aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Bug 621105 - [SECURITY] Voting lacks CSRF protectionDavid Lawrence2011-01-241-0/+4
| | | | r=mkanat,a=LpSolit
* Bug 500900: Confirming bugs requires NEW state to exist - Patch by ↵lpsolit%gmail.com2009-07-011-1/+1
| | | | Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat
* Bug 378797: Ability to turn "My votes" page into a bug list - Patch by ↵lpsolit%gmail.com2008-02-031-0/+6
| | | | GavinS <bugzilla@chimpychompy.org> r/a=LpSolit
* Bug 403834: Replace table locks with database transactions in tokens, votes, ↵lpsolit%gmail.com2007-11-191-4/+2
| | | | and sanitycheck - Patch by Emmanuel Seyman <eseyman@linagora.com> r/a=mkanat
* Bug 403824: Replace table locks in most Bugzilla files with transactions - ↵lpsolit%gmail.com2007-11-151-4/+2
| | | | Patch by Emmanuel Seyman <eseyman@linagora.com> r/a=mkanat
* Bug 399954: Make Bugzilla able to hold its dependencies in a local directorymkanat%bugzilla.org2007-10-191-1/+1
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 383903: Voting for a bug gives a table lock error - Patch by ↵lpsolit%gmail.com2007-06-101-4/+3
| | | | Frédéric Buclin <LpSolit@gmail.com> r=timeless a=LpSolit
* Bug 356393: No title is displayed when confirming a bug by popular votes - ↵lpsolit%gmail.com2006-10-131-0/+1
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave
* Bug 351300: votes.cgi crashes if your vote is the one confirming a bug - ↵lpsolit%gmail.com2006-09-051-1/+1
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r=Colin a=myk
* Bug 341933: Make bug object creation much lightermkanat%bugzilla.org2006-08-171-1/+1
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 348464: votes.cgi fails with a taint errormkanat%bugzilla.org2006-08-151-5/+5
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 348057: Move the checks for bug visibility out of Bugzilla::Bug->newmkanat%bugzilla.org2006-08-121-1/+1
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 173629: Clean up "my" variable scoping issues for mod_perlmkanat%bugzilla.org2006-07-061-2/+6
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 343699: votes.cgi: Reference found where even-sized list expected - ↵lpsolit%gmail.com2006-07-061-1/+1
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=myk
* Bug 338375: Use Bugzilla->params everywhere instead of Param().mkanat%bugzilla.org2006-07-041-1/+0
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 342869: Use Bugzilla->params everywhere except templatesmkanat%bugzilla.org2006-07-041-2/+2
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 342749: Replace Bugzilla::Util's min and max with the List::Util equivalentsmkanat%bugzilla.org2006-06-271-0/+2
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=colin.ogilvie, r=vladd, a=justdave
* Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by ↵lpsolit%gmail.com2006-06-211-2/+3
| | | | Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 304601: Bugzilla::Config's :locations exports need to be in their own ↵lpsolit%gmail.com2006-06-201-5/+0
| | | | | | | | module - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat for the main patch, r=myk for the patch about CGI.pm a=justdave Bug 328637: Remove all legal_* versioncache arrays - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave Bug 110503 - Eliminate versioncache
* Bug 332522: Remove $::prodmaxvotes - Patch by Frédéric Buclin ↵lpsolit%gmail.com2006-05-221-58/+40
| | | | <LpSolit@gmail.com> r=mkanat a=myk
* Bug 332598: Move ValidatePassword() and DBNameToIdAndCheck() from globals.pl ↵lpsolit%gmail.com2006-05-081-3/+4
| | | | into User.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 301020: Remove useless locked tables - Patch by Frédéric Buclin ↵lpsolit%gmail.com2006-03-311-2/+1
| | | | <LpSolit@gmail.com> r=wurblzap a=justdave
* Bug 282628: Move OpenStates and IsOpenedState out of globals.plmkanat%kerio.com2006-03-071-1/+1
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=wicked, a=myk
* Bug 312157: Remove $::template and $::vars from globals.pl - Patch by Olav ↵lpsolit%gmail.com2005-10-251-3/+2
| | | | Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave
* Bug 303700: Eliminate deprecated Bugzilla::DB routines from votes.cgi - ↵lpsolit%gmail.com2005-09-031-62/+59
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r=joel a=justdave
* Bug 305126: Fix table locks after removal of derive_groupsbugreport%peshkin.net2005-08-301-0/+1
