ChangeLog

Mantis ChangeLog

2002.08.??  -  0.18.0

 * Account pruning now also removes profiles, preferences and such.
 * Added $g_auto_set_status_to_assigned to allow enabling/disabling of automatically setting the status to ASSIGNED when the defect is assigned.  Default is ON.
 * Added $g_default_notify_flags and $g_notify_flags which replace $g_notify_developers_on_new, $g_notify_on_new_threshold, and $g_notify_admin_on_new.  The old flags are no longer supported.  The new ones provide full control on who should be notified on each event/action.
 * Added $g_handle_bug_threshold to allow controlling the access level required for a user to appear in the assign to list and be able to handle bugs.
 * Added $g_notify_admin_on_new to allow enabling/disable of notifications to admins on arrival of new bugs.
 * Added $g_notify_on_new_threshold to allow controlling the threshold of notification on arrival of new bugs.
 * Added $g_view_attachments_threshold to control the access level required to view attachments.  This is useful when there is a need to share the knowledge about the defects, but to secure customer data.
 * Added $g_view_summary_threshold to configure the access level required for viewing summary page.
 * Added $s_charset to all localization files.
 * Added a direct link, with a small icon, on each bug row, so that users on a selected project can switch directly to the update bug page (simple/advanced depending on user preferences).
 * Added a remove link next to the edit link in the project categories and project versions to all deleting without going into edit.
 * Added announcement flag to news.  Announcements are always kept at the top of the news page.
 * Added automatic defaults for $g_path and $g_absolute_path rather than dummy values.  This should avoid the need of redefining these values in custom_config_inc.php and also support multiple domains.
 * Added basic private bug functionality
 * Added bug history functionality.
 * Added bugnote_delete_page.php for bugnote delete confirmation.
 * Added button to copy categories from another project, in addition to the current 'copy to'.
 * Added capability to monitor bugs even when not reporter or handler
 * Added check_varset() function to replace if isset() else checks.
 * Added Chinese Simplified translation.
 * Added configuration flags ($g_show_queries_count and $g_show_queries_list) that track the executed queries and display their total count, unique queries count, and the actual list of queries executed.
 * Added custom attributes for the 7 ones in config_inc.php : priority, severity, status (with colors), etc... Define it in manage_proj_menu_page.php ; implementation has been thought in a 'per project Settings' conception, but only available for all projects right now.
 * Added db_clean_string(), db_clean_int(), and db_clean_bool() to be called on data before it goes into the database
 * Added delete_user() function to core_user_API.php and replaced this functionality in other files with a call to this function.
 * Added links from the counters of bugs reported and assigned to logged in user to their corresponding filtered view.
 * Added more visual graph pages in summary_page.php. Caution, old versions of JPGraph may cause problems, use v1.6.3 or above if you can.
 * Added multiple bug actions in view_all_bug_page.php.
 * Added new localization strings.
 * Added notifications when a bug is deleted.
 * Added option to allow reporters to close the bugs they reported.
 * Added support for "product : category" rather than "category" only in summary for "All Products" ($g_summary_product_colon_category)
 * Added support for adding multiple categories in one step, this is done by separating category names by the pipe character '|'.  For example to add category 'A' and 'B', add 'A|B'.
 * Added support for allowing managers to update project information, change project user list, add/edit/delete categories and versions.
 * Added support for auto-assigning of bugs when a default user is specified for the category and if bug is not pre-assigned.
 * Added support for custom_config_inc.php, this is to replace config_inc.php.  Although config_inc.php is still supported, it is recommended to use the new name.
 * Added support for custom_constants_inc.php, if this file is found in main directory it gets included after constants_inc.php.  It is useful to define constants for custom enumerations.
 * Added support for custom_strings_inc.php, if this file is found in main directory it gets included after lang/strings_xxxx.php to allow overriding of strings without modifying the language files.  $g_active_language can be used to check the active language.
 * Added support for modifying the reporter of a bug.
 * Added support for optional compression of html output ($g_compress_html).  This option is OFF by default since it requires PHP 4.04.
 * Added support for private bugnotes. At present these bugnotes are omitted from sent emails, a future release will put private bugnotes in emails to those who should see them.
 * Added support for supervariables ($_SERVER, $_REQUEST, etc.) in PHP >= 4.1.0, since the old variables were deprecated. In the future the extract() call should be made obsolete by the use of $_GET and such throughout Mantis.
 * Added the support to upload attachments to an FTP server (so now there is DISK, DATABASE, and FTP).  Recently uploaded/downloaded attachments are cached at the web server.
 * Added validation checks for all inputs that are passed on to database queries.
 * Added view_state to news.  News can now be made private.
 * Added word2k and excel export in print_all_bug_page.php. Users can choose the bugs to display/print, and the fields to export with the 'Printing Options' link.
