- Added submit button to dev tab when the bug is private

- Changed link to CVE info page

- Fix block_user_comment disable option

- Allow trusted dev to have security dev access

- Added list of security developers
- Changed bugs_authenticate function
new prototype: (&$user, &$pw, &$logged_in, &$user_flags)

$user_flags:
define('BUGS_NORMAL_USER', 1<<

- Added list of security developers
- Changed bugs_authenticate function
new prototype: (&$user, &$pw, &$logged_in, &$user_flags)

$user_flags:
define('BUGS_NORMAL_USER', 1<<0);
define('BUGS_DEV_USER', 1<<1);
define('BUGS_TRUSTED_DEV', 1<<2);
define('BUGS_SECURITY_DEV', 1<<3);

show more ...

- Added bugs_has_access() function to simplify the user access check to bug data

- Allow assigned dev (non-trusted-dev) to see and post in the report
- Hide the CVE-ID field to non-trusted-dev

- Added "Security" bug type to control Security bug instead of a package name

- Just show the vote form when the bug info can be presented...

- Clean up and fixes

- Show the bug information when $edit is not set

- Hide the "add comment" menu item to private bugs

- Clean up

- Show bug info when the reporter log in

- Added link to vuln summary on nist.gov

- Added missing line

- Let try another background color, and improve this error message

- Hidden original report when suitable

- Added error message to when trying to mark a non Security related bug as private

- Just turn private the bug marked to "Security related" when it was not Closed

- Added field to CVE-ID
- Added support to private report
(When setting the package name to 'Security related', it will turns automatically a private report)

private report: Only t

- Added field to CVE-ID
- Added support to private report
(When setting the package name to 'Security related', it will turns automatically a private report)

private report: Only the original reporter and people behind security@php will can see/edit/comment it.

When the report is ok to be public, anyone from security@php can turn it public.

# Initial commit... :P

show more ...

Hide and disallow comments to bugs with status = Spam, yet still allow logged in developers to edit the bugs. Likely needs tweaking.

- Fixed missing checked="checked" for bug marked to do not receive user comment

- Errr, fix sql

- Fix typo (argh!)