aboutsummaryrefslogtreecommitdiffstats
path: root/relogin.cgi
Commit message (Collapse)AuthorAgeFilesLines
* Bug 1132887: When starting a sudo session, the password is not validatedFrédéric Buclin2015-02-171-0/+3
| | | | r=dkl a=glob
* Bug 1075578: [SECURITY] Improper filtering of CGI argumentsFrédéric Buclin2014-10-061-17/+14
| | | | r=dkl,a=sgreen
* Bug 996893: Perl 5.18 and newer throw tons of warnings about deprecated modulesFrédéric Buclin2014-08-131-1/+3
| | | | r=dkl a=sgreen
* Bug 713926: (CVE-2014-1517) [SECURITY] Login form lacks CSRF protectionFrédéric Buclin2014-04-171-0/+13
| | | | r=dkl a=justdave
* Bug 966676: The 'sudo' cookie should not be accessible from JavaScriptFrédéric Buclin2014-02-151-3/+10
| | | | r=dkl a=justdave
* Bug 787529: Use |use 5.10.1| everywhereFrédéric Buclin2012-09-011-0/+1
| | | | r=wicked a=LpSolit
* Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵Frédéric Buclin2012-01-111-21/+5
| | | | | | add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit
* Bug 589128: Adds a preference allowing users to choose between text or htmlByron Jones2011-07-251-1/+1
| | | | | for bugmail. r=LpSolit, a=LpSolit
* Bug 670128: Missing explicit exit after calls to $cgi->redirect(), making ↵Frédéric Buclin2011-07-181-0/+1
| | | | | | the rest of the scripts to be executed r=dkl a=LpSolit
* Bug 593881: Assignment to $[ has been deprecated in Perl 5.12.0Frédéric Buclin2010-09-071-1/+1
| | | | r/a=mkanat
* Bug 450013: (CVE-2010-2757) [SECURITY] Can sudo a user without sending emailFrédéric Buclin2010-08-041-2/+6
| | | | r=glob a=LpSolit
* Bug 565879: Merge ThrowCodeError("action_unrecognized"), ↵Frédéric Buclin2010-05-201-1/+1
| | | | | | ThrowUserError("no_valid_action") and ThrowCodeError("unknown_action") r=ghendricks a=LpSolit
* Bug 508823: Make it so that you don't ever have to reset template_inner (likeMax Kanat-Alexander2010-02-281-1/+0
| | | | | Bugzilla->template_inner("")). r=LpSolit, a=LpSolit
* Bug 480862: relogin.cgi now just throws an error by default (should redirect ↵lpsolit%gmail.com2009-04-151-2/+6
| | | | to index.cgi) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=ghendricks a=LpSolit
* Bug 121601: Have logout display index.cgi, not just a message on relogin.cgi.mkanat%bugzilla.org2009-03-011-15/+1
| | | | Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 405946: Some emails are not sent in the language chosen by the addressee ↵lpsolit%gmail.com2008-04-021-4/+4
| | | | - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=LpSolit
* Bug 399954: Make Bugzilla able to hold its dependencies in a local directorymkanat%bugzilla.org2007-10-191-1/+1
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 281181: [SECURITY] It's way too easy to delete ↵lpsolit%gmail.com2006-10-151-2/+2
| | | | versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 347291: Make Bugzilla::User use Bugzilla::Objectmkanat%bugzilla.org2006-08-111-1/+1
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by ↵lpsolit%gmail.com2006-06-211-2/+0
| | | | Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 339862: Move Bugzilla::BugMail::MessageToMTA() in a separate module - ↵lpsolit%gmail.com2006-06-021-2/+2
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave
* Bug 300410: Bugzilla::Auth needs to be restructured to not require a BEGIN blockmkanat%bugzilla.org2006-05-121-3/+2
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 332906: Wrong parameters passed to sudo sessions when trying to bypass ↵lpsolit%gmail.com2006-04-071-2/+2
| | | | validation checks - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=justdave
* Patch for bug 328379: Fix spelling: 'visitng' -> 'visiting' in relogin.cgi; ↵jocuri%softhome.net2006-02-241-1/+1
| | | | r=LpSolit, a=myk.
