MantisBT: master 1b580799

Author Committer Branch Timestamp Parent
vboctor master 2002-08-23 09:16 master e9ab25d2
Changeset
  • Fixed security issues where the wrong access level was checked, or an absolute one rather than a configurable threshold.
  • Removed check on an invalid variable ($result) in bug_delete.
  • Moved minimum required PHP version to core_php_API.php
  • Changed bug_delete() to return true/false which reflects the overall result.
  • Added a call to phpinfo() if user is using a version of PHP that is older than minimum required.
  • Restructured the core_php_API.php to reduce some code.
  • view_all_bug_update.php, allowed any user with UPDATER access level to move, delete, close, resolve bugs.
  • Added $g_delete_bugnote_threshold.
  • Added $g_update_bug_threshold.

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1310 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9

mod - view_bug_page.php Diff File
mod - bug_delete_page.php Diff File
mod - bug_delete.php Diff File
mod - core_bug_API.php Diff File
mod - config_defaults_inc.php Diff File
mod - bug_reopen.php Diff File
mod - bug_update_page.php Diff File
mod - core_php_API.php Diff File
mod - bug_resolve_page.php Diff File
mod - bug_close_page.php Diff File
mod - bugnote_delete.php Diff File
mod - bug_reopen_page.php Diff File
mod - bug_close.php Diff File
mod - core_API.php Diff File
mod - view_bug_advanced_page.php Diff File
mod - bugnote_delete_page.php Diff File
mod - bug_update.php Diff File
mod - bug_update_advanced_page.php Diff File
mod - doc/ChangeLog Diff File
mod - view_all_bug_update.php Diff File