Restore helper_alternate_class() function

This is a temporary measure to improve backwards compatibility of 1.3,
the function will be removed again in the next release.

Fixes #17522 (see also issue #17437)
New DEPRECATED error type

Make use of E_USER_DEPRECATED instead of relying on WARNING for
deprecated functionality. Allows for differentiated error messages and
handling.

Fixes #17837
Add DEPRECATED warning to helper_alternate_class()
Delay printing of deprecated warnings to page bottom

This avoids display errors when a deprecated warning is triggered from
within an HTML tag, as was the case when using helper_alternate_class().
Add link to PHP constants for unhandled error types
Reinstate helper_alternate_class() function

Pull request #234
Add buttons style to table based forms
Localisation updates from https://translatewiki.net.
Fix #17870: XSS in adm_config_report.php
SOAP API: apply access control to mci_account_get_array_by_id

The access controls are the same as the ones applied by
view_user_page.php, with the single addition of making the info
available if the user requests their own information.

This preserves the behaviour of the mc_login method call.

Fixes #17243 (leak of user personal information)

Signed-off-by: Damien Regad <dregad@mantisbt.org>
Prevent unauthorized users setting handler when reporting issue

Adding a security check to block the update when access level is
insufficient.

Fixes #17878

Signed-off-by: Damien Regad <dregad@mantisbt.org>
Ensure username is valid in login_page.php

This is a fix to improve the behaviour of login_page against possible
XSS exploits to ensure that a username is valid before displaying it
back to the user when entered.

Fixes #17338

Signed-off-by: Damien Regad <dregad@mantisbt.org>
Whitespace
Revert "Fix #17870: XSS in adm_config_report.php"

This reverts commit b509ab380f91e84d9683dbfdb02206b88a9b86fb.

The wrong string API call was used, it should have been
string_attribute() and not string_display_line(). Thanks to
Paul Richards for pointing this out.
Fix #17870: XSS in adm_config_report.php

This is the correct fix for this issue, using string_attribute() to
escape the variable. Thanks to Paul Richards for pointing this out.
Incorrect access check on attachment downloads

Even if config variables $g_download_attachments_threshold and
$g_view_attachments_threshold are set to 55 (developer), users with
lower privileges can download attachments.

Fixes #17742

Signed-off-by: Damien Regad <dregad@mantisbt.org>
Fix alternate background color for section-container css class

Fixes #17851
Fix bug doesn't exist error in timeline feature

The error was caused by 0f030fd725b8139aa39e47365fe3433a2f12dda8 which checks that the user has access to issues referenced in issue history.

Issue #9885
Improve timeline message when issue is unassigned

Old Message: "user xyz assigned issue 123 to user0"
New Message: "user xyz unassigned issue 123"
Restyle the send reminder form

Fixes #17832

Signed-off-by: Victor Boctor <victor@mantishub.net>