Fix #15481: custom field values sort order in view all page filter

Commit b5abce1f917da688c86aec17dee11111ced5f0b7 introduced a regression
in the sort order of custom field values because the query retrieving
the custom field values was rewritten with a SELECT DISTINCT instead of
using a GROUP BY clause. With MySQL, group by sorts the results, whereas
distinct does not (not tested with other RDBMS).

This fixes the issue by adding an ORDER BY clause.
Localisation updates from http://translatewiki.net.
Fix #15511: XSS vulnerability when deleting a version
Localisation updates from http://translatewiki.net.
Fix #15517: soap API datatype for DateTime

Wrong datatype for DateTime  'dateTime' vs. 'xsd:dateTime'
results in an error during deserialization in .net

Signed-off-by: Damien Regad <damien.regad@merckgroup.com>
Fix #15522: SOAP mc_project_get_issues now reports due_date

Signed-off-by: Damien Regad <damien.regad@merckgroup.com>
Localisation updates from http://translatewiki.net.
Fix crash when report_bug_threshold=array in access_has_bug_level

When displaying a bug for which the user is not the reporter,
$g_limit_reporters=ON and the workflow is set so report_bug_threshold is
an array, MantisBT crashes with "PHP Fatal error: Unsupported operand
types".

This is due to use of '+ 1' to indicate that user should have the next
higher access level to view the issue. We now use the same logic but
within a foreach loop to check against each array element.

Fixes #15538