| | | | | Patch by Joel Peshkin <bugreport@peshkin.net> r=lpsolit, a=myk
* Bug 303366: Possible locking tables conflict when voting for bugs - Patch by ↵lpsolit%gmail.com2005-08-231-12/+25
| | | | Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave
* Bug 301508: Remove CGI.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> ↵lpsolit%gmail.com2005-08-101-1/+1
| | | | r=mkanat,wicked a=justdave
* Bug 290513: Move CheckIfVotedConfirmed() out of CGI.pl - Patch by Frédéric ↵lpsolit%gmail.com2005-04-201-1/+3
| | | | Buclin <LpSolit@gmail.com> r=wicked a=myk
* Bug 286235: Implicit joins should be replaced by explicit joins - installment Amkanat%kerio.com2005-04-051-9/+10
| | | | Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=joel, a=myk
* Bug 280503: Replace "LOCK/UNLOCK TABLES" with Bugzilla::DB function callmkanat%kerio.com2005-02-181-14/+17
| | | | Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=mkanat,a=myk
* Bug 257315 : type of delta_ts in bugs table should not be timestamptravis%sedsystems.ca2005-02-091-2/+1
| | | | Patch by Tomas Kopal <Tomas.Kopal@altap.cz> r=mkanat, LpSolit a=justdave
* Bug 250440 : when voting for bug, jump down to bugtravis%sedsystems.ca2005-02-081-0/+1
| | | | Patch by GavinS <bugzilla@chimpychompy.org> r=LpSolit a=justdave
* Backing out the checking from bug 257315 until it gets corrected. It ↵justdave%bugzilla.org2005-01-301-1/+2
| | | | | | prevents new bugs from being filed. a=justdave
* Bug 257315 : type of delta_ts in bugs table should not be timestamptravis%sedsystems.ca2005-01-291-2/+1
| | | | Patch by Tomas Kopal <Tomas.Kopal@altap.cz> r=vladd, LpSolit a=justdave
* Bug 276605 : Ignore vote changes when usevotes = 0travis%sedsystems.ca2005-01-281-3/+4
| | | | Patch by Frederic Buclin <LpSolit@gmail.com> r=wurblzap a=myk
* Patch for bug 277013: provides a fix for the SQL error that appears when a ↵jocuri%softhome.net2005-01-091-6/+10
| | | | user's vote confirms a bug; patch by Frédéric Buclin <LpSolit@netscape.net>, r=wurblzap, a=justdave.
* Patch for bug 273665: Viewing 'My Votes' page should not crash due to lack ↵jocuri%softhome.net2004-12-261-1/+1
| | | | of SQL table locking; patch by GavinS <bugzilla@chimpychompy.org>, r=vladd, a=justdave.
* Bug 186093: Move CanSeeBug to User.pm and make User.pm usable by templatesbugreport%peshkin.net2004-08-041-1/+1
| | | | | r=kiko a=justdave
* Bug 253588: Change Bugzilla->user to be usable even for a logged-out userbugreport%peshkin.net2004-07-311-3/+2
| | | | | | patch by erik,joel r=kiko a=justdave
* Fix for bug 238869: remove %FORM from votes.cgi. Does just that, free ofkiko%async.com.br2004-04-141-21/+22
| | | | | | XXX comments. r=vladd,justdave; a=justdave. die %FORM die!
* Fix for bug 234175: Remove deprecated ConnectToDatabase() andkiko%async.com.br2004-03-271-4/+3
| | | | | | | quietly_check_login()/confirm_login() calls. Cleans up callsites (consisting of most of our CGIs), swapping (where appropriate) for calls to Bugzilla->login. Patch by Teemu Mannermaa <wicked@etlicon.fi>. r=bbaetz, kiko. a=justdave.
* [SECURITY] Bug 209376: If you know the email address of someone who has ↵justdave%syndicomm.com2003-11-031-7/+3
| | | | | | | voted on a secure bug, you can access the summary of that bug even if you do not have sufficient permissions to view the bug itself. Patch by Gervase Markham <gerv@mozilla.org> r= justdave, bbaetz a= justdave
* Bug 217242 CheckIfVotedConfirmed tripped Table 'fielddefs' was not locked ↵timeless%mozdev.org2003-09-021-1/+1
| | | | | | with LOCK TABLES [for statement ``SELECT fieldid FROM fielddefs WHERE name = 'bug_status'''] r=justdave a=justdave
* Bug 193575 - Internal server error from votes.cgibbaetz%acm.org2003-06-281-1/+6
| | | | | patch by bugzilla@chimpychompy.org (GavinS) r=bbaetz, a=justdave
* Bug 180635 - Enhance Bugzilla::User to store additional informationbbaetz%acm.org2003-06-031-3/+3
| | | | r=myk,jake
* Bug 201816 - use CGI.pm for header outputbbaetz%acm.org2003-05-051-5/+14
| | | | r=joel, a=justdave
* Bug 180086 - Rename 'count' column in votes tablesbbaetz%acm.org2003-04-271-7/+7
| | | | | | patch by bugzilla@chimpychompy.org (GavinS) r=bbaetz,justdave a=justdave
* Bug 196433 - Bugzilla now uses /usr/bin/perl as the shebang linejake%bugzilla.org2003-03-271-1/+1
| | | | | r=justdave a=justdave
* Bug 163114 - Templatise all calls to DisplayError. Patch D (the last one). ↵gerv%gerv.net2002-10-061-27/+15
| | | | Patch by gerv; r=burnus.