Changesets: MantisBT
|
master 2c3a6586 2002-09-21 17:02 Julian Fitzell Details Diff |
* core/helper_api.php (helper_clear_pref_cookies): new function to clear all cookies we created to store preferences * core/authentication_api.php (auth_logout): new function to perform a logout * logout_page.php: make use of auth_logout() git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1525 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - logout_page.php | Diff File | ||
| mod - core/helper_api.php | Diff File | ||
| mod - core/authentication_api.php | Diff File | ||
|
master f9f8e869 2002-09-21 16:56 Julian Fitzell Details Diff |
* account_delete.php: - use gpc_clear_cookie() - don't print the page header with user info since the user has been deleted git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1524 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - account_delete.php | Diff File | ||
|
master 98c592bf 2002-09-21 16:15 Julian Fitzell Details Diff |
revert some of Ken's changes, put some of mine back in, fix the problems in my original checking, etc... wonder if it works now? :) git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1523 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - constant_inc.php | Diff File | ||
| mod - core/authentication_api.php | Diff File | ||
|
master 776ccaa8 2002-09-21 14:25 Julian Fitzell Details Diff |
* core.php: add support for a MANTIS_CONFIG environment variable that specifies another config file to load after custom_config_inc.php (useful for apache vhosts) Thanks to brett-mantis@kavi.com for the patch git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1522 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core.php | Diff File | ||
| mod - doc/ChangeLog | Diff File | ||
|
master 49153263 2002-09-21 10:29 Kenzaburo Ito Details Diff |
added a no salt constant (CRYPT_NO_SALT) for login git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1521 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - constant_inc.php | Diff File | ||
|
master 9c2d441d 2002-09-21 10:28 Kenzaburo Ito Details Diff |
fixed authentication for crypt. crypt was using the wrong password for salt. the correct password is the one that is in the database, not the user supplied password. git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1520 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/authentication_api.php | Diff File | ||
|
master 28570b35 2002-09-21 06:17 Julian Fitzell Details Diff |
Sweeping changes to move view_bug_*.php => bug_view_*.php and bug_add_*.php to bug_report_*.php git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1519 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/helper_api.php | Diff File | ||
| mod - bugnote_update.php | Diff File | ||
| mod - core/file_api.php | Diff File | ||
| mod - core/string_api.php | Diff File | ||
| mod - bug_close_page.php | Diff File | ||
| mod - bug_vote_add.php | Diff File | ||
| mod - bugnote_add.php | Diff File | ||
| mod - core/access_api.php | Diff File | ||
| mod - view_all_inc.php | Diff File | ||
| mod - bug_file_delete.php | Diff File | ||
| mod - core/html_api.php | Diff File | ||
| mod - bug_reopen.php | Diff File | ||
| mod - bugnote_edit_page.php | Diff File | ||
| mod - bug_reopen_page.php | Diff File | ||
| mod - bug_resolve.php | Diff File | ||
| mod - jump_to_bug.php | Diff File | ||
| mod - bug_update_page.php | Diff File | ||
| mod - bug_update_advanced_page.php | Diff File | ||
| mod - core/print_api.php | Diff File | ||
| mod - print_bug_page.php | Diff File | ||
| mod - bug_file_add.php | Diff File | ||
| mod - bugnote_delete.php | Diff File | ||
| mod - config_defaults_inc.php | Diff File | ||
| mod - bug_monitor.php | Diff File | ||
| mod - bug_resolve_page.php | Diff File | ||
| mod - bug_assign.php | Diff File | ||
| mod - core/obsolete.php | Diff File | ||
| mod - core/email_api.php | Diff File | ||
| mod - bugnote_set_view_state.php | Diff File | ||
| mod - bug_update.php | Diff File | ||
|
master bea939b9 2002-09-21 05:00 Julian Fitzell Details Diff |
authentication_api.php (auth_process_plain_password): take a salt parameter and generate a random one instead of using the password if none is provided (auth_does_password_match): get the salt from the stored password and pass it to auth_process_plain_password() git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1518 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/authentication_api.php | Diff File | ||
|
master d8621012 2002-09-20 17:07 Julian Fitzell Details Diff |
move some functions from print_api to string_api since they don't print git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1517 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - view_all_inc.php | Diff File | ||
| mod - view_bug_advanced_page.php | Diff File | ||
| mod - core/print_api.php | Diff File | ||
| mod - bugnote_update.php | Diff File | ||
| mod - core/string_api.php | Diff File | ||
| mod - view_bug_page.php | Diff File | ||
|
master c44623f8 2002-09-20 16:22 Julian Fitzell Details Diff |
* csv_export.php: move headers to the bottom so fatal errors will prevent them from being sent git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1516 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - csv_export.php | Diff File | ||
|
master fbf32e7d 2002-09-20 16:00 Julian Fitzell Details Diff |
* bug_api (bug_get_extended_row): fix cut-and-paste-o's git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1515 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/bug_api.php | Diff File | ||
|
master 3e18004b 2002-09-20 15:42 Julian Fitzell Details Diff |
* csv_export.php: use user_get_name() so we don't die when a user doesn't exist git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1514 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - csv_export.php | Diff File | ||
|
master 60781463 2002-09-20 14:09 Julian Fitzell Details Diff |
* gpc_api.php (gpc_clear_cookie): fix so the second paramter is optional git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1513 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/gpc_api.php | Diff File | ||
