BugTrac er.NET Release Notes For instructions on how to upgrade, see: http://ifdefined.com/readme.

html#upgrading If you are using the subversion integration feature and upgrading a pre-3.3.0 version, it's important that you read the notes for version 3.3.0 below. ----------------------------------------------------------------------Version 3.4.9 2011/01/25 (svn revision 611) ----------------------------------------------------------------------First of all, if you have installed BugTrac er.NET recently, can you ta e a loo at your Web.config and ma e sure the email address in "ErrorEmailTo" isn't ctrager@yahoo.com? I accidently left that in the Web.config I ship and now I'm getting many error emails per day. Than s! * Fixed bug with pop3 thread, "pop3:exception in fetch_messages: Specified cast is not valid". This is in the new wor er thread approach, not btnet_service.exe. * Fixed bug with custom dropdown fields of type "users" when displayed with a view only permission. The integer user_id was being displayed instead of the name. * Fixed bug where edit_styles.aspx was loo ing for btnet_custom.css in the root folder instead of the "custom" folder. * Fixed incompatibility with ASP.NET Medium Trust when sending emails. See the "SmtpForceSsl" in Web.config. * Fixed bug when adding a subscriber to notifications with view_subscribers.aspx. The user you added was supposed to automatically get a notification right then, but the bug was preventing that from happening. * print_bug.cs now handles exceptions when trying to read in css files. I'm having a problem with this intermittently at GoDaddy - I don't now why... * edit_custom_html.aspx now allows you to edit btnet_custom.css. ----------------------------------------------------------------------Version 3.4.8 2010/12/24 (svn revision 604) ----------------------------------------------------------------------* Fixed bug introduced in 3.4.7, where send_email.aspx was forcing you to supply a CC address. * Fixed bug where the "forced project" feature wasn't wor ing with bugs entered via insert_bug.aspx (email and screen capture). * Made cosmetic improvements in send_email.aspx, and I made it easier to use display names in "to" and CC addresses.

* Made the yellow highlighter a little faster in the screen capture utility. ----------------------------------------------------------------------Version 3.4.7 2010/12/19 (svn revision 600) ----------------------------------------------------------------------* This release contains an experimental feature, the ability to fetch email from a pop3 server using a thread spawned from the ASP.NET app instead of using a standalone service. You configure the settings using Web.config, using the eys that start with "Pop3", instead of using btnet_service.exe.config.

I tried this at my demo site on a shared host at GoDaddy.com, but it doesn't wor : It conflicts with Microsoft's default "Medium Trust" setting and even GoDaddy's relaxed version of it. Read more about this feature in Web.config, witht he settings whose names start with "Pop3". As part of creating this feature I heavily revised insert_bug.aspx, so that the two ways of handling incoming emails could share code. Hopefully I didn't brea anything, but I wanted fol s to now that there is a bit more ris with this release. Other changes: * If you have created a "btnet_css_for_email.css" file, the logic now loo s for the file in the "custom" folder. This is to wor around a Medium Trust issue at GoDaddy. * "LdapUserDistinguishedName" now supports multiple values, seperated by "|" chars. * Better handling of email addresses in general, I hope, but specifically, email addresses with umlauts. Than s to Jrgen Sjholm (umlauts!) for help with this. * New Web.config setting "AutoReplyUseHtmlEmailFormat". The default value should wor fine, no need to chaneg it. * The screen capture utility's yellow mar er's color/opacity is better, the way it should be. This is a small detail that probably only matters to me, as a programmer, but it was really bothering me; I spent about 4 hours on it. ----------------------------------------------------------------------Version 3.4.6 2010/12/12 (svn revision 592) ----------------------------------------------------------------------* Fixed SQL error when using search.aspx with custom project fields. * Created some pages to ma e it easier to admin BugTrac er.NET without having FTP or direct access to the server. You get to these new page from the admin page. "Edit Custom HTML" to ma e it easy to customize the html header,

If you try this feature, please send me feedbac . Even if you feedbac is just, "it wor s". Than s.

footer, logo, etc. "Edit Web.config" for editing Web.config. It will chec your XML syntax before letting you save, but you can still shoot yourself in the foot. "Bac up Database" to ma e it easier to create and download bac ups of the db. This won't wor at GoDaddy, though, because of their permissions. "Manage Logs" to view/delete logs. * Upgraded CKEditor from 3.0.1 to 3.4.2. * Revised how the firefox extension saves configuration info, especially the password. ----------------------------------------------------------------------Version 3.4.5 2010/11/29 (svn revision 578) ----------------------------------------------------------------------** ** ** ** ** ** ** ** ** ** ** ** ** ** IMPORTANT IMPORTANT IMPORTANT IMPORTANT This This This This release release release release fixes fixes fixes fixes serious serious serious serious security security security security vulnerabilies. vulnerabilies. vulnerabilies. vulnerabilies.

If your bugs.aspx page is accessible via the internet to untrusted visitors, you should upgrade to this release now. I'm truly, truly, sorry about this. My than s to the fol s at Core Security Technologies, http://coresecurity.com, for bringing these to my attention today. Corey Trager

Also in this release: * I added the code for a new Firefox add-on that does screen captures. If you are on Windows, use the des top app, but if you have users who are reporting bugs in web apps and they are not on Windows, the Firefox add-on might be useful. You can download the add-on here: http://ifdefined.com/bugtrac ernet.html#firefox * Fixed a bug whereby in some configurations, email notifications were not being sent. If your send_email function wor s, but your email notifications don't wor , this might fix your problem. It did fix the problem for at least one person. * Prevented errors and error emails from being trigged by "Microsoft Office Existence Discovery" when using view_attachment.aspx. * Fixed a bug in the mass edit feature, changing orgs. ----------------------------------------------------------------------Version 3.4.4 2010/08/21 (svn revision 566) ----------------------------------------------------------------------There's only one change, a fix to a SQL injection vulnerability in

search.aspx. Than s to Mar van Tilburg for letting me now. This vulnerability is several years old. If you don't want to upgrade, you can instead modify your copy of search.aspx, adding the logic to replace single quotes with double quotes in the same places where I did: http://btnet.svn.sourceforge.net/viewvc/btnet/www/search.aspx?r1=559&r2=565 ----------------------------------------------------------------------Version 3.4.3 2010/08/18 (svn revision 563) ----------------------------------------------------------------------*** IMPORTANT!!! **** You will have to change your Web.config SMTP settings for this release. I'm switched from using the old deprecated System.Web.Mail to the newer System.Net.Mail. Your SMTP settings now come from the standard system.net <mailSettings> elements in Web.config. The Web.config that I've included should be enough to show you how to reconfigure your email settings. There are settings, commented out, that wor for me for GMail's SMTP service and GoDaddy's SMTP service if you are hosting there. Other changes: * Fixed but where external users weren't seeing the full list of users that they were supposed to see. Than s to Jason Taylor for the fix. * You can now change the "reported by" user with the mass edit feature in the search.aspx page. * The screen capture utility now uses the descriptions you type in for the screenshot descriptions, not just the original bug description. Than s to Javier Feria for this improvement. * The screen capture utility now wor s with Windows authentication, although I haven't personally tested it. I can say that the change doesn't brea anything. Than s to Lars Wuc el for thsi enhancement. ----------------------------------------------------------------------Version 3.4.2 2010/08/15 (svn revision 555) ----------------------------------------------------------------------* Values in project custom dropdowns where being lost if bug was updated by somebody with "Reporter" permission. Than s to Ian Girouard and Jean Franois Cot for the fix. * Tags search was wrongly being hidden if category field was hidden. Than s to Mi e Abramovitch for the fix. * Fixed bug 3007867 "User friendly time in news page is sometimes wrong" Than s to Martin Richter for the fix. * "Save search as query" button wasn't wor ing in Chrome * The "Add new" now is hidden now when you are actually in the process of adding a bug. So that you don't hit it and lose your wor . How many times have I myself hit that lin thin ing I was saving the bug I had just entered? Than s to Dan Rye for this obvious-but-I-guess-not-so-obvious fix.

* Printing of bug and notification emails now show Tas s. * Adding/editing of tas s now triggers email notification and is recorded in bug's history. * Lucene highlighting now controlled by css class "highlighted". ----------------------------------------------------------------------Version 3.4.1 2010/04/11 (svn revision 543) ----------------------------------------------------------------------* For the tas s/time trac ing feature, added a way of viewing all the tas s at once, not just the tas s for one bug. Also added a way of exporting all the tas s into Excel. These features are wea , but they are better than nothing. * Fixed merge bugs feature. It wasn't merging tas s, flags, and svn/hg/git data. * Added chec box to send_email.aspx page that controls whether the "comments visible to internal users only" are included in the email body. * Corrected Web.config comments for "NotificationSubjectFormat". Added $ASSIGNED_TO$ as one of the variables. ----------------------------------------------------------------------Version 3.4.0 2010/03/07 (svn revision 536) ----------------------------------------------------------------------* In screen capture app, "Go to website" now goes to the bug you just created. * In screen capture app, fixed where the crosshairs weren't always topmost.

* Fixed handling of tags with apostrophes (single quotes).

----------------------------------------------------------------------Version 3.3.9 2010/02/13 (svn revision 529) ----------------------------------------------------------------------* I messed up btnet_screen_capture.exe in 3.3.8. The only change here is the screen capture program. If you downloaded 3.3.8 you can get the latest screen capture app at: http://btnet.svn.sourceforge.net/viewvc/btnet/www/btnet_screen_capture.exe ----------------------------------------------------------------------Version 3.3.8 2010/02/13 (svn revision 526) ----------------------------------------------------------------------* 3.3.7 was accidently zipped with the wrong default Web.config. Too much stuff was enabled by default, and there were email settings in it

* Fixed bug 2957930 where unusual characters didn't wor custom dropdowns. Than s to cjundt for the fix.

* In subversion hoo

script, fixed handling of URLs with spaces.

right in

that caused some people some trouble.

* Btnet_screen_captured.exe wasn't remembering to save the password. Several enchancements to btnet_screen_capture.exe: * Ctrl-C copies contents to the Clipboard. * You can specify the projectid. * Draw straight lines with arrowheads. * Highlight with "yellow highlighter" in addition to free form red lines. ----------------------------------------------------------------------Version 3.3.7 2010/02/02 (svn revision 516) ----------------------------------------------------------------------The only that changed in this release is the screen capture utility. Completely rewrote the BugTrac er.NET screen capture utility. It's now version "2.0". Here's the story: Several years ago I wrote a screen capture utility and it was O . Then Alexej Hirsch developed a really nice app, "Bug Shooting", that wor s great with BugTrac er.NET and several other bug trac ers. I abondoned my own app and started using and recommending his. But just this wee , Alexej switched Bug Shooting from being a free app to being shareware with a 30-day trial. I wanted my BugTrac er.NET users to have something free, but my old app from several years ago wasn't that nice, and, it was built using C++ and MFC rather than .NET. It's just harder to wor with those tools than it is with .NET, and I wasn't eager to return to that codebase to improve my old app. So, I started over, using C#/.NET and Visual C# 2008 Express Edition, which is free. The source is in the "screen_capture" folder and the exe is in the www folder. Bugs.aspx incldues a lin to the exe. If you already have Bug Shooting, there's no reason to switch to my app - Bug Shooting is still nicer, but if you have my old app, btnetsc_2.1.1.exe, you should switch to this new one. ----------------------------------------------------------------------Version 3.3.6 2010/01/30 (svn revision 494) ----------------------------------------------------------------------* Reverted bac to an older Lucene.Net.dll (the full text search). The somewhat newer one was not compatible with GoDaddy's medium trust setting. I'm using Lucene.NET 2.4.0, svn revision 829685. I built the dll myself using the free VS C# Express 2008. I also tried to fetch and build a Lucene.Net.dll from the latest Lucene.Net source, but its interface has changed a lot. * Made the ad-hoc query page, "query.aspx", a bit easier by adding a dropdown listing the db tables. * Fixed missing line brea s in notification emails. -----------------------------------------------------------------------

* Fixed bug 2945674 - Customized "SvnBugidRegexPattern1" doesn't wor properly. Than s to "superdaigo" for the fix.

Version 3.3.5 2010/01/03 (svn revision 487) ----------------------------------------------------------------------* Added ability to change a custom columns default value. * Added "install_btnet.cmd", a quic and dirty install script. All I can say is that it wor s for me, on my Windows 7 Pro machine. * Fixed bug where multiple svn/hg repositories were being used and there was an overlap with revision numbers. The insert of revisions was wrongly being s ipped. * Fixed a cosmetic defect in the side-by-side diff. The first lines were wrongly indented. * Fixed another cosmetic defect in the side-by-side diff. The changed chars weren't always mar ed with orange. ----------------------------------------------------------------------Version 3.3.4 2009/11/21 (svn revision 478) ----------------------------------------------------------------------* btnet_service.exe now loo s for btnet_service.exe.config in the same folder as the exe, not in the c:\root folder. * For the svn, git, and mercurial integration, improved the diff page. The logic does a better job of coloring lines that changed yellow, and also colors the characters that changed orange. Also, the display of wide files wor s better (although I wish I had a splitter...). * Moved from jQuery UI version 1.6rc2 to version 1.7.2 ----------------------------------------------------------------------Version 3.3.3 2009/11/13 (svn revision 467) ----------------------------------------------------------------------* Fixed bug where deleting a user showed a SQL error with bug_user_flags. Deleting a user was bro en by changes in 3.3.2. * Fixed the $SEEN feature. It was bro en by changes in version 3.3.2. * The exes for btnet_console.exe and btnet_service.exe were missing from the zip file in version 3.3.1 and 3.3.2. They are bac now. * If you use the bugid#123 feature to create hyperlin s between bugs, these are now listed on the edit bug page, as "Lin ed to:", to ma e these lin s easier to see. * Added a gently, only mildy annoying "nag" feature to, um, encourage, organizations to donate. Only admins will see it. It won't interfere with your wor . ----------------------------------------------------------------------Version 3.3.2 2009/11/06 (svn revision 458) ----------------------------------------------------------------------To upgrade to this release, run the SQL for this release in the the upgrade.sql file. * Added a voting feature. It wor s li e the $FLAG and $SEEN features.

See the edit_query.aspx page for specifics, and see the "demo votes feature" sample query. * Fixed bug with the Web.config "UpdateBugAfterInsertBugAspxSql" setting. The name was one way in Web.config, a different way in the C# code. I made them the same. Than s to Jorgen Sjoholm for this fix. * When you chec "edit using fonts and colors", you are using CKEditor. That has a spell chec ing feature that wasn't wor ing well before, but seems to be wor ing better now, so I've enabled the CKEditor Spell-Chec -As-You-Type feature this release. The change is just in the c editor/config.js file. * You can now use a regular express (regex) to control how the svn, git, hg integration logic loo s for the bugid in the chec in message. See Web.config. * Version 3.3.1 was missing the javascript for the nicer editor in the edit_query.aspx page. * Made the email fields a little longer in edit_user.aspx and edit_self.aspx. * The mercurial hoo script no longer relies on the HG_NODE environment variable, so you can use it with events where that var isn't available. * Now specifying UTF8 when capturing output from svn, git, hg commands. It doesn't seem to hurt me, and it seems to have solved a problem for at least one user. ----------------------------------------------------------------------Version 3.3.1 2009/10/24 (svn revision 436) ----------------------------------------------------------------------* Mercurial integration. It wor s the same as the integration with svn and git. * Upgraded to version 3.0.1 of CKEditor. Performance seems better to me. * I re-arranged folders in my own subversion repository at sourceforge, and also in the zip file. All the web folders are now in a "www" subfolder. When you create a virtual directory, point it at the "www" subfolder, not the parent. I'm no longer using the sourceforge CVS repository. * Cosmetic improvements in edit_bug.aspx. Got rid of gaps between the lin s on the left, visible in IE only, in edit_bug.aspx. ----------------------------------------------------------------------Version 3.3.0 2009/10/20 (svn revision 408) ----------------------------------------------------------------------IMPORTANT - This release contains a rewor ing of the Subversion integration. If you have already integrated BugTrac er.NET with Subversion, you will have a little bit of extra wor to do when you upgrade to this release. Also, this release no longer supports the functionality of displaying

lin s to the php "WebSvn". If you were using that feature, contact me at ctrager@yahoo.com and complain, so that I'll have some motivation to add it bac in. The new svn hoo script is subversion\svn_hoo _for_btnet.py. The old hoo script made a connection to the BugTrac er.NET database, and so there needed to be connectivity between the subversion machine and the databse machine. The new script does not connect to the database. Instead, it posts an HTTP request to a new web page, svn_hoo .aspx, so your subversion machine will need connectivity with the BugTrac er.NET website. I thin for most people, this arrangement is easier, since the website is typically already exposed, whereas the database is typically behind a firewall. Read the instructions in the hoo script file itself. You will need to edit some values in it just li e you did with the old one. It will be easy. The hoo script eeps trac of what revision it last processed. The first time it runs (or whenever it can't find the file that it uses to eep trac of the previously processed revision), it will send the subversion log for all revisions to svn_hoo .aspx. If you delete its trac ing file, it will send the entire log again. The Svn_hoo .aspx webpage is smart enough not to do duplicate inserts. Even revisions where you forgot to add a bug id will still be inserted into the revisions table, with a bug id of 0, so you could lin them up to bugs "by hand" yourself, with sql. The revised web pages won't wor with the data you currently have in the svn_revisions and svn_affected_paths tables. You will need to delete your data and let the hoo script reload the data. It wor ed fine for me. Run this SQL to delete the data in those tables: delete from svn_affected_paths delete from svn_revisions Then, when your hoo script is wor ing, delete "btnet_prev_revision.txt" that it uses eep trac of the previously processed revision, change something, commit, and the two tables will get completely reloaded with your entire repository log history. The repository settings in Web.config and the project-specific svn settings in Web.config are also gone, because the repository info now is stored in the db. But, if a username and password is required to read your repository, then you configure that in Web.config. See Web.config for how to do that. Run this SQL to get rid of the obsolete db columns: alter table projects drop column pj_subversion_repository_url alter table projects drop column pj_subversion_username alter table projects drop column pj_subversion_password alter table projects drop column pj_websvn_url Finally, I apologize for the inconvenience but I thin the new script is better. It's more forgiving, because you can always delete your database data and the script can be used to repopulate it. And, it

connects with the web server, not the database server. Finally, because each revision is recorded along with the url needed to get bac to the repository, it's very easy to use multiple repositories with one BugTrac er.NET instance. Before I supported having a different repository per project, but now you can have any sort of scheme you want - even multiple repositories per bug. Other changes this release are to the git integration: * Git integration was failing if file name contained spaces. * Even commits where the message does not contain a bugid are inserted into the database, so that you could lin them up to bugs "by hand". I thin pretty much everything I wrote above about the svn integration also applies to the git integration. They both follow the same design. The major differences are that with git, the repository MUST be on the web machine, whereas with svn, the repository can be remote. Let me now if you are using the git integration, o ? At ctrager@yahoo.com. Would anybody use Mercurial integration if I added it? ----------------------------------------------------------------------Version 3.2.9 2009/10/18 (svn revision 401) ----------------------------------------------------------------------* Git integration now complete. As with the subversion integration, you can use the "log", "diff", "blame" commands. Your repositories need to be on the same machine as the web server. The hoo script is git\git_hoo _for_btnet.py. Rename the extension to py. The script is written in python 2.X. Read the comments in it and follow the directions. Edit the Git related settings in Web.config. If everything is set up right, when you do a chec in, start the chec in message with the bug id: git commit -a -m "123 fixed bug" * I'm not saying that the web pages related to svn integration were insecure, but I added a bit more security to them. You now can't view anything in svn via the web pages without the logic chec ing to ma e sure that you have permission for a bug related to the svn path. * Fixed a bug on the svn integration page where you can select any two revisions to diff. Sometimes the logic was getting confused and showed three revisions selected. ----------------------------------------------------------------------Version 3.2.8 2009/10/12 (svn revision 390) ----------------------------------------------------------------------Bug Fixes: * If you did a new install, not an upgrade, of 3.2.7, then you need to rename a field in your database using this SQL (og_domain_name should be

og_name): EXEC sp_rename 'orgs.og_domain_name', 'og_domain', 'COLUMN' * The file complete_registration.aspx should reference "SelfRegisteredUserTemplate" instead of "CreateUsersFromEmailTemplate". * The explanation of "UseEmailDomainAsNewOrgNameWhenCreatingNewUser" was missing from Web.config. New Feature. Integration with git. It's still under construction, but the ability to view revisions is wor ing and so is the "diff" lin . See the hoo script in the git folder, and git settings in Web.config. I'm very interested in feedbac on the git integration, so please let me now how it goes, at ctrager@yahoo.com. ----------------------------------------------------------------------Version 3.2.7 2009/10/04 (svn revision 382) ----------------------------------------------------------------------Run this SQL to upgrade to this release: alter table orgs add og_can_search int not null default(1) alter table orgs add og_domain nvarchar(80) alter table orgs add og_can_only_see_own_reported int not null default(0) * Added "can search" setting to orgs table, so you can turn off a user's permission to search. * Added "can see only own reported bugs" setting to orgs table. If chec ed, a user can only see the bugs that he reported. * Improved the handling of multiple embedded images in emails when the embedded images have the same name. The new scheme no longer changes the file extension. * Fixed bug where svn hoo script was hanging if there were a lot of files in the commit. Than s to Richard Horton for the fix. * You can now resize custom field textareas by dragging them to a bigger size. The rest of the changes to this release are related to processing incoming emails. * I've REMOVED a feature from this release, the feature related to the Web.config setting "ProcessVariablesInEmails". This was a scheme that allowed you to put magic words into the email body text to set a bug's attributes. You can still put the magic words into the query string, but not into email body.

