aboutsummaryrefslogtreecommitdiffstats
path: root/token.cgi
Commit message (Collapse)AuthorAgeFilesLines
* Backing out these patches as they cause a regression. More informationdkl%redhat.com2008-07-291-3/+5
| | | | | | | | | | | in the respective bug reports. Bug 428659 – Setting SSL param to 'authenticated sessions' only protects logins and param doesn't protect WebService calls at all Patch by Dave Lawrence <dkl@redhat.com> - r/a=mkanat Bug 445104: ssl redirects come with a 200 OK HTTP code on mod_perl Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 428659 – Setting SSL param to 'authenticated sessions' only ↵dkl%redhat.com2008-07-101-5/+3
| | | | | | protects logins and param doesn't protect WebService calls at all Patch by Dave Lawrence <dkl@redhat.com> - r/a=mkanat
* Bug 405946: Some emails are not sent in the language chosen by the addressee ↵lpsolit%gmail.com2008-04-021-11/+7
| | | | - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=LpSolit
* Bug 403834: Replace table locks with database transactions in tokens, votes, ↵lpsolit%gmail.com2007-11-191-8/+4
| | | | and sanitycheck - Patch by Emmanuel Seyman <eseyman@linagora.com> r/a=mkanat
* Bug 399954: Make Bugzilla able to hold its dependencies in a local directorymkanat%bugzilla.org2007-10-191-1/+1
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 238651 (a&b) Include the login name (in <code>) for "account_inexistent" ↵timeless%mozdev.org2007-07-231-1/+1
| | | | | | error r=lpsolit a=lpsolit
* Bug 365472 rename 'token_inexistent' to 'token_does_not_exist' or somethingtimeless%mozdev.org2007-07-101-1/+1
| | | | r=lpsolit a=lpsolit
* Bug 366466 - "flag notification mail has canceled spelled incorrectly" ↵reed%reedloden.com2007-03-111-5/+5
| | | | [p=reed r=timeless a=mkanat]
* Bug 340538: Insecure dependency in exec while running with -T switch at ↵wurblzap%gmail.com2006-10-211-20/+20
| | | | | | | /usr/lib/perl5/site_perl/5.8.6/Mail/Mailer/sendmail.pm line 16. Patch by Marc Schumann <wurblzap@gmail.com>, r=LpSolit, a=myk
* Bug 281181: [SECURITY] It's way too easy to delete ↵lpsolit%gmail.com2006-10-151-1/+1
| | | | versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 349349: Use ->create from Bugzilla::Object instead of insert_new_user ↵mkanat%bugzilla.org2006-08-261-25/+7
| | | | | | for Bugzilla::User Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 87795: Creating an account should send token and wait for confirmation ↵lpsolit%gmail.com2006-08-201-0/+87
| | | | (prevent user account abuse) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=bkor a=myk
* Bug 173629: Clean up "my" variable scoping issues for mod_perlmkanat%bugzilla.org2006-07-061-3/+3
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by ↵lpsolit%gmail.com2006-06-211-9/+3
| | | | Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Spelling in code comments patch: 'methids' -> 'methods'; patch by Vlad ↵vladd%bugzilla.org2006-06-191-1/+1
| | | | Dascalu <vladd@bugzilla.org>.
* Bug 300410: Bugzilla::Auth needs to be restructured to not require a BEGIN blockmkanat%bugzilla.org2006-05-121-1/+1
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 332598: Move ValidatePassword() and DBNameToIdAndCheck() from globals.pl ↵lpsolit%gmail.com2006-05-081-2/+2
| | | | into User.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 312157: Remove $::template and $::vars from globals.pl - Patch by Olav ↵lpsolit%gmail.com2005-10-251-4/+4
| | | | Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave
* Bug 312307: Misused Throw*Error tags in code and templates - Patch by Dennis ↵lpsolit%gmail.com2005-10-241-4/+2
| | | | Melentyev <dennis.melentyev@infopulse.com.ua> r=LpSolit a=justdave
* Bug 303697: Eliminate deprecated Bugzilla::DB routines from token.cgi - ↵lpsolit%gmail.com2005-10-121-40/+42
| | | | Patch by Teemu Mannermaa <wicked@etlicon.fi> r=LpSolit a=justdave
* Bug 304583: Remove all remaining need to rederive inherited groupsbugreport%peshkin.net2005-08-191-2/+2
| | | | | Patch by Joel Peshkin <bugreport@peshkin.net> r=mkanat, a=justdave
* Bug 304653: remove 'use Bugzilla::Error' from Util.pm - Patch by Frédéric ↵lpsolit%gmail.com2005-08-161-3/+4
| | | | Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 301508: Remove CGI.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> ↵lpsolit%gmail.com2005-08-101-1/+1
| | | | r=mkanat,wicked a=justdave
* Bug 301453: Move CheckEmailSyntax out of CGI.pl - Patch by Frédéric Buclin ↵lpsolit%gmail.com2005-07-211-1/+1
| | | | <LpSolit@gmail.com> r=mkanat a=myk
* Bug 300336: Bugzilla::Auth should not contain any exported subroutinesmkanat%kerio.com2005-07-131-1/+1
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 285695: [PostgreSQL] Username checks for login, etc. need to be case ↵mkanat%kerio.com2005-07-081-1/+3
| | | | | | insensitive Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 280503: Replace "LOCK/UNLOCK TABLES" with Bugzilla::DB function callmkanat%kerio.com2005-02-181-8/+13
| | | | Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=mkanat,a=myk
* Bug 280994 : Move ValidateNewUser out of globals.pltravis%sedsystems.ca2005-02-091-1/+1
| | | | Patch by Max Kanat-Alexander <mkanat@kerio.com> r=vladd a=justdave
* Bug 278792 : Move Crypt() to Bugzilla::Authtravis%sedsystems.ca2005-02-011-1/+2
| | | | Patch by Max Kanat-Alexander <mkanat@kerio.com> r=vladd a=justdave
* Bug 241900: Allow Bugzilla::Auth to have multiple login and validation stylesbugreport%peshkin.net2004-07-211-1/+8
| | | | | | patch by erik r=joel, kiko a=myk
* Fix for bug 234175: Remove deprecated ConnectToDatabase() andkiko%async.com.br2004-03-271-3/+3
| | | | | | | quietly_check_login()/confirm_login() calls. Cleans up callsites (consisting of most of our CGIs), swapping (where appropriate) for calls to Bugzilla->login. Patch by Teemu Mannermaa <wicked@etlicon.fi>. r=bbaetz, kiko. a=justdave.
