Patch for bug 216902: support LDAPS connections; patch by Christian Krause <chkr@plauener.de>, r=vladd, a=justdave.

Patch for bug 161369: Strip trailing whitespace from login usernames; patch by Paul <pdemarco@zoominternet.net>, r=vladd, a=justdave.

Bug 327355: Email preferences are not set correctly when the user account is created by Env.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=joel a=justdave

Bug 322620: Logging in with 'Remember my Login' deselected gives: Use of uninitialized value in string eq at Bugzilla/Auth/Login/WWW/CGI.pm line 83 - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave

Bug 322244: Cookies are incorrectly detainted when logging out - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave

Bug 119524: SECURITY: predictable sessionid (Use a token instead of logincookie) - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=mkanat a=justdave

Bug 279716: Users have to relogin when changing their own password - Patch by Marc Schumann <wurblzap@gmail.com> r=wicked a=justdave

Bug 304075: Eliminate use of $::userid from Bugzilla - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave

Patch by Joel Peshkin <bugreport@peshkin.net>
r=mkanat, a=justdave

Bug 300403: New Charts errors out, creates new 'add' user, when Env auth method is used - Patch by A. Karl Kornel <karl@kornel.name> r=wurblzap a=justdave

Bug 301967: Some .pm files have invalid POD syntax - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch By A. Karl Kornel <karl@kornel.name> r=glob, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Bug 268146: mod_security complain: Invalid cookie format: Cookie value is missing #2 - Patch by Marc Schumann <wurblzap@gmail.com> r=kiko a=justdave

Bug 287436: [SECURITY] After having logged in, links to change the report type contain username and password
Patch By Marc Schumann <wurblzap@gmail.com> r=gerv, a=justdave

Bug 290570: Bugzilla::Auth::WWW:Env uses bitwise OR - Patch by Simon Wilkinson <simon@sxw.org.uk> r=kiko a=justdave

Bug 238877: remove %FORM from Bugzilla/Auth/Login/WWW/CGI.pm - Patch by Teemu Mannermaa <wicked@etlicon.fi> r=LpSolit a=justdave

Bug 258515: Errors when accessing Bugzilla over IPv6 - Patch by Marc Schumann <wurblzap@gmail.com> r=joel, a=justdave

Bug 83044 - Any page is now capable of being a login page simply by adding the ?GoAheadAndLogin=1 option to the URL. All links have been changed to make index.cgi the default login page instead of query.cgi.
r=joel, a=justdave

Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=travis, r=LpSolit, a=justdave

Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=mkanat, a=justdave

Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=mkanat, a=justdave

Patch by Max Kanat-Alexander <mkanat@kerio.com>  r=vladd  a=justdave

Patch by Max Kanat-Alexander <mkanat@kerio.com>   r=vladd  a=justdave

Patch by Max Kanat-Alexander <mkanat@kerio.com>   r=vladd  a=justdave

Patch for bug 260682: Support redirecting to HTTPS always or for authenticated sessions only; patch by Byron Jones (glob) <bugzilla@glob.com.au>, r=vladd, a=myk.

Patch for bug 232155: Remove uninitialized value warning from Pperl's Cookie.pm and unify code by removing redundancy; patch by Christian Reis <kiko@async.com.br> backported to 2.18 by Rob Siklos <rsiklos@adexa.com>; r=vladd,kiko, a=justdave.

Patch for bug 257303: convert lastused field in logincookies from timestamp to datetime; patch by Tomas Kopal <Tomas.Kopal@altap.cz>; r=vladd, a=justdave.

patch by erik
r=joel
a=justdave

patch by erik,joel
r=kiko
a=justdave

Murder the last remaining places in the tree where COOKIE is used;
includes a rather thorough cleanup of Bugzilla::Bug->user and a minor
doc update. r=joel, a=justdave.

remaining places in the tree where COOKIE is used; includes a rather
thorough cleanup of Bugzilla::Bug->user and a minor doc update. r=joel, a=justdave.

patch by erik
r=joel, kiko
a=myk

patch by erik
r=joel
a=justdave

Fix for bug 226754: Move InvalidateLogins into Bugzilla::Auth::CGI.             Consolidates the logout code into Bugzilla::Auth::CGI, and provides
simple front-end wrappers in Bugzilla.pm for use in the CGIs we have.
r=bbaetz, joel; a=justdave.

Adds a set of constants to the logout() API which allow specifying "how
much" we should log out -- all sessions, the current session, or all
sessions but the current one.

Fixes callsites to use this new API; cleans and documents things a
bit while we're at it. Part I in the great COOKIE apocalypse.

r= gerv, a= justdave

the session. Patch by toms@myrealbox.com (Toms Baugis), with minor
cleanups by me. r=kiko, a=myk.