Again, this is the feature I REMOVED: <!-Allow special text in incoming emails to set

I've added a new feature, though, that I thin eep reading.

you'll li e better, so

a bug's project, category, etc. The variables are: $CATEGORY$: $PRIORITY$: $ASSIGNEDTO$: $STATUS$: $PROJECT$: --> <add ey="ProcessVariablesInEmails" value="0"/> * Added "domain", li e "ifdefined.com" to orgs table. * Added new Web.config setting "UseEmailDomainAsNewOrgNameWhenCreatingNewUser". In the same way that you can allow incoming emails to create users, you can also allow incoming emails to create organizations. The logic chec s if there is already an org with a domain that matches the from-address of the email. If there is, the new user gets assigned to that org. If the org doesn't exist, the system creates a new org based on the template user's org. The domain is used as the name of the new org. You can change the name, but you probably want to leave the domain as is, so that if another user from the same org sends an email, the new user is associated with the same org. * Added new Web.config setting "UpdateBugAfterInsertBugAspxSql" This lets you specify SQL that will run against the bug after insert_bug.aspx has inserted it. Insert_bug.aspx is what inserts the bugs that arrive from email and from the screen capture programs li e mine and "Bug Shooting". See Web.config for more info and some sample SQL. You could use this feature to automatically assign the bug to a developer based on which org submitted it, for example. My sample SQL in Web.config, just for teaching purposes, sets the priority based on the email address of the sender. ----------------------------------------------------------------------Version 3.2.6 2009/09/27 (svn revision 375) ----------------------------------------------------------------------* The SQL based search.aspx page wasn't wor ing when the Lucene full text search was disabled. * Fixed bug where tas 's times were switched from PM to AM. Than s to Philip Parmenter for the fix. * Fixed bug 2864901 "Embedded images in emails are saved to the same name". Duplicate file error when trying to forward MS Outloo with multiple embedded images. * Fixed validation of email address to allow apostrophes. Than s to George Yiannitsaros for the fix. * There's an obsolete field in the database, which you are free to get rid of: alter table bug_subscriptions drop column bs_id

----------------------------------------------------------------------Version 3.2.5 2009/08/29 (svn revision 370) ----------------------------------------------------------------------* Fixed bug where nvarchar and nchar custom fields were allowing text to be entered with more characters than could fit in the db field. * If you are using the "news" lin , enabled by setting "EnableWhatsNewPage" to "1" in Web.config, then this release should be an improvement for you. Now, if you eep the web page up, you won't loose news items even if you restart the IIS server. Also, you control the number of news items via the new "WhatsNewMaxItemsCount" setting in Web.config. Performance probably wasn't an issue before, but it's even less li ely to be an issue now. As before, news items are listed regardless of project and org permissions. ----------------------------------------------------------------------Version 3.2.4 2009/08/16 (svn revision 367) ----------------------------------------------------------------------* send_email.aspx with CKEditor was bro en. This release fixes it by restoring the first line as: <%@ Page language="C#" validateRequest="false" %> * Added setting to Web.config "StripDisplayNameFromEmailAddress" to wor around a problem that some users are having when email addresses are in the format Corey Trager <ctrager@yahoo.com> instead of ctrager@yahoo.com I can't reproduce the problem myself. see also bug 2815733, "When sending mail to btnet, the mail address isn't correct" http://sourceforge.net/trac er/?func=detail&aid=2815733&group_id=66812&atid=5158 37 * If you want to maybe improve the performance of you BugTrac er.NET database a little bit, and I mean just a little bit, ta e a loo at the SQL in the file upgrade.sql for this release. The SQL mostly deals with changing which indexes are the clustered indexes. If you don't understand what that means, don't worry about it. * Performance twea of viewing images, giving the browser a better chance of caching them. * Fix of bug in edit_query.aspx, so that admins can now edit the queries belonging to individual users. ----------------------------------------------------------------------Version 3.2.3 2009/08/08 (svn revision 361) ----------------------------------------------------------------------* I made it a bit easier to customize BugTrac er.NET if you are able to code C#. I revised the "wor flow.cs" file. I really wonder if anybody could have been using the old wor flow.cs? I was hired to do some BugTrac er.NET customization for somebody and I myself couldn't get my

own wor flow.cs to wor right.

See http://ifdefined.com/doc_bug_trac er_programmers.html#wor flow and the comments and sample code in App_Code/wor flow.cs itself for more info. * Full text search (Lucene) now also indexes custom text fields. * Fixed bug where full text search index wasn't always being updated when bug was changed. * I removed the SCAYT (Spell Chec As You Type) from the rich text editor, CKEditor, because it was wor ing so poorly and unreliably. ----------------------------------------------------------------------Version 3.2.2 2009/07/31 (svn revision 352) ----------------------------------------------------------------------* Fixed javascript error in search.aspx that was preventing SQL from displaying when "EnableLucene" was set to "0" in Web.config. * Fixed bug with "FLAGS". The filtered state wasn't being preserved in the bug list when you navigated away and bac to it. * Fixed bug 2821937 "NOT logic does not wor for 'flag' field" * Fixed bug 2830310 "tags filter - only one result page can be used, filter remov" * Fixed bug 2821768 "sql editor in edit_report.aspx". Now using "EditArea" for edi_reports.asxp. See notes for previous version for more on "EditArea". Also, fixed bug with text being HTML encoded that should have been. * Added bac the "CommentSortOrder" to Web.config. Controls whether bug posts are sorted from most recent to least recent (the default) or least recent to most. * Added "DisplayTimeOffsetInHours" to Web.config, for displaying the times in a different time zone than the server's time zone. ----------------------------------------------------------------------Version 3.2.1 2009/07/07 (svn revision 345) ----------------------------------------------------------------------* send_email.aspx was bro en in version 3.2.0 because it still referenced FCKEditor 2.6. Fixed. * The list of email addresses you see when you hit the "To" button was lost if you had a validation error, li e forgetting to enter a "To" address. * The page for editing your SQL queries now has syntax highlighting, using "EditArea", from http://www.cdolivet.com/index.php?page=editArea. Than s to "Gettinluc y" for the suggestion. * "FromCannotContain" setting in btnet_service.exe.config wasn't

If you are using wor flow.cs, you'll have to rewor upgrade to this version.

your code to

wor ing. ----------------------------------------------------------------------Version 3.2.0 2009/07/03 (svn revision 343) ----------------------------------------------------------------------Run this SQL to upgrade to this release: alter table orgs add og_active int not null default(1) * Changed search.aspx form method from "GET" bac to "POST" See 3.1.9 release notes too. So, now, wtill with IE8, clic ing on a lin in search.aspx to drill down into a bug, and then hitting Bac to get bac to the list, results in "Webpage has expired". I don't really have a practical solution to this. * Twea ed the SQL I inject to enforce permissions, as described here: http://sourceforge.net/forum/forum.php?thread_id=3318801&forum_id=226938 Than s to Luca Pardo for the idea. * Switched the rich text editor from FCKEditor 2.6 to the newer CKEditor 3.0 RC * You can now set organizations to be inactive. It wor s the same as setting projects to be inactive. Users adding or editing bugs won't be able to see in inactive org in the dropdown, but existing bugs still assigned to that org will wor o . * Fixed bug where prompt wasn't being displayed if you tried to leave a "dirty" bug page after changing a dropdown. ----------------------------------------------------------------------Version 3.1.9 2009/06/23 (svn revision 336) -----------------------------------------------------------------------

* Changed search.aspx form method from "POST" to "GET" to avoid IE8 "Webpage has expired" message (but now there's an anti-xss false alarm. Sigh...) ----------------------------------------------------------------------Version 3.1.8 2009/06/02 (svn revision 335) ----------------------------------------------------------------------* If you are running BugTrac er.NET on the public internet, this version has better protection against brute force attempts to crac user passwords. See "FailedLoginAttemptsMinutes" and "FailedLoginAttemptsAllowed" in Web.config. * Fixed bug in Subversion hoo scripts. Now, if you use TortoiseSVN and chec in without filling in the bugid, the script won't wrongly use the comment length as the bug id. * Add "last updated by", "last updated on" to search results columns. ----------------------------------------------------------------------Version 3.1.7 2009/05/03 (svn revision 329)

* The "fix" in version 3.1.7 "Changed code to wor around OnServerClic not wor ing..." (see below) bro e the way the project dropdown wor s in edit_bug.aspx. In this version, I revert bac to the pre-3.1.7 behavior.

----------------------------------------------------------------------* Run this sql to upgrade to this release: alter table orgs add og_can_assign_to_internal_users int not null default(0) * Added "can assign to internal users" to Organization. Setting this to true would allow an external user to assign bugs to an internal user. * Fixed "bugid2 was not defined" error when clic ing on "detach" in relationships.aspx * Fixed where filtering wasn't wor ing for flags or seen, because the old logic was expecting them to be in a specific column of the query. Than s to Sergey Vasiliev for helping solving this bug. * Changed code to wor around OnServerClic not wor ing, at least for one user. The magical OnServerClic event wasn't firing. The handler (usually on_update) wasn't being called. So, I got rid of all the OnServerClic 's. I don't now what the magic recipe is to ma e the bug happen, but it might involve IIS using Windows Authentication. Than s again to Sergey Vasiliev for spending a lot of time with me on this bug. * Changed btnet_service.exe and btnet_console.exe to wor with a website that doesn't allow anonymous access. You need to run the service using a login that windows allows. The bug itself will be added using the ServiceUserName from the config. ----------------------------------------------------------------------Version 3.1.6 2009/04/04 (svn revision 321) ----------------------------------------------------------------------* Fixed bug 2722585 - "Message 'You have unsaved changes' is shown in view mode" * Fixed bugs related to handling German, etc, decimal formats in the time/tas s feature. * Fixed bug 2686179 - "bug with resizing inline text, html files" * Fixed bug 2726356 - "title modifier is missing in orgs.aspx" * There's now a delay of one minute between the time that you edit a bug and when the notification email is sent. If you edit the bug again within that minute, the system will only send one notification email, not many. * Updated jQuery from version 1.3 to version 1.3.2 ----------------------------------------------------------------------Version 3.1.5 2009/03/16 (svn revision 319) ----------------------------------------------------------------------Just one fix, in edit_bug.aspx. This fixes a bug introduced in version 3.1.4. Here's what the error loo s li e, the important part being at ASP.edit_bug_aspx.does_assigned_to_have_permission_for_org EXCEPTION: System.NullReferenceException: Object reference not set to an instance of an object.

at ASP.edit_bug_aspx.does_assigned_to_have_permission_for_org(Int32 assigned_to, Int32 org) in c:\cit\btnet2\edit_bug.aspx:line 1986 ----------------------------------------------------------------------Version 3.1.4 2009/03/14 (svn revision 317) ----------------------------------------------------------------------* I'm reverting bac to the old way of handling sessions, using my own "sessions" table. If you have a BugTrac er.NET version of 3.0.7 or older, you already have a "sessions" table. Otherwise, run this SQL to create the table: create table sessions ( se_id char(37) not null, se_date datetime not null default(getdate()), se_user int not null ) The problem with using ASP.NET sessions was that people had trouble finding all the places that had to administer the timeout value. In newer versions of IIS, setting it in Web.config isn't enough. You also have to set the IIS Application Pool timeout, and that was giving people trouble. * Added logic that validates a bug's org against the assigned-to user, preventing you from assigning a bug to somebody who doesn't have permission for that org. * Deletion of bugs was leaving some orphan rows in child tables. * Fixed bug 2660653 "Date Conversion Error on tas s_frame.aspx". Dates in the tas s/time page weren't being put into the format that SQL expects. * Fixed bug 2668288 "Pie and Line reports in Gif format". That is, I changed the format of the images from jpeg to gif. * Fixed bug where incoming emails with long "From" addresses were having the address truncated. ----------------------------------------------------------------------Version 3.1.3 2009/03/01 (svn revision 313) ----------------------------------------------------------------------* Fixed bug 2634870 - "edit_tas .aspx crash if bug has empty assigned-to" * Fixed bug 2414881 "btnet_post_commit svn script ma es erroneous posts". The post-commit script was associating the incorrect bugid with the the revision when the bugid wasn't entered with the chec in. Than s to Sam Eads for trac ing this down. I also improved the debug output. * Fixed bug 2446465 "subversion diff fails when comparing one-line files" * Fixed bug 2526512 "problems when subversion thin s file is binary"

* Fixed bug with custom dropdowns of type char/nchar. The app was recording changes even when the user made no change, because of values being padded with spaces in the database. * Fixed bug with svn_view.aspx. It was displaying the source with my own copyright notice. * Fix for "Request is not available in this context" error for IIS integrated mode. Than s to Per-Eri Stendahl for the code. * Added a subversion post commit script in python, for those who are running a subversion server on linux, etc. * Added tip for short description. If it's longer than the INPUT and you hover over it, you can see all the text. * The formatting of the lin s at the top of the page are now controlled by "menu_td" css class.

----------------------------------------------------------------------Version 3.1.2 2009/02/21 (svn revision 309) ----------------------------------------------------------------------* Fixed bug when inserting a null into the qn_last_exception column of the queued_notification table. Discussed here: http://sourceforge.net/forum/forum.php?thread_id=3015629&forum_id=226938 * Fixed bug 2596624 - "Blan comment entered when using the rich text editor". * Version 3.0.5 bro e the features where BugTrac er.NET records the most recent login date of a user. Fixed in this version. * Corrected some typos in the hour dropdowns in the time trac ing feature. * Fixed [+], [-] lin s to resize rich text editing area. ----------------------------------------------------------------------Version 3.1.1 2009/02/07 (svn revision 304) ----------------------------------------------------------------------* Fixed bug with "show images inline" when MIME type was pjpeg or x-png. IE7 tends to use these MIME types. * Fixed bug: Custom fields rendered as textareas were getting HtmlEncoded twice. * Fixed bug: Custom fields displayed in textareas lost their formatting when displayed as read only. ----------------------------------------------------------------------Version 3.1.0 2009/01/31 (svn revision 302) ----------------------------------------------------------------------* You can now have the incoming emails from btnet_service.exe trigger the creation of new BugTrac er.NET users, with the "from" address being

* When replying to an email, and quoting the original email, blan lines are now inserted into the reply before the quoted email.

the username. See these new settings in Web.config: CreateUserFromEmailAddressIfThisUsername CreateUsersFromEmailTemplate * Fixed bug 2453704 "Null reference when adding bug with news on", in whatsnew.cs. * Added Web.config setting "AspNetFormId" which you can use to override what form id some of the the javascript loo s for. Different versions of ASP.NET have generated HTML forms with different ids, and the previous logic was guessing those ids wrong for some configurations. * Changed "FCKConfig.EnterMode" from <p> to <br>, so that enter ey in rich text editor adds just a line brea , not a paragraph brea . * Updated SharpMimeTools dll to handle commas in quoted printable email subjects. ----------------------------------------------------------------------Version 3.0.9 2009/01/25 (svn revision 300) ----------------------------------------------------------------------* Fixed a bug with send_email.aspx introduced in version 3.0.8. Prior to version 3.0.8, list of email addresses wasn't ta ing into account the users organization permissions. I fixed that in 3.0.8 but bro e the logic related to project permissions. With this release, both organization and project permissions should be wor ing (I hope). * Updated included Web.config so that the session timeout is 120 minutes. ----------------------------------------------------------------------Version 3.0.8 2009/01/18 (svn revision 298) ----------------------------------------------------------------------* Fixed bug with send_email.aspx. It was showing email addresses that a user with limited permissions shouldn't see, li e one client seeing the email addresses of another client. See thread: http://sourceforge.net/forum/forum.php?thread_id=2856651&forum_id=226938 * Fixed bug (I thin ) where extraneous "00:00:00" appear in date range searches. I couldn't reproduce the bug, but I thin the logic in this version will prevent it. * Upgraded fc Editor, the rich text editor, from version 2.4.2 to version 2.6.3. There's no specific reason why I upgraded. It just seemed to be about time. For more info about fc Editor changes, visit http://www.fc editor.net. If you are upgrading an existing installation, you need to replace both your fc editor folder and the dll in the bin folder. * Upgraded jQuery from 1.2.6 to 1.3. There was no specific reason why I upgraded. For more about jQuery, visit http://docs.jquery.com. * Exporting a list of bugs to excel now handles line brea s better, than s to Michael Wilson. * No longer using the "Sessions" table in the database. Years ago, I wanted BugTrac er.NET to avoid using the ASP.NET Session object, to be more compatible with web farms, but for a long time now BugTrac er.NET

----------------------------------------------------------------------Version 3.0.7 2009/01/10 (svn revision 292) ----------------------------------------------------------------------Minor bug fixes. * Fixed bug 2477163 "Cannot view or edit tas s/time even though admin" * Fixed bug 2494633 "Bug updated even if unchanged if field permission view only" * Fixed bug with validation of decimal format custom fields. The logic was allowing too many digits to the left of the decimal, leading to an overflow error. * Fixed bug with page for retrieving a forgotten password, when two users have the same email address. * Made changes that might ma e BugTrac er.NET more compatible with new IIS "Integrated Pipeline", but I'm not sure (because I don't have II7 to test with...) * Added RFE 2490904 "Display position in list edit_bug.aspx, near prev/next" ----------------------------------------------------------------------Version 3.0.6 2008/12/22 ----------------------------------------------------------------------To upgrade to this release, ma e the following changes to your Web.config file: 1) Delete the line in your web config that begins li e this: <section name="btnetSettings".... 2) Change the word "btnetSettings" to "appSettings" in two places. This is related to bug 2410699 "IIS7 and btnetSettings, medium trust, Web.config" * Fixed bug 2573169, "Exception: System.InvalidOperationException: The connection was not closed. The connection's current state is open." error when attaching a file to an email. * Fixed bug where deleting of bugs was leaving behind the related tas s. Now deleting them. I said I fixed in in version 3.0.5, but, actually, I didn't. * Fixed bug where custom columns weren't being removed from the org table, so that if you added, deleted, then re-added a custom col, you would get an error. ----------------------------------------------------------------------Version 3.0.5 2008/12/13 ----------------------------------------------------------------------To migrate to this release, run the SQL in upgrade.sql. alter table orgs add og_can_view_tas s int not null default(0)

has been dependent on the Session object, so no point in Sessions table.

eeping the

alter table orgs add og_can_edit_tas s int not null default(0) * Org permissions now include settings for "view tas s/time" and "edit tas s/time". They are OFF by default, so you might need to edit your org permissions if you have "EnableTas s" set to "1". * No longer supporting "CustomWelcomeHtml" in Web.config. Instead, put your custom HTML for the default.aspx into the custom_welcome.html file in the custom folder. * Added new Web.config setting "EnableRelationships" for turning that feature on and off. It is OFF by default, so if you were using it you need to add the line to your Web.config, and set it to "1". * Fixed bug where change history was missing from the emails. The bug was introduced in version 3.0.4. * Fixed bug where guest was seeing "add tas " lin , but wasn't allowed to add tas . * Fixed bug 1949210 "Deleting a user doesn't delete Self Register info" * Added to setup.sql a couple sample reports related to the new tas s/time feature. Here's a report of hours spent by org/year/month, that you could use for trac ing billable hours, based on "actual duration". select og_name [organization], datepart(year,ts _created_date) [year], datepart(month,ts _created_date) [month], convert(decimal(8,1),sum( case when ts _duration_units = 'minutes' then ts _actual_duration / 60.0 when ts _duration_units = 'days' then ts _actual_duration * 8.0 else ts _actual_duration * 1.0 end)) [total hours] from bug_tas s inner join bugs on ts _bug = bg_id inner join orgs on bg_org = og_id where isnull(ts _actual_duration,0) <> 0 group by og_name, datepart(year,ts _created_date), datepart(month,ts _created_date) Here's a report of hours still left to do based on "planned duration" and "percent complete". select pj_name [project], convert(decimal(8,1),sum( case when ts _duration_units = 'minutes' then ts _planned_duration / 60.0 * .01 * (100 - isnull(ts _percent_complete,0)) when ts _duration_units = 'days' then ts _planned_duration * 8.0 * .01 * (100 - isnull(ts _percent_complete,0)) else ts _planned_duration * .01 * (100 - isnull(ts _percent_complete,0)) end)) [total hours]

from bug_tas s inner join bugs on ts _bug = bg_id inner join projects on bg_project = pj_id where isnull(ts _planned_duration,0) <> 0 group by pj_name ----------------------------------------------------------------------Version 3.0.4 2008/11/28 ----------------------------------------------------------------------See upgrade.sql for upgrading to this release. * New feature: Time trac ing and/or Sub-tas s. See the "EnableTas s" setting in Web.config for more info. The goal of this feature is to give you a way of entering tas s related to a bug and/or time that you spent wor ing on a bug and/or scheduling info related to the bug. The page where you enter the info is very configurable. You can hide the fields you aren't using via Web.config. * Twea ed the logic for determining which user to display in the "assigned to" dropdown. See this thread: http://sourceforge.net/forum/forum.php?forum_id=226938 * Added ability for admin to try to resend unsent emails. The system tries to resend automatically anyway whenever there is a new notification, but the new feature lets an admin do it explicitly. * Fixed bug in relationships page when trying to add a relationship after deleting one. * Printing of bug detail now includes images if show/hide images inline is toggled to show, and it includes change history if show/hide change history is toggled to show. ----------------------------------------------------------------------Version 3.0.3 2008/11/24 ----------------------------------------------------------------------Everybody who downloaded 3.0.2 should replace it with this release. Fixed bug in bug.cs, line 1168, when sending a notification email. ----------------------------------------------------------------------Version 3.0.2 2008/11/21 ----------------------------------------------------------------------* New feature: Field level permissions for custom fields. You can control which organizations can view/edit which custom fields. Minor bug fixes: * Fixed bug with the list of users shown in edit_bug.aspx dropdowns when the viewer had no permissions to for other organizations. Users from other organizations were being shown.

* Fixed bug related to showing images inline. When the attachment was an .ini file, the user was wrongly being prompted to download the file.

* Fixed to svn_diff.asxp to wor than s to Christian Hoffmann.

with newer versions of Subversion,

* Fixed bug 2323190 "Top button doesn't change on copy bug" ----------------------------------------------------------------------Version 3.0.1 2008/11/14 ----------------------------------------------------------------------* Fixed bugs in search.aspx. Saved SQL was incorrect when there are custom fields, and especially if there are spaces in the names of the custom fields. Also, handling of custom fields of type "char" and "nchar" was incorrect * Fixed false error about needing to refresh due to an intervening update, after adding an attachment and then ma ing a subsequent change to a bug. ----------------------------------------------------------------------Version 3.0.0 2008/11/09 ----------------------------------------------------------------------* Fixed the "suggest" feature in search.aspx, when you are searching by "description contains". I bro e it in version 2.9.9. * Fixed searching by date range. I bro e it in version 2.9.9. * Fixed bug searching by date range with a custom field of type date. It was searching *up to* the "to" date, not *through* the "to" date. * Fixed bug 2219380 - Lucene: SQL SERVER - Cannot resolve collation conflict UNION * Fixed bug with non-admin users who have permission to add users. * Fixed bug with logic (regular expression) that turns URLs into lin s. It was including the final period as part of the URL. * Upgraded jQuery Datepic er to 1.6rc2 to pic up some of their bug fixes. * Added ability to toggle column filters from "something" to "NOT something". When you have a filter set to some value, hold down the Ctrl ey and clic in it. ----------------------------------------------------------------------Version 2.9.9 2008/11/01 ----------------------------------------------------------------------* IMPORTANT: Chec you Web.config settings related to date formats if you have a problem with this release. Keep reading: * Now using the jQuery javascript library. Changed the calendar popup to the jQuery datepic er. It uses Web.config "Datepic erDateFormat" to decide which date format the pic er puts into the input field. Please read the comments in this new Web.config related to the settings "Datepic erDateFormat", "DateTimeFormat", and "JustDateFormat". and the comments about them in the Web.config in this zip. Historically, I've tended to ma e mista es with non-US date formats, so be suspicious.

The logic now tries to guess when to display just the date and when to display both the date and time. * Fixed bug where the display of the popup was truncated if the window was scrolled down from the top. * Catching exception "Request is not available in this context" when Application_Start references the Request object on IIS7 in "Integrated" mode. Google the error message for more info. * Fixed bug 1239351 "SQL saved from search can have incorrect date format" * Fixed bug 2189739 "'Seen' field appears in print and export to excel results: * Fixed bug 2207549 "HTML tags bug in edit_customfield.aspx" * Fixed bug with custom dropdowns based on char datatypes not wor ing because of the values from the db being padded with spaces. * Fixed cosmetic bug, missing form border in IE. * Fixed problem with ids in search.aspx where custom field has spaces in its name. That made them impossible to select using a custom css file. * If "DisplayAnotherButtonInEditBugPage" is set to 1, the error message is also duplicated at the top of the form along with the button. * Completed the logic that warns you if you are are leaving the edit bug page with unsaved changes. Now it's wor ing with the menu and comment lin s too. ----------------------------------------------------------------------Version 2.9.8 2008/10/25 ----------------------------------------------------------------------* Fixed "get notifications", "stop notifications" lin . It was bro en in version 2.9.7. * Fixed bug related to receiving emails with Cc addresses. * Fixed bug with flic ering of popup when bug description was multiple lines. Fixed javascript bug when popup would be displaying below the bottom edge of the screen. * Fixed bug with search and custom dropdowns where one of the dropdown values is blan . You can now search for bugs where the custom dropdown value has not been specified. This only completely wor s on newly inserted bugs. To ma e the fix retroactive, run sql li e this: update bugs set [YOUR COLUMN] = N'' where [YOUR COLUMN] is null * Fixed bug with flic ering of "suggest" feature, the green dropdown that appears when you are typing a bug description to search for on search.aspx. * When you enter the pipe-delimited values for custom dropdown, it's now o to use line brea s to format what you entered to be more readable

for the admin. * Added Web.config setting "DisplayAnotherButtonInEditBugPage" which causes a second Update button to appear on the edit_bug.aspx, at the top of the form, so you don't have to scroll down to find the button if you have a lot of custom fields. * Added a Web.config setting "SubversionAdditionalArgs". These are appended to every command BugTrac er.NET sends to Subversion. Use this if you need to set, for example, "--config-dir" * A few more cosmetic changes... * Some experiments on the relationships.aspx page. ----------------------------------------------------------------------Version 2.9.7 2008/10/18 ----------------------------------------------------------------------** IMPORTANT CHANGE: Changed how the special "guest" user wor s. Before this release, even if you gave the guest user permission to edit bugs, the system automatically reduced his permissions to "Reporter". I've removed the logic that automatically reduces his permissions. You now control the guest user's permissions li e any other user. If you don't want a guest user to be able to edit bugs, change his permissions before you upgrade to this release. A guest user is still different in these ways: no settings no "edit dashboard" can't save searchs as sql queries can't delete anything.

