiko, a=justdave
* Bug 237864: clean up leftovers from the bug 192516 checkin (some occurances ↵justdave%syndicomm.com2004-03-181-2/+2
| | | | | | of Token got missed) r= gerv, a= justdave
* Bug 192516: Moving the loose .pm files into the Bugzilla directory, where ↵justdave%syndicomm.com2004-03-181-1/+1
| | | | | | | they belong. These files pre-date the Bugzilla directory, and would have gone there had it existed at the time. The four files in question were copied on the CVS server to preserve CVS history in the files. This checkin deletes them from the old location and modifies everything else to know where they are now. r= myk, gerv a= justdave
* Bug 208699 - Move Throw{Code,Template}Error into Error.pmbbaetz%acm.org2003-09-141-5/+6
| | | | r,a=justdave
* Bug 205463 - Tokens aren't canceled after a successful login.bbaetz%acm.org2003-06-071-1/+1
| | | | patch by 'Randall M! Gee', r=bbaetz, a=justdave
* Bug 180642 - Move authentication code into a modulebbaetz%acm.org2003-03-221-10/+11
| | | | | r=gerv, justdave a=justdave
* Bug 193989: EmailSuffix wasn't getting used for password change tokens. ↵justdave%syndicomm.com2003-03-141-4/+1
| | | | | | | Also removes real name from To: header which wasn't being escaped properly for RFC2822 specs. Patch by Jeff Lawson <jlawson-mozilla@bovine.net> r=justdave, a=justdave
generated by cgit v1.2.1 (git 2.21.0) at 2024-11-11 09:39:02 +0000