 * Administrators can now modify the preferences for all users that are not protected.  Protected users need to be unprotected first.
 * Early 2002, an extraordinary thing happened. While Kenzaburo Ito had been maintaining Mantis mostly on his own for years, suddenly others started to help with the development. To reflect/celebrate that, copyright on Mantis for the years 2002 and onward is transferred to the 'Mantis Group', consisting of all of Mantis' developers. All files have had their copyright notices changed to reflect this.
 * Enhanced the admin_upgrade.php script, and supported auto-generation of SQL files.
 * Fixed defects with updating project categories and versions.
 * Fixed problem deleting bugnotes.
 * Fixed problem in core_API.php where constants were used before declaration
 * Fixed problem in core_email_API.php where an email could be send to noone at all, in rare cases.
 * Fixed problem in manage_proj_update.php which gave a warning when editing projects with empty upload file paths.
 * Fixed problem with ambiguous column names in queries when using the text search or applying filters
 * Fixed problem with print_assign_to_option_list() not selecting the current user.
 * Improved the behaviour of sorting the tables of users and projects in 'Manage'.
 * In the view bugs, when all projects is selected the project name is now displayed in smaller font over the category.
 * Made 'light grey' the default color for 'closed'.
 * Made 'normal' default priority for new bugs.
 * Mantis will now warn the user if his browser does not support cookies, either because it's too old or because it was disabled.
 * Merged default/config_inc1.php and default/config_inc2.php in config_defaults_inc.php
 * Modified & in URLs & to conform with standards.
 * Modified all php files to use single quotes where double quotes were unnecessary.
 * Modified all string files to use single quotes instead of double quotes.
 * Modified core_email_API.php to send a content-type header in emails.
 * Modified core_html_API.php to print a META-tag defining the charset.
 * Modified core_print_API.php to escape double quotes in text fields, instead of replacing them by single quotes.
 * Modified core_user_API.php, login.php and login_page.php to send the user back to the referring page after login.
 * Modified form elements to be standards compliant.
 * Modified input checked variables to be prefixed by $c_.
 * Moved admin_* scripts into admin/ folder.
 * Quoted various text values retrieved from a database and used in a database query.
 * Removed French2 localization (out of date, without HTML entities. Replaced by new French localization).
 * Removed get_status_bgcolor from core_helper_API.php and all files using it, in favor of get_status_color.
 * Removed HTML entities from all localization files.
 * Removed most file variables from default/config_inc2.php.
 * Removed special status of 'closed' concerning colors. 'View all bugs' will use the configured background color.
 * Removed the f_protected hidden form fields in user delete/update/etc. and let the scripts check it directly.
 * Replaced $g_<status>_color variables with $g_status_colors['<status color>'] array in the configuration.  For example, $g_new_color is replaced with $g_status_colors['new'].
 * Reworked !isset() checks to use check_varset().
 * Reworked BCTimer class to be more useful for debugging.
 * Reworked code formatting for $c_ variables.
 * Rewrote large parts of Mantis to improve security.
 * Updated comments in all localization files to point to correct file names.
 * Updated Hungarian, Russian, Romanian, German, Danish, Norwegian and Dutch localizations.
 * Added the ability to enter a bugnote when you update a bug.
 * Added core_bugnote_API.php.
 * Added core_bug_API.php.
 * Modified br, hr, li, img, selected, checked, and other html elements to be XHTML compliant.
 * Added javascript autofocus to the login page.
 * Added javascript autofocus to the report bug pages.
 * Added tabindexes to the report bug pages.
 * Added file upload setting information to admin_check.php
 * Cleaned up file uploading with better error messages and hiding file upload when it's disabled in PHP
 * Replaced '/' with DIRECTORY_SEPARATOR throughout to make things cross-platform
 * Prevent an unauthorized user from deleting a bug by modifying the URL
 * Fixed bug where upload paths with \'s in them kept getting escaped over and over
 * Pulled PHP compatibility code out into php_api.php
 * Removed $g_register_globals variable and just check the actual value of the PHP config variable
 * Added error_api.php with a new pretty error handler and error_string() to obtain internationalized error strings
 * Added $g_delete_bugnote_threshold.
 * Added $g_update_bug_threshold.
 * Added partial support to "Publish Bugs".  A user can publish a bug by generating a URL for it which includes CRC checksum, this link can then be used to open this bug even if the user is not logged into Mantis or does not even have an account.
 * Added $g_show_detailed_errors
 * Added $g_show_notices
 * Added $g_show_warnings
 * Fixed bug that let you change your username to that of an already existing user
 * Added config_api.php to handle obtaining config information
 * Added gpc_api.php with functions to safely get POST and GET data and set cookies
 * Added access_api.php
 * Got rid of summary_graph_functions.php, in favor of core_graph_API.php.
 * Moved core_* into a seperate directory, which can be moved out of the webroot.
 * Added lang_api.php
 * Added string_api.php
 * Removed str_pad() we can use str_pad() from PHP4 now
 * Implemented project row caching
 * Make db_result() and db_fetch_array() return data with slashes stripped
 * Added authentication_api.php
 * Removed proj_user_api.php
 * Added obsolete.php that checks for obsolete variables.