Also in this release: * Fixed bug when Lucene.Net was dealing with floats in the form 1,23 instead of 1.23.

* Fixed bug 1969789 "bugs.aspx popup flic ers when it's a big popup" * Fixed bug 2165900 "Error sending email notifiations" due to null characters in the message body. How does that happen? * Fixed bug 1968648 "Internal comments not on popup" * Cosmetic improvements. Well, I hope you thin the cosmetic changes are improvements. Highlights of the changes include re-arragnement of the menu bar across the page, icons next to some of the lin s, icons to distinguish the different post types, popup now loo s li e a miniture version of the posts on the edit_bug.aspx page, animation effect when adding posts.

----------------------------------------------------------------------Version 2.9.6 2008/10/12 -----------------------------------------------------------------------

Please do let me

now what you thin of the changes.

* Fixed bug 2171746 "Server error with blan

Lucene search"

* Fixed missing second-from-last-line in Web.config: </btnetSettings> * In search_text.aspx, the new full text search, nvarchar(MAX) doesn't wor on SQL Server 2000. Changed to nvarchar(3000). * Minor security improvements related to fc Editor ----------------------------------------------------------------------Version 2.9.5 2008/10/12 ----------------------------------------------------------------------* New feature: Full text search! Available at the top of every page. The search uses the Lucene.Net search engine. This feature is enabled by default. It uses the App_Data\lucene_index folder for its index. The folder gets created automatically. This full text search *DOES* obey project and org permissions, so it's safe to use even if you are using permissions. The text and both at least and text that is searchable includes the description, tags, comments, incoming and outgoing emails. Text that is not searchable, for now, includes comments mar ed hidden from external users in custom text fields.

(Note, the version of Lucene.Net included with this release has a slightly changed FSDirectory class. I've included the source code of the file I changed.) * Now using App_Data by default for new installations for logs, uploads, and the new Lucene index. You can still override the locations via Web.config. (The uploads folder isn't used if you are using file-based attachments instead of storing attachments in the database. The default handling of attachments is to store in the database). * Added a magic word, $ALTER_HERE, to tell my permissions logic where to alter you bug queries, in cases where my logic gets confused. This allows for more complicated bug queries than my old logic could handle. * Moved almost all the code out of the old "inc" files. * The util.cs function strip_dangerous_tags has been made a little smarter and little stronger, but it's still wea ... ----------------------------------------------------------------------Version 2.9.4 2008/10/10 ----------------------------------------------------------------------To upgrade to this version, run this SQL: alter table bug_posts add bp_email_cc nvarchar(800) null * Fixed bug where SMTP servers were rejecting emails because of empty CC field. * Fixed bug where adding an attachment failed because of null content type.

* Fixed bug that prevented the "I forgot my password" from being used unless you also enabled self-registration. * Removed the "CommentSortOrder" from Web.config. No longer supporting that option. * Improved how the "Cc" and the "Subject" of emails are handled. They are saved and displayed in edit_bugs.aspx * Changed how email address lin s wor in edit_bugs.aspx. They used to be "<a href=mailto:" lin s. Now they are "<a href=send_email.aspx" lin s. * Improved performance of search.aspx when you have a lot of users and you are trying to limit the display of them I needed that performance improvement at the demo at http://ifdefined.com/btnet. * Added a new page "view_memory_log.aspx", mainly for my own debugging. Instead of logging to a text file I can log to a memory cache, and that cache with this page. It helped me debug things with the site running at GoDaddy. If you want to use this, search the text for "memory_log" and you'll figure it out. * Add new experimental feature, a "news" lin . To enable it, add the following to your Web.config: EnableWhatsNewPage=1 WhatsNewPageIntervalInSeconds=30 That will add a new menu item, "news", which lin s to view_whatsnew.aspx. That new page will automatically refresh itself with what bugs were recently added, changed, etc. Note that this feature does not obey any permission. It will display information about all bugs, whether the user has permission to view them or not. If the user clic s on a lin in order to view the details of that bug, THEN permissions WILL be enforced, but not on the list itself. The news only exists in a memory cache, so the page will be blan if you restart your web server or even just edit Web.config. Let me now if this feature is useful for you. It's a light weight alternative to refreshing the bugs.aspx page, or having that page automatically refresh itself, hitting the database over and over. ----------------------------------------------------------------------Version 2.9.3 2008/10/05 ----------------------------------------------------------------------To upgrade to this version, change your Web.config from this: <assemblies> <add assembly="System.DirectoryServices.Protocols, Version=2.0.0.0, Culture=neutral, PublicKeyTo en=B03F5F7 F11D50A3A"/> </assemblies> to this, adding the additional assembly reference: <assemblies> <add assembly="System.DirectoryServices.Protocols,

Version=2.0.0.0, Culture=neutral, PublicKeyTo en=B03F5F7 F11D50A3A"/> F11D50A3A"/> </assemblies> * The file "seen.aspx" was missing from the 2.9.2 .zip file, so the new/old, read/unread feature didn't wor . Added to this .zip file. * Fixed bug in setup.sql that happens if you were to run it twice. No problem if you run it just once. * Fixed bug 2140368 "Calendar bro en if custom field has space li e "Due Date" versus "DueDate". * Richard Adleta has contributed a new feature, Windows user auto registration. That means, if you are using windows security, and a Windows user visits the site, BugTrac er.NET will automatically insert a user into its user table. Than s Richard Adleta! Loo at Web.config in this .zip for the new Web.config settings related to this feature, starting with "EnableWindowsUserAutoRegistration". Note the settings in Web.config that allow BugTrac er.NET to fetch additional info about a user from an LDAP server. ----------------------------------------------------------------------Version 2.9.2 2008/ 9/26 ----------------------------------------------------------------------To upgrade to this release, run the following SQL: create table bug_user_seen ( sn_bug int not null, sn_user int not null, sn_seen int not null ) create unique index sn_index_1 on bug_user_seen (sn_bug, sn_user) * Added new feature, new/old, read/unread. The implementation is similar to $FLAG. See edit_query.aspx for details. Also, to enable, add this to your Web.config: <add ey="EnableSeen" value="1" /> * Fixed bug 2121394 "Error when editing an old comment with Fc Editor enabled" <add assembly="System.DirectoryServices, Version=2.0.0.0, Culture=neutral, PublicKeyTo en=B03F5F7

* Fixed unintentional case-sensitivity in tags filtering logic. * Changed display of read-only custom-fields when there is a lot of text without line brea s. Discussed here: http://sourceforge.net/forum/forum.php?thread_id=2265713&forum_id=226938

* Fixed bug 2129279 "add_svn_revision.aspx doesnt wor opera"

with ie and

----------------------------------------------------------------------Version 2.9.1 2008/ 9/20 ----------------------------------------------------------------------To upgrade to this release, run this SQL from upgrade.sql: alter table bugs add bg_tags nvarchar(200) null alter table orgs add og_tags_field_permission_level int not null default(2) * Fixed crash in edit_bug.aspx due to Request["label_pcd"] being null. * Add new feature: Tags. You can mar your bugs with free-form eywords and then use those eywords to filter your bug lists. This feature was originally added in version 2.8.6 in a very rough, experimental way, but this release now supports the feature well (I hope). To turn on this feature, add this line to your Web.config: <add ey="EnableTags" value="1" /> Note that you might not want to use this feature if you are also using tric y permissions, because the page that displays already-used tags and their counts loo s at all bugs, not just the bugs that the user is elegible to see. That is, if somebody with rights only to project A tags 3 bugs with "Foo", then somebody with rights only to project B will see "Foo(3)" in the tags.aspx page. Maybe that matters to you, maybe not. * Fixed bug 1917493 "Non-Admin users may create other users in other organization". Now, if you give rights to a non-admin user to create users, he can only assign that user to organizations that he has permission to edit. * Fixed bug with searching custom datetime fields using a range. * Added new Web.config setting "UseTransmitFileInsteadOfWriteFile" to handle view_attachment.aspx failing with large files. See discussion at the lin below and see comments in Web.config. http://sourceforge.net/forum/forum.php?thread_id=2230054&forum_id=226938 ----------------------------------------------------------------------Version 2.9.0 2008/ 9/13 ----------------------------------------------------------------------* Fixed a bug with btnet_service.exe and btnet_console.exe that I introduced in 2.8.8 that caused them to s ip every email. Here's a thread about it, and a wor around: https://sourceforge.net/forum/forum.php?thread_id=2241106&forum_id=226938 * Added Web.config setting "DisableFCKEditor", which turns off the rich text editor for everybody. Just in case there turns out to be a security hole with FCKEditor. * Changed the function strip_dangerous_tags to be more aggressive at cleansing text entered using FCKEditor. * Removed the "Image" button from the FCKEditor toolbar configuration because the upload doesn't wor anyway out of the box. You need an advanced understanding of FCKEditor itself to get it to wor . * Fixed bug with Subversion post commit script described here:

http://sourceforge.net/forum/forum.php?thread_id=2225181&forum_id=226938 * Fixed bug 2100237 "invalid tag parameter in relationships.aspx" * Fixed bug 2100130 "HTML tags 'bug' in edit_project.aspx" * Fixed bug 2100042 "HTML tags 'bug' in edit_dashboard.aspx" * Removed Web.config option "PromptBeforeLeavingEditBugPage". Now the page will automatically warn you if you are going to leave it with unsaved data. ----------------------------------------------------------------------Version 2.8.9 2008/9/6 ----------------------------------------------------------------------* O , this time *REALLY* fixed bug 2064647. I didn't really fix it in version 2.8.8, but I really fixed it this time. I was able to reproduce the bug using ASP.NET 3.5 SP1. The only difference between this version and 2.8.8 is in add_attachment.aspx, I removed action=add_attachment.aspx form the <form> tag. ----------------------------------------------------------------------Version 2.8.8 2008/9/6 ----------------------------------------------------------------------* Fixed bug (I hope) described here. http:// nitinr.blogspot.com/2008/07/script-exploit-via-fc editor.html See btnet.Util.strip_dangerous_tags. I encourage you to contact me at ctrager@yahoo.com with improvements to BugTrac er.NET security, and especially my handling of fc Editor. * Fixed bug 2064647 - ".net 3.5 sp1 issue or Unable to add attachment." I changed all the query string and form variables named "action" to "actn".

* Fixed bug 2080213 - "edit_bug.aspx, use pcd1, not Request['pcd1']" * Fixed bug 2073466 - "Project level SVN overrides should be individual" * Fixed bug 2073380 - "WebSVN url is too short". Expanded it to 120 chars. * Fixed bug 2039058 - "Long bug description causes error". Increased size of qn_subject column. * Fixed bug 2026669 - "Category drop down on a new bug not defaulting correctly" * Fixed bug in btnet_service.exe, btnet_console.exe. "SubjectCannotContain" and "FromCannotContain" settings weren't wor ing. ----------------------------------------------------------------------Version 2.8.7 2008/ 6/19 -----------------------------------------------------------------------

* Fixed how the red/green flags loo inc_bugs.inc.

in FireFox 3. The change is in

Bug fixes. 1997641 - Filters in bugs.aspx and search.aspx not wor ing. This was bro en in 2.8.6. The fix is in the file inc_bugs.inc. 1992767 - Saved Search failure with custom fields in IE. The fix is in the file search.aspx. To move from 2.8.6 to 2.8.7, you can just extract the two files inc_bugs.inc and search.aspx. ----------------------------------------------------------------------Version 2.8.6 2008/ 6/15 ----------------------------------------------------------------------* Fixed bug 1967847 - Show/hide change history doesn't refresh. This was introduced in version 2.8.5. * Fixed bug 1963824 - Unable to cast object of type 'System.DBNull' to type String. This was also introduced in version 2.8.5. * Fixed bug 1968605 - Bug when last row meeting filter criterion is changed * Fixed bug processing the $ORGANIZATION$, $CATEGORY$, and $UDF$ magic variables in incoming emails, using the fix reported in this thread: http://sourceforge.net/forum/forum.php?thread_id=2047054&forum_id=226938 * Fixed bug with deleting custom columns, using the fix reported in this thread: http://sourceforge.net/forum/forum.php?thread_id=2047968&forum_id=226938 * Fixed SQL error with the "bugs with attachments" query that installs with setup.sql. This release also includes some experimental code that allows you to tag bugs and the filter your bug lists using the tags. To try out the experimental code update your bugs table as follows: alter table bugs add bg_tags nvarchar(100) null and add the following line to your Web.config:

I don't thin the tags code will hurt anything if you turn it on, but it's not very high quality yet nor does it loo very good. ----------------------------------------------------------------------Version 2.8.5 2008/ 4/19 ----------------------------------------------------------------------Bug fixes: * Fixed bug where edit_dashboard.aspx was actually editing everybody's dashboard instead of just the one user's dashboard. * Fixed bug 1935727 InvalidCastException drawing line chart, if the

<add

ey="EnableTags" value="1" />

x values were strings instead of integers. * Fixed bug where edit_bug.aspx crashed if it was trying to display a bug with its project value set to a non-existent project. That can happened if the bug is posted via the screen capture utility. * Fixed bug 1959132 where the message "Somebody changed it while you were editing it" was wrongly being displayed. Add an attachment and then on the same bug, update a comment.

* No longer displaying "diff" lin on subversion revisions where the Subversion action was an add. Clic ing on diff was causing an error to display because there is no previous version to diff with. Enhancements: * Added status column to relationships.aspx * Popups that display when you hover over items in the bug list now show all comments, not just the first. Also, popups show after hovering 250 milliseconds, instead of after 400 milliseconds. * Custom date fields - now you can search them using a date range. ----------------------------------------------------------------------Version 2.8.4 2008/4/8 ----------------------------------------------------------------------To migrate to this release from 2.8.3, run this SQL: update custom_col_metadata set ccm_dropdown_type = '' where ccm_dropdown_type = 'not a dropdown' * Fixed bug introduced in version 2.8.3. If you used version 2.8.3 to add a custom field that was not a dropdown, you need this fix. Also fixed: * Non-dropdown custom columns whose size was big enough to be displayed as textareas were wrongly being displayed as textareas. * Screen label for change_password.aspx was wrong. Should read "New Password", not "Email". * If you have two browswer windows open, clic ing on flags could trigger flags.aspx to report a duplicate insert error. The error is harmless, but annoying, so now suppressing it. ----------------------------------------------------------------------Version 2.8.3 2008/4/5 ----------------------------------------------------------------------Small bug fixes: * If you were inactive awhile and then clic ed on logoff, you could get an error.

* Fixed bug 1960395 "Running Setup.sql gives duplicate - the same query was in it twice.

ey error"

* When adding a non-dropdown custom field and chec ing required, the following error was wrongly being displayed: Chec ing "Required" is not compatible with a normal or users dropdown * Corrected the autocomplete behavior for confirm password in edit_user.aspx autocomplete=off Enhancments: * Queries.aspx now gives admins the ability to see everybody's private queries. * btnet_service.exe now wor s even if the SSL certificate is untrusted. * btnet_service.exe's setting "SubjectCannotContain" now supports multiple strings separated by pipes. Also added new settings "FromMustContain", "FromCannotContain". See btnet_service.exe.config for more info. * Admins can now delete a bug subscriber, but note that there's a general quir /bug that if a user's automatic subscription criteria indicates that the user should be subscribed, the logic will add the user bac as a subscriber. This is a problem even if you yourself clic "stop notifications" for a specific bug that your auto-subscribe settings say you should be subscribed to. You'll thin that you are no longer subscribed, but really you still are. * Added new query sample to setup.sql, "bugs with related bugs" * Added ability to use GROUP BY clauses in the bug queries which had previously confused the logic that alters the bug queries so that they obey the project and organization permissions. See the "bugs with related bugs" sample. The "/*ENDWHR*/" mar s the end of the where clause. (I need to document this better...) ----------------------------------------------------------------------Version 2.8.2 2008/ 3/22 ----------------------------------------------------------------------Small bug fixes: * Fixed bug: Self registration wasn't wor ing for names li e "O'Brien", with an apostrophe. Fixed now. * Added more validation to the "add custom field" page. The validation ta es care of the following bugs:

* Some lin s were visible to guests even though logic downstream would prevent them from actually being used, li e merge and mass edit. Now the lin s aren't shown to guests. * Even if the password authentication is done via LDAP, now chec ing whether the BugTrac er.NET user is mar ed active, and also now updating the last login datetime.

1843742 1843726 1914410 1916585

Custom column named "URL" brea s search.aspx Newline, trailing spaces in dropdown vals causes error "required" not wor ing with custom field of type "user" error in print_bug.cs with custom field of type "user"

Enhancements: * Added filtering to users.aspx, in case you have many, many users, to limit how many users are displayed. * Added "LdapAuthType" setting to Web.config. * RFE 1919939 Show a bug's related bugs in the print and email ----------------------------------------------------------------------Version 2.8.1 2008/ 3/15 ----------------------------------------------------------------------To upgrade to this release, run the SQL near the bottom of upgrade.sql. * Fixed bug 1914408 "bp_comment_search contains formating info from fc Editor". If you entered text using fc Editor, there was logic to strip out the formating so that searching in the text would wor o . For example, instead of saving <font color=red>hot</font> and <font color=blue>cold</font> the logic would save hot and cold At some point in time, the logic to strip out the formating was accidently removed. My changes here won't fix any data that's already been stored in your database. I also corrected one of the sample queries to display data from bp_comment_search instead of bp_comment. * Fixed bug 1913912 "LimitUsernameDropdownsInSearch doesn't wor with NULLs". Than s to "matro" for the fix. * Added a last login date to the user table, to eep trac of when a user last logged in. Now that there is a public demo of BugTrac er.NET, I myself need the date to be able to get rid of users who have been inactive for a long time. * Added new "dashboard" page. It's a way of displaying the results of several reports all on one page, customized for you. Go to "reports" and clic on "dashboard" lin and then "edit dashboard" to try it out. * Added another query to setup.sql, which helps with finding bugs with large attachments, useful to me to manage my public demo: insert into queries (qu_desc, qu_sql, qu_default) values ( 'bugs with attachments', + char(10) + ' select bp_bug, sum(bp_size) bytes ' + char(10) + ' into #t ' + char(10) + ' from bug_posts ' + char(10) + ' where bp_type = ''file'' ' + char(10) + ' group by bp_bug ' + char(10) + ' select ''#ffffff'', bg_id [id], bg_short_desc [desc], ' + char(10) + ' bytes ' + char(10) + ' from bugs ' + char(10) + ' inner join #t on bp_bug = bg_id ' + char(10) + ' WhErE 1 = 1 ' + char(10) + ' order by bytes desc ' + char(10) + ' drop table #t ',

0) ----------------------------------------------------------------------Version 2.8.0 2008/3/8 ----------------------------------------------------------------------To upgrade to this release, run the sql in upgrade.sql to create a new table: create table queued_notifications ( qn_id int identity primary ey not null, qn_date_created datetime not null, qn_bug int not null, qn_user int not null, qn_status nvarchar(30) not null, qn_retries int not null, qn_last_exception nvarchar(1000), qn_to nvarchar(200) not null, qn_from nvarchar(200) not null, qn_subject nvarchar(200) not null, qn_body ntext not null ) Fixed bug 1900496 "print bug, emails, history, don't obey fld permissions". As part of this bug fix, the Web.config option "SendJustOneEmail" is now obsolete. I've rewritten the logic for sending out the notifications so that it first stores the email into the new "queued_notifications" table and then another thread sends the emails. The only way for me to fix the bug 1900496 was to compose and send a separate email for each user receiving a notification. But the sending itself can ta e a long time, so that's why I now queue them at first, and then send them in another thread later. The admin page now has a new lin , "view queued notifications". That new page says: "Email notifications are put into a table into the database and then the system attempts to send them. If the system fails to send the notification, it records the reason for the failure with the row. The system ma es three attempts to send the notification. After the third attempt, you can either give up and delete the unsent notifications or you can reset the retry count and let the system continue trying." Also related to bug 1900496, the view_bug_history.aspx page is now obsolete. You should delete it from your web server. Also in this release: * The "PrintHistory" ey in Web.config has been obsolete for a while, but I only just now have removed it from Web.config. * Added new setting to Web.config that might help you if you have lots of users. Here's what it says in Web.config <!-If this is set to "1", then the list of user names in the dropdowns in the search page is limited to those users who have either reported bu

gs or have bugs currently assigned to them. Setting this to "1" might ma e the search page load slower. Setting it to "0" might result in too many names in the dropdowns on the search page. --> <add ey="LimitUsernameDropdownsInSearch" value="0" /> ----------------------------------------------------------------------Version 2.7.9 2008/3/1 ----------------------------------------------------------------------Bug fixes. A few of these fixes are the result of me running a public instance of BugTrac er.NET hosted at GoDaddy, at http://ifdefined.com/btnet. * Fixed bug 1891559, "Email message no longer has a border around each item." Same bug described here: http://sourceforge.net/forum/forum.php?thread_id=1890301&forum_id=226938 Some people reported that the css doesn't wor in the email notifications. As a wor around, I added a "ForceBordersInEmails" which uses border=1 instead of css to create a border in the emails. See also "btnet_css_for_email.css.renamed". If you rename that file to "btnet_css_for_email.css", notifications will use that css file. * Fixed bug with generate_btnetsc_reg.aspx. It's the page that generates a .reg file for the screen capture utility's settings. There was some debugging code accidently left in it. * Fixed bug 1904370 "index out of range error on edit_bugs.aspx" when user is guest and there are no projects in the project dropdown. * Modified email.cs after experimenting with hosting an instance of BugTrac er.NET at GoDaddy. Now, even if you storing attachments in the db, the app will still use the "UploadFolder" in order to temporarily store attachments in the files system before being loaded into the db. Before, the logic always tried to create a temporary folder, which it doesn't have the rights to do at GoDaddy. * Fixed a bug where sometimes the bugs.aspx would crash trying to use a filter that no longer applied to the query.You had to switch bac and forth between the search and bugs page to ma e the crash happen. * Fixed "Object reference not set to an instance of an object" bug that was happening at BugTrac er.NET running at GoDaddy. Where the logic was loo ing for a custom field in the Request's variable collection, the logic now handles the case of the variable being missing. * Merged in code from Gerard Chane on that adds ids to project specific custom fields in edit_bug.aspx, to help with css. * Corrected insert_bug.aspx to truncate short description at 200 chars, not 100. Enhancements: * Added "days ago" to the dates displayed in edit_bug.aspx * Some cosmetic changes to edit_bug.aspx and search.aspx.

