r1248: Fixing a SQL injection on login.php

[bugdar.git] / docs / changes.txt

1.1.2
===============================
- Fixed a SQL injection on login.php (http://www.bluestatic.org/bugs/showreport.php?bugid=36)

1.1.1
===============================
- Registration email functions do not work because they are not ISSO2/Mail compatible [register.php]
- Removed TABLE_PREFIX-related SQL errors in syndicate.php
- Use the correct language variable key for exporting the XML encoding in syndicate.php
- API-level errors are not caught in the registration process before insertion because of user_cumulative [register.php]
- Remove warnings on explain.php?do=products (http://www.bluestatic.org/bugs/showreport.php?bugid=29)
- Removed SQL errors when deleting a product or version due to bad column names (http://www.bluestatic.org/bugs/showreport.php?bugid=28) [admin/product.php]
- Added a way to view and approve "Pending" and "Awaiting" users
- Prevent a weird bug with notifications where multiple emails would be sent out to the wrong people
- Numerous improvements for RTL languages (http://www.bluestatic.org/bugs/showreport.php?bugid=34)

1.1.0
===============================
- When gettext is not installed, a "method call on unobject" error is thrown
- Renamed "automatic action" to "automation"
- If no user comment is entered but there's an automation comment, then the automation comment is no longer disregarded
- Get rid of a foreach() warning if there are no products [admin/product.php#317]
- If no custom fields were setup, an empty query error would be thrown [newreport.php#130]
- If no custom fields were present, adding an automation would fail [admin/automation.php#74]
- Remove a warning when saving a usergroup and there are no custom fields present [admin/usergroup.php#221]
- Update cached usernames when the display name changes

1.1.0 Release Candidate 1
===============================
- Fixed many problems with install/install.php
- Changed array casting instances to is_array() checks, which are better
- Made some of the email notifications better-worded
- Fix the correct stylevar for language codes
- Fixed another can_perform() product-based permissions check [search.php]
- More changes to syndicate.php to increase performance
- Add checks to newreport.php and search.php to see if there are products or versions, if there aren't, then throw a message about needing them to be setup
- Process custom field data on newreport.php
- Add regex matching check to process_custom_fields()
- Missed some string conversions to gettext
- If cookies do not authenticate right, unset them [includes/init.php]

1.1.0 Beta 2
===============================
- Array casting to remove foreach() warnings [editreport.php#132]
- Update last post information after deleting a comment (http://bugs.bluestatic.org/showreport.php?bugid=25)
- Improved Atom feed by using a <table> and properly specifying type information
- Changed the access key for "Save Report and Add Another" button to E
- Removed potential warnings when there are no products [includes/functions.php#417] (http://bugs.bluestatic.org/showreport.php?bugid=26)
- Removed potential warnings if there is no page navigator [class_pagination.php#243] (http://bugs.bluestatic.org/showreport.php?bugid=26)
- Created a Language API
- Fix a call to a non-object error [editcomment.php#116]
- Switch to gettext language system instead of the XML-strings format
- Fixing warnings related to Printer->page_confirm() throughout the entire admin section
- After you delete a resolution, severity, priority, or status, set all bugs with the deleted field item back to the value set as default
- Fixed a bug where there could be two <select> menus in userctrl.php because we double-wrapped a <select> [userctrl.tpl]
- Cast to array to remove foreach() warnings [userctrl.php#160]
- Fixed a bug that would cause searching to result in a SQL error
- Added better checking of hidden bugs for the favorites list
- Better permissions checking in vote.php, viewattachment.php, attachment.php, showhistory.php, and favorite.php
- Fixed numerous permission checks in showreport.php
- Added a permission to allow viewing of one's hidden reported bugs ("canviewownhidden")
- Added an is_array() check to prevent foreach() warnings [admin/user.php#135]

1.1.0 Beta 1
===============================
- User help cache was not rebuilt for descriptions in custom fields (http://bugs.iris-studios.com/showreport.php?bugid=7)
- Custom fields did not appear on newreport.php (http://bugs.iris-studios.com/showreport.php?bugid=8)
- If the first SQL query fails (datastore fetch), show a link to the installer (http://bugs.iris-studios.com/showreport.php?bugid=20)
- Removed potential divide by 0 warnings in showreport.php under PHP5
- No longer highlight the <title> and <input> tags when viewing a bug report (http://bugs.iris-studios.com/showreport.php?bugid=21)
- Removed potential implode() warnings in showreport.php under PHP5
- When logging out, you will be redirected to the page you were previously viewing
- Rewrote the logging mechanism
- Usernames are now cached in the database for bug reports to remove the need to do complex joins at runtime
- Added notification system (http://bugs.iris-studios.com/showreport.php?bugid=11)
- When searching, you can now select multiple values for <select> menus (http://bugs.iris-studios.com/showreport.php?bugid=3)
- Add a notice for guests explaining that registration is a good thing (http://bugs.iris-studios.com/showreport.php?bugid=19)
- Create a separate screen that lists a user's favourites (http://bugs.iris-studios.com/showreport.php?bugid=12)
- Atom syndication of the bugs list (http://bugs.iris-studios.com/showreport.php?bugid=18)
- Removed the useless "dependency" table
- Added the following APIs:
        - Attachment
        - Automatic action
        - Bug
        - Comment
        - Custom field
        - Priority
        - Resolution
        - Severity
        - User
        - Usergroup
        - User help
- Added support for DST observation (http://bugs.iris-studios.com/showreport.php?bugid=22)
- Data (bugs and comments) can now be removed (http://bugs.iris-studios.com/showreport.php?bugid=16)
- Specific statuses can be hidden by the administrator and users individually (http://bugs.iris-studios.com/showreport.php?bugid=9)
- Column sorting of bug lists (http://bugs.iris-studios.com/showreport.php?bugid=14)
- Added a version checker in the admin section
- Removed the plus sign in "class1 + class2" for HTML CSS class attributes

1.0.1
===============================
- Fixed a SQL error in voting for those with a table prefix (http://bugs.iris-studios.com/showreport.php?bugid=6)
- Users with register_globals ON can now install software
- Users with register_globals ON can now log in