2002.08.23  -  0.17.5
 * Corrected bug_delete.php and bug_delete_page.php, which ignored the $g_allow_bug_delete_access_level setting.
 * Corrected bug_close.php and bug_close_page.php, which ignored the $g_close_bug_threshold setting.
 * Corrected bug_reopen.php and bug_reopen_page.php, which ignored the $g_reopen_bug_threshold setting.
 * Fixed problems in bug_update_advanced_page.php, bug_update_page.php, view_bug_advanced_page.php and view_bug_page.php which allowed users to view private bugs. It does that icky logout thing again, which will be replaced with a nice message in 0.18.0.
 * Fixed a problem in view_all_bug_page.php which allowed users to see public bugs in private projects when all projects were marked private.

2002.08.19  -  0.17.4a
 * Fixed the fix of the ambigious column problem
 * Fixed the 'second line of defense' against the arbitrary-code-execution vulnerability

2002.08.18  -  0.17.4
 * This is a maintenance release. It patches up several vulnerabilities in 0.17.3. No features have been added.
 * Fixed a problem in config_inc2.php, which would allow a malicious user to execute arbitrary code and view any local file available to the webserver-user.
 * Fixed a problem in summary_graph_functions.php, which just allowed a malicious user to execute arbitrary code.
 * Fixed a problem in print_all_bug_page.php, which allowed reporters to see bugs they hadn't reported, even when $g_limit_reporters is set to ON.
 * Fixed a problem in view_all_bug_page.php, which allowed any user to see the summaries of public bugs in private projects, by manipulation of the project cookie.
 * Modified admin_check.php to prevent use by spammers.
 * Modified the database upgrade script to prevent someone from accidentally or intentionally running the scripts on an updated database.
 * Fixed a problem in core_user_API.php, which probably caused the infinite-redirect problem in Mozilla/Opera browsers.
 * Fixed a problem with ambigious columns in view_all_bug_page.php

2002.05.19  -  0.17.3

 * Bumped version number.
 * Fixed problem with CSV not downloading.
 * Fixed no colors when using non-English languages (temporary fix).
 * Fixed bug_close to add bugnote.
 * Fixed file uploads to not show up for VIEWERS.
 * Modified core_API.php to always turn magic_quotes_runtime OFF.
 * Modified disk uploads to use the file_download.php script.
 * Modified bugnote last_modified query slightly.
 * Modified reporter and assign_to option lists.
 * Updated PHP and MySQL requirements.
 * Updated Norwegian, Russian, Danish and Dutch translations.
 * Added die to print_header_redirect().
 * Added russian_koi8 translation.
 * Added HTTP_POST_FILES to core_API.php.
 * Added check for empty bugnotes.
 * Removed view_csv_export_inc.php (unused).
 * Removed print_user_option_list() (unused).
 * Closed a security problem in account_update.php.

2002.05.12  -  0.17.2

 * Fixed error in set_project where setting a project would result in a loop.
 * Fixed account profiles to check for blank inputs.
 * Fixed some problems with BASIC_AUTH.
 * Fixed problems with documentation links.
 * Fixed a few documentation errors in configuration.html.
 * Fixed bug_update to no longer cut off steps_to_reproduce if it has quotation marks.
 * Fixed # bug links in emails.
 * Fixed bugnote update to redirect properly after update.
 * Fixed bugnote update to check for proper access.
 * Fixed bug_file_upload_inc to user $g_max_file_size.
 * Fixed CSV exporting to not have SPAN tags.
 * Fixed CSV export MIME type.
 * Fixed potential variable warning in main_page.
 * Fixed signup to detect empty usernames.
 * Fixed user creation to detect empty usernames.
 * Fixed bug file upload error.  Error message was misreported.
 * Fixed project doc upload error.  Error message was misreported.
 * Fixed problem with bottom page menu not displaying when turned on.
 * Fixed warning message on report. Warning: Undefined variable: f_file_name ...
 * Fixed edit bugnote to allow the correct users to edit and update.
 * Fixed g_limit_reporters to work properly for project users.
 * Modified accounts so that protected accounts are not accessible by the user.
 * Modified report page formating.
 * Modified file size reports to show up as bytes.
 * Modified email string padding and line separation characters.
 * Modified account page to show default and current project access levels.
 * Modified news posting to properly limit project lists for non Administrators.
 * Modified reset password functionality to use g_send_reset_password to determine whether a password is set to blank or emailed to the user.
 * Modified color legend is now generated form the $g_status_enum_string variable.
 * Modified print_enum_string_option_list() to work better.
 * Modified bug_update_advanced to allow for more fields to be updated.
 * Modified email subject links to match standard Mantis email format.
 * Modified view bug pages to show bug status via color.
 * Modified more pages to show bug status via color.
 * Modified setcookie() to use paths.
 * Modified fopen() to open with rb instead of r.
 * Modified language files to use long php tags.
 * Modified tr bgcolor elements and moved them into td bgcolor blocks to help MacOS IE color table cells properly.
 * Modified view_all_bug_page to use view_all_set as a pure script to set cookies.
 * Modified g_hide_user_email to be g_show_user_email and have different usage modes.
 * Modified phpmailer AddAddress in email sending to allow for multiple to recipients.
 * Modified project user adding to use a multi-select list box.
 * Modified get_enum_string to use the g_ enum string value instead of the s_ enum string value.
 * Modified br tags to be new xml style tags.
 * Modified time stats in summary to use CLOSED instead of resolved.
 * Modified setcookie() to use g_cookie_path when unsetting.
 * Modified set_project.php to avoid double refresh when using IIS.
 * Modified project user module behavior.
 * Modified delete file attachments to chmod( 0775 ) so write permissions are granted.
 * Modified get_view_redirect_url() call on bug_assign.php to handle redirects better.
 * Modified search to look in bugnotes.
 * Modified is_duplicate_category().  Reversed the arguments.
 * Modified to use core_project_API.php.
 * Modified to use core_version_API.php.
 * Modified print_all_bug_page.php to seach bugnotes.
 * Modified print_reporter and assign_to option_lists() to display lists properly.
 * Added Hungarian translation.
 * Added Japanese translation.
 * Added Czech translation.
 * Added g_bug_link_tag to let users customize how to create bug links.
 * Added a "jump to bugnotes" quicklink at the top of the view bug pages.
 * Added a global option to control what access levels can delete bugs.
 * Added g_bug_move_access_level to control what access level can move bugs to other projects.
 * Added extra link after a bug report to go directly to the new bug.
 * Added g_close_bug_threshold for closing a bug.
 * Added print report link to view all bug page.
 * Added g_allowed_files and g_disallowed_files to control what files types may be uploaded.
 * Added user to project multi-select listbox in manage section.
 * Added list of projects  a user is assigned to to the account page.
 * Added print bug view.
 * Added jump to bug form.
 * Added core_proj_user_API.php.
 * Added make_lf_crlf() to remove bare line feeds.
 * Added g_strip_bare_lf to toggle use of make_lf_crlf().
 * Added priority reporting on the report form for developers.
 * Added project category copy.
 * Added CRYPT_FULL_SALT authentication.
 * Added page timer.
 * Added mt_srand() call in core_API.php.
 * Added g_register_globals global for installations where register_globals is Off.
 * Removed access_min and access threshold concepts from the user and project management.
 * Removed extra "echo" in news archive page.
 * Removed proj_user_delete_page.php.
 * Removed dependency on s_ enum strings.  Use g_ enum strings instead.
 * Updated Copyright to 2002.
 * Added $g_use_javascript to default/config_inc1.php (SC)