* The app intercepts errors and writes them to the log and can also send an email with the info. Now writing the server variables into the log and error notification emails. Server variables means things li e the IP of the browser, User Agent, Referer, Coo ie Values... ----------------------------------------------------------------------Version 2.7.8 2008/ 2/23 ----------------------------------------------------------------------To upgrade to this release, run the SQL from upgrade.sql that creates the emailed_lin s table. You only need this table if you turn on the new features related to the new Web.config settings "AllowSelfRegistration" and "ShowForgotPasswordLin ". * Fixed bug 1884391 - prevent entry of more text into a custom TEXTAREA field that would cause a databse truncation error. * Fixed bug on relationship page - sibling/parent/child radio button wasn't being initialized * Corrected the sample code in wor flow.cs. * Fixed bug where emails with subjects longer than 200 chars were failing to be inserted into the db. Now insert_bugs.aspx truncates the subject at 200. * Added option to enforce strong passwords. See"RequireStrongPasswords" in Web.config. Turning on the flag has no effect on users until they try to change their passwords. This satisfies RFE 1726311. * Users can now reset their own passwords if they forget them. See "ShowForgotPasswordLin " in Web.config. This satisifies RFE 904044. * Users can now register themselves (add themselves to the user table). See the following settings in Web.config: "AllowSelfRegistration" "SelfRegisteredUserTemplate" "RegistrationExpiration" * Format of user's email address is now validated. ----------------------------------------------------------------------Version 2.7.7 2008/ 2/16 ----------------------------------------------------------------------* Added new Web.config setting "AllowGuestWithoutLogin". This is the explanation from Web.config: There's a special user in the database, "guest". Thin of it as a user account that can be shared by several people. The guest user can't save settings and can't save searches. If "AllowGuestWithoutLogin" is set to "0", then the guest user still has to login with a password. If set to "1", then the guest user doesn't need to even enter a password. Instead, a lin will appear on the login page, default.aspx, saying: Continue as "guest" without logging in You can control the per-project permissions of the guest user in the same way as other users EXCEPT that even if you give the guest user

permissions beyond View Only and Reporter, the system will automatically reduce his permissions downward. * Modified search of comments to also search email bodies. * Bug's last update datetime/user is now updated when an email is sent. * Some people have reported that there are no borders around the comments in the email notifications. I made changes to print_bug.cs that may have fixed the problem. Not sure, sinece I could never reproduce the problem. If you had this problem before and this release fixes it, please let me now at ctrager@yahoo.com. * Added another query sample to setup.sql. This one shows the bugs that have been stuc the longest time without a status change. Here's the SQL if you want to try it out: select case when datediff(d, isnull(bp_date,bg_reported_date), getdate()) > 90 then '#ff9999' when datediff(d, isnull(bp_date,bg_reported_date), getdate()) > 30 then '#ffcccc' when datediff(d, isnull(bp_date,bg_reported_date), getdate()) > 7 then '#ffdddd' else '#ffffff' end, bg_id [id], bg_short_desc [desc], datediff(d, isnull(bp_date,bg_reported_date), getdate()) [days in status], st_name [status], isnull(bp_comment,'') [last status change], isnull(bp_date,bg_reported_date) [status date] from bugs inner join statuses on bg_status = st_id left outer join bug_posts on bg_id = bp_bug and bp_type = 'update' and bp_comment li e 'changed status from%' and bp_date in (select max(bp_date) from bug_posts where bp_bug = bg_id) WhErE 1 = 1 order by 4 desc * In queries.aspx, now preserving the line brea s in the SQL, for easier reading. * Cosmetic changes to edit_bug.aspx, which I hope fol s will li e. * Printing of "detail" reports should have better performance. Before, the css styles were wrongly being included once per bug, not once for the whole page. ----------------------------------------------------------------------Version 2.7.6 2008/2/8 ----------------------------------------------------------------------* Fixed bug: when user has only view or reporter permission, the bug's short description was hidden on the edit_bug.aspx page. * Changed the implementation of filters dropdowns in the bug lists so that usually, they only show choices that are actually present in the bug list. Before this change, if you had external users loo ing at bugs assigned to internal users, the filter dropdowns would have been missing the internal users. Than s to Suchace Zdene for

reporting this. * I added a way to ma e it a bit easier for somebody with C# coding s ills to build strict wor flow rules in BugTrac er.NET. See the new file, App_Code\wor flow.cs. It's the designated spot for your custom C# code to control the transition of statuses. For example, if you want to say that the only valid status after "tested" is "deployed", or if you only want users in the "testers" group to mar a bug as "tested", then you could add your logic to this file. See the comments in the file for more detail. ----------------------------------------------------------------------Version 2.7.5 2008/2/2 ----------------------------------------------------------------------This release adds some LDAP/Active Directory support. Before deploying this release, you must change your Web.config file. Your Web.config might be different from mine, but for me, the change I had to ma e was from this: <compilation debug="true"/> to this: <compilation debug="true"> <assemblies> <add assembly="System.DirectoryServices.Protocols, Version=2.0.0 .0, Culture=neutral, PublicKeyTo en=B03F5F7F11D50A3A"/> </assemblies> </compilation> To enable LDAP support, configure these settings in your Web.config: <!-You can have BugTrac er.NET chec the user's password using an LDAP serv er instead of chec ing it in the database. You still have to create a BugTrac er.NET u ser. It's only the password that get's chec ed. To use LDAP, set AuthenticateUsingLdap to 1 and enter the appropriariate distinguished name. The $REPLACE_WITH_USERNAME$ gets replaced with the username that's typed in by the user when he tries to log on. --> <add ey="AuthenticateUsingLdap" value="1"/> <add ey="LdapServer" value="127.0.0.1"/> <add ey="LdapUserDistinguishedName" value="uid=$REPLACE_WITH_USERNAME$,ou=peopl e,dc=mycompany,dc=com"/> When you enable LDAP support, the application chec s user passwords against the ones stored in your LDAP directory rather than the ones stored in the database. The zip also contains sample code for importing users from LDAP into BugTrac er.NET's database. See "import_users_from_ldap_sample.cs".

Also: * Fixed bug with duplicate users in user dropdowns that affected "external" users. Than s to Suchace Zdene for help with this. * Fixed how app was handling bugs associated with inactive projects or inactive users, or users who are no longer mar ed assignable. Before, if a bug was assigned to an inactive user, and then you updated the bug in some other way, you would inadvertently also change the user too, because the inactive user was missing from the dropdown. Now, the current project/user is always FORCED into the dropdown, even if it is inactive. ----------------------------------------------------------------------Version 2.7.4 2008/ 1/27 ----------------------------------------------------------------------* With this version, BugTrac er.NET no longer supports storing user passwords unencrypted. The setting "EncryptStoredPasswords" is now ignored because passwords are now ALWAYS stored encrypted. To upgrade to this version, run the following SQL to modify your database before deploying the new web pages: alter table users add us_salt int null As users log in, if their passwords had been stored unencrypted, the app will automatically update the database with the encrypted passwords. Or, you can encrypt all the passwords by invo ing this page: upgrade_273_to_274.aspx Even passwords that had been encrypted before will be re-encrypted with a stronger encryption scheme. * Now using the the ASP.NET "App_Code" folder. Util.cs has been split up into several smaller files. * Adding attachments now updates the bug's last update date and user id. ----------------------------------------------------------------------Version 2.7.3 2008/ 1/19 ----------------------------------------------------------------------See "upgrade.sql" for database changes for this release. Run the relevant part of the script against your database to upgrade. * Added field level permissions for the non-custom fields. As admin, go to "organization" and see the field level permissions related to project, org, category, priority, assigned_to, status, and the user-defined-field. No field level permissions on custom fields or project-specific custom fields. * Added the concept of parent/child to relationships between bugs. ----------------------------------------------------------------------Version 2.7.2 2008/ 1/12 -----------------------------------------------------------------------

THIS RELEASE FIXES SECURITY VULNERABILITIES. Please email me at ctrager@yahoo.com if you thin there are still vulnerabilities. * Fixed the worst Cross Site Request Forgery (CSRF) vulnerabilities. This is wor is related to bug 1867089 "Multiple XSS and CSRF vulnerabilities". Many than s to Si Wong for discovering and reporting these important vulnerabilities. For more about CSRF, also nown as "session riding", read here: http://www.cgisecurity.com/articles/csrf-faq.shtml Until you install this release, a worst-case scenario is, if you are an admin and logged into BugTrac er.NET, and while you are logged in - while your browser coo ie is still in effect - if a bad guy could get you to view his malicious web page, then just by viewing that page you could delete bugs from your BugTrac er.NET database. With the fixes in this version, I've closed all the vulnerabilities that I now about. Specifically, I revised all the delete_xxx.aspx pages. I've also revised massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx. * Fixed the specific XSS vulnerability described in bug 1867089, where a user could enter javascript into a text custom field that would then be executed if a user without edit permissions views the page. I'm not aware of any other XSS vulnerability. * Fixed edit_self.aspx's project subscription dropdown. It shouldn't have been showing the "no project" option. * Fixed bug 978216 "Globalization problem on custom fields when type is float". Or rather decimal. Edit_bug.aspx was changed to handle the European decimal fields, which can use a comma as the separator instead of a period. Than s to Christian Jundt for the code. * Added logic to insert_bug.aspx to allow for an attachment to be posted without wrapping it inside an email message. ----------------------------------------------------------------------Version 2.7.1 2008/1/6 ----------------------------------------------------------------------* The flag column in queries now has a filter, just li e category, status, priority, etc. * Friendlier handling of sql errors in bugs.aspx, so that if you edit a query introducing a syntax error in the SQL, it's easier to get bac to the query page. * Fixed bug 1661602 "Bug count is incorrect when filtering bugs". Now when a filter changes the number of bugs shown in a query, the text becomes: Showing N out of N bugs returned by query. * Resolved bug 1863186 "HideSql flag ineffective in 2.7.0". Actually, support for the Web.config "HideSql" setting was dropped in version 2.5.8, but I forgot to remove it from Web.config itself. -----------------------------------------------------------------------

Version 2.7.0 2007/12/21 ----------------------------------------------------------------------* Fixed bug - "or" logic in search page allowed people to see items in the list that they don't have permission to see. The sql had been wrong, something li e this: where has permission OR matches criteria 1 OR matches criteria 2 The corrected SQL is something li e this: where (has permission) AND (matches criteria 1 OR matches criteria 2) * Fixed bug in search screen - the "organization" dropdown was showing organizations even if the user didn't have permission to see them. Now, if the user doesn't have permissions to see other organizations, the dropdown isn't even shown. * Fixed bug with the flag feature - flag.aspx was caching. Add logic to tell the browser not to cache flag.aspx. * Added new feature, "create copy". It will create a copy of a bug, not including related posts. ----------------------------------------------------------------------Version 2.6.9 2007/12/14 ----------------------------------------------------------------------Bugs: * Fixed bug in search "left outer join orgs on ct_id = bg_org" should read "left outer join orgs on og_id = bg_org". * Fixed javascript error with svn_log.aspx. Than s to Walt Crosby for being persistent about reporting the bug and supplying the correct code.

* Added isnull() to chec for project custom fields in search.aspx, in case you have nulls in those fields. * Fixed some typos related to project custom dropdowns in search, for dropdowns 2 and 3. Also, improved performance of search with regards to project custom dropdowns. The page no longer ma es a trip to the server if you are NOT using project custom dropdowns. * Fixed "Object not set to reference bug on this line in edit_bug.aspx when a user with Reporter permission tries to update a bug with a custom field: Line 1851: string val = Request[drcc["name"].ToString()].Replace("'","''"); New Feature: Add ability for each user to mar bugs with a personal flag, li e, "Flag for follow-up". Use the new magic "$FLAG" macro in your queries as shown below. You also need the left outer join with the bug_user_flags table. Select ...., isnull(fl_flag,0) [$FLAG],... from bugs left outer join bug_user_flags on fl_bug = bg_id and fl_user = $ME

* Added missing permission chec

to subscribe.aspx.

----------------------------------------------------------------------Version 2.6.8 2007/12/07 ----------------------------------------------------------------------Upgrade your database for this version using the SQL here: alter table bugs add bg_org int not null default(0) alter table orgs add og_other_orgs_permission_level int not null default(2) * Fixed bug 843284 "svn diff, blame can't handle unix style line endings" * Fixed recently introduced bug where view-only users were seeing the wrong values in the dropdowns. * Fixed bug with edit_user.aspx. It was losing the user's default query selection. * Fixed bug with adding subscribers in view_subscribers.aspx. Only the newly added subscriber should get a notification. * Fixed bug for when there are two "WHERE" clauses in the SQL and it's the second one that needs to be altered for the permissions. It's a wor around. First the logic loo s for "WhErE", with the upper/lower case letters exactly li e that. Note the weird capitalization. For an example, see setup.sql, "demo last comment as column". * Fixed bug with add_svn_file_revisions.aspx. It was submitting the data twice. Than s to Walt Crosby for the fix. * Fixed bug 1707551 "[No project] = no edit" - when somebody adds a bug and doesn't set the project, then nobody can get to it in order to add the project if the DefaultPermissionLevel is not 2. New features: * You can now associate a bug to an "Organization". Typically, an "Organization" would be your company's customer, but it could also be a department within your company, or whatever group of users you want. * Added "Permission level for bugs associated with other (or no) organizations". This allows you to restrict a gorup of users to just being able to see bugs associated with that group. Typically, you would use this to restrict a customer, or an individual, to only seeing bugs associated with that customer or individual. ----------------------------------------------------------------------Version 2.6.7 2007/12/01 ----------------------------------------------------------------------* Added "organizations". See admin page. Some of the permissions that used to be on the third tab of the add/edit user page page are now on the add/edit organization page. If you are loo ing for something li e a user "role", use "organization". Actually, this new "organization" entity doesn't really do much yet, but its the basis for the next round of changes, to ma e BugTrac er.NET a better tool for an internal team to collaborate with external customers. * A query can now be visible either to 1) everybody, or 2) just one user

or 3) just one organization. If anybody wants to modify the code, and upgrade.sql too, so that the query-role relationship is many-to-many, so that one query can be associated with multiple organizations, I'd welcome that. Send it to ctrager@yahoo.com * Repaired the very poorly documented "guest" user feature that's been in the app for a couple years. It still needs documentation. Set up a user with the username of "guest" and limited either view only, or reporter only permissions. He will be different than other users because he will not be able to save searches as queries or change his own settings. In this way, several people can share the same "guest" account. ----------------------------------------------------------------------Version 2.6.6 2007/11/25 ----------------------------------------------------------------------New Features: * Search now handles project custom dropdowns. Than s to Jason Kresowaty, who too my primitive implementation and fixed and finished it. * The edit_bug.aspx page now has more "AJAX" behavior. Specifically, you can now do the following without having to first save your bug changes: add attachments dd relationships toggle show/hide images toggle show/hide change history get/stop notifications You still have to save your changes before clic ing a lin that would bring you to the send_email.aspx page. * You can now delete received emails if you are admin or have been given the permission by an admin. * Some changes to btnet_base.css to ma e it easier for fol s to customize the layout of edit_bug.aspx. Bug fixes: * Adding an attachment caused the user doing the adding to receive notification even when "Send notifications even for items you add or change" was not chec ed. * Emails with attachements and bugs posted by screen capture caused an additional notification per attachment. * Along with this release I'm posting a new version of the screen capture utility, btnetsc.exe version 2.1.1. There was a bug fix: Posting a screenshot to an EXISTING bug wrongly created a NEW bug instead of adding an attachment to the specified existing bug. ----------------------------------------------------------------------Version 2.6.5 2007/11/18

----------------------------------------------------------------------* !!!!!IMPORTANT!!!!! Print bug AND email notifications were both bro en by 2.6.4 because the logic was loo ing for btnet_custom.css in the wrong folder. If you don't want to move to this release, then you can put an additional copy of btnet_custom.css into the parent btnet folder to fix the problem. * Cosmetic changes in the add/edit bug form. The goal is to ma e it easier to read for all three categories of users: - full add/edit permission - reporter only permission - view only permission In general, in the coming releases, I want to ma e BugTrac er.NET better as a trac er that faces outside, customers, clients, users, rather than just a trac er that is used internally. * "Comment visible to internal users only" shouldn't have been visible to view-only users

* Hid lin s that view-only users shouldn't see: add attachment send email ----------------------------------------------------------------------Version 2.6.4 2007/11/17 ----------------------------------------------------------------------See "upgrade.sql" for database changes for this release. Run the relevant part of the script against your database to upgrade. * Created new "custom" folder and moved several files into it. All the files intended for customization are in this folder now, except for Web.config. When you upgrade to a new version of BugTrac er.NET, just ma e sure you don't overlay your Web.config and all the files in the "custom" folder. * Added ability to specify subversion repository, user, password and WebSvn URL for specific projects different from the overall global settings in Web.config. * Fixed svn_blame.aspx. It wasn't HTML encoding the text of the document, so if the code had HTML tags, the page displayed nonsense. * RFE 1750613 "Project Description and name, not just name" * BugTrac er.NET now gives you the choice of storing attachments in the database instead of in a file folder. You can switch the setting bac and forth, because the app will always loo in both locations if it can't find the attachment in the first location. Than s to Jason Kresowaty who did all the wor on this change. This satisifies the following RFE's: 1825966 "Attachment as BLOB field in DB" 1468063 "Image Upload in SQL Database"

* In relationships page, "detach" lin view-only users.

shouldn't have been visible to

* "UploadFolder" setting was missing from recent versions of the Web.config file. * Fixed bug with send_email.aspx when forwarding comments entered with font/color formatting. Than s to Jochen Jonc heere for the fix. * Changed "about.aspx" to "about.html". * RFE 1832515 "Show Field Name When Editing Custom Field" * Fixed default.aspx to use custom_logo.html. ----------------------------------------------------------------------Version 2.6.3 2007/11/10 ----------------------------------------------------------------------* The Web.config setting "LogoHtml" is now obsolete. Instead, there are now three new files that give you even more control over the loo : custom_logo.html - The "BugTrac er.NET" logo is in this file. If you are using "LogoHtml", copy your HTML to this file instead. You don't have to escape the HTML characters. custom_header.html - HTML that is written before the logo and lin s at the top. custom_footer.html - HTML this is written just before the closing </body> tag. Changes you ma e in these files don't ta e effect until you restart the Web application - For example, by "touching" Global.asax by entering a space character in it. * More subversion integration: Added "TortoiseSVN_integration.bat" to the Subversion folder. It's another, nicer, way to integrate Subversion with BugTrac er.NET. For general information about how this script wor s, see: http://tortoisesvn.net/issuetrac er_integration Also modified btnet_post_commit.vbs to have the option to wor with the nicer TortoiseSVN integration. It can optionally loo for the bugid at the end of the chec in comment instead of the beginning. ----------------------------------------------------------------------Version 2.6.2 2007/11/8 ----------------------------------------------------------------------Along with this release of the web pages, there's a new release of the screen capture utility, btnetsc_2.0.exe. The new screen capture supports SSL. If you aren't using SSL, you don't need to upgrade. Than s to Jason Kresowaty, who did all the wor . Bug fixes in this release: * svn_diff.aspx ("diff") wasn't escaping HTML tags. * svn_diff.aspx didn't color some diffs right (when unified diff output omitted the number of lines in the bloc )

* If "PromptBeforeLeavingEditBugPage" setting was turned on, toggle images/history lin s resulted in page-not-found. Also: * Added an additional way to integrate with Subversion, by adding a lin to a WebSvn (or similar) web page. See the new Web.config setting "WebSvnUrl". * Swapped svn_log.aspx bac to listing most recent on top. * Removed the "edit" column at the far right of the bug lists * Revised the page that generates registry settings for the screen capture utility, generate_btnetsc_reg.aspx. It no longer creates a setting for "Port" since you would now specify that in the URL itself, if it's not a standard port. ----------------------------------------------------------------------Version 2.6.1 2007/11/5 ----------------------------------------------------------------------Important bug fixes: * Adding a user didn't set the user's password correctly. You had to re-edit the users password before it really got into the db. This bug was introduced in version 2.5.8. * "EncryptStoredPasswords" setting in Web.config was being ignored. I thin also introduced in 2.5.8. * Version 2.6.0 Subversion post-commit script wasn't handling multiline chec in comments. * Subversion post-commit script wasn't handling single quotes in chec in comments. * With the addition of the additional user fields in 2.5.8, the users.aspx page, the list of users, was hard to user because the "edit" lin was so far from the name of the user. Moved it to the far left. Also, added the revised pre-commit script by Jason Kresowaty. Than s Jason, for your patience. Also from Jason: * now displaying Subversion dates in a nice format. * svn_log.aspx handles deleted files better. ----------------------------------------------------------------------Version 2.6.0 2007/11/3 ----------------------------------------------------------------------Big changes to the Subversion integration. If you are using the new Subversion pages in 2.5.9, you should upgrade to 2.6.0. First of all, if you aren't using version control at all, start using Subversion and TortoiseSVN. If you are using SourceSafe, you might still want to experiment with Subversion/TortoiseSVN and BugTrac er.NET

together just to see what you are missing. IMPORTANT: To migrate to this release, run the SQL in upgrade.sql. The sql creates two new tables, svn_revisions and svn_affected_paths and loads them with whatever data you have in the bug_file_revisions table. These two new tables REPLACE your old bug_file_revisions table. I am not deleting that table, but I'm no longer supporting it. IMPORTANT: You **MUST** replace your BugTrac er.NET subversion post-commit hoo script to wor with the new database tables and new web pages. Just modify the new one the same as the old, changing the path to the "svnloo .exe" command and your database connection string. I've also revised the script to ma e it easier to read and debug. Also, several new pages REPLACE the view_file_revisions.aspx page. You will be able to do the svn commands cat, log, diff, and blame from within BugTrac er.NET. I'm interested in feedbac on the Subversion integration, so please let me now what you thin at ctrager@yahoo.com. For admins, there is a lin at the bottom of the "revisions" page to manually connect a revision to a bug, in case there's a glitch with the post-commit script (li e, the db was down at the time of the commit?), or if you forgot to put the bugid in the comment. Bug fixes in the subversion pages include: * Better handling of file renames, although it's not perfect. See the note on renames in Subversion's documentation: http://svn.collab.net/repos/svn/trun /doc/user/svn-best-practices.html * Handling of spaces in file paths. * Fixed ocassionaly hangs capturing the stdout output of the svn command. Also, bug fixes unrelated to Subversion: * Added title to reports produced by "view data" lin . * Fixed bug with single quotes in the both the labels and values of project-level custom dropdowns. ----------------------------------------------------------------------Version 2.5.9 2007/10/30 ----------------------------------------------------------------------Inportant bug fixes. New features too. Also, better Subversion integration. First, than s to everybody who quic ly reported the bugs in 2.5.8 and especially to Jochen Jonc heere who provided several of the fixes. And sorry to everybody for the inconvenience. So, first these are bugs that I introduced in 2.5.8 and am fixing in this release: * Edit_user.aspx as bro en. If you tried to add a new user. * Notifications didn't get sent if the ONLY change was a change to comments.

* Delete_comment.aspx was bro en. * Translate.aspx was bro en. * In the admin pages that list categories, statuses, priorities, the "id" column was missing and a new "hidden" column was showing.

