Marc Delisle
d68c8bb8ed
bug #3398788 [session] No feedback when result is empty (signon auth_type)
2011-12-05 11:04:16 -05:00
Michal Čihař
d17fba309c
Fix permissions.
...
Most files were made executable somewhere in ninadsp tree, reverting
this.
2010-08-30 09:53:37 +02:00
ninadsp
c9253c0a0e
Merge conflict resolved for Lori's tree merge to main
2010-08-22 12:42:54 +05:30
Michal Čihař
0f39dc040a
Merge branch 'QA_3_3'
2010-08-17 15:31:06 +02:00
Michal Čihař
e8cf1ac677
Generate new token on forcible generating of session id.
2010-08-17 15:30:47 +02:00
ninadsp
e646a2760c
Fixed conflict due to upstream merge
2010-07-23 21:59:15 +05:30
Michal Čihař
318dc4b650
Drop @version tag from docblocks.
2010-07-20 13:59:17 +02:00
ninadsp
bed1948d04
testing git setup - no major change made in code yet
...
only added a few comments
2010-05-23 01:22:01 +05:30
Michal Čihař
f8f7b5661b
This can not use translations as they are initialized after sessions.
2010-05-17 11:35:29 +02:00
Marc Delisle
b05a903dc3
gettext conversion
2010-05-14 07:47:50 -04:00
Michal Čihař
b1109fa7f4
Convert session module warning to generic message function.
2010-05-05 11:36:10 +02:00
Michal Čihař
7f9126fde9
rfe #1379201 [core] Add option to configure session_save_path.
2010-01-22 17:46:55 +00:00
Michal Čihař
b29ef818d9
Properly initialize session cookie params.
...
This was mistakenly commented out. We can also use httponly parameter
instead of injecting it manually because PHP >= 5.2.0 supports it.
2010-01-21 13:01:27 +00:00
Michal Čihař
94c2f864ae
[core] Remove config data from session as it brings chicken-egg problem.
...
Configuration data stores PmaAbsoluteUri, which should be accessible
before initiating session. Otherwise there is no way to make
PmaAbsoluteUri work. PmaAbsoluteUri is needed at least for reverse
proxy setups, for example http webserver running behind https proxy.
2010-01-21 11:18:18 +00:00
Marc Delisle
526dce65cb
3.3
2009-12-31 13:11:19 +00:00
Marc Delisle
f3833884e4
3.3
2009-12-31 13:09:18 +00:00
Marc Delisle
60536d78e1
patch #2798592 [import] Progress bar
2009-07-02 12:12:06 +00:00
Michal Čihař
f38ec8587c
bug #2355753 [core] do not bail out creating session on any PHP warning
2008-11-28 13:25:26 +00:00
Michal Čihař
56941e509c
Adding @package, second part.
2008-11-24 11:05:40 +00:00
Marc Delisle
8ea82ad46c
bug #2186823 [core] bad session.save_path not detected
2008-11-23 14:55:59 +00:00
Marc Delisle
9ff701560f
bug #2032707 [core] PMA does not start if ini_set() is disabled
2008-08-01 19:15:01 +00:00
Marc Delisle
afbb2a9dc2
protection against XSS when register_globals is on and .htaccess has no effect
2008-06-21 15:01:27 +00:00
Marc Delisle
5620fa7a1f
bug #1955386 [session] Overriding session.hash_bits_per_character
2008-05-01 16:41:25 +00:00
Marc Delisle
3f1f70f0c7
bug #1763343 [session] Behavior with session.auto_start enabled
2007-11-25 13:33:54 +00:00
Sebastian Mendel
db1