2002.03.15  -  0.17.1

 * Fixed missing closing span tag in view_bug_*page.php.
 * Fixed advanced summaries (jpgraph) for general statistics for all projects.
 * Fixed small problem in all localization files (for $s_reset_request_msg).
 * Fixed summary stats for developers when they are assigned with "developer" rights at a project and do not have default profile >="developer".
 * Fixed reporter poplist filter in buglist when users are assigned >="reporter" at a project and do not have default profile >="reporter".
 * Fixed summary page for "All projects" option
 * Fixed printable buglist for "All projects" option
 * Fixed document links (ChangeLog, README, etc.)
 * Fixed problem where portuguese_brazil localization did not appear correctly.
 * Fixed several minor CSS class consistency issues.
 * Fixed file download links to use rawurlencode().
 * Fixed admin_check.php to check for Windows style \.
 * Fixed file dates to display correctly.
 * Fixed bug update button to go to proper simple or advanced page.
 * Fixed a problem where users could not report bugs if uploading was disabled.
 * Fixed a minor problem in the print_reporters_option_list().
 * Fixed more CSS issues.
 * Fixed file uploads to not allow duplicate files when using DISK.
 * Fixed file upload switch with break statements.
 * Fixed print_assign_to_option_list() to accurately reflect settings.
 * Fixed print_reporter_option_list() to accurately reflect settings.
 * Fixed the access level checks to be more accurate.
 * Fixed summary by category to work when categories have single quotes.
 * Removed site_settings link in print_manage_doc_menu().
 * Removed action confirmations in Account pages.
 * Removed action confirmations in Bug/Bugnote pages.
 * Removed action confirmations in Login/Logout pages.
 * Removed some action confirmations in Manage pages.
 * Removed some action confirmations in News pages.
 * Removed some action confirmations in Project Doc pages.
 * Removed action confirmation in set_project page.
 * Removed $g_quick_proceed.  It is no longer used.
 * Renamed doc/CONFIGURATION to doc/CUSTOMIZATION.
 * Modified edit user links to use the username instead of the [edit] link.
 * Modified edit project links to use the project name instead of the [edit] link.
 * Modified default/config_inc1.php to have more more css global variables.
 * Modified wordwrap to use built-in php function if available.
 * Modified bug_assign and bug_close to use g_quick_proceed.
 * Modified bug_resolve to use only one form.
 * Modified bug_close to allow a bugnote to be added when closing.
 * Modified bug_reopen to allow a bugnote to be added when reopening.
 * Added project name as supplementary info next to bug id in buglist for "All projects" option
 * Added Basic Authentication patch.
 * Added CSV Export patch.
 * Added Anonymous Login patch.
 * Added CVS linking patch.
 * Added g_hide_closed_default for filter defaults.
 * Added g_show_bug_project_links to toggle project links in All Project mode.
 * Added mime_encode() to process the email subject text.
 * Added blank category check when adding project category.
 * Added blank version check when adding project version.

2002.01.23  -  0.17.0

 * Fixed potential problems with proxies and HTTP_REFERER not being properly sent.
 * Fixed bugnote editing to be unavailable when bug is resolved or closed.
 * Fixed viewing bugs to automatically switch projects if you view a bug from another project (often done through a link).
 * Fixed file uploads to report an error when a blank file is uploaded.
 * Fixed database and file to no longer use TIMESTAMPS.
 * Fixed password reset to blank to work for other encryption types.
 * Fixed admin_upgrade.php to honor the $g_php global.
 * Fixed access checks to see if viewer has permission to view the bug.
 * Fixed project list drop down to work even if project user list is empty.
 * Fixed advaced summary compatibility with the latest JPGraph release (1.4)
 * Modified many files for extensive use of CSS.
 * Modified BLOB field to LONGBLOB.
 * Modified bug action buttons to be more consistent.
 * Modified version string to be longer.
 * Modified html functions to consolidate code.
 * Modified confirm messages to consolidate localization strings.
 * Modified comments to use one # instead of ### (save space)
 * Modified alternate_colors() to have default parameters.
 * Modified all files to use < ? p h p instead of < ?
 * Modified error messages to use $MANTIS_ERROR array.
 * Modified code to update last_updated/last_modified fields for bugs, bugnotes, and news.
 * Modified core_API.php and config_inc.php to use a default/ directory in
  addition to a config_inc.php placed in the root directory.
 * Added view by page feature.
 * Added edit new link in news update page.
 * Added file upload into database.
 * Added a link to Mantis at the bottom of the pages.
 * Added support for date_order field for version.
 * Added delete file capability.
 * Added view all projects capability.
 * Added support to move bugs from one project to another.
 * Added email check to admin_check.php3
 * Added a check to make sure the cookie_string really is unique.
 * Added a check for a duplciate user in the manage create user page.
 * Added Romanian translation.
 * Added g_allow_account_delete global to prevent self account deletion.
 * Added file upload check to see if directory exists.
 * Removed site_settings pages.
 * Removed unused cookie variables.
 * Removed sql_to_unix_time() function.  Unecessary with removal of TIMESTAMPS.
 * Removed menu_inc.php file and related variable.  Moved this into print_menu().
 * Removed print_mantis_version().  Moved it into print_foooter().
 * Removed some unused code.
 * Removed get_project_name() function.  Replaced with a more general get_project_field().
 * Renamed g_store_file_to to g_file_upload_method.
 * Renamed files to .php
 * Removed admin_cookiecheck.php3
 * Moved documents into doc/ subdirectory.
 * Moved language files into lang/ subdirectory.