|
master 4bd6d84a 2002-09-18 16:13 Julian Fitzell Details Diff |
* core/user_api.php (user_set_field): new function to set a user field (user_reset_password): new function to reset a user's password * manage_user_reset.php: update to use new user_api functions git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1511 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - manage_user_reset.php | Diff File | ||
| mod - core/user_api.php | Diff File | ||
|
master 3b385954 2002-09-18 03:15 Julian Fitzell Details Diff |
* authentication_api.php (login_cookie_check) (auth_ensure_user_authenticated) - move code from auth_ensure_user_authenticated() to login_cookie_check() so the user's last vist is updated only once per page, not for each security check of course sometimes now it isn't getting set at all... have to figure out where this should go git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1510 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/authentication_api.php | Diff File | ||
|
master db7b25b2 2002-09-18 01:32 Julian Fitzell Details Diff |
This is a major cleanup of the authentication code. I've simplified a bit so that the auth code never deals with setting project cookies. Other than that the code should function exactly as before. * core/authentication_api.php: total cleanup * account_update.php: rename auth_api functions * index.php: rework to use new auth_api functions * login.php: rework to use new auth_api functions * login_select_proj_page.php: rename auth_api function * logout_page.php: use auth_clear_cookies() * manage_user_reset.php: rename auth_api functions * core/user_api.php (user_create): rename auth_api functions (user_signup): - tweak LDAP code and add a note to look at it in more detail - rename auth_api functions (user_get_row_by_name): use === instead of == git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1509 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - logout_page.php | Diff File | ||
| mod - core/authentication_api.php | Diff File | ||
| mod - manage_user_reset.php | Diff File | ||
| mod - account_update.php | Diff File | ||
| mod - core/user_api.php | Diff File | ||
| mod - index.php | Diff File | ||
| mod - login_select_proj_page.php | Diff File | ||
| mod - login.php | Diff File | ||
|
master e0291d73 2002-09-18 00:44 Julian Fitzell Details Diff |
* helper_api.php (helper_get_current_project): if no project cookie is set, return the user's default git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1508 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/helper_api.php | Diff File | ||
|
master fc69b415 2002-09-18 00:24 Julian Fitzell Details Diff |
* core/gpc_api.php (gpc_set_cookie): new function to set a cookie Victor is going to update this later to add a checksum (gpc_clear_cookie): new function to clear a cookie * set_project.php: use gpc_api functions for cookies * config_defaults_inc.php ($g_cookie_domain): set to '' by default ($g_project_cookie_val): set to '0' by default so we can phase out forcing the user to select a project at login I also added a note about what globals we can remove once the conversion to gpc_api is complete git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1507 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/gpc_api.php | Diff File | ||
| mod - config_defaults_inc.php | Diff File | ||
| mod - set_project.php | Diff File | ||
|
master e4fbca7a 2002-09-18 00:17 Julian Fitzell Details Diff |
Add a new file to do the cookie test at login instead of overloading the login.php file git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1506 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| add - login_cookie_test.php | Diff File | ||
|
master 0679c9ef 2002-09-17 19:32 Julian Fitzell Details Diff |
* user_api.php (user_get_access_level): make $p_project_id default to 0 so you can get the user's global access level git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1505 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/user_api.php | Diff File | ||
|
master 0b8a7bd1 2002-09-17 16:27 Julian Fitzell Details Diff |
use call_user_func_array() now that we support 4.0.4 git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1504 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/gpc_api.php | Diff File | ||
|
master b25bb8ef 2002-09-17 16:15 Julian Fitzell Details Diff |
more updates for php version bump to 4.0.4 git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1503 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - doc/INSTALL | Diff File | ||
| mod - doc/README | Diff File | ||
|
master 6e4db5dd 2002-09-17 16:12 Julian Fitzell Details Diff |
And after much deliberation, lo, the minimum requirements were bumped to PHP 4.0.4 (released nearly two years ago) and there was much rejoicing (well maybe a little rejoicing anyway). We may consider bumping it higher to 4.0.6 so we can use argument swapping in sprintf() to make internationalization easier... but we'll bump it if we get there. Note, as a base line, RedHat 7.1 and up shipped with 4.0.6 or higher. And all redhat 7.x versions have had rpm updates released to bring them up to 4.1.2 to fix security holes. git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1502 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - core/php_api.php | Diff File | ||
|
master 35d09615 2002-09-16 06:14 Julian Fitzell Details Diff |
* bug_add.php: major cleanup git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1501 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - bug_add.php | Diff File | ||
| mod - bug_actiongroup_page.php | Diff File | ||
|
master 1e891631 2002-09-16 06:14 Julian Fitzell Details Diff |
* bug_add_advanced_page.php: redirect back after forcing project selection * bug_add_page.php: redirect back after forcing project selection git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1500 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
||
| mod - bug_add_page.php | Diff File | ||
| mod - bug_add_advanced_page.php | Diff File | ||
