MantisBT - mantisbt - Issues

0012313: Can't open image attachments in browser windows

Thu, 02 Sep 2010 14:54:32 -0400

Actual result: Clicking on attachment link (on page "view.php") rise "save as"-dialog in a browser (IE, Opera, Google Chrome, Firefox).

Expected result: Open image in a browser (in new\same window).

0012013: Improvements for plugin ImportExportXml (and required core changes)

Thu, 02 Sep 2010 11:41:26 -0400

Attached a patch file with some ImportExportXml plugin improvements...
Unfortunately I had private files in theses commits so I had to manually remove files -> if you have problems to apply the patch please let me know (or if you know how I can exlude files when creating patches please let me know as well ;-))

Improvements done:

Added support for custom fields, bugnotes and attachments

Added support for dates (date submitted, last updated) - keep dates as given in import file

Added function to easily retrieve the contents of a file (file_api.php)

0011993: trigger events when bug added etc via soap

Thu, 02 Sep 2010 11:14:08 -0400

Currently no events are triggered, causing hooks by plug-ins to fail

0012317: Mantis para de funcionar ocasionalmente!

Thu, 02 Sep 2010 10:32:33 -0400

Possui o wampserver 2.0 (última versão).0 instalado com apache,mysql e php. Consegui instalar corretamente. Chego até a acessar uma ou duas vezes com o usuário administrator. Após este acesso, passando uns 20 segundos ou 30, o mantis simplesmente não responde mais.
Nenhum usuário além do administrador consegue acessar, apesar de já ter se cadastrado e configurado sua respectiva senha.

Alguém pode me ajudar, preciso URGENTE usar o Mantis na empresa.

0012294: upgrade from 1.1.2 to 1.2.2 adds categories to projects

Thu, 02 Sep 2010 09:53:31 -0400

I am working on an upgrade from v1.1.2 to v.1.2.2.

Before upgrade I have 225 categories in 38 projects. And after copying the database and running the /admin/upgrade_warning.php script I get a new mantis_category_table with 312 categories (also in 38 projects). It seems the upgrade script adds some categories to several projects.

0012312: XSS (cross-site scripting vulnerability) in Mantis 1.2.2

Thu, 02 Sep 2010 09:18:12 -0400

Hello!

My name is Bogdan Calin. I'm a security researcher at Acunetix (http://www.acunetix.com [^]).
You can contact me at this email address: bogdan [at] acunetix.com

While beta testing the latest version of our product (Acunetix WVS v7) we found a number of security vulnerabilities in various web applications.

The following vulnerabilities were found in Mantis (Version 1.2.2).

1. XSS in "/mantisbt_1_2_2/api/soap/mantisconnect.php"
URI was set to 1
The input is reflected inside a text element.
The input is reflected inside a tag element between double quotes.

Sample HTTP request to reproduce the problem:

GET /mantisbt_1_2_2/api/soap/mantisconnect.php/1%3CScRiPt%3Eprompt(923395)%3C/ScRiPt%3E HTTP/1.1
Cookie: PHPSESSID=4a181a89451adb7b5d459ea3252b1f4a; MANTIS_secure_session=0; MANTIS_PROJECT_COOKIE=0
Host: webapps7:80
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)

If you have questions about these issues, please contact me by email.

Thanks in advance,
Bogdan

0012302: Export Reports

Thu, 02 Sep 2010 07:36:33 -0400

Having recently upgraded to version 1.2.2 from 1.1.8, when I attempt to so a CSV export on 'all projects' the application does not return anything and just times out. I can see the query going on on the backend database server and finishes with seconds but my mantis screen just sits there 'wating for .

If I select a specific project and attempt a CSV export it works fine.

This did work in version 1.1.8.

Any ideas or have I missed something ?

Regards.

0012316: XMLImport plug-in patch to allow custom_fields

Thu, 02 Sep 2010 07:31:43 -0400

Hi, I've added a patch to the XmlImportExport plugin to allow import of custom_fields. As my first time and my unknowledge of how to add code, I send the file Issue.php modified.

To add custom_fields to the XML is needed to add a line like this in an element:

147

I didn't need to export them so this doesn't work for export.
Greetings.

0012315: APPLICATION WARNING #2702: Your session has become invalidated.

Thu, 02 Sep 2010 01:44:12 -0400

When i click on "View issues" it through an error message
APPLICATION WARNING 0002702: Your session has become invalidated.

I have tried to login by unchecking Secure Session but still it gives me this error

0012314: Plugin filter rows are broken when more than one row of plugin filters are used.

Wed, 01 Sep 2010 15:49:47 -0400

The column count is not being reset at the end of each row so additional columns
over the filter column count are placed on separate rows.

0006447: The filter table columns shouldn't be used to divide the "Search/Filters" row at the bottom of the table.

Wed, 01 Sep 2010 15:45:04 -0400

If you create filters with long names, then the "Severity", "Resolution" and "Profile" columns get very wide, while the "Reporter", "Modified By", "Assigned To" and "Category" columns get squished. This is because the bottom row in the "Filters" table (with the white background) is divided based on the columns above (using colspan), rather than being its own nested table.

Having that last row be a full-width nested table would allow it to allocate its screen width for best appearance, while the filter entries above could separately allocate their width for their best appearance.

0012187: XML Import does not work

Wed, 01 Sep 2010 14:25:23 -0400

I try to import issues with the Mantis ImportExport Plugin "Import/Export Einträge 1.0".