2001.12.01  -  0.16.1

 * Fixed SQL error when reporting bug in a private project.
 * Fixed problem where upgrade scripts were not executed for 0.16.0 upgrade.
 * Fixed problem with $g_limit_reporters limiting all users instead of just reporters and below
 * Modified admin_check.php3 to be more informative and useful.
 * Modified upgrade script to preserve timestamp fields.
 * Modified db_generate to enable projects by default.
 * Modified account_page.php3 to remove EOF usage.
 * Updated upgrade script to be more informative.
 * Updated French localization.
 * Added $g_allow_close_immediately to toggle "close immediately" option when resolving a bug.

2001.11.27  -  0.16.0

 * Fixed minor HTML errors in core_html_API.php.
 * Fixed the view, report, and update pages to honor the forces advanced/simple modes.
 * Fixed problem with extra br tags being inserted in project descriptions
 * Fixed table names in the proj_doc_* pages to use variables instead of hardcoded names.
 * Fixed table names in bug_file_add.php3, report_add.php3, view_bug_advanced_page.php3, view_bug_page.php3 to use variables instead of hardcoded names.
 * Fixed a problem with bug updates making the status hard to deal with.
 * Fixed the emailing method to honor the private access threshold.
 * Fixed problem where reporters could assign bugs in advanced report page.
 * Fixed problem where not all proj_doc* pages had the top of page include.
 * Modified the mantis_bug_table.build field to be a VARCHAR(32).
 * Modified the mantis_bug_table.votes field to be an INT(4).
 * Modified the mantis_bug_table.os_build field to a VARCHAR(32).
 * Modified the mantis_user_profile_table.os_build field to a VARCHAR(32).
 * Modified the mantis_user_pref_table.language field to a VARCHAR(32).
 * Modified config_inc.php to properly support all localized langauges.
 * Updated Korean localization.
 * Updated Polish localization.
 * Updated Spanish localization.
 * Updated TROUBLESHOOTING file.
 * Added file_type field to mantis_bug_file_table and mantis_project_file_table.
 * Added LDAP login support.
 * Added ability to limit reporters to see only their bugs.  Security will need to be tightened later.
 * Added a legend for the status colors.
 * Added a empty string check before the AddBCC function when buidling the bcc list
 * Added a check to automatically add the trailing slash to the file path.

2001.11.04  -  0.15.12

 * Added Swedish localization
 * Added print bugs feature
 * Fixed error where MD5 wasn't actually being used.
 * Fixed problem with the same password being generated over and over.
 * Fixed problem with the same cookie being generated over and over.

2001.10.28  -  0.15.11

 * Modified advanced report's "assign to" drop down to sort alphabetically
 * Modified bug_update script to send emails and behave better
 * Modified file upload size down to 60 to help out page layout in Netscape
 * Modified view_all_bug_page refresh to include f_offset
 * Fixed the post-report forms to redirect properly even if a proxy clears the HTTP_REFERER
 * Added g_use_iis global to workaround an IIS bug with header/Location calls

2001.10.28  -  0.15.10

 * Fixed problem with not being able to uncheck "hide closed" bugs filter checkbox
 * Fixed error with warnings on sending email
 * Fixed problem with being kicked out when editing bugnote

2001.10.27  -  0.15.9

 * Fixed problem with warning on view filters.

2001.10.26  -  0.15.8

 * Fixed problem with $g_manage_cookie not being unset on logout
 * Fixed error in db_upgrade.sql ( nul; should be null; )
 * Fixed serveral localization errors
 * Fixed email to only send to devlopers and higher for a given project
 * Fixed potential security hole with uploaded file permissions
 * Added ALT fields to IMG tags
 * Added edit bugnote capability
 * Added Polish localization
 * Added Russian localization
 * Added umask call to prevent uploaded files from being executed remotely.
 * Added Plain Text authentication
 * Added MD5 authentication
 * Added option to view priority as text
 * Updated Italian localization
 * Updated Korean localization
 * Updated Spanish localization
 * Modified User section so users with automatic access are listed
 * Modified view all filters to consolidate functionality
 * Modified view all filters to remember sort field and order
 * Modified authentication system to no longer require crypt()
 * Modified email formatting to work better with other languages
 * Modified set project to clear view filters when changing projects
 * Modified the report_bug pages to properly honor $g_show_report
 * Removed email_bug_info_to_address()
 * Removed print_handler_option_list()
 * Removed view_all_assigned/unassigned/report_bug_page and associated variables.