* Bug 315524: When an invalid action is passed to relogin.cgi, ↵lpsolit%gmail.com2005-11-221-0/+5
| | | | ThrowTemplateError() is called instead of ThrowCodeError() - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave
* Bug 312441: relogin.cgi allows you to impersonate user accounts you are not ↵karl%kornel.name2005-11-201-93/+62
| | | | allowed to see when 'usevisibilitygroups' is on - Patch by A. Karl Kornel <karl@kornel.name> r=LpSolit a=justdave
* Bug 312439: The user being impersonated has "moral" rights to keep informed ↵karl%kornel.name2005-11-051-7/+24
| | | | - Patch by A. Karl Kornel <karl@kornel.name> r=LpSolit a=justdave
* Bug 312307: Misused Throw*Error tags in code and templates - Patch by Dennis ↵lpsolit%gmail.com2005-10-241-1/+1
| | | | Melentyev <dennis.melentyev@infopulse.com.ua> r=LpSolit a=justdave
* Bug 204498 Add su (setuser) functionbugreport%peshkin.net2005-10-141-12/+186
| | | | | Patch by A. Karl Kornel <karl@kornel.name> r=joel, a=justdave
* Bug 302644: relogin.cgi may ask you to login... before logging you out - ↵lpsolit%gmail.com2005-08-131-1/+2
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave
* Bug 301508: Remove CGI.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> ↵lpsolit%gmail.com2005-08-101-4/+4
| | | | r=mkanat,wicked a=justdave
* Fix for bug 234175: Remove deprecated ConnectToDatabase() andkiko%async.com.br2004-03-271-4/+2
| | | | | | | quietly_check_login()/confirm_login() calls. Cleans up callsites (consisting of most of our CGIs), swapping (where appropriate) for calls to Bugzilla->login. Patch by Teemu Mannermaa <wicked@etlicon.fi>. r=bbaetz, kiko. a=justdave.
* Bug 226324: Move relogin.cgi code to Bugzilla::Auth::CGI. Provide akiko%async.com.br2003-11-271-25/+3
| | | | | logout() method that is proxied through Bugzilla.pm's logout(), and fix callers to use it. r=justdave, bbaetz, a=justdave
* Bug 180635 - Enhance Bugzilla::User to store additional informationbbaetz%acm.org2003-06-031-1/+3
| | | | r=myk,jake
* Bug 201816 - use CGI.pm for header outputbbaetz%acm.org2003-05-051-6/+8
| | | | r=joel, a=justdave
* Bug 196433 - Bugzilla now uses /usr/bin/perl as the shebang linejake%bugzilla.org2003-03-271-1/+1
| | | | | r=justdave a=justdave
* Bug 76923 - Don't |use diagnostics| (its really expensive at startup time)bbaetz%student.usyd.edu.au2002-08-261-1/+0
| | | | r=joel x2
* Bug 158658 - relogin.cgi should use a template. This also adds the ability ↵gerv%gerv.net2002-07-271-12/+6
| | | | to localise messages. Patch by gerv; r=burnus.
* Bug 140437 - clean up parameters. Patch by gerv; 2xr=justdave.gerv%gerv.net2002-05-081-2/+0
|
* Bug 140435 - Templatise GetCommandMenu. Patch by gerv; r=bbaetz, justdave.gerv%gerv.net2002-05-081-0/+1
|
* Bug 138588 - change to use new template structure. Patch by gerv, r=myk, ↵gerv%gerv.net2002-04-241-2/+1
| | | | afranke.
* Bug 126791 - templatise relogin.cgigerv%gerv.net2002-02-241-11/+14
|
* Bug 95732 - remove logincookies.cryptpassword, and invalidate cookies frombbaetz%student.usyd.edu.au2002-02-041-0/+19
| | | | | | | the db when required instead. (Also fixes bug 58242 as a side effect) r=myk, kiko
* Fix for bug 108982: enable taint mode for all user-facing CGI files.justdave%syndicomm.com2002-01-201-1/+3
| | | | | Patch by Brad Baetz <bbaetz@student.usyd.edu.au> r= jake, justdave
* Fix for bug 120817 - Log Out and %commandmenu% in bannerhtml, r=justdave,dkldkl%redhat.com2002-01-191-2/+5
|
* Fix for bug 19910: Bugzilla installs on the same server would interfere with ↵justdave%syndicomm.com2001-10-131-4/+3
| | | | | | | each others' cookies. Cookies now have a path value that can be set to indicate which bugzilla install they belong to. Browsers will only send the cookie to the appropriate installation. The path can be set in the 'cookiepath' parameter in editparams.cgi. Patch by Dave Lawrence <dkl@redhat.com> r= myk, justdave
* Footer wasn't displaying new state after clicking "log out".terry%mozilla.org2000-01-181-0/+4
|
* Patch by Ramon Felciano <felciano@ingenuity.com>, with many tweaks byterry%mozilla.org2000-01-151-1/+1
| | | | | | | me. Added a footer to every page. Add some options to do things like display checkboxes instead of scrolling lists, and a new formatting for email diffs, and show list items capitalized instead of all upper case.
* updated license boilerplatedmose%mozilla.org1999-11-021-14/+15
|
* Patch by holger@holger.om.org (Holger Schurig) -- put the fancy header on ↵terry%mozilla.org1999-09-241-1/+4
| | | | several pages that were missing it.