* Fix for bug 226764: Move InvalidateLogins into Bugzilla::Auth::CGI.kiko%async.com.br2004-03-271-1/+1
| | | | | | | | | | | | | Consolidates the logout code into Bugzilla::Auth::CGI, and provides simple front-end wrappers in Bugzilla.pm for use in the CGIs we have. r=bbaetz, joel; a=justdave. Adds a set of constants to the logout() API which allow specifying "how much" we should log out -- all sessions, the current session, or all sessions but the current one. Fixes callsites to use this new API; cleans and documents things a bit while we're at it. Part I in the great COOKIE apocalypse.
* Bug 237517 inconsistent spelling of cancelled or canceledtimeless%mozdev.org2004-03-191-1/+1
| | | | r=kiko a=justdave
* Bug 237864: clean up leftovers from the bug 192516 checkin (some occurances ↵justdave%syndicomm.com2004-03-181-3/+3
| | | | | | of Token got missed) r= gerv, a= justdave
* Bug 192516: Moving the loose .pm files into the Bugzilla directory, where ↵justdave%syndicomm.com2004-03-181-8/+8
| | | | | | | they belong. These files pre-date the Bugzilla directory, and would have gone there had it existed at the time. The four files in question were copied on the CVS server to preserve CVS history in the files. This checkin deletes them from the old location and modifies everything else to know where they are now. r= myk, gerv a= justdave
* Patch for bug 234876; removes %FORM from token.cgi; patch by Teemu Mannermaa ↵jocuri%softhome.net2004-02-291-20/+21
| | | | <wicked@etlicon.fi>; r=kiko, a=justdave.
* Bug 177449: When changing email address, old email address confirmation was ↵justdave%syndicomm.com2003-09-241-1/+1
| | | | | | | case sensitive patch by Vlad Dascalu <jocuri@softhome.net> r= kiko, a= justdave
* Bug 208699 - Move Throw{Code,Template}Error into Error.pmbbaetz%acm.org2003-09-141-1/+1
| | | | r,a=justdave
* Bug 180635 - Enhance Bugzilla::User to store additional informationbbaetz%acm.org2003-06-031-2/+16
| | | | r=myk,jake
* Bug 201816 - use CGI.pm for header outputbbaetz%acm.org2003-05-051-7/+9
| | | | r=joel, a=justdave
* Bug 199813 - Make all users of ThrowUserError pass $vars in explicitly.bbaetz%acm.org2003-04-021-2/+2
| | | | | r=gerv a=justdave
* Bug 196433 - Bugzilla now uses /usr/bin/perl as the shebang linejake%bugzilla.org2003-03-271-1/+1
| | | | | r=justdave a=justdave
* Bug 173761 Need ability to always require loginbugreport%peshkin.net2002-11-271-1/+1
| | | | | patch by joel r=gerv, a=justdave
* Bug 163114 - Templatise all calls to DisplayError. Patch D (the last one). ↵gerv%gerv.net2002-10-061-5/+1
| | | | Patch by gerv; r=burnus.
* Bug 164038 - token.cgi: Cancel token messages should be moved into the ↵gerv%gerv.net2002-09-301-42/+25
| | | | templates. Patch by burnus; r=gerv.
* bug 157756 - Groups_20020716_Branch Tracking : > 55 groups now supportedbugreport%peshkin.net2002-09-231-0/+2
| | | | r=bbaetz, gerv
* Bug 76923 - Don't |use diagnostics| (its really expensive at startup time)bbaetz%student.usyd.edu.au2002-08-261-1/+0
| | | | r=joel x2
* Bug 159901 - token.cgi: localize strings send to message.html.tmpl. Patch by ↵gerv%gerv.net2002-08-101-12/+4
| | | | burnus; r=gerv.
* Bug 151053, ConnectToDatabase/quietly_check_login sometimes not calledbbaetz%student.usyd.edu.au2002-06-171-0/+1
| | | | | early enough r=mattyt, jouni
* Bug 138588 - change to use new template structure. Patch by gerv, r=myk, ↵gerv%gerv.net2002-04-241-16/+9
| | | | afranke.