2001.08.28  -  0.15.7

 * Fixed problem with account prefs not being updated.

2001.08.27  -  0.15.6

 * Fixed potential security hole with file uploads.  Users can potentially
  copy files on server to be available via the browser.  This requires
  PHP 3.0.17 and higher.  Please consider disabling file uploads to disk
  if you cannot upgrade versions.

2001.08.26  -  0.15.5

 * Fixed sort problems on view_all_bugs_page.php3
 * Fixed hide inactive problem in manage_page.php3
 * Fixed mysterious problem with global variables being set to ""
 * Fixed redirect problem when bug report not correctly filled out.
 * Added commented out examples for alternate links in css_inc.php
 * Added closing option tags.
 * Email prefs do not display when $g_enable_email_notification is 0.
 * Added Danish localization.
 * Fixed where updaters could assign to themselves.
 * Fixed where updaters could delete bugs.
 * Fixed where search result numbers correctly displayed.
 * Raised access required to ADMINISTRATOR for many manage_* pages.
 * Fixed error where default_profiles were not being picked up properly.
 * Fixed email subjects to unfilter url links properly.
 * Fixed simple search to correctly compare between bug_table and bug_text_table.
 * Added subject to emails when clicked on in the view_bug page.
 * Fixed "Assign To" drop down lists to reflect project user mappings.

2001.08.19  -  0.15.4

 * Added pre-selecting project. Hint: login_page.php3?f_project_id=0000001
 * Fixed Warning: Missing argument 5 for print_manage_user_sort_link() in core_print_API.php
 * Fixed sorting in buglist is now preserved when going to next or prev page.
 * Fixed sorting in buglist. Bugs with high priority is now always first.
 * Replaced header( "Location: " ) calls with print_header_redirect().
 * Fixed error in simple bug search.
 * Added phpMailer support.
 * Fixed email error regarding devleoper notification on bug submissions.
 * Updated configuration document.

2001.07.29  -  0.15.3

 * Added wordwrap() to text formatting in email messages.  Affects description and bugnotes.
 * Added new function process_plain_password().  Not used yet.
 * Added N/A to reproducibility
 * Added PHP version check to admin_check.php3
 * Added simple text search field to all view_all* pages.  This can also be used to lookup a bug by id
 * Added user count values to the manage page
 * Added $g_hide_user_email to toggle automatic mailto: linking of usernames.
 * Added prelimnary support for jpgraphs support.
 * Fixed bug in displaying date_submitted in emails
 * Fixed "Hide Inactive" checkbox in manage_page.php3
 * Fixed access check error where Viewers could add bugnotes
 * Ran a perl one-liner to try to remove all extra ^Ms from files
 * Renamed $f_show_changed to $f_highlight_changed
 * Removed get_bug_link_email - unused
 * Removed extra $v_summary = string_display() line in view_all_inc.php
 * Cleaned up email validation code

2001.07.13  -  0.15.2

 * Fixed explode() error in view_all_unassign_bug.php3
 * Fixed variable error in report_bug_page.php3.  Affected report stay checkbox.
 * Fixed bug_delete.php3 error.  Removes uploaded file entries properly.
 * Fixed bug where news could not be edited to be Sitewide.
 * Fixed private projects being viewable by non-privileged users.
 * Modified set_project.php3 to redirect back to the same page if a view_all* page or the summary page.
 * Added wrap="virtual" tags to < textarea> for old browser users.

2001.07.05  -  0.15.1

 * Added configuration.html
 * Fixed error in print_footer()
 * Fixed localization error in proj_doc_delete_page.php3
 * Fixed localization error in proj_users_menu_page.php3
 * Fixed localization error in view_all_inc.php
 * Fixed localization error in manage_page.php3
 * Fixed localization error in summary_page.php3
 * Fixed localization error in menu_inc.php3

2001.07.02  -  0.15.0

 * Renamed span.bugnote_delete to span.bugnotedelete for css conformance
 * Added "" around all width and bgcolor tags for standards compliance
 * Split core_API.php into multiple files
 * Renamed many files to shorten filename length (for MacOS)
 * Added new functions for news_API
 * Switched from TIMESTAMP to DATETIME in the date_created/date_posted fields,
  made appropriate changes in code
 * Switched from ENUM to INT(2).  Now use hash to map from id to text
 * Reworked authentication check at top of pages
 * Fixed several places where manager was omitted when it should have been
  selected
 * Fixed error in documentation.html tags
 * Changed duplicate bug option list to text
 * Added SQL queires to make sure date() runtime errors disappear
 * Added str_pad() function to pad IDs with "0"
 * Removed show_source capability for anyone but admins
 * Removed strtotime() from all bug view_all* pages
 * Added better messages for when adding and updating duplicate categories
  and versions
 * Added count details to view_all* pages
 * Moved bugnote_add page into standard bugnote page
 * Added icon support
 * Added core_icon_API.php
 * Fixed sort errors in manage_project page
 * Improved sort category links
 * Added hypertest links for bugs formatted by #IDNUM (eg. #234)
 * Added new status CLOSED
 * Added more bug counts in various places
 * Added phpinfo() page in manage documantation section
 * Added news list/archive view mode
 * Added ability to edit text of bug details
 * Added checks to prevent accessing of non-existant bugs
 * Fixed error where "does not exist" was incorrectly reported as the handler
 * Modified repot_bug to allow a user to choose to add more bugs or return
  to view bug page
 * Added View Unassigned mode
 * Added urlencode/decode for project category and versions
 * Added prune functionality for old accounts that have never been logged into
 * Added file upload support
 * Added capability to let users choose site language
 * Added more information to bug_resolve2 page
 * Added more user preferences
 * Added more existance checks for bugs and users
 * Modified view by reporter to not show viewers
 * Fixed security problem where anyone could delete/edit any non-protected account
 * Fixed security problem where anyone could delete/edit any profile
 * Fixed misspelling in email_reopen
 * Added view site settings page for admin
 * Added check for duplicate project error message when adding new projects
 * Many Many more... (sorry, I can't remember all of them)