Other changes: * In the lists of bugs on the bugs and search pages, the filters, sorts, and page (when the list is long and has to be bro en into pages) is remembered until you run a new query. This fulfills RFE 1720096 "Retain applied filters on bugs screen" and RFE 1632312 persistent sort/filter. * Now chec ing for dupe query names before saving * Changed the behavior of the "history", "relationships", "subscribers" lin s in edit_bug.aspx. Instead of them opening a fa e modal-i e window, they open a real browser window. * Added "PromptBeforeLeavingEditBugPage" setting to Web.config. If you set it to "1", then clic ing on the "add attachment", "send email", and the hide/show toggle lin s causes their to be a prompt warning the user that unsaved changes will be lost. It should be a per-user setting, but right now it's not. Sorry.

Subversion Integration Because of the bugs I introduced in 2.5.8, I am doing this release ASAP I happen to be in the middle of improving the Subversion integration. If you give the web server machine client access to subversion, and set the following settings in Web.config appropriately, you'll see some of the new pages wor ing. Maybe you want to experiment with them and give me feedbac ? In the next wee or two I hope to complete this wor and provide documentation. But for now, maybe experiment. I've also put a new Subversion "pre-commit" script into the Subversion folder. The author is Jason Kresowaty. Than s to Jason for the script and for good info/advice about Subversion. "EnableSubversionIntegration" "SubversionRepositoryUrl" "SubversionPathToSvn" "SubversionUsername" "SubversionPassword"

----------------------------------------------------------------------Version 2.5.8 2007/10/26 ----------------------------------------------------------------------To migrate from 2.5.7 to 2.5.8 run the sql in upgrade.sql.

IMPORTANT: This release affects user permissions and the behavior of the search page. It's possible that some non-admins will temporarily have FEWER permissions because I'm changing some settings to be from global, for the entire installation, to per-user. All users will be able to save searches as queries, but only users you choose will be allowed to edit the raw sql.

* The following settings in Web.config are now obsolete. Instead of the global switches here in Web.config, you can now control these settings for individual users, which is explained in the next bullet point: HideSql AllowQueryPageForNonAdmins AllowBugDeletionForNonAdmins AllowCommentDeletionForNonAdmins AllowBugMergingForNonAdmins AllowAttachmentDeletionForNonAdmins AllowQueryEditingForNonAdmins * The following fields have been added to the users page, permission tab. Here's how they are explained on the page edit_user.aspx, in the permissions pane: Use the following settings to control permissions for non-admins. Admins have all permissions regardless of these settings. [] External user (External users cannot view posts mar ed "Visible for internal usrs only") [] Can edit sql and create/edit queries for everybody [] Can delete bugs [] Can edit and delete comments and attachments [] Can merge two bugs into one [] Can mass edit bugs on search page [] Can use reports [] Can create/edit reports [X] Appears in "assigned to" dropdown in edit bug page (defaults to true ) Except for "Appears in 'assigned to' dropdown in edit bug page", all the other fields default to false. That is, if you had any of the "Allow" settings in Web.config set to "1", you will have to edit the user permissions to restore the feature to that user. For example, if you had "AllowBugDeletionForNonAdmins" set to "1", you will have to edit each user and chec "Can delete bugs". You could also run some SQL to update settings for all users. The format would be: update users set XXX = 1 Replace X with one of the new fields: us_can_edit_sql us_can_delete_bug us_can_edit_and_delete_posts us_can_merge_bugs us_can_mass_edit_bugs us_can_use_reports us_can_edit_reports

Please

eep reading for the details:

The end result of removing the fields from Web.config and putting them on the user page is that you now have finer-grained control over who can do what. * All users by default now have the ability to save search criteria as a private query that only that user can see. Users with minimum permissions cannot see or edit the sql itself. Admin can grant permission to individual users to see and edit sql, create public queries. * Added new feature/concept: a distinction between internal and external users. The feature is turned off by default. Enable by setting "EnableInternalOnlyPosts" in Web.config to "1". When enabled, achec box appears where you can add/edit comments or attachments. The chec box lets you mar the comment or attachment as "Visible to internal users only". Users mar ed "external" on the edit_user.aspx permission pane won't be able to see them. Please read the entire comment in Web.config. * Added the ability to create a new user by copying an existing user. Everything on the edit_user.aspx page gets copied except for the source user's username, first and last name, password, email address, and email signiture. All the permissions get copied. * Cosmetic change. The lin s to "edit" or "delete" things li e users, projects, categories have been moved from the far right to the far left. ----------------------------------------------------------------------Version 2.5.7 2007/10/14 ----------------------------------------------------------------------The changes in this release only affect appearance - the css files and how they interact with the web pages. Btnet_base.css has been changed so that more control of the tables is in .css. But good luc actually changing anything - I found that Firefox and Internet Explorer's reaction to table-related css changes to be very different. If you have made changes css changes to customize the loo of tables, it's possible that you will have to adjust them with this release. But you'll end up with more css control. Also, if you have wanted to use css positioning, you might have found that changes to the edit page brea the search page. Now the edit bug page, edit_bug.aspx, now additionally includes the btnet_edit_bug.css and the search page, search.aspx now additionally includes btnet_search.css. These new css pages allow you to change css positioning of elements on those pages indepenently, so that changes to positioning on one page don't affect the other. * Fixed bug 1806180 - "Sortable.js doesn't maintain class attribute on table." * Fixed bug 1778632 - "Using custom CSS formats Search page too" * Did RFE 1033103 - "Move All Formatting to CSS" -----------------------------------------------------------------------

Version 2.5.6 2007/ 9/23 ----------------------------------------------------------------------No features or bug fixes in this release. The code is now more compatible with Visual Studio. The ideas for these changes come from Andrew McKay. You can now compile and publish the web pages using Visual Studio. More detail about the changes: * The files related to SharpMimeTool.dll have been moved to a separate "SharpMime" folder and now there is a csproj file too. * Li ewise, code for btnet_service.exe and btnet_console.exe also have been moved to a seperate "btnet_service" folder and there are csproj files for each. * Renamed some "inc..." files so that they have an .inc file extension instead of an .aspx extension. The .aspx was confusing to Visual Studio. * Made minor changes to the code to ma e a lot of the compile warnings go away. You can ignore the warnings about about the obsolete System.Web.Mail and System.Configuration.ConfigurationSettings. They still wor fine. ----------------------------------------------------------------------Version 2.5.5 2007/ 9/21 ----------------------------------------------------------------------Important bug fix: * Fixed bug 1800000 "Search.aspx throwing error in SQL" - because there's a space missing after the "and" or after the "or". * Fixed bug in insert_bug.aspx if screen capture or btnet_service.exe tries to use it after website has been idle for a while, related to forum thread "project email insertion causes strange error". ----------------------------------------------------------------------Version 2.5.4 2007/ 9/16 ----------------------------------------------------------------------* Enhanced search: Added radio button that allows users to use "or" logic between SQL where clauses instead of always "and". So, instead of where A = 1 and B = 2 and C = 3 You can do where A = 1 or B = 2 or C = 3 It's either all "and" or all "or". Also, for custom text fields that are not dropdowns, SQL uses "li e" operator instead of equals. That is, search loo s for rows where the field has a value that contains the text the user typed in rather

than rows where the field has a value that exactly matches what the user typed in. * Fixed bug 1647742 "Popups don't close always and should have a delay". I you have disabled the popups because you thought they were annoying, I encourage you to try them again. Email me at ctrager@yahoo.com and tell me what you thin . * Fixed bug in send_mail.aspx. The bug description and the fix are from Jochen Jonc heere: "The forwarded email didn t contain the original e-mail, or just a part of it. The cause is that FCKeditor sees a < or > as the beginning of a tag and if it isn t a valid one the rest of the text is ignored. This only occurs when using Firefox." * Fixed bug 1789400 "Error when searching with no criteria selected". The problem was a custom column with the characters "order" as part of its name. Confused my logic that loo s for the "ORDER BY" clause in SQL. ----------------------------------------------------------------------Version 2.5.3 2007/9/3 ----------------------------------------------------------------------* Added support for GMail SMTP and POP3. See new settings in Web.config and btnet_service.exe.config. Than s to Eric (TehOne) Lebetsamer for the code. * Fixed bug 1771868 "Tabs don't change on settings pages for IE" * Fixed bug 1766649 "Decimal custom fields cause search.aspx to crash" Than s to "David" for the code. * Added "LogSqlEnabled" setting in Web.config, which you can use to log less by setting to "0". ----------------------------------------------------------------------Version 2.5.2 2007/ 7/15 ----------------------------------------------------------------------* I posted version 1.9 of btnetsc.exe, the screen capture utility. It now wor s with non ascii (Chinese, Arabic, etc), both the short description and the longer comment area. Also, you no longer have to tell it the "codepage". (This was my own personal #1 bug. I probably spent 100 hours trying to get btnetsc.exe to fully support Unicode. Whew!) * RFE 1749357 "Allow filtering on empty field" Added [none] and [any] options to the dropdown filters. In order for these to wor right, you have to ma e sure that all your bug queries return blan s, not nulls for columns with no value. See setup.sql for how I've used "isnull" in the queries, for example: select .... isnull(ct_name,'') .... left outer join categories.... * RFE 1744256 "please remove 7000 character limitation" - removed the restriction. * RFE 1746947 "Filter User List (Admin page) - show/hide inactive users"

* Fixed date format in btnet log (for debugging). It should always show time down to seconds regardless of app's display format. * Added some logging messages that might help fol s who have the problem where they log in and get redirected bac to the login page over and over. It doesn't fix the problem, but it ma es it clearer if the problem is being caused by the failure of the browser to send the coo ie bac that was issued to it when the browser logged in. ----------------------------------------------------------------------Version 2.5.1 2007/ 6/26 ----------------------------------------------------------------------* Fixed upgrade.sql. It was missing the "pu_admin" column on project_user_xref, required for upgrading to 2.5.0. * Fixed generate_btnetsc_reg.aspx. It had the wrong registry ey. Than s to "romwil" for the code for this fix. * Enhanced insert_bug.aspx so that categories, etc can be controlled from the query string. See README.HTML. Loo for "$CATEGORY$". * Added a "more CSS info..." lin to edit_priority.aspx, edit_status.aspx. If you are using CSS styles to indicate different priorities and statuses, or if you are interested in doing so, then clic on that lin . The new page (edit_styles.aspx) gives you an overview of the combined effect of the priority and status styles. ----------------------------------------------------------------------Version 2.5.0 2007/ 6/15 ----------------------------------------------------------------------Run this SQL for this upgrade (also found in upgrade.sql) alter table users add us_enable_bug_list_popups int not null default(1) alter table users add us_created_user int not null default(1) * Added new feature "project admin". An admin is able to give permission to a regular user to add and delete users for specified projects. This features satisfies RFE: 1451208 "New role of project admin - can add users for his project" Does not satisfy the following which deals with changing project settings. 1719295 "Admin for his own project" * Added ability in user settings to turn OFF the green popups in the bug lists. * This won't matter to you unless you have modified your copy of BugTrac er.NET's source code: Re-arranged some code. I moved things out of a couple of the "inc" files and into util.cs. I also organized the code a bit within util.cs into more classes. The following files are now gone: inc_insert_bug.aspx inc_print_bug.aspx edit_user_permissions.aspx

* Added a lin "screen capture" to bugs.aspx to ma e it easier to get started with the screen capture utility. From it you can download the screen capture utility from sourceforge and you can generate a .reg file to initialize btnetsc.exe's settings. *Along with this release, I'm posting btnetsc_1.8.exe. (The screen capture utility). It now loo s for its settings in a new place in the registry that isn't version dependent, so that as you upgrade without loosing your previous settings. * Also new in screen capture utility, You can now also post screen capture images to EXISTING bugs rather than being forced to create new ones. * Rearranged the code in upgrade.sql, so that the most recent entries are at the bottom instead of the top. * Emails are now sent UTF8 encoded. If somehow that brea s things for you, set the new "BodyEncodingUTF8" Web.config setting to "0". * Made cosmetic changes to the "settings" page the pages for editing users, edit_self.aspx and edit_user.aspx. They have something li e tabs now, except that the tabs don't loo li e tabs. ----------------------------------------------------------------------Version 2.4.9 2007/ 5/12 ----------------------------------------------------------------------To migrate from 2.4.8 to 2.4.9, run the sql in upgrade.sql: alter table bug_posts add bp_comment_search ntext null alter table users add us_use_fc editor int not null default(0) alter table bug_relationships alter column re_type nvarchar(500) * This release integrates "FCKEditor" (www.fc editor.net). To try it out, go to your user settings and chec "edit using colors and fonts". Than s to Jochen Jonc heere for this nice new feature. * Changed the documentation in README.html. Most important to some of you, I added instructions on how to use the Visual Studio debugger with BugTrac er.NET. (Than s to the anonymous person who posted the instructions on the sourceforge forum.) * Fixed bug 1708170 "Using presets does not refresh Re-assign drop down". I fixed it by removing "project" as one of the fields that the preset lin changes. * Fixed bug - Dropdown filter was showing users who didn't have permissions in projects for which the logged in user has permissions. * Fixed bug 1689731 "bug relationship with long comment causes SQL error". I increased the size of the column 500. * Fixed bug where users without project permissions related to the logged on user were being displayed in the user filter dropdowns of the bug lists. * Changed the send_email.aspx "To:" field allow for more characters. * The "edit comment" page is now only available for comments. Not

for sent emails, history of updates. It doesn't ma e sense to be able to edit the text of an email after it has been sent. * Cosmetic improvements: Changed edit_bug.aspx so that its appearance can be a bit more controlled using style sheets. I also added some more sample code to btnet_custom.css. The intent of the changes and the sample code was to show that you could align the column of the labels and dropdowns the way you li ed, using css. * Recompiled btnet_service.exe, just in case I had forgotten to last time... Sorry... * Corrected the spelling of "EXCEPTION" in Global.asax. * Added a note about the "sessionState" setting and the "mode" attribute in Web.config. * Fixed another null object error in "print details" related to ASP.NET session timeout. * Fixed bug where emails weren't being processed right because header fields said "from:" instead of "From:". Discussed in Help Forum topic "from: missing from emailed bugs". For more info, see: http://www.devnewsgroups.net/group/microsoft.public.dotnet.framewor /topic62515. aspx * Now preventing passwords from being filled in automatically on the "edit user" pages. Added "autocomplete=off" to password and confirm password fields. * Not sure if this made it into the compiled version of btnet_service.exe or not in 2.4.8, but this time for sure the service now is mar ed as having a dependency on TCPIP. That allows Windows to now that it needs to start the networ stuff before it starts this service, li e when the server is rebooted. Than s to Jochen Jonc heere. ----------------------------------------------------------------------Version 2.4.8 2007/ 3/11 ----------------------------------------------------------------------* Fixed bug 1663239 "Swedish characters stripped in email bug reports" The problem is related to how the POP3 service client reads the input. I'm a little bit worried that my fix is ris y, so only turn on the fix if you thin you need it. To turn it on, set "ReadInputStreamCharByChar" in btnet_service.exe.config to "1". * Fixed bug 1672988 "Custom user dropdown shows integer rather than name in email" * Fixed bug 1643938 "Item has already been added. Key in dictionary: SERVER_NAME". Or, at least I hope I fixed it. I can't reproduce it, but I got rid of the line of code that was causing it, I thin . Let me now if you still have this problem. The fol s who have had it say it is very infrequent. * Fixed bugs 1649980, 1638919 "ERROR AFTER SESSION TIMEOUT". I'm still using ASP.NET session variables in a few places, but not the one here that was causing problems.

* Added logic for RFE 836604 "allow customization of subject field of e-mail notifications". Related to this RFE, the app is no longer using Web.config setting "PutTrac ingIdStringInNotifications". Instead, it is using new Web.config setting "NotificationSubjectFormat", which can do what the "PutTrac ingIdStringInNotifications" setting did, and much more too. See comments in Web.config for "NotificationSubjectFormat" on how to use the new setting. * When you add somebody ELSE as a subscriber to a bug, that person will now get a notification at that moment, instead of having to do a subsequent change to trigger the sending of the email. * Changed btnet_base.css to ma e the filter dropdowns less wide. Not much difference on IE, but it helps with screen real estate on Firefox. * Added X axis labels to the line charts you can view from the "reports" page. * Made some minor performance improvements by batching up SQL on the search.aspx page. ----------------------------------------------------------------------Version 2.4.7 2007/ 3/02 ----------------------------------------------------------------------* "Fixed" bug 1654938 "Edit a comment destroys Umlaut's". Actually, I can't reproduce the problem, but I added a line in Web.config so that if you do have the problem you can turn on a fix for yourself. See the new Web.config setting "HtmlDecodeComment". * Add others as subscribers. From the subscribers lin on the edit_bug.aspx page, you can now add others besides yourself as subscribers. * Changed btnet_service.exe "Installer" to record dependency on TCP/IP. Used code from Jochen Jonc heere verbatim. * Added "TotalErrorsAllowed" to btnet_service.exe.config. The comment there says: "How many errors should we allow before the fetch loop automatically stops? This is a safeguard in case there is some sort of problem with the web server where insert_bug.aspx does succeed in inserting the bug, but somehow fails to give a good response to this service. If the service doesn't get a good response, it will not delete the email from the pop3 server and will try to insert the email again when the fetch interval triggers another loop. The result can be a lot of duplicate bugs generated from the one problem email. This has happened to a couple people...." ----------------------------------------------------------------------Version 2.4.6 2007/ 2/24 ----------------------------------------------------------------------I added some integration with Subversion.

If you aren't using Subversion, don't bother with this release. If you want to do the integration, run the sql in upgrade.sql and then read the instructions in the file. "btnet_post_commit.rename_to_vbs" Before using it, rename it to btnet_post_commit.vbs. With this script, when you commit to cvs, if you put the bugid at the start of you commit comment, the script will insert recs into a new bug_file_revisions table connecting the bug with the revision and the files. ----------------------------------------------------------------------Version 2.4.5 2007/ 2/22 ----------------------------------------------------------------------The handling of incoming emails is better with this release. I'm using the latest SharpMimeTools, downloaded from here: http://anmar.eu.org/projects/sharpmimetools Here's the line I use to compile the source into the dll: C:\cit\btnet>csc /debug /R:log4net.dll /target:library SharpMimeTools.cs ABNF.cs SharpMessage.cs SharpMimeAddress.cs SharpMimeHeader.cs SharpMimeMessage.cs SharpMimeMessageCollection.cs SharpMimeMessageStream.cs SharpDecodeOptions.cs SharpTnefMessage.cs Besides using a newer SharpMimeTools, I also made fixes to my code: * Fixed bug 1665336 "Thunderbird e-mails end up as HTML code". I'm now ma ing an attachment of everything that does NOT loo li e the plain text message body. * Fixed bug 1663242 "Email attachments not wor ing for Thunderbird". A variation on the same problem. * Fixed bug parsing incoming emails with multiparts nested within multiparts. A symptom of the bug was that I was failing to find a message body. * New Web.config "ProcessVariablesInEmails" setting for turning variable parsing on and off. Set to 0 by default, so if you were using these variables, ma e sure your Web.config now has this set to 1. * Added another variable parsed in the email, $PROJECT$. See sourcecode of insert_bug.aspx for how these wor . * Changed all uses of @@IDENTITY in SQL to scope_identity(). * Added "PutTrac ingIdStringInNotifications" to Web.config. This is related to the forum thread "Trac ingIdString". http://sourceforge.net/forum/forum.php?thread_id=1676067&forum_id=226938 * Added support for RFE 1641374 "Automatically re-open an issue". See Web.config setting "StatusResultingFromIncomingEmail". ----------------------------------------------------------------------Version 2.4.4 2007/ 1/14

----------------------------------------------------------------------Minor bug fixes only in this release. Fixed bug 1635411 "error when user is view only, and default perm lvl is 0". Fixed bug with bugs.aspx and $fullnames in SQL, in bugs.aspx Fixed bug with "[first]" lin as discussed in Help forum topic "[last] / [first] lin issue". Fixed problem with old sql in upgrade.sql as discussed in Help forum topic "Updgrade issues from v1.9.6 to v2.4.3" Fixed problem with custom user dropdowns as discussed in Help forum topic "User type custom col history shows user id" Fixed bug 1605280 "SSPI login fails if the user's full name contains ' [single quote]". I added "HtmlEncodeSql" setting in web.config. If you are having the problems described in these bugs, try setting it to 1 and let me now at ctrager@yahoo.com if it helps. 1590120 html encoding wrong for editing queries 1585740 "Saving Query does not allow < or > symbols?" You can now pass the user and password to default.aspx in the URL, li e http://YOURHOST/default.aspx?user=admin&password=admin ----------------------------------------------------------------------Version 2.4.3 2006/11/19 ----------------------------------------------------------------------Minor fixes: * Fixed bug 1595637 "btnet 2.4.2, ToTable() doesn't compile in .NET 1.1" * Fixed bug 1597628 "Default search.aspx SQL doesn't wor with UseFullNames" * Fixed crash on null when bug's f to user defined attribute table, or something similar was pointing to a non-existent row. This happens if you delete a row in the status, permission, category, or user defined attribute table directly in SQL instead of going through the webpages. The webpages stop you from deleting rows if they are referenced by bugs. * I added a page "default_simple.aspx". Some fol s have experienced the following symptom: They setup up BugTrac er.NET and try to log in for the first time and after typing in the valid user/password the next page they see is still default.aspx, with no error message. If you are having this problem, try default_simple.aspx, and maybe that will wor ? ----------------------------------------------------------------------Version 2.4.2 2006/11/12 ----------------------------------------------------------------------For this upgrade, run these sql statements:

alter table custom_col_metadata add ccm_sort_seq int default(0) alter table custom_col_metadata add ccm_dropdown_type varchar(20) null I changed Bug_list.js. Sometimes when I change javascript files fol s report problems. The solution is to clear the browser cache so that the browser gets the latest file. * When adding a new bug, now displaying a project's default user before the bug has been added to the db. * Fixed bug where searching on text fields wasn't wor ing with unicode. * There's now a new type of custom field, a "user" dropdown. It is populated with the same list of users as "assigned to". In other words, it follows the same permission rules. For those of you who wanted an "owner", in addition to the "assigned to", or something li e that, I thin this will wor for you. * You can now specify what order custom fields appear on the screen. It used to be they displayed in the order that you created them. Now they display in the order that you arrange them. If you want more control over layout, use the custom css file. * The filters feature, the ones that you see in the column headings, has been enhanced. There are now filters for custom fields which are dropdowns, including the new "users" dropdown, the "User Defined Attribute", and the "reported by" and "assigned to" fields. * Custom columns are now automatically added as "SELECT" columns in the SQL being generated by the search page. In the past, they had been added to the search results, but not to the SQL you could see at the bottom of the page, that you could save as a query. * On the search page, custom columns which are dropdowns are presented as dropdowns that allow multiple selection, just li e the built in fields li e "category", etc. * On the search page, custom columns which are NOT dropdowns, which are presented as simple input fields now support multiple entries, seperated by commas. ----------------------------------------------------------------------Version 2.4.1 2006/10/28 ----------------------------------------------------------------------* Fixed bug 1583153 "Add New Bug" gives security warning using IE, this page contains both secure and nonsecure items. * Fixed bug 1583310 "Print Detail crashed trac er when bg_id isn't called 'id'" * Fixed bug 1584916 "Custom dropdown, first option not visible in IE" * Corrected HTML encoding in popups in bug list. * Added Web.config setting "SmtpUseSSL". If your SMTP provider requires SSL. Gmail, apparently, does. * Added Web.config setting "BugListFormSubmitMethod". Here's what I

wrote in Web.config: "When navigating bac to the bug list using the browser's "Bac " button, do you get a warning "Warning: Page has Expired"? If so, try changing this from "POST" to "GET". But, if you get a javascript error when submitting the form around the line "theForm.submit()", then use "POST".

