r1292: Prevent XSS attacks by only allowing JPEG, JPG, PNG, and GIF to be displayed...
[bugdar.git] / docs / changes.txt
1 1.1.4
2 ===============================
3 - Time zones with half-hours are not saved because the field only allows INTs (http://www.bluestatic.org/bugs/showreport.php?bugid=38)
4 - Fixed a SQL error received upon deleting a resolution (http://www.bluestatic.org/bugs/showreport.php?bugid=40)
5 - When searching and selecting multiple items for a field, only the first one is used in the search (http://www.bluestatic.org/bugs/showreport.php?bugid=39)
6 - Need to cast the unserialized data to an array to remove an implode() warning [admin/field.php#235]
7 - When $bugsys->options['pagelinks'] is set to 0, it now actually does its advertised behavior (http://www.bluestatic.org/bugs/showreport.php?bugid=45)
8 - Foreign langauge users cannot use the product/component editing system beacause localized strings are used to create the do actions instead of english variable ones (http://www.bluestatic.org/bugs/showreport.php?bugid=42)
9 - Fixed a SQL error that would occur when editing a report with no emails linked to it (http://www.bluestatic.org/bugs/showreport.php?bugid=46)
10 - Added the ability to delete attachments from the database (http://www.bluestatic.org/bugs/showreport.php?bugid=47)
11 - Fixed a scrollpane bug in IE7 (http://www.bluestatic.org/bugs/showreport.php?bugid=48)
12 - In the "My Controls" tab, change the name of the email and password fields to prevent autocomplete from working on them
13 - Include the Gettext mimic functions into the installer so people without the PHP extension can install Bugdar (http://www.bluestatic.org/bugs/showreport.php?bugid=51)
14 - Fixed a SQL error that would occur when editing or deleting comments (http://www.bluestatic.org/bugs/showreport.php?bugid=52)
15 - Allow administrators to set the default time zone which guests view all times and dates in (http://www.bluestatic.org/bugs/showreport.php?bugid=53)
16 - The "[Edit]" and "[Delete]" options for attachments were off by one line (http://www.bluestatic.org/bugs/showreport.php?bugid=56)
17 - Fixed a spelling error in search.php when there is no search criteria
18 - Adding a quick search feature to the header bar (http://www.bluestatic.org/bugs/showreport.php?bugid=57)
19 - Fixed an occurence in header.tpl where the $stylevar align wasn't used, but a hard-coded one was
20 - Only allow JPG, JPEG, PNG, and GIF attachments to be displayed inline because all other types could lead to an XSS attack
21
22 1.1.3
23 ===============================
24 - If a user leaves a comment and does not have bug change access, data loss occurs
25 - Fixed IE's redirection issue when using Message_Reporter->redirect() (http://www.bluestatic.org/bugs/showreport.php?bugid=32)
26 - On the admin login page, prevent the number "15" from appearing as text and marked another string for translation that was missed
27 - Error messages are no longer hidden in IE6 (http://www.bluestatic.org/bugs/showreport.php?bugid=30)
28
29 1.1.2
30 ===============================
31 - Fixed a SQL injection on login.php (http://www.bluestatic.org/bugs/showreport.php?bugid=36)
32 - Fixed potential SQL injections on search.php
33 - Fixed potential SQL injections on install/install.php
34
35 1.1.1
36 ===============================
37 - Registration email functions do not work because they are not ISSO2/Mail compatible [register.php]
38 - Removed TABLE_PREFIX-related SQL errors in syndicate.php
39 - Use the correct language variable key for exporting the XML encoding in syndicate.php
40 - API-level errors are not caught in the registration process before insertion because of user_cumulative [register.php]
41 - Remove warnings on explain.php?do=products (http://www.bluestatic.org/bugs/showreport.php?bugid=29)
42 - Removed SQL errors when deleting a product or version due to bad column names (http://www.bluestatic.org/bugs/showreport.php?bugid=28) [admin/product.php]
43 - Added a way to view and approve "Pending" and "Awaiting" users
44 - Prevent a weird bug with notifications where multiple emails would be sent out to the wrong people
45 - Numerous improvements for RTL languages (http://www.bluestatic.org/bugs/showreport.php?bugid=34)
46
47 1.1.0
48 ===============================
49 - When gettext is not installed, a "method call on unobject" error is thrown
50 - Renamed "automatic action" to "automation"
51 - If no user comment is entered but there's an automation comment, then the automation comment is no longer disregarded
52 - Get rid of a foreach() warning if there are no products [admin/product.php#317]
53 - If no custom fields were setup, an empty query error would be thrown [newreport.php#130]
54 - If no custom fields were present, adding an automation would fail [admin/automation.php#74]
55 - Remove a warning when saving a usergroup and there are no custom fields present [admin/usergroup.php#221]
56 - Update cached usernames when the display name changes
57
58 1.1.0 Release Candidate 1
59 ===============================