2001.03.06  -  0.14.8

 * Fixed password matching problem with manage create new user
 * Fixed email bug for assigning bug
 * Fixed warning in view all pages
 * Fixed duplicate top_include_pages on view_bug_page
 * Improved g_show_project_in_title
 * Updated portuguese trnaslation to handle email text better

2001.03.05  -  0.14.7

 * Added Dutch translation
 * Added Norwegian translation
 * Added g_show_project_in_title to allow project name title display
 * Added login check on login_page.php3
 * Added better email localization
 * Added email to developers and up when new bug reported
 * Added access_level check for bug delete
 * Added simple check for non-matching password in manage ccount create
 * Improved email message
 * Modified view bug listings to sort by last_updated by default
 * Numerous small fixes to remove warnings
 * Fixed bug where bug text were not being deleted
 * Fixed bug where new account prefs were not being created
 * Fixed css : font bug (Netscape)
 * Fixed product version not being logged in bug report
 * Fixed SQL error link not having "mailto:"

2001.02.23  -  0.14.6

 * Added Italian translation
 * Added French translation
 * Added project name in email
 * Added g_reopen_bug_threshold to prevent unprivileged users from reopening
  bugs
 * Fixed error with version editing
 * Fixed error with direct assign to user not working on report
 * Fixed error with string $s_add_project_button in Portuguese
 * Modified Portuguese s_view_status
 * Changed = in css_inc.php to : (specifically for font sizes)

2001.02.19  -  0.14.5

 * Added updated German translation
 * Modified news add and news update to behave better
 * Fixed string s_add_profile_title
 * Fixed error on category update
 * Fixed error in password reset
 * Renamed g_view_bug_all_page, g_view_user_reported_bug_page,
  g_view_user_assigned_bug_page
 * Removed duplicate global page references
 * Updated all translations with some missing localization strings

2001.02.17  -  0.14.4

 * Fixed erroneous error message when signing up for new account
 * Fixed error with warning in project_menu_page
 * Fixed error in email bugnotes where slashes weren't showing up
 * Fixed some possible display errors in Netscape
 * Fixed extra slahes in email subject
 * Added protection around cookie_val variables to prevent unnecessary warnings
 * Added direct link to bug in email
 * Added email to assignee upon assignment
 * Added support for report form to remember input if error occurs
 * Added crude test file to check database connection and config settings
  (check.php3)
 * Added some integration with the documentation and the report form
 * Added include for top and bottom of page.  This lets users add
  customizations
 * Added Spanish and Portuguese localization
 * Renamed g_login_url to g_mantis_url
 * Renamed string files to have .txt extension
 * Obsoleted s_hit_back_msg

2001.02.14  -  0.14.3

 * Fixed error in upgrade.php3 (date_submitted in mantis_user_table query
  should be date_created)

2001.02.14  -  0.14.2

 * Fixed default category in update mode to display correctly
 * Fixed parse error in manage_user_reset.php3
 * Fixed view pages to properly show selected category
 * Altered is_valid_email to check for DNSs w/o MX records
 * Added option to disable email validation (g_validate_email)
 * Added project name and bugid in email subject

2001.02.12  -  0.14.1

 * Fixed error where duplicate categories were added
 * Fixed error in advanced_bug_view where bug delete had no confirmation
 * Fixed error in view pages for sort by category

2001.02.10  -  0.14.0

 * Fixed error in print_html_bottom
 * Fixed error in db_upgrade.sql, changed "need info" to "feedback"
 * Fixed bug_update where resolution was being set to blank
 * Added TROUBLESHOOTING file
 * Added multiple project support
 * Added summary by assignee
 * Added one click "Assign to Me"
 * Added corresponding bug_assign.php3 file, global, and string variables
 * Added $g_content_expire for META tag
 * Added direct "assign to" in advanced bug report
 * Added view by assignee
 * Added view by reporter
 * Added method for users to create their own accounts
 * Added better error handling for db_connect and db_result
 * Added remember view settings
 * Added bold indicator when a bugnote has been added
 * Added maxlength= to all input types
 * Added some bug info at the top of the bugnote add page
 * Added login_count field to user_table
 * Added project_category manage area
 * Added project_version manage area
 * Added manager access_level
 * Left aligned Summary field
 * Reset password now emails a randomly generated password to user
 * Created date format global variables
 * &nbsp; is echoed when the bugnote count is 0 (Netscape problem)
 * Reworked project category and version management
 * Tweaked manage menu
 * Tweaked css_inc.php
 * Tweaked the bug list view for better indication of which view the user
  is viewing
 * Removed cols=7 in the view bug in list form pages (Netscape problem)
 * Removed mysql_error_page and references
 * Determined that suspected mysql bug about date updating was proper behavior
  for timestamps