I get the following error Message in the webserver log:

PHP Fatal error: Class 'Mapper' not found in /var/www/html/mantis/plugins/XmlImportExport/ImportXml/Issue.php on line 131, referer: http://lxpts/mantis/plugin.php?page=XmlImportExport/import [^]

I suppose the the problem is with my php version, thought it was checked o.k. during mantis installation on Redhat Linux.

I am using PHP 5.1.6 (cli) (built: Feb 26 2009 07:01:12)

It seems to me that the problem is in file Issue.php in line 131:

public function update_map( ImportXml_Mapper$mapper ) {
$mapper->add( 'issue', $this->old_id_, $this->new_id_ );
}

I think it should be "ImportXml_Mapper" instead of "Mapper", as in file Mapper.php the class is named "ImportXml_Mapper" (I did not try it out).

I'm not a php programmer, so this is just a gess.

As ist does work on my lokal windows installation, it think it could be a problem with the php version as there is no other difference.

0012282: Due date does not work under Google Chrome

Tue, 31 Aug 2010 21:51:40 -0400

A due date can not be reported under google chrome, because whenever I press the submit button the due date field get into focus. I am not sure why this is happening, it does not indicate any error, it simply does not allow you to use the field. It is not a problem to use that field under IE, or Firefox.

Wondering if anybody has the same issue with chrome.

0012311: Link to download last development version point to sourceforge

Tue, 31 Aug 2010 21:46:45 -0400

instead of pointing to git repo, it points to sourceforge area where stable releases live

0009514: Attachments are not downloaded when connected to Mantis through VPN

Tue, 31 Aug 2010 17:26:42 -0400

When we connect to Mantis through VPN the attachments attched to the bugs are not downloaded.

0011654: Excel export does not encode '&' character as entity

Tue, 31 Aug 2010 17:21:02 -0400

The new XML based Excel export does not encode '&' characters (entered in fields like summary or description) as entity, i.e. '&'. When opening such a file with NeoOffice 3.0.2 it results in a blank table.

0011684: Incorrect error "A necessary field "MyField" was empty. Please recheck your inputs." when submitting new issue

Tue, 31 Aug 2010 12:31:14 -0400

When creating a new issue i get an application error 11: "A necessary field "my custom field" was empty. Please recheck your inputs.".

This error message is not correct because "Required On Report" was not checked for the corresponding custom field.

0011864: We would like to extend our use of Mantis to facilitate change requests. we are using version 1.0.0.rc2

Tue, 31 Aug 2010 08:47:29 -0400

Many change requests start out as issues (bugs) but are then identified as changes (chargeable enhancements), so we want to be able to move such issues seamlessly from the issues project to a separate changes project.

Issues and changes share many attributes. However changes have additional attributes that we want to capture e.g. estimates, cost, etc.

We understand that we can add new fields to a project template for this purpose. However there are some attributes we want to add that are not possible currently.

For example, we want to add section headers or separators to delimit the entry page. These could simply be read-only text lines to act as separators between sections of the page. The sections we want to label are (1) Client Entry (as per existing), (2) Rockall Response (new), (3) Client Approval (new). What is the best way to achieve this?
We would like to add some entry fields that allow more than one line of text. These would be expandable text boxes similar to the Notes box. Is this possible?
Your advice here would be greatly appreciated.

0010435: Implemented a bug step module

Tue, 31 Aug 2010 03:58:23 -0400

We use mantis to store our test cases so that we can link them directly to requirements. I implemented a little table that stores the description, expected result and comment. You have the option of including the bug step table when cloning issues.

0010937: Email issue after sign up

Mon, 30 Aug 2010 16:47:25 -0400

After sign up a message displayed
"You were successfully registered. Please check your email address to find out about steps you must to do to activate your account."

but we didnt get any message.

0010123: Received SYSTEM WARNING: session_start() Error

Mon, 30 Aug 2010 16:34:44 -0400

Today, our instance of Mantis stopped working with the following error:

"SYSTEM WARNING: session_start() [function.session-start]: open(/var/lib/php/session/sess_cd3heoi5hjfn0nr0dg10ggcnn3, O_RDWR) failed: Read-only file system"

Not sure what could cause this, first time we have seen it. The system has plenty of disk space, etc.

The systems was rebooted, and the issue was resolved.

0009777: Application Error #203 "A number was expected for view_state." when trying to report Issue

Mon, 30 Aug 2010 16:22:44 -0400

When I try to report an issue, I select my project, and it throws this error.

APPLICATION ERROR #203
A number was expected for view_state.

Please use the "Back" button in your web browser to return to the previous page. There you can correct whatever problems were identified in this error or select another action. You can also click an option from the menu bar to go directly to a new section.

MySQL 5.4.01
PHP 5.2.6

I can't do anything else. Thanks for any help.

0009330: disable select project screen

Mon, 30 Aug 2010 16:14:14 -0400

I have register a account in this bugtrack, when a click to 'report issue' it prompt me to select a project. I think when there is only one project, this screen will be disable and auto select that project as the default project.

0012310: Attachements are missing when a issue is moved from a domain to anotherone.

Mon, 30 Aug 2010 06:32:37 -0400

Hi,

We are faced to the following problem :
When a user create an issue in a bad domain, we have to move the issue. But if a file was attached to it, the attachament will be missing after the issue will been moved.

FYI : We organized the upload directory by creating a directory for each domain. So the filesystem can be represented like :
/.../domain1
/.../domain2
...
/.../domainN

0009128: There is a "Application error 19" when I wish to remove the attachment file.

Mon, 30 Aug 2010 06:24:01 -0400

There is a "Application error 19" when I wish to remove the attachment file.
I have solved this problem having removed 32 line in file bug_file_delete.php.
##helper_ensure_post();