Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Fixes #16767: upgrade_unattended script is no longer working.
In an attempt to get MantisBT / MantisTouch redirection to work better on mantishub.com several issues were fixed.

Fixes #16768: Default mantistouch_url correctly when MantisTouch is installed in 'm' subfolder.
Fixes #16769: MantisTouch redirect can break soap api based on user agent sent.
Fixes #16770: Redirect from MantisBT issue to MantisTouch should go to the same issue page on MantisTouch.
Merge pull request #99 from vboctor/upgrade_unattended

Fixes #16767: upgrade_unattended script is no longer working.
Merge pull request #100 from vboctor/mantistouch_redirect

MantisBT / MantisTouch redirect improvements
Localisation updates from https://translatewiki.net.
Retain inherited category when moving issue to sub-subproject

Prior to this, the category would be reset to default when moving an
issue more than one level down the project hierarchy, even though all
subprojects are set to inherit categories from their respective parents.

Thanks to lukasd for identifying the issue and providing the fix.

Fixes #16182
Localisation updates from https://translatewiki.net.
Fix #11785: Comment for access_compare_level in access_api.php is bogus
Localisation updates from https://translatewiki.net.
Fix CVE-2014-1608: mc_issue_attachment_get SQL injection

Use of db_query() instead of db_query_bound() allowed SQL injection
attacks due to unsanitized use of parameters within the query when using
the SOAP API mc_issue_attachment_get.

This issue was reported by e-mail by Andrea Barisani from oCERT, on
behalf of Martin Herfurt <martin.herfurt@nruns.com>, a security
researcher at n.runs professionals GmbH, who discovered the issue
during an audit at a customer's site.

Fixes #16879

Signed-off-by: Damien Regad <dregad@mantisbt.org>

Conflicts:
	api/soap/mc_file_api.php
Fix CVE-2014-1609: SQL injection vulnerabilities

Additional cases of db_query() instead of db_query_bound() usage,
potentially allowing SQL injection attacks due to unsanitized use of
parameters within the query.

This includes vboctor's 2 comments.

Fixes #16880

Signed-off-by: Damien Regad <dregad@mantisbt.org>

Conflicts:
	admin/db_stats.php
	plugins/MantisGraph/pages/bug_graph_bycategory.php
	plugins/MantisGraph/pages/bug_graph_bystatus.php
	proj_doc_page.php
Travis: remove notification to mantisbt-cvs list [skip ci]
Fix #16880: regression introduced by original patch
Fix #16880: another one
Fixes #16848: Remove main page from main menu when news feature is OFF

The main page was really designed to include the news which has been deprecated for a while. Hence, the main page is useless for most users. This change hides it unless the news feature is ON.

This is until the news feature is completely removed.
Prevent plugin pages access when upgrade pending

If a plugin's code has been upgraded, but the schema is still on the old
version, the plugin is effectively disabled (i.e. its entry points are
not displayed). However, it was still possible to access individual
pages directly, which could lead to errors.

This commit adds an extra check in plugin.php which triggers an error
when the plugin needs to be upgraded.

Fixes #16706
Fix group actions not sending notifications

Added missing email_generic() calls

Fixes #6343, #13659