60 - Fixed many problems with install/install.php
61 - Changed array casting instances to is_array() checks, which are better
62 - Made some of the email notifications better-worded
63 - Fix the correct stylevar for language codes
64 - Fixed another can_perform() product-based permissions check [search.php]
65 - More changes to syndicate.php to increase performance
66 - Add checks to newreport.php and search.php to see if there are products or versions, if there aren't, then throw a message about needing them to be setup
67 - Process custom field data on newreport.php
68 - Add regex matching check to process_custom_fields()
69 - Missed some string conversions to gettext
70 - If cookies do not authenticate right, unset them [includes/init.php]
71
72 1.1.0 Beta 2
73 ===============================
74 - Array casting to remove foreach() warnings [editreport.php#132]
75 - Update last post information after deleting a comment (http://bugs.bluestatic.org/showreport.php?bugid=25)
76 - Improved Atom feed by using a <table> and properly specifying type information
77 - Changed the access key for "Save Report and Add Another" button to E
78 - Removed potential warnings when there are no products [includes/functions.php#417] (http://bugs.bluestatic.org/showreport.php?bugid=26)
79 - Removed potential warnings if there is no page navigator [class_pagination.php#243] (http://bugs.bluestatic.org/showreport.php?bugid=26)
80 - Created a Language API
81 - Fix a call to a non-object error [editcomment.php#116]
82 - Switch to gettext language system instead of the XML-strings format
83 - Fixing warnings related to Printer->page_confirm() throughout the entire admin section
84 - After you delete a resolution, severity, priority, or status, set all bugs with the deleted field item back to the value set as default
85 - Fixed a bug where there could be two <select> menus in userctrl.php because we double-wrapped a <select> [userctrl.tpl]
86 - Cast to array to remove foreach() warnings [userctrl.php#160]
87 - Fixed a bug that would cause searching to result in a SQL error
88 - Added better checking of hidden bugs for the favorites list
89 - Better permissions checking in vote.php, viewattachment.php, attachment.php, showhistory.php, and favorite.php
90 - Fixed numerous permission checks in showreport.php
91 - Added a permission to allow viewing of one's hidden reported bugs ("canviewownhidden")
92 - Added an is_array() check to prevent foreach() warnings [admin/user.php#135]
93
94 1.1.0 Beta 1
95 ===============================
96 - User help cache was not rebuilt for descriptions in custom fields (http://bugs.iris-studios.com/showreport.php?bugid=7)
97 - Custom fields did not appear on newreport.php (http://bugs.iris-studios.com/showreport.php?bugid=8)
98 - If the first SQL query fails (datastore fetch), show a link to the installer (http://bugs.iris-studios.com/showreport.php?bugid=20)
99 - Removed potential divide by 0 warnings in showreport.php under PHP5
100 - No longer highlight the <title> and <input> tags when viewing a bug report (http://bugs.iris-studios.com/showreport.php?bugid=21)
101 - Removed potential implode() warnings in showreport.php under PHP5
102 - When logging out, you will be redirected to the page you were previously viewing
103 - Rewrote the logging mechanism
104 - Usernames are now cached in the database for bug reports to remove the need to do complex joins at runtime
105 - Added notification system (http://bugs.iris-studios.com/showreport.php?bugid=11)
106 - When searching, you can now select multiple values for <select> menus (http://bugs.iris-studios.com/showreport.php?bugid=3)
107 - Add a notice for guests explaining that registration is a good thing (http://bugs.iris-studios.com/showreport.php?bugid=19)
108 - Create a separate screen that lists a user's favourites (http://bugs.iris-studios.com/showreport.php?bugid=12)
109 - Atom syndication of the bugs list (http://bugs.iris-studios.com/showreport.php?bugid=18)
110 - Removed the useless "dependency" table
111 - Added the following APIs:
112 - Attachment
113 - Automatic action
114 - Bug
115 - Comment
116 - Custom field
117 - Priority
118 - Resolution
119 - Severity
120 - User
121 - Usergroup
122 - User help
123 - Added support for DST observation (http://bugs.iris-studios.com/showreport.php?bugid=22)
124 - Data (bugs and comments) can now be removed (http://bugs.iris-studios.com/showreport.php?bugid=16)
125 - Specific statuses can be hidden by the administrator and users individually (http://bugs.iris-studios.com/showreport.php?bugid=9)
126 - Column sorting of bug lists (http://bugs.iris-studios.com/showreport.php?bugid=14)
127 - Added a version checker in the admin section
128 - Removed the plus sign in "class1 + class2" for HTML CSS class attributes
129
130 1.0.1
131 ===============================
132 - Fixed a SQL error in voting for those with a table prefix (http://bugs.iris-studios.com/showreport.php?bugid=6)
133 - Users with register_globals ON can now install software
134 - Users with register_globals ON can now log in
135