----------------------------------------------------------------------Version 2.4.0 2006/10/21 ----------------------------------------------------------------------You will need to run this SQL to upgrade to this release. create table custom_col_metadata ( ccm_colorder int not null, ccm_dropdown_vals nvarchar(1000) not null default('') ) create unique index cdv_index on custom_col_metadata (ccm_colorder) * Finally added ability to create as many dropdown custom fields as you want. Try the "admin" "custom fields" page. This change is related to these RFEs: 1578265 "custom listbox" 1063616 "CODE TO CREATE PICKLIST CUSTOM FIELD POSTED HERE" 1556453 "allow unlimited custom dropdowns - global or proj specific" * Made default values for custom fields actually wor right. This was RFE 1017561 "Ability to create default value for custom fields". * Added "Presets" feature to edit_bug.asp. Set all 6 dropdowns with one clic . * Adjusted copyright notice so as not to interfere with exporting to excel. * Fixed bug 1578303 "edit_self.aspx can't handle NULL in users.us_default_query" * When there were to many pages, the lin s to move from pages stretched across the page. Now showing thirty at a time. * Fixed bug 1014749 "CHNGING PRJCT: shouldn\'t be able to change to view only prj" * Fixed bug 1346170 "Bugs stranded if no Project assigned" * Fixed bug 1463935 "View only user should not be able to edit comments" * Fixed bug 1040849 "CHNGING PRJCT: bug_subscriptions not updated".

This change covers RFE 1583779 "bac

to the view page"

GET can brea if you are sending too much data bac ASP.NET's viewstate mechanism is ind of long."

to the server - and

----------------------------------------------------------------------Version 2.3.9 2006/10/13 ----------------------------------------------------------------------* Fixed bug 1575345 "Datetime conversion error on bug updt (localization problem)". If your times use "." as a seperator instead of a ":", this will help you. * Related to above, corrected default "SQLServerDateFormat" in Web.config to "yyyyMMdd HH\:mm\:ss". * I revised Web.config comments based on info in 1239348 "CultureName comments in Web.config misleading regarding date". * Fixed bugs 1521559 "Search Page Too Wide With Long Custom Fields" and 1575969 "large custom field shows as "text", not "textarea" in search" * Fixed bug where a ">" in the sql saved as a query were saved as "&gt;". * Fixed handling of single quotes in search.aspx in custom fields. * RFE 1575859 "custom lin at post level, same as lin at bug level" Jochen Jonc heere did the wor and contributed a fun example that can translate a bug comment from one language to another. See the new "CustomPostLin Label" and "CustomPostLin Url" settings in Web.config. ----------------------------------------------------------------------Version 2.3.8 2006/10/11 ----------------------------------------------------------------------Just one big fix - for bug 1575066 "bugs.aspx not dispayed in IE". Sorry everybody. You can just edit your copies of bugs.aspx and search.aspx instead of downloading this version. Change this: <div id="popup" class="buglist_popup"</div> to this: <div id="popup" class="buglist_popup"></div> (add a closing ">") ----------------------------------------------------------------------Version 2.3.7 2006/10/10 ----------------------------------------------------------------------* Fix for bug 917157 introduced a bug. The bug was, if you try to update the same bug twice in a row, the second time you are prompted to refresh, even though there was nobody else updating the same bug. * Added AJAX effect to search.aspx on the "description contains" field. Li e "Intellisense" or Google "Suggest", it will respond to the characters as you type them by loo ing for similar entries in the

database Added the setting "SearchSuggestMinChars" to Web.config, which let's you control when "suggest" activates. Set it to something li e 9999 if you want to turn it off. * Removed the "alert corey" from show/hide form in search.aspx. I thought I had done it a long time ago.... * Emails received by btnet_service or btnet_console now cause the bugs last_updated_user and date to change. ----------------------------------------------------------------------Version 2.3.6 2006/10/8 ----------------------------------------------------------------------* Added AJAX effect to bugs.aspx and search.aspx. I show the first comment of a bog in a popup div when the house hovers over the description. * Fixed bug 1086404 "Cannot autosubscribe to 'no project' bugs" * Moved some javascript out of .aspx files into .js files. ----------------------------------------------------------------------Version 2.3.5 2006/10/7 -----------------------------------------------------------------------

* Fixed bug 894971 "Enter does not wor in add_attachment.aspx" * Fixed bug 917157 "Data is written to DB when the data hasn't been changed". This is really about how the app handles the situation when there are two people both updating the same bug around the same time. Now the app will tell you: Bug was NOT updated. Somebody changed it while you were editing it. Clic to refresh the page and discard your change * Fixed bug 1572700 "Merging bugs - deleted bug still in query results" * Fixed bug 1021073 "Subscriptions aren't updated retroactively when settings chg". and RFE 1063134 "Update subscription historically/Synchronize subscription" See the pages for editing users or your own settings, "Apply subscription changes retroactively". * Merging a bug now generates email notifications li e other bug updates. ----------------------------------------------------------------------Version 2.3.4 2006/10/6 ----------------------------------------------------------------------* Fixed typo in setup.sql, line 222. Said "ndex" instead of "index".

* Fixed bug 1202670 "mixed-mode authentication brea

* Fixed bug 839417 "Double clic

on Update yields double records"

direct bug lin s

from email". The fix is than s to Michael Wilson. * Removed some code I accidently left in the btnet_service.exe for testing. The test code made it impossible to turn the logging off and the logging was always pointing at c:\temp\a.txt. Logging was just added a couple days ago in 2.3.3. * Fixed bug 1571090 "btnet_service.exe can stay in 'starting' state a long time. Now the service is responsive if you want to stop it even if it is in the middle of downloading emails. ----------------------------------------------------------------------Version 2.3.3 2006/10/4 ----------------------------------------------------------------------* Fixed bug 1571057 "btnet_service.exe with new style config does not wor .". For this, ta e a loo at the revised btnet_service.exe.config sample and structure yours the same way. Below I show the structure. Also the service now supports a log file, which you can control using the "LogFileFolder" and "LogEnabled" settings. <configuration> <configSections> <section name="btnetSettings" type="System.Configuration.NameValueFileSectionHandler,S ystem, Version=1.0.3300.0,Culture=neutral, PublicKeyTo en=b77a5c561934e089" /> </configSections> <btnetSettings> <GlobalSettings> <add ey="LogFileFolder" value="c:\temp"/> <add ey="LogEnabled" value="1"/> <!-How frequently should btnet_console.exe or btnet _service.exe chec the server for emails? --> <add ey="FetchIntervalInMinutes" value="15"/> </GlobalSettings> <Website> etc... etc... </Website> <Website> etc... etc... </Website> </btnetSettings> </configuration> * I provided a wor around for bug 1566732 "Blan notifications if viewed on web at gmail or yahoo mail". I guess yahoo mail and gmail don't li e the style sheet (the .css file) that is used for the HTML mail notifications.

see the following for more info: http://sourceforge.net/trac er/index.php?func=detail&aid=1566732&group_id=66812& atid=515837 The wor around allows you to create an optional "btnet_base_notifications.css" and "btnet_custom_notifications.css" and then the app will use those files as the style sheets for the emails instead of "btnet_base.css" and "btnet_custom.css".

Unfortunately, these style sheets will apply for all your users that get notifications, not just the ones who use yahoo or gmail. * Removed the "two-way" chec box on the new relationship page, because it wasn't implemented in a solid way. ----------------------------------------------------------------------Version 2.3.2 2006/10/1 ----------------------------------------------------------------------* Added new "relationships" page. This fulfills RFE 973438 "Automate two-way bug association in bug dependencies". You will need to run the SQL in update.sql to create the new bug_relationships table. * Cosmetic changes: - The new relationship page and pages for viewing history and subscribers are now viewed without leaving the bug page. * Now updating "last_updated_user" and "last_updated_date" at time that bug is created. ----------------------------------------------------------------------Version 2.3.1 2006/ 9/28 ----------------------------------------------------------------------IMPORTANT BUG FIX! This release contains an important bug fix for everybody who uses version 2.3.0 of btnet_service.exe. The bug is 1566824, "Bad Bug! E-mails recieved multiple times (btnet_service)". Everybody using 2.3.0 should upgrade their btnet_service.exe. The only other fix in this release is for 1563084 "Timeout errors while fetching bug posts". Changed the sql to ma e it perform better. If your bug database is getting big, you will want this fix too. ----------------------------------------------------------------------Version 2.3.0 2006/09/20 ----------------------------------------------------------------------The only change in this release is to support this RFE: 1557071 "let one btnet_service.exe support multiple btnet websites". I changed files POP3Main.cs, my Web.config sample file - I just removed the "pop3Settings" section, and I added a new btnet_service.exe.config sample file. If you aren't interested in this change, you can continue running your old btnet_service.exe or old btnet_console.exe and it will still

You can create those optional files and just leave them empty as a wor around for the problems.

wor fine. I didn't change how the exe tal s to the website. I only changed how the exe gets and processes its settings. If you are intersted, the you'll need to read the comments in the sample in btnet_service.exe.config included in this release. In the future, if you ever want to pic up a change or fix I ma e to the exe's, you'll have to convert to the new style config file. Conversion ta es about 30 seconds worth of typing. ----------------------------------------------------------------------Version 2.2.9 2006/09/17 ----------------------------------------------------------------------This release involves database changes. * Fixed bug 1557070 "Specifying default vals only wor s for ascii" I changed the way you specify the default category, status, etc from being done in Web.config to being done in the database. So, you need to run this SQL to update your database: alter alter alter alter alter table table table table table projects add pj_default int not null default(0) categories add ct_default int not null default(0) priorities add pr_default int not null default(0) statuses add st_default int not null default(0) user_defined_attribute add udf_default int not null default(0)

If you have specified some defaults, for example, a DefaultCategory, then you will have to edit the category using the web pages. Also in this release: * Minor cosmetic changes to how filters are displayed. * Batched some SQL statements for better performance. * Corrected version/date on about.aspx page. ----------------------------------------------------------------------Version 2.2.8 2006/09/16 ----------------------------------------------------------------------Added ability to filter bug lists by project, category, priority, and status. Ta e a loo at the dropdowns in the column headers. This ta es care of RFE's: 1556554, 1217944. It should reduce the need to do searches or create custom queries. * Fixed bug 1533796 - "excel-export to IE - disable "no-cache" header" * Fixed bug 1521559 - "Search Page Too Wide With Long Custom Fields" * Fixed bug 1466318 - "Edit comment page shows text as utf-8."

These <add <add <add <add <add

Web.config settings are obsolete: ey="DefaultProject" value="[no project]"/> ey="DefaultCategory" value="[no category]"/> ey="DefaultPriority" value="[no priority]"/> ey="DefaultStatus" value="[no status]"/> ey="DefaultUserDefinedBugAttribute" value="[none]"/>

* Fixed bug 1522450 - "HTML encoded characters somehow got into SQL" (actually, I can't reproduce, but I fixed something that might be related). ----------------------------------------------------------------------Version 2.2.7 2006/07/23 ----------------------------------------------------------------------* Fixed bug 1498074 "search.aspx contains debug alert statements" * Fixed bug 1512575 "logic for displaying inline is wrongly case sensistive" * Fixed bug related to toggling "inline images" on and off * Fixed bug 1512893 - "Logoff does not destroy the ASP.NET Session vars" * In response to bug 1521293 "Feature Request - POST ID Sequence Number", the bug posts are now numbered, so you can refer to them. They are also anchors, so you can lin to them directly, for example http://yourhost/yourbtnet/edit_bug.aspx?id=1#2 where the bugid is 1 and the post# is 2. ----------------------------------------------------------------------Version 2.2.6 2006/05/28 ----------------------------------------------------------------------* Fixed bug 1484770 "Error in validate() when editing bug as comment only user" * Fixed bug 1493462 "endless loop of redirects in mixed mode authentication" - original code and the fix by Michael Wilson. * Fixed bug 1490922 "SQL not showing up in search.aspx for IE (wor s in Firefox)" * RFE 1488728 "underline lin s in bug emails" * Probably/maybe fixed bug1251124 "Too many sql server connections opened" using code from Michael Wilson. ----------------------------------------------------------------------Version 2.2.5 2006/04/28 ----------------------------------------------------------------------These two bugs turned out to be the same. Fixed them both. Sorry it too so long. * Fixed bug 1476758 "Send mail problem in 2.2.4" * Fixed bug 1472328 "email received from -email lin is generated wrong" * Fixed bug 1476151 "TO: and CC: not wor ing for mails". * Fixed typo in "CustomMenuLin Url" setting. in Web.config. Was "CUs.."

* Now using Michael Wilson's code verbatim for autopostbac when project changes in edit_bug.aspx.

* Search page now supports custom columns! for doing most of the wor on this.

Than s to Michael Wilson

* RFE 475492 "remember 'Show inline Images' setting". Wor s for showing/hiding history also. ----------------------------------------------------------------------Version 2.2.4 2006/04/15 ----------------------------------------------------------------------Note that I recompiled btnet_console and btnet_service for this release. Lots of fixes and some small improvements in the way incoming and outgoing email is handled. * Fixed bug 1466329 "btnet_service.exe doesn't understand encoded Subject header". The fix is actually in insert_bug.aspx. * Fixed bug 1282096 "DO NOT EDIT THIS problem when mail subjects are too long". In other words, if the subject ta es up two lines instead of one, it's handled. * Fixed bug 1029625 "CHNGING PRJCT: should trigger custom project field refresh". I only postbac to the server if the subject line of the bug is still blan . I don't want to loose anything that the user has typed in. * Fixed/changed how the "From" is populated. I put the user's and the project's addresses in a dropdown and pre-select the more li ely one. * Added buttons to launch a little popup for selecting addresses that the system already nows about. * Fixed filtering of cc addresses so as not to cc the from address. * Signiture wasn't wor ing for all cases. Now it is. * Fixed handling of attachments when used inline, the way Microsoft Outloo sends them. Mime parsing now loo s for content type name if there isn't a content disposition filename. ----------------------------------------------------------------------Version 2.2.3 2006/04/08 ----------------------------------------------------------------------To upgrade from 2.2.2, run the relevant portion of upgrade.sql. It adds the email signiture column to the users table. Users can now add signiture to an outgoing email. Jochen Jonc heere did the wor . Also in this release: * Fixed bug 1466307 "When adding project, pop3 stuff is not inserted into db" * Fixed bug 1464165 "'Force project' protects all fields until after bug is added

* Fixed bug with reply all. Wasn't always adding the incoming Cc addresses to the outgoing email's Cc line. * Displaying or printing bugs in list now preserve comment line brea s. Let me now if you li ed it the old way better. * Email auto reply text now lets you include $BUGID$ which will be replaced by the actual bg_id. * Changed how "DefaultProject", "DefaultCategory", etc settings in Web config wor . They now affect bugs inserted via email or screen capture too. * Now populating size and content-type of outgoing email attachments. * Now displaying size and content-type of email attachments. * New feature, "foward". Added ability to forward emails, attachments, comments. Jochen Jonc heere did most of the wor . ----------------------------------------------------------------------Version 2.2.2 2006/03/10 ----------------------------------------------------------------------**** EXTREMELY CRITICAL BUG FIX ***** * Fixed bug 1447296 email attachments get lost (when multiple and when merged) The file attachments themselves are safe in the upload folder, but the database recs (rows in bug_posts of type "file" with a non-null value in bp_parent) are messed up in some cases resulting in the attachments being invisible. This bug was introduced in 2.1.8. The problem with the incoming emails is if there are multiple attachments, the attachments #2 and onwards get the wrong parent in the db and are invisible. The SQL below were give them a parent that will ma e them visible. It only affects the ones that are messed up. It's not a perfect fix if there are multiple emails belonging to the bug - it might not re-attach the attachments to the correct email, but it will attach them to one of the incoming emails, so at least they will be visible. The second part of the bug concerns email attachments when two bugs are merged. I dont' have anything that repairs the database in that situation. The following SQL will ma e any missing incoming email attachments visible: select bp_bug bug, bp_id parent into #t from bug_posts where bp_type = 'received' update bug_posts set bp_parent = parent from bug_posts, #t where bp_bug = bug and bp_parent is not null and bp_parent not in (select parent from #t) and parent < bp_id

drop table #t If you want to do a better fix by hand, the true bp_parent of an email attachment is the bug_post of type "recieved" with the max bp_id that's still lower than the bug_post representing the attachment. ----------------------------------------------------------------------Version 2.2.1 - 2006/03/05 ----------------------------------------------------------------------* BugTrac er.NET uses something called SharpMimeTools for parsing the incoming emails. I rebuilt the SharpMimeTools.dll using the latest version of SharpMimeTools, 0.5. The newer version has some bug fixes. Here's the lin to SharpMimeTools: http://anmar.eu.org/projects/sharpmimetools/ This is the line I used to compile: csc /debug /R:log4net.dll /target:library SharpMimeTools.cs ABNF.cs SharpMessage.cs SharpMimeAddress.cs SharpMimeHeader.cs SharpMimeMessage.cs SharpMimeMessageCollection.cs SharpMimeMessageStream.cs * Changes to allow BugTrac er.NET to be hosted, for example at godaddy, which I've tested. Specifically, if the log and upload folder settings in Web.config don't start with a drive letter or with \\, then they are interpreted as relative to the web folder (using Server.MapPath). * Add "png" to the list of image types that can be shown inline. * Fixed bug 1438068 "SingularBugLabel is not used in the queries screen" ----------------------------------------------------------------------Version 2.2.0 again - 2006/02/21 ----------------------------------------------------------------------The only difference between this and 2.1.9 is that upgrade.sql has been corrected. ----------------------------------------------------------------------Version 2.1.9 2006/02/18 ----------------------------------------------------------------------See notes for version 2.1.8 if you are s ipping from 2.1.7 or below. * Fixed bug introduced in 2.1.7 that prevented handling of incoming emails with attachments. * Fixed index-out-of-bounds error that sometimes occurs when using "reply all" if the email is very short. * Fixed bug 1427804 "plain text attachment of email mista en for email body" * If email is only text/html, without a text/plain alternative, the html will be used as the body as is.

* btnet_service.exe and btnet_console.exe have been recompiled for .NET Framewor 2.0. If you are still on 1.1, download an earlier BugTrac er.NET version. The symptom is a message saying "Not a Win32 application". ----------------------------------------------------------------------Version 2.1.8 2006/02/17 ----------------------------------------------------------------------If you are installing BugTrac er.NET for the first time, you can ignore the notes for this release. This release is not bac wards compatible with 2.1.7. You will need to run the sql in upgrade.sql. The main thing it does is merge the bug_comments table and bug_attachments table together into a new table, bug_posts. If you have written your own SQL that references these tables, this release might brea that SQL, but the views below will probably allow your SQL to eep wor ing. Don't hesitate to email me at ctrager@yahoo.com for questions. I recomend ma ing a copy of your database, converting your copy using the sql in upgrade.sql, then trying this version of the BugTrac er.NET code against it. create view bug_attachments as select bp_id ba_id, bp_bug ba_bug, bp_file ba_file, bp_comment ba_desc, bp_size ba_size, bp_date ba_uploaded_date, bp_user ba_uploaded_user, bp_content_type ba_content_type, bp_parent ba_comment from bug_posts where bp_type = 'file' create view bug_comments as select bp_id bc_id, bp_bug bc_bug, bp_user bc_user, bp_date bc_date, bp_comment bc_comment, bp_email_from bc_email_from, bp_email_to bc_email_to, bp_type bc_type from bug_posts where bp_type <> 'file' The reason that I merged the files together is so that I could show the file attachments mixed in with the bug comments and the update history rather than in a seperate list. The app also now supports the ability for users to toggle on and off the display of attachments or email attachments to be inline - in the edit_bug.aspx page, rather than

the viewer having to be forced to launch another page. The Web.config setting "ShowHistoryWithComments" is obsolete, because now the user can turn that on and off at will. All the visual changes are in edit_bug.aspx, where the attachements used to be. Also try attaching html and/or text files and then toggling the view images inline switch. Notice also that you can resize the comments, images, and the iframes that hold the html and text attachments by using the [+] and [-] lin s.