2000.12.26  -  0.13.1

 * Fixed bug in bug_delete_page.php3 and manage_user_delete_page.php3

2000.12.25  -  0.13.0

 * Fixed bug in vote adding with incorrect variable name.
 * Fixed bug where bugnote text not properly deleted when bug deleted
 * Fixed manage product versions update redirect
 * Fixed another problem with the date created being updated improperly when
  dealing with bugnotes.
 * Fixed show source problem
 * Fixed problem with advanced view showing the wrong dates
 * Uncluttered large portions of code
 * Reordered the config_inc.php file items
 * Made view reported by and assigned to pages use variables.
 * English localization completed in strings_english.php
 * Added a logout redirect page variable for the logout page
 * Added reopen bug dialog
 * Added $g_bug_reopen_page and removed $g_bug_reopen
 * Added bug_reopen_page.php3 and removed bug_reopen.php3
 * Added resolve bug dialog
 * Added $g_bug_resolve_page and bug_resolve_page.php3
 * Added $g_bugnote_order to allow custom bugnote ordering
 * Modified the appearance of the advanced view and update
 * Updated documentation.html
 * Split the account pref modifications into two separate files:
  account_prefs_update.php3 and account_prefs_reset.php3
 * Removed get_current_user_id() and replaced with calls to
  get_current_user_field( "id" )
 * Removed db_mysql_error()
 * Renamed all mysql_ functions to db_ functions (prepping for db_abstraction)
 * Removed $g_required_field_color and replaced it with a span element in
  css_inc.php
 * Removed all FONT tags and replaced them with SPAN and CSS formatting
 * Removed print_footer() call on logout_page.php3

2000.12.20  -  0.12.0

 * Fixed problem with viewing filters not working with Netscape
 * Tweaked the string_edit() function
 * Added $g_show_login_date_info and the ability to show who is logged in and
  the current time
 * Modified bugnotes to be ordered by date_submitted
 * Added protection to prevent anyone from deleting bugnotes
 * Used LAST_INSERT_ID() to ensure that bug and bugnote insertion is correct
 * Reporting a bug now stores a link to the account profile (if chosen)
 * The information from the profile is displayed (if chosen at report time) in
  the advanced bug view
 * Added a hide resolved viewing filter option
 * Summary shows time statistics for resolved bugs
 * Added support to show bugs reported by and assigned to the logged in user.
 * Added view_user_assigned_bug_page.php3 and view_user_reported_bug_page.php3
  and the corresponding global variables
 * Tweaked the bug update and bugnote update and delete functions to redirect
  to the user chosen default viewing level page

2000.12.15  -  0.11.1

 * Added projection and eta to be passed as hidden info by the simple update
  page.
 * Fixed a missing < /TD> tag on the report bug pages.  Messed up old 4.x unix
  Netscape.
 * Modified the priority to print counts of all bugs.
 * Wrapped the global cookie _val variables in if (isset()) blocks.  Seemed to
  cause some troubles on some setups.

2000.12.12  -  0.11.0

 * Profiles can be used for advanced bug submission
 * Added summary by date
 * Added priority on the summary page
 * Added profile management
 * Added a confirmation before an admin can delete an account
 * Added several ; in core_API.php that caused errors on some servers
 * Added view next/prev XYZ bugs on bug viewing page
 * Added a string_display() function to prevent HTML tags from screwing up
  display
 * Added version editing capability
 * Added account preferences
 * Added changed in last X hours option
 * Added show source debug capability - requires PHP4
 * Added 'feedback' status - indicates that it requires more information
 * Added show Mantis version capability
 * Added string_display_with_br() for displaying text with line breaks
 * Added userland documentation (documentation.html)
 * Added $g_usage_doc_page for userland documentation
 * Added Docs to the menu
 * Fixed bug with Bugnote Add button showing up in the wrong places
 * Fixed bug with SQL queries updating both submitted and last updated dates on
  bugs
 * Fixed bug with SQL queries updating both submitted and last access dates on
  users
 * Modified version to be an enum.
 * Modified ordering methods in manage account
 * Modified viewing preferences
 * Made enum displays (category, status, etc) easier to maintain via
  print_lists()
 * Renamed access_level_check_greater() to
  access_level_check_greater_or_equal()
 * Renamed $g_bug_view_all_page $g_bug_view_all_page $g_bug_view_all_page
  to    $g_view_bug_all_page $g_view_bug_page $g_view_bug_advanced_page
 * Renamed corresponding .php3 files
 * Refined view next/prev bugs and news items
 * Split manage user actions into separate files
 * Removed the destructive DROP table in db_generate.sql
 * Removed view_prefs_page.php3 and view_prefs_update.php3 and corresponding
  cookie variables

2000.12.06  -  0.10.2

 * Fixed Reporter Field on update page
 * Fixed variable error preventing Bugnote addition
 * Fixed minor viewing bugs related to \ characters
 * Added documentation section
 * Summary is now useful
 * Fixed a few issues with the Advanced bug view
 * Tidied up most of the code
 * Temporarily 'solved' (mostly) a serious issue with consistency on
  bugnote and bug report additions

2000.12.03  -  0.10.1

 * Fixed some category bugs

2000.12.03  -  0.10.0

 * Moved constant config settings to config_inc.php3
 * Better news formatting
 * Added protected flag for accounts
 * Color values controlled by variables
 * Page variables controlled by variables
 * Fixed error with emails not displaying in link on main page
 * Edit categories from Manage section
 * Viewing filters
 * supports php and php3 extensions (php3/php4)

2000.12.01  -  0.9.1

 * Fixed a link
 * Fixed reporter not showing up properly
 * The "enabled" flag on accounts works

2000.12.01  -  0.9.0

 * User management
 * Account maintenance
 * Access levels
 * News system
 * Basic functionality