From: <jl...@us...> - 2003-02-15 23:37:37
|
Update of /cvsroot/mantisbt/mantisbt/doc In directory sc8-pr-cvs1:/tmp/cvs-serv31052/doc Modified Files: ChangeLog Log Message: - Deprecated CRYPT_FULL_SALT - Modified admin/check.php to instruct the user to convert to CRYPT if (s)he is using CRYPT_FULL_SALT - Modified admin/check.php to suggest to the user to convert to MD5 - Made sure that passwords which were encrypted using the old buggy CRYPT are re-encrypted as soon as possible Index: ChangeLog =================================================================== RCS file: /cvsroot/mantisbt/mantisbt/doc/ChangeLog,v retrieving revision 1.319 retrieving revision 1.320 diff -u -d -r1.319 -r1.320 --- ChangeLog 15 Feb 2003 22:45:15 -0000 1.319 +++ ChangeLog 15 Feb 2003 23:37:33 -0000 1.320 @@ -7,6 +7,7 @@ * Behaviour change: Removed f_ prefix from POST and GET field names * Changed config options (*_color): now use $g_status_colors['<status color>'] array. For example, $g_new_color is replaced with $g_status_colors['new']. * Changed config options (default_advanced_report, default_advanced_view, default_advanced_update): now ON/OFF instead of BOTH/SIMPLE/ADVANCED (they never worked the other way anyway) + * Changed config options (login_method): CRYPT_FULL_SALT is now deprecated and should be replaced with CRYPT or MD5 * Code cleanup: added validation checks for all inputs that are passed on to database queries * Code cleanup: db_prepare_string(), db_prepare_int(), and db_prepare_bool() to be called on data before it goes into the database * Code cleanup: modified input-checked variables to be prefixed by $c_ |