----------------------------------------------------------------------Version 2.1.7 2006/02/04 ----------------------------------------------------------------------* Fixed bug 1404030 "javascript related to paging, sorting seems bro en?". In .NET 2.0, versus earlier versions, the id of the forms changed from "_ctl0" to "ctl00". Now btnet chec s which version of .NET is running and uses the appropriate form name. * Fixed occasionally "access denied" error when writing to log by preventing concurrent access to it using "loc " eyword. ----------------------------------------------------------------------Version 2.1.6 2006/01/29 ----------------------------------------------------------------------!!!! IMPORTANT !!!! This release includes a major revision by Michael Wilson to how users control when they receive emails from the system. You will need to ma e changes to you database structure in order to deploy this version. The SQL script for these changes is in the file "upgrade.sql", the section labeled "upgrade from 2.1.5 to 2.1.6". Now the screen screens for controlling notifications include these categories: Notifications for subscribed bugs reported by me: Notifications for subscribed bugs assigned to me: Notifications for all other subscribed bugs: For each category, you can ma e these choices: no notifications when created when status changes when status or assigned-to changes when anything changes You can also now receive notifications even on bugs that you have changed. Also in this release: * Fixed bug 1351070 "text gets wrongly converted to datetime for custom

Send me an email at ctrager@yahoo.com and let me about the changes.

now what you thin

field" * Improved performance of btnet_service.cs, btnet_service/console.exe for large attachments. Old version sometimes spi ed CPU to 100%. Than s to Sylvain Ross for this fix. * Added "Trac ingIdString" to Web.config which allows you to change the text "DO NOT EDIT THIS:" in the subject line of emails to something else. Needed both in Web.config file and in config file used by btnet_console/service.exe. * Logic for coming up with a name for the log file was in two places and didn't match. Now in one place. ----------------------------------------------------------------------Version 2.1.5 12005/2/4 ----------------------------------------------------------------------**** EXTREMELY CRITICAL BUG FIX ***** * 1371108 "Attachment files deleted during mass update" I apologize to fol s who have lost data as a result of this bug. This solves the mystery of some data that I've lost too at my real job. Than s to Michael Wilson for discovering this and fixing it. Also: * Fixed bug 1366049 "user cannot change Project in certain case". Than s to "alexbra " for this code. * For the screen capture utility, bug 1194476 "btnetsc.exe gets 'Bad Request (Invalid Verb)' error from IIS, I'm uploading a recompiled version with the fix submitted by somebody anonymously. It doesn't seem to hurt anything. I can't recreate the "Invalid Verb" error, but maybe for those fol s who get the error, this code is the solution. Please let me now if this release fixes the error for you at ctrager@yahoo.com. Than s. ----------------------------------------------------------------------Version 2.1.4 2005/10/22 ----------------------------------------------------------------------Than s to "alexbra " and "hvda er" for a couple of the fixes in this release. Added "SearchSQL" in Web.config per RFE 1295604. This allows you to customize which columns are displayed in the search page. * Fixed bug 1292282 "edit_bug.aspx uses bugid instead of commentid in from lin " * Fixed bug 1304359 "can't delete custom field w/constraint that contains spaces" * Fixed bug 1304365 "error message fails to support SingularBugLabel setting" * Fixed bug 1305200 "apostrophe in from email address causes problem"

* Fixed bug 1305890 "short_desc should be replaced with subject in insert_bug" * Fixed bug 1313879 "Attachments with spaces are not downloaded correctly" * Fixed bug 1315001 "Login form accept cripted passwords" * Fixed bug 1325567 "Problem with entering date/time in custom field" ----------------------------------------------------------------------Version 2.1.3 2005/09/25 ----------------------------------------------------------------------Added the following Web.config settings for btnet_service.exe and btnet_console.exe, and recompiled those files. The new settings help with testing and capturing emails that cause errors. Use "MessageOutputFile" to dump the input. Use "MessageInputFile" to feed them input from a file instead of from a POP3 server. Also: Credit again goes to Jochen Jonc heere for several of the changes: * Fixed bug 1299905 "guest permissions not being reduced from ALL to REPORTER" * Fixed bug 1291537 "util.this_fullname set incorrectly" * Fixed bug 1288156 "project customisable fields do not retain selection on edit" * Fixed bug 1292218 "DefaultPermissionLevel used if no forced project defined" * Fixed bug 1297553 "An e-mail with DO NOT EDIT THIS for a bug that is deleted" * Fixed bug 1279548 "auto-reply e-mail comming from wrong person" * Added "reply all" functionaly per RFE 1280708 * Added bugid to auto-reply subject per RFE 1279540 ----------------------------------------------------------------------Version 2.1.2 2005/09/10 ----------------------------------------------------------------------Credit goes to Jochen Jonc heere for several of the fixes in this release. * Fixed 1280731. Users without permission to add bugs were able to add them. Now, if you force a user to a specific project, and if that project doesn't have add rights, then a user can't add a bug. * Fixed bug 1285992, endless loop when autoreply to/from addresses are

the same. * Fixed bug 1285729 "send_mail.aspx doubles new line". I commented out the line. I hope this helps. * Fixed bug 1278982 "DIV-tag on wrong place" in bugs.aspx * Fixed bug 1278964 "SPAN-tag not closed in menu" in util.cs * Fixed bug 1277422 "reply lin not available for non-admins" * Fixed bug 1257368 "util.cs:405 invalid cast exception" * Fixed bug 1255880 "Date pic er gives javascript error when clic ed" * Fixed bug 1238322 "String comparisons are case sensitive in pop3 bug insert" * Fixed 1280720 and 1272577 - Notifictions not sent when a bug was added if user wanted only status changes. ----------------------------------------------------------------------Version 2.1.1 2005/07/09 ----------------------------------------------------------------------* Added additional search field: "Bug comments since", for finding bugs to which a comment has recently been posted. * Fixed bug 1233504 "in email notification, error when clic ing on email addr" * Fixed bug 234816 "error with lin s in BugDescritpion via BUGID#XXX" * Fixed bug 1233627 "Error in Custom Date Field" when name of custom field contains a space and when you try to show the calendar date pic er. * Fixed bug 1232461 "invalid project in btnetsc results in 'obj ref not set' error * Added example querys to setup.sql that demos using css classes for formating bugs and demoing a way to show the most recent comment in the bug list. CHANGES TO BTNETSC.EXE too: * In btnetsc.exe, fixed bug 1223432 "btnetsc Bug not going to numbered project" * In btnetsc.exe, if somebody enters "http://" in the url in the configuration page, the program strips it off rather than getting an error when doing the send. ----------------------------------------------------------------------Version 2.1.0 2005/07/04 -----------------------------------------------------------------------

* Fixed bug 1202186 "Session ID conflicts with mutliple installs on 1 server" using code from Michael Wilson. * Fixed bug 1212800 "Status change not detected when Trac BugHistory = 0" * Didn't fix 1225521 "occasional log file not found error", but I did fix the error message. I suspect the real problem is something else, but this error message was displayed INSTEAD of whatever the real problem is. * Fixed bug 1229656 "Bug page expires when returning from detail page" * For RFE 1220637 "Set default values for dropdowns", Now you can control what values show up in the dropdowns with these new Web.config settings. Than s to Michael Wilson. My spelling of these eys is a bit different than the spelling in the code Michael posted.

* For RFE 1232110, log file filenames now have leading zeros when day or month is a single digit. 2005_07_04 intstead of 2005_7_4. * URLs and email addresses in bug comments are converted to clic able lin s. Than s to Jason Taylor. * Now handling single quotes in category, priority, status, udf fields correctly when recording updates. ----------------------------------------------------------------------Version 2.0.9 2005/05/28 ----------------------------------------------------------------------Bug fixes only: * A few fixes from Michael Wilson in util.cs, including "us_fullname" bug, * Fixed bugs - again - related to replying to emails and the system mixing up the id of the bug and the id of the comment. This problem would result in "Object reference not set" errors. * The 2.0.8 change "Email attachments no longer have the number prefixes on their filenames..." wasn't wor ing because I left in some debugging code. ----------------------------------------------------------------------Version 2.0.8 2005/05/14 ----------------------------------------------------------------------* Fixed a bug parsing "From" in emails. When a "From: " line was contained in the body, the "From" from the body was used instead of the correct one from the header. I recompiled btnet_console.exe and btnet_service.exe.

<add <add <add <add <add

ey="DefaultProject" value="[no project]"/> ey="DefaultCategory" value="[no category]"/> ey="DefaultPriority" value="[no priority]"/> ey="DefaultStatus" value="[no status]"/> ey="DefaultUserDefinedBugAttribute" value="[none]"/>

* Fixed "Object reference not set to an instance of an object" bug when replying to incoming email replies. * Added "export to excel" lin s to bugs.aspx and search.aspx. * The Web.config setting "UseFullNames" now affects more places in edit_bugs.aspx than it did before. * Added extra Web.config setting "SmtpForceReplaceOfBareLineFeeds". Ignore this setting unless you are esperiencing the symptoms described in bug #1194530 and here: http://cr.yp.to/docs/smtplf.html * Added Web.config setting "AutoReplyText". BugTrac er.NET can automatically respond to incoming emails using the specified text. * Email attachments no longer have the number prefixes on their filenames in the email itself. I'm referring to the prefixes that are created when the file is saved as an attachment in the upload folder. * For attachments, there are now now two lin s: "view" and "save". "Save" forces a save dialog box, as before, but "view" will allow you to view the attachment, if the browser understands how to do it. * Michael Wilson fixed the "credential conflict" bug described in bug #995410. * Fixed a couple other minor bugs related to authentication. Removed "logoff" lin from menu if windows authentication, because you actually can't logoff. Fixed bug where logon page's username field was populated with something that loo ed li e "1:username". ----------------------------------------------------------------------Version 2.0.7 2005/04/23 ----------------------------------------------------------------------* Added file upgrade.sql. Run it to upgrade to upgrade to this version. It justs adds a column to the bug_attachments table. * In bug comments that are from emails, if there is an attachment, an attachment lin also shows up at the bottom of the comment text for that emai. This change isn't retro-active to bugs added prior to installing this version, but there is some SQL in upgrade.sql you might want to try that could ma e this feature wor for you for previously entered bugs. * This version no longer supports the Web.config setting "ShowInitialCommentFirst" because I ended up thin ing that the presentation was too confusing. And coding it was ind of messy too. This version does, however, still support "CommentSortOrder", so if you want this first comment on top, you can still do that. * On the "queries" page, added ability to export the bug list to excel. It's actually just a tab delimited text file. * default.aspx now supports having some custom HTML printed on it. See "CustomWelcomeHtml" in Web.config. * admin.aspx now displays the physical path and machine name.

* Revised "mixed mode" security. My two-virtual-directory scheme was not good. The setting in Web.config "AllowLogonIfWindowsAuthFails" is now obsolete. Instead, the setting "WindowsAuthentication" now allows a value of 2 for using both form-based and windows authentication at the same time. See instructions in Web.config on how to configure IIS security. * There's an instance of BugTrac er.NET I have set up where the "project" dropdown doesn't really apply, so I wanted to hide it. I ended up adding element ID's to all of the dropdowns and their labels in edit_bugs.aspx, so that they can be selectively hidden via the style sheet. For example, to hide the "category" dropdown and its label: #category_label {display:none;} #category {display:none;} You can also use the style sheets to change the loo of the global custom fields (but not the project specific custom dropdowns. ----------------------------------------------------------------------Version 2.0.6 2005/04/16 ----------------------------------------------------------------------* TRY THE NEW SCREEN CAPTURE UTILITY!. It's a seperate download from the btnet project page on sourceforge.

* Fixed bug# 1161208 - special chars were displaying wrong in notification emails. ----------------------------------------------------------------------Version 2.0.5 2005/04/03 ----------------------------------------------------------------------* Fixed javascript error on search.aspx "Save SQL as query" lin . * Added pop-up for selecting dates for custom bug fields when datatype is date. * If you add a "PromptBeforeLeavingEditBugPage" ey to Web.config and set it to "1", then clic ing on "add attachment", "send email" will display a confirmation prompt. ----------------------------------------------------------------------Version 2.0.4 2005/04/02 ----------------------------------------------------------------------* Moved release notes to this file, RELEASE_NOTES.TXT * Updated tips in README.TXT. Even if you are already using btnet, maybe ta e a loo at them. * Fixed bug with search.aspx "to" dates. * Added concept of "Guest" account. Just name the user "Guest" and no matter what the other settings say, the user will be allowed no greater than "Reporter" permissions. You can explicitly reduce the

* Fixed bugs in javascript that sorts HTML tables when you clic column headings.

on

permissions even more by just editing the account. * Now supports plain and windows authentication at the same time. See note in Web.config above the WindowsAuthentication ey.

----------------------------------------------------------------------Version 2.0.3 2005/03/28 ----------------------------------------------------------------------* Recompiled btnet_service.exe, btnet_console.exe to correct problem with incoming emails updating existing bugs failing to be processed. This bug was introduced in version 1.9.8. * Javascript for sorting HTML tables now wor s with Firefox too. ----------------------------------------------------------------------Version 2.0.2 2005/03/26 ----------------------------------------------------------------------* Closed some SQL injection vulnerabilities. Than s to Maty Siman at http://www.chec marx.com. * Added mass update/delete to search.aspx for admins. Too hard to add it for non-admins and still respect all the project permissions. * Corrected this setting in Web.config (HH, instead of hh): <add ey="SQLServerDateFormat" value="yyyy-MM-dd HH:mm:ss" /> ----------------------------------------------------------------------Version 2.0.1 2005/03/17 ----------------------------------------------------------------------Important bug fixes. * Merging bugs feature was bro en. Fixed now. * Handling of plain text incoming emails was bro en. Fixed now. * Fixed javascript error in edit_priority.aspx ----------------------------------------------------------------------Version 2.0.0 2005/03/13 -----------------------------------------------------------------------

----------------------------------------------------------------------Version 1.9.9 2005/03/13 ----------------------------------------------------------------------* TO MIGRATE TO 1.9.9, RUN THE FOLLOWING: alter table users add us_auto_subscribe_reported_bugs int null default(0) update users set us_auto_subscribe_reported_bugs = 0

* added "reply" lin replying to.

in edit_bug.aspx, which quotes the email you are

* See <add <add <add <add

these new settings in Web.config. ey="CustomBugLin Label" value="YOUR LINK"/> ey="CUstomBugLin Url" value="your_url.aspx"/> ey="CustomMenuLin Label" value="YOUR LINK"/> ey="CUstomMenuLin Url" value="your_url.aspx"/>

* Added ability to automatically subscriber to bugs that you report. * Revised edit_user.aspx and edit_self.aspx layout and on screen explanations in order to ma e them less confusing to the user. * Attachments to incoming emails are now saved as attachments to the bug. * To and Cc headers in incoming email are now saved as part of the comments. * Added ability to add a custom lin to the edit_bug.aspx page, just to the left of the "prev", "next" lin s. See Web.config: <add ey="CustomBugLin Label" value="YOUR LINK"/> <add ey="CUstomBugLin Url" value="your_url.aspx"/> * Admin editing of priorities now gives feedbac on color. ----------------------------------------------------------------------Version 1.9.8 2005/03/10 ----------------------------------------------------------------------* MAJOR CHANGES in how incoming emails are handled. Btnet_console.exe and btnset_service.exe have been recompiled as part of this change. Also notice two new dlls in the bin folder. I used the following command line to compile SharpMimeTools.dll: csc /debug /R:log4net.dll emailmessage2.cs sharpmimemessage.cs sharpmimeaddress.cs sharpmimeheader.cs sharpmimetools.cs sharpmimemessagestream.cs sharpmimemessagecollection.cs abnf.cs

I plan to handle incoming file attachments in the next release, too. Also: * Comments on existing bugs coming in via btnet_console/service now include the subject as part of the comment text. * Fixed handling of nvarchar custom fields. ----------------------------------------------------------------------Version 1.9.7 2005/03/06 ----------------------------------------------------------------------I've changed the VARCHAR types in setup.sql to NVARCHAR types, in order to handle Unicode. I've also changed all the logic that builds SQL statements to build SQL using Unicode literals. For examle, where it used to say: Update foo set bar = '$1', it now says set bar = N'$1'. I might have may missed a couple places, so if you encounter a bug, post it at sourceforge and I'll try to post an updated release as soon as possible, within days. Unicode strings use two bytes per char, so in setup.sql I've doubled the length of strings. In a few places I've more than doubled, where

The MIME parsing is now done using "SharpMimeTools", excellent wor from the SharpWebMail project. Than s to SharpMimeTools, non-ascii emails are now handled correctly.

I thought the lengths were too short anyway. I've also changed the columns bc_comment and a couple others from varchar to ntext, so that there isn't a size limitation. The ALTER TABLE script below wor ed for me and I hope it wor s for you. Also in this release: Changed dbutil to use database connections with very brief lifespans, rather than eeping them open for the entire sever-side page generation (Than s Jason C.). - - - - - - - - - - - - - - - - alter alter alter alter alter table table table table table users users users users users alter alter alter alter alter column column column column column us_username nvarchar(40) us_password nvarchar(64) us_firstname nvarchar(60) us_lastname nvarchar(60) us_email nvarchar(120)

alter table categories alter column ct_name nvarchar(80) alter table projects alter column pj_name varchar(30) alter table projects alter column pj_name nvarchar(80) alter table projects alter column pj_pop3_password nvarchar(20) alter table projects alter column pj_pop3_email_from nvarchar(120) alter alter alter alter alter alter table table table table table table projects projects projects projects projects projects alter alter alter alter alter alter column column column column column column pj_custom_dropdown_label1 nvarchar(80) pj_custom_dropdown_label2 nvarchar(80) pj_custom_dropdown_label3 nvarchar(80) pj_custom_dropdown_values1 nvarchar(2000) pj_custom_dropdown_values2 nvarchar(2000) pj_custom_dropdown_values3 nvarchar(2000)

alter table bugs alter column bg_short_desc nvarchar(200) alter table bugs alter column bg_project_custom_dropdown_value1 nvarchar(120) alter table bugs alter column bg_project_custom_dropdown_value2 nvarchar(120) alter table bugs alter column bg_project_custom_dropdown_value3 nvarchar(120) alter table bug_comments alter column bc_comment ntext alter table bug_comments alter column bc_email_from nvarchar(800) alter table bug_comments alter column bc_email_to nvarchar(100) alter table bug_attachments alter column ba_file nvarchar(1000) alter table bug_attachments alter column ba_desc nvarchar(200) alter table bug_attachments alter column ba_content_type nvarchar(200) alter table user_defined_attribute alter column udf_name nvarchar(60) alter table statuses alter column st_name nvarchar(60) alter table statuses alter column st_sort_seq int alter table statuses alter column st_style nvarchar(30) alter alter alter alter table table table table priorities priorities priorities priorities alter alter alter alter column column column column pr_name nvarchar(60) pr_sort_seq int pr_bac ground_color nvarchar(14) pr_style nvarchar(30)

alter table queries alter column qu_desc nvarchar(200) alter table queries alter column qu_sql ntext alter table reports alter column rp_desc nvarchar(200) alter table reports alter column rp_sql ntext ----------------------------------------------------------------------Version 1.9.6 2005/02/06 ----------------------------------------------------------------------* Fixed problems with dates on search.aspx. I hope. * Added "UseFullNames" setting in Web.config. Controls how user names show up in dropdowns. * Added pseudo variable $ME for use in reports. * Bolding of selected menu items now controlled via style sheet. * AllowCommentDeletionForNonAdmins now also allows editing of comments. * You probably want to run this to allow for longer attachment filenames: alter table bug_attachments alter column ba_file varchar(256) ----------------------------------------------------------------------Version 1.9.5 2004/10/09 ----------------------------------------------------------------------* Fixed crash in edit_status.aspx and edit_priority.aspx * Revised logic for internationalizing dates. See Web.config. Than s to Martin Ricther. I used your code verbatim. * Fixed bug where adding a comment caused prior update history to not be displayed. * Added this line in send_email.aspx per discussion in Help forum "Mail trouble/question": body_text = body_text.Replace("\n","\r\n"); * Added some validation for custom fields, for datetime, int, and decimal formats. * You can now ma e a custom field required. (Logic just loo s at whether the field is NULL or NOT NULL). ----------------------------------------------------------------------Version 1.9.4 2004/ 9/20 ----------------------------------------------------------------------* Only one change since 1.9.3 - fixed an important bug. Adding just a comment to an existing bug didn't wor . To fix, I added the following line to edit_bug.aspx after line 772: || comment.Value.Length > 0

----------------------------------------------------------------------Version 1.9.3 2004/ 9/19 ----------------------------------------------------------------------* Fixed null/not null problems in setup.sql * Fixed some places where "bug" should have been replaced by Web.config setting SingularBugLabel. Also, appropriately capitalizing the lable. Than s Tom Sella - I used your code verbatim. * No longer using hard-coded scheme for bug attachments content type. Instead, storing PostedFile.ContentType. Than s "nic been". * Now chec ing for changes before updating bg_last_updated_user, bg_last_updated_date. * search.aspx now allows search on bugs with no specified category, status, priority, project, assigned-to. * Added "LogoHtml" setting in Web.config. That allows you to set the logo and its lin to whatever you want. ----------------------------------------------------------------------Migrating to 1.9.3 ----------------------------------------------------------------------alter table bug_attachments add ba_content_type varchar(100) null ----------------------------------------------------------------------Version 1.9.2 2004/ 9/03 ----------------------------------------------------------------------* Search "to" dates now go through then end of the "to" day, to the time 23:59:59 * Corrected instructions for migrating to 1.9.1 below. Added update statements. * Fixed crash when merging bugs that also have subscriptions. * The first column of bug queries used to be unconditionally interpreted as a bgcolor for the "<td>" element. That's still true as long as the text start with an "#", as in "#ffaaaa". However, if the first column does not start with an "#", the first column is interpreted as a css style class. For example, "<td class=yourclass". You can also now enter a css style class for a status and/or a priorty. I've changed the explanatory text on the edit_query.aspx to relect this change. * Added sort sequence to categories and user_defined_attributes. They now behave li e statuses and priorities. Also, sorts now loo at name too as a secondary sort field.

----------------------------------------------------------------------Migrating to 1.9.2 -----------------------------------------------------------------------

alter alter alter alter

table table table table

user_defined_attribute add udf_sort_seq int not null default(0) categories add ct_sort_seq int not null default(0) priorities add pr_style varchar(10) not null default('') statuses add st_style varchar(10) not null default('')

----------------------------------------------------------------------Version 1.9.1 2004/ 8/27 ----------------------------------------------------------------------* AppTitle setting in Web.config also affects the web page titles (i.e, the <title> element). * Adding an attachment creates an entry in bug change history * Adding an attachment or sending an email triggers notifications * Fixed bug whereby same user could subscribe twice to same bug. * Fixed bug whereby bugs entered by email that triggered notifications resulted in "Object reference not set to an instance of an object" in util.cs. * Used contributor jhetler's idea and code for imbedding a print of the bug in send_email.aspx when "include bug description" is chec ed. * Used contributor e alinin's idea about an option allowing users to send notifications to themselves. See edit_user.aspx, edit_self.aspx. * Used contributor e alinin's idea about an option allowing users to receive notifications only when status changes. See edit_user.aspx, edit_self.aspx. * Added ability to edit SQL for reports with help from contributor regent10. ----------------------------------------------------------------------Migrating to 1.9.1 ----------------------------------------------------------------------Corrected this file so that the alter table statement for 1.8.6 reads: alter table users add us_only_status_change_notifications int null default(0 ) Use this SQL to drop the bogus field: alter table projects drop column add us_only_status_change_notifications Also run this: alter table users add us_send_notifications_to_self int null default(0) update users set us_only_status_change_notifications = 0 update users set us_send_notifications_to_self = 0 ----------------------------------------------------------------------Version 1.9.0 2004/ 8/20 ----------------------------------------------------------------------Small changes:

* The pages no longer let you delete a project, user, category, priority, status or user_defined_attribute value if it is still being referenced by a bug. * Delete confirmation pages echo the name of the item being deleted when they are prompting the user for confirmation. * Replaced my edit_user_permissions2.aspx with one from Eugene Kalinin per bug 1010967, List all users on "per user permissons". * Fix to how lin s to interior pages are handled when user isn't logged in. Query string vars were getting truncated. * Fix to how white space is handled when printing custom text fields. ----------------------------------------------------------------------Version 1.8.9 2004/ 8/18 ----------------------------------------------------------------------Important bug fix again: * The printed and emailed bugs were bro en so that they were printing the id's rather than the descriptions of fields li e status, category, etc. Fixed that. And less serious * Custom textarea fields are now HTML encoded for display on edit_bugs.aspx page and on for printing/emails.

----------------------------------------------------------------------Version 1.8.8 2004/ 8/16 ----------------------------------------------------------------------Bug fixes only, but important ones. * In version 1.8.7, the alter script in this README.TXT was STILL wrong. I corrected it again from bg_custom_project... to bg_project_custom... * Starting with version 1.8.5, the user dropdowns are filtered so that a given user doesn't see other users with whom that user doesn't have any projects in common. In this release I have changed the queries that implement the feature to fix a bug. Also, the admin user is now treated just li e any other user. ----------------------------------------------------------------------Version 1.8.7 2004/ 8/16 ----------------------------------------------------------------------The only change is a correct to the SQL "alter" statements below, for migrating to 1.8.6. I originally wrote bg_custom_project_dropdown1_value, etc. That's wrong. It should be bg_custom_project_dropdown_value1 I corrected it below.

I'd li e to thin

that this version is pretty stable.

----------------------------------------------------------------------Version 1.8.6 2004/ 8/14 ----------------------------------------------------------------------* Now supports custom dropdowns specific to a project. For example you could set up project #1 to have a custom dropdown of "Version" with values of "1.0", "2.0", but for project #2 it would have the values of "3.1", "3.2". Go to an existing project and edit it to try out this feature. This is a complicated feature to implement. I probably made a mista e or two. Please help me by reporting any bugs you find and I'll try to fix them ASAP and post a new version. I apologize in advance if this new feature causes you any inconvience. ----------------------------------------------------------------------Migrating to 1.8.6 ----------------------------------------------------------------------alter alter alter alter alter alter alter alter alter table table table table table table table table table projects projects projects projects projects projects projects projects projects add add add add add add add add add pj_enable_custom_dropdown1 int null default(0) pj_enable_custom_dropdown2 int null default(0) pj_enable_custom_dropdown3 int null default(0) pj_custom_dropdown_label1 varchar(30) null pj_custom_dropdown_label2 varchar(30) null pj_custom_dropdown_label3 varchar(30) null pj_custom_dropdown_values1 varchar(1000) null pj_custom_dropdown_values2 varchar(1000) null pj_custom_dropdown_values3 varchar(1000) null

alter table bugs add bg_project_custom_dropdown_value1 varchar(40) null alter table bugs add bg_project_custom_dropdown_value2 varchar(40) null alter table bugs add bg_project_custom_dropdown_value3 varchar(40) null alter table users add us_only_status_change_notifications int null default(0) ----------------------------------------------------------------------Version 1.8.5 2004/ 8/12 ----------------------------------------------------------------------Bug fixes only. * Fixed bug related to selecting item in "re-assign" dropdown on edit_bug.aspx. This bug was introduced in version 1.8.4. * Now preserving white space and line brea s in custom fields * Now Handling double quotes in custom fields properly ----------------------------------------------------------------------Version 1.8.4 2004/ 8/09 ----------------------------------------------------------------------* Added ability to delete file attachments. Also added setting in Web.config to turn the feature on and off: <add ey="AllowAttachmentDeletionForNonAdmins" value="0"/> * added "id" column to the admin pages that list things,

li e categories.aspx. * In search, show inactive users and projects in dropdowns too. * In search, if admin user, show all uesrs and projects regardless of permission. * In dropdowns in edit_bug.aspx and search.aspx, only show users related to projects that user has permissions for. To really see the effect of this, DefaultPermissionLevel in Web.Config should be set to 0. * Version 1.8.2's base and custom css thing bro e the the emails. Now the emails use both the base and custom style sheets too. * Merging bugs now creates a comment belonging to the "into" bug, recording the act of merging itself. ----------------------------------------------------------------------Version 1.8.3 2004/ 7/31 ----------------------------------------------------------------------* Version 1.8.2 bro e the hyperlin s feature. This release fixes it. * What bro e the hyperlin s was the way I was handling trying to preserve white space in the comments. I changed it again. Line brea s are converted to "<br>". Tabs are converted to "&nbsp;&nbsp;&nbsp;&nbsp;". One space is left alone. Two spaces are converted to " &nbsp;" ----------------------------------------------------------------------Version 1.8.2 2004/ 7/29 ----------------------------------------------------------------------* Fixed problem with comment formatting that resulted in the text not word-wrapping. * Added the option to show the initially entered comment on top, li e Sourceforge does, when the general order of comments is most recent first, i.e., "desc" in Web.config * Made it easier to customize css. Put your customizations in btnet_custom.css instead of btnet.css and then as I change btnet.css, your overrides in btnet_custom.css will still wor . Than s to Michael Wilson for this idea. * Maybe you li e a more neutral word li e "issue", "tic et", or "item" rather than "bug"? Added settings to web config that allow you to get rid of most occurrences of the word "bug" in the user interface for non-admin users:

* Made btnet_service.exe and btnet_console.exe a little more robust when encoutering problems communicating with web server. Also, they

<add <add <add <!-<add

ey="AppTitle" value="Customer Support"/> ey="SingularBugLabel" value="Item"/> ey="PluralBugLabel" value="Items"/> customize mar er for creating hyperlin s in bug comments --> ey="BugLin Mar erx" value="itemid#"/>

don't cho e now when encountering an unusual "multipart" type. ----------------------------------------------------------------------Version 1.8.1 2004/ 6/26 ----------------------------------------------------------------------* Added feature allowing one bug to be merged into another. Added a new setting in Web.config, "AllowBugMergingForNonAdmins", that controls whether non-admins have access to this feature. * Formatting of bug comment text is now preserved. * When deleting a bug, attachments are now deleted too. You might need to adjust permission on the file upload folder. * Added new page "view subscribers" so you can see who is subscribed to a bug. * Added Web.config option "EncryptStoredPasswords". See note on migrating below. Btnet now chec s for both the encrypted and unencrypted versions of the password, so there's no need to convert existing data. The unencrypted passwords will still wor . If you want to convert, the only way I have provided is to go reset the passwords one by one using the web pages. I didn't provide a tool to conver them all at once. ----------------------------------------------------------------------Migrating to 1.8.1 ----------------------------------------------------------------------You only need to run this if you set EncryptPasswords to "1" alter table users alter column us_password varchar(32) not null ----------------------------------------------------------------------Version 1.8.0 2004/ 6/18 ----------------------------------------------------------------------* Emails are now sent by default as just one email with many recipients. Added new Web.config setting, "SendJustOneEMail". If you li ed things better the old way, change this setting to "0". Than s for the code, Victor. * Fixed bug where custom fields weren't saved on an add, just an update. * On the login page, now filling in the username with previously used username. ----------------------------------------------------------------------Version 1.7.9 2004/ 6/12 ----------------------------------------------------------------------* Added "Reporter" permission. Reporters can add bugs, update comments, upload attachments, but can't change status, assignment etc after adding bug. Wor s best when you set user's "forced project". * Added user's "forced project". If set, user is limited to adding

bugs to the specified project. * Added "PrintHistory" setting to Web.config. Controls whether change history is included in print of bugs. Note however, the same logic is used to print the email notifications. * Added page for changing per user per project permissiong coming from the project in addition to the one that already exists coming from the user. * Added lin s from search page to "print list" and "print detail" * Added custom columns to search screen results * Changed how the edit_bugs.aspx loo s for users with View Only permissions. * Lots of little bug fixes, including newly recompiled btnet_console.exe and btnet_service.exe. They no longer crash on multiplart/mixed emails. ----------------------------------------------------------------------Migrating to 1.7.9 ----------------------------------------------------------------------alter table users add us_forced_project int null ----------------------------------------------------------------------Version 1.7.8 2004/ 4/17 ----------------------------------------------------------------------* Made bugs per page a user setting rather than a global setting. Web.config's "BugsPerPage" is obsolete You have to run this sql: alter table users add us_bugs_per_page int null * Added ability to print the details of multiple bugs at once * Added lin s for printing bugs on bugs.aspx page. If you sort the list by clic ing on the column headings, you can then print the list in that sort order. * Uses TextArea controls instead of Input controls for large custom fields. Than s to "wulfman2u" for submitting the code for this change in RFE #935798 ----------------------------------------------------------------------Version 1.7.7 2004/ 3/30 ----------------------------------------------------------------------* Now recording changes to custom columns in bug's audit trail * Added "logged in as" feedbac in upper right * Added new lin on admin page to new custom fields pages. These pages help you generate the sql to add custom fields to bugs table. -----------------------------------------------------------------------

Version 1.7.6 2004/ 3/03 ----------------------------------------------------------------------* Custom fields now appear on print_bug.aspx and email notifications. * When adding new bug, project dropdown defaults to last project you wor ed with, not merely last project you added a bug to. * Bugs page now remembers the last query you selected in dropdown Bug Fixes: * Added "Reported On" to print_bug.aspx * Updating a bug with custom date field preserves the null. * Date pic er (calendar.js) is now wor s with European date formats. * util.cs no longer changes the case of the SQL in order to modify it to apply permissions. ----------------------------------------------------------------------Version 1.7.5 2004/ 2/27 ----------------------------------------------------------------------* Added support for adding one attachment to outgoing emails. Attachments to emails become bug attachments too. It's not a very nice implementation, but it's better than nothing. * Now chec ing that to, from, and subject fields of outgoing email are not blan . Bug Fixes: * Added missing column "us_auto_subscribe_own_bugs" to users table in setup.sql * Emails generated by clic ing on "send email" lin have proper magic words in subject so that replies to them are posted bac to same bug. * Custom date fields now wor when adding a new bug as opposed to just updating an existing bug. (no problem with other data types). To add a custom field, use SQL li e this to alter the bugs table: alter table bugs add [Target Completion Date] datetime null ----------------------------------------------------------------------Version 1.7.4 2004/ 2/19 ----------------------------------------------------------------------Added new setting "DefaultPermissionLevel" in Web.Config. Previously, default permission meant allow everything unless specifically denied. Now you can set btnet to deny everything unless specifically allowed. Added new way to subscribe to email notifications, Auto Subscribe Own. When set, user to whom bug is assigned is automatically subscribed to receive notifications. See note below "Migrating to 1.7.4.

Added new values to Web.config which I hope help with date localization. This isn't meant to be a complete solution yet. "JustDateFormat" - use this to specify the date format without time "SQLServerDateFormat" - tell btnet how SQL Server dates are formated. I'm not sure if this really wor s. These should help with custom columns of type datetype. These should also help allow users to enter dates in local format on the search page. The calendar control still returns dates in YYYY-MM-DD format, however. Other Bug fixes: * Better handling of email errors. Instead of crash, error message is returned to user and info is written to log. * Now able to turn off logging via LogEnabled setting in Web.config. * Better handling of custom columns. Now wor s with DateTime and nvarchar. ----------------------------------------------------------------------Migrating to 1.7.4 ----------------------------------------------------------------------Run this sql: alter table users add us_auto_subscribe_own_bugs int null default(0) update users set us_auto_subscribe_own_bugs = 0

----------------------------------------------------------------------Version 1.7.3 2004/2/7 ----------------------------------------------------------------------btnet_console.exe and btnet_service.exe now use these settings in Web.config as their btnet user/password when inserting bugs.' <add ey="ServiceUsername" value="email2"/> <add ey="ServicePassword" value="x"/> These entries replace the "username" and "password" entries. * Also for btnet_console and btnet_service, added new "SubjectCannotContain" entry to Web.config. If not blan , then emails containing the string are s ipped. * Bug descriptions are now hotlin s if the column heading starts with the chars "DESC" (case insensitive). Bug fixes: * Fixed view_attachment.aspx. Copyright notice had been part of

response. * Fixed page title of print_bug.aspx * Now wor s with case-sensitive databases. * Don't send notifications to users w/o view permission. * Don't allow multiple default queries. * Don't show "add attachment" and "send email" lin s for view only users. * No longer using hardcoded "email/x" username/password in btnet_service.exe and btnet_console.exe. Instead using "ServiceUsernname" and "ServicePassword". ----------------------------------------------------------------------Version 1.7.2 2003/12/18 ----------------------------------------------------------------------* You can add custom columns to the bug table and they will show up in the edit_bug.aspx form. For example, if you want a version field, execute: alter table bugs add version varchar(20) null No validation yet. If you enter non-numeric data or a string that's too long or leave a required field blan , you will not get a friendly error message. ----------------------------------------------------------------------Version 1.7.1 12003/2/9 ----------------------------------------------------------------------bug fixes only * fixed inc_insert_bugs.aspx so as not to insert additional, duplicate, subscriptions each time bug is changed * fixed setup.sql to add missing comma in "create table project_user_xref" ----------------------------------------------------------------------Version 1.7.0 12003/2/6 ----------------------------------------------------------------------* see note below how to migrate to this version. * save queries as either "public" or "private". "private" queries are only visible to the person wh0 saved them. * Admins can set project level permissions for users. Per project, bugs are either hidden, readonly, or fully editable. Since this logic is new, please don't trust it 100% to prevent a malicious user from editing bugs they aren't supposed to. There might still be holes. * btnet_console.exe and btnet_service.exe used to fail if the Subject header came before the From headers. Fixed.

----------------------------------------------------------------------Migrating 1.7.0 ----------------------------------------------------------------------alter table queries add qu_user int null alter table project_user_xref add pu_permission_level int default(2) ----------------------------------------------------------------------Version 1.6.9 2003/11/12 ----------------------------------------------------------------------* see note below on how to migrate to this version. * !!!! IMPORTANT !!!! delete_bug was completely bro en in 1.6.8 but even worse, before that it was deleting the wrong stuff - li e potentially a comment belonging not to the bug being deleted but to another bug. Fixed in this version The sql used to say: sql = @"delete delete delete delete Now it says: sql = @"delete delete delete delete from from from from from from from from

* A while bac I made some columns bigger in setup.sql. You might want to do the same, but you don't have to. Here's the SQL: alter table bug_comments alter column bc_comment varchar(7000) alter table bug_comments alter column bc_email_from varchar(255) alter table queries alter column qu_sql varchar(7000) * view_web_config.aspx was bro en. Fixed now. * New "WindowsAuthentication" setting in Web.config. See instructions in web.config on how to avoid receiving a logon prompt. * Receiving too many emails? Users can decide to receive only email notifications on new bugs, rather than receiving a change every time a bug is changed. ----------------------------------------------------------------------Migrating to 1.6.9 ----------------------------------------------------------------------Run this sql: alter table users add us_only_new_bug_notifications int null default(0) update users set us_only_new_bug_notifications = 0 ----------------------------------------------------------------------Version 1.6.8 2003/11/10 -----------------------------------------------------------------------

bug_comments where bc_id = $1 bug_attachments where ba_id = $1 bug_subscriptions where bs_bug = $1 bugs where bg_id = $1"; bug_comments where bc_bug = $1 bug_attachments where ba_bug = $1 bug_subscriptions where bs_bug = $1 bugs where bg_id = $1";

SEE "MIGRATING TO 1.6.8" BELOW I'm trying to ma e BugTrac er.NET more secure, suitable for a public web server. I thin at this point, it is secure from mischief from unauthorized or non-admin users. Admin users can pretty much do whatever they want, so don't grant admin rights to somebody you don't now and trust. * Revised logon scheme. Before the browser carried coo ies that indicated whether the user was authenticated and an admin user. These were simple coo ies, easy to forge. Now coo ie is a guid that must match up with an entry in the new "sessions" table. * Revised search.aspx so that it does NOT run the sql sent to it in the HTTP request but instead reassembles it based on the contents of the controls. * Revised query.aspx so that IF there is a users table (i.e, post installation), it will require that a user be authenticated and admin. The idea is to let anybody use it before installation, but after installation only admins. * Now calling HttpUtility.HtmlDecode for values from textareas before storing them in the database. I hope this doesn't brea anything for you. The intent is that when the subject or body contains html tags, those tags should be stored in the database as written. However, when echoed bac in the web pages, the text from the db should be Html encoded to prevent cross-site-scripting problems. I thin btnet is safe from cross-site-scripting attac s from non-admin users. * Fixed bro en AllowQueryEditingForNonAdmins setting. Web.config now sets it to off by default. Keep this turned off on a public web server. * New "CommentSortOrder" in Web.config - set to either "asc" or "desc" to control sort order of comments and history. * New "Send Email" lin from edit_bug.aspx to send_email.aspx. ----------------------------------------------------------------------Migrating 1.6.8 ----------------------------------------------------------------------Run this: create table sessions ( se_id char(37) not null, se_date datetime not null default(getdate()), se_user int not null ) ----------------------------------------------------------------------Version 1.6.7 2003/11/06 ----------------------------------------------------------------------!!PLEASE SET THE NEW "AbsoluteUrlPrefix" VALUE IN Web.config!! You need to configure it for the bug-to-bug hyper lin s to wor . * Email notifications now contain hyperlin s

* A bunch of little bug fixes. * Minor cosmetic improvements ----------------------------------------------------------------------Version 1.6.6 2003/11/02 ----------------------------------------------------------------------* You can save shortcuts and lin s to bugs. When you clic on lin , if you are not logged in, you will be presented with the logon page, default.aspx. After logging in you will be redirected to the lin . * Quic ly switch queries on bug page using new drop down * Better, safer handling of user-entered text used to build SQL statements ----------------------------------------------------------------------Version 1.6.5 2003/11/01 ----------------------------------------------------------------------Many than s to Eugene Kalinin (http://sourceforge.net/users/e alinin/) for his input on this release. * Now able to search on user defined attribute and last updated * User defined attribute shows up in search results and in notification email * "Prev" and "next" lin s on edit_bug.aspx for navigating through list of bugs without returning to the list. * Notification emails are now in Html format and include everything you would see on the "print" page. * Bug comments textarea is bigger for new bugs * If you add a new bug, and then another, the project is initialized to the previously used project. * Logging now actually logs something: url, who the user is, and all the sql. * Added SmtpSendUsing setting in Web.config. See below in the tips section to see how the Web.config settings are used to configure email messages. * Fixed bug: btnet_service.exe, btnet_console.exe were not URL encoding their request to insert_bug.aspx ----------------------------------------------------------------------Version 1.6.4 2003/10/26 ----------------------------------------------------------------------* Automatically subscribe to bug notifications on a per-project basis. * Added "settings" lin . Non-admin users can control their own user

settings. ----------------------------------------------------------------------Migrating to 1.6.4 ----------------------------------------------------------------------There is a new table. To add the table to your database, logon, clic on admin, clic on run ad-hoc query, paste in the text below and submit. create table project_user_xref ( pu_id int identity not null, pu_project int not null, pu_user int not null, pu_auto_subscribe int not null default(0) ) create index pu_index_1 on project_user_xref (pu_project, pu_user) create index pu_index_2 on project_user_xref (pu_user, pu_project) ----------------------------------------------------------------------Version 1.6.3 2003/10/22 ----------------------------------------------------------------------* Search now searches comments too * Added SmtpServerPic upDirectory setting in Web.config. You probably don't need it. * Added InsertBugUrl setting in Web.Config - removed hard-coded 127.0.0.1 URL from pop3 client ----------------------------------------------------------------------Version 1.6.2 2003/10/03 ----------------------------------------------------------------------Various bug fixes, including: * bug attachment lin s were not being displayed right in edit_bugs.aspx * This README.TXT file said bc_type is a char(1) instead of a varchar(8) * Dropdowns sometimes were not in any meaningful sort order Also: * Added line charts (in addition to pie and bar) ----------------------------------------------------------------------Version 1.6.1 2003/09/21 ----------------------------------------------------------------------Added "reports.aspx". It's a page that lists various summary reports that you can view either as data or in pie or bar chart form. Create your own reports by adding entries to the "reports" table. * Renamed btnet_pop3.exe to btnet_console.exe. There is also now a version that runs as a service, btnet_service.exe. See Tips section below for how to setup up btnet_service.exe. -----------------------------------------------------------------------

Migrating to 1.6.1 ----------------------------------------------------------------------Run the following SQL create table reports ( rp_id int identity not null, rp_desc varchar(80) not null, rp_sql varchar(1024) not null, rp_chart_type varchar(8) not null ) insert into reports (rp_desc, rp_sql, rp_chart_type) values('Bugs by Status', 'select st_name [status], count(1) [count] from bugs inner join statuses on bg_s tatus = st_id group by st_name order by st_name', 'pie') insert into reports (rp_desc, rp_sql, rp_chart_type) values('Bugs by Priority', 'select pr_name [priority], count(1) [count] from bugs inner join priorities on bg_priority = pr_id group by pr_name order by pr_name', 'pie') insert into reports (rp_desc, rp_sql, rp_chart_type) values('Bugs by Category', 'select ct_name [category], count(1) [count] from bugs inner join categories on bg_category = ct_id group by ct_name order by ct_name', 'pie') insert into reports (rp_desc, rp_sql, rp_chart_type) values('Bugs by Month', 'select month(bg_reported_date) [month], count(1) [count] from bugs group by yea r(bg_reported_date), month(bg_reported_date) order by year(bg_reported_date), mo nth(bg_reported_date)', 'bar') insert into reports (rp_desc, rp_sql, rp_chart_type) values('Bugs by Day of Year', 'select datepart(dy, bg_reported_date) [day of year], count(1) [count] from bugs group by datepart(dy, bg_reported_date), datepart(dy,bg_reported_date) order by 1', 'bar') insert into reports (rp_desc, rp_sql, rp_chart_type) values('Bugs by User', 'select bg_reported_user, count(1) [r] into #t from bugs group by bg_reported_us er; select bg_assigned_to_user, count(1) [a] into #t2 from bugs group by bg_assi gned_to_user; select us_username, r [reported], a [assigned] from users left out er join #t on bg_reported_user = us_id left outer join #t2 on bg_assigned_to_use r = us_id order by 1', 'table') ----------------------------------------------------------------------Version 1.6 -----------------------------------------------------------------------

* Added btnet_pop3.exe. It's a POP3 client that fetches emails and stuffs them in the database as bugs. See "Tips" section below for more info. * BUG_HISTORY has been merged into BUG_COMMENTS. See "Migrating to 1.6" section below. * Improved SMTP support - now able to specify a user/password for SMTP servers that require authentication. See in Web.config: <add ey="SmtpServerAuthenticateUser" value="YOUR SMTP USER NAME"/> <add ey="SmtpServerAuthenticatePassword" value="YOUR PASSWORD"/> * Got rid of Authenticate.dll scheme. * Fixed bug where notification emails had incorrect bug status, category, project, etc. * Fixed bug where edit_user.aspx died with names li e O'Hara, O'Malley. ----------------------------------------------------------------------Migrating to 1.6 ----------------------------------------------------------------------1) There are new columns in the project table and bug_comments table. To add the columns to your database, logon, clic on admin, clic on run ad-hoc query, paste in the text below and submit. alter alter alter alter table table table table projects projects projects projects add add add add pj_enable_pop3 int null pj_pop3_username varchar(50) null pj_pop3_password varchar(20) null pj_pop3_email_from varchar(50) null

alter table bug_comments add bc_email_from varchar(255) null alter table bug_comments add bc_email_to varchar(255) null alter table bug_comments add bc_type varchar(8) null 2) Bug comment and bug history tables have been merged into one table and a bc_type field now distinguishes them. The types are: comment update received [email] sent [email] The following SQL updates the bug_comment -- copy data from history to comments and get rid of history table update bug_comments set bc_type = 'comment' insert into bug_comments (bc_bug, bc_user, bc_date, bc_comment, bc_type) select bh_bug, bh_user, bh_date, bh_what, 'update' from bug_history drop table bug_history 2) Update the top of your Web.config file, so that it loo s li e this:

<configSections> <section name="btnetSettings" type="System.Configuration.NameValueFileSectionHandler,System, V ersion=1.0.3300.0,Culture=neutral, PublicKeyTo en=b77a5c561934e089" /> <section name="pop3Settings" type="System.Configuration.NameValueFileSectionHandler,System, V ersion=1.0.3300.0,Culture=neutral, PublicKeyTo en=b77a5c561934e089" /> </configSections> 3) Add this after the line containing "</btnetSettings>". Change the actual settings to fit your situation. <pop3Settings> <!-Replace my server with YOUR server.

<!-BugTrac er.NET username, password that btnet_service.exe will use to tal to BugTrac er.NET --> <add ey="username" value="email"/> <add ey="password" value="x"/> <!-Only retrieve messages if they contain a magic word in t heir subject. If the value is blan , then btnet_pop3.exe will retrieve all messages. Probably for your production, the value should be blan . --> <add ey="SubjectMustContain" value="test"/> <!-For my own testing, it was useful to have this option. For production the value should be 1. --> <add ey="DeleteMessagesOnServer" value="1"/> <!-How frequently should btnet_pop3.exe chec the server fo r emails? --> <add ey="FetchIntervalInMinutes" value="15"/> </pop3Settings> ----------------------------------------------------------------------Version 1.5.1 ----------------------------------------------------------------------* Added view_web_config.aspx to view Web.config file for admins * Added ability to delete bugs * Web.config gives more control over what non-admins are allowed to do.

--> <add

ey="Pop3Server" value="pop.sbcglobal.yahoo.com"/>

* Web.config controls whether raw SQL displays on the query and search pages * Web.config controls whether bug change history entries are show with bug comment entries or seperately ----------------------------------------------------------------------Version 1.5 ----------------------------------------------------------------------Migrating from 1.4 to 1.5 There are new columns in the project table. To add the columns to your database, logon, clic on admin, clic on run ad-hoc query, paste in the text below and submit. alter table projects add pj_default_user int null alter table projects add pj_auto_assign_default_user int null alter table projects add pj_auto_subscribe_default_user int null ----------------------------------------------------------------------Version 1.4 ----------------------------------------------------------------------* New print bug feature * Revised database access layer to - was architected all wrong. You shouldn't even use versions prior to 1.4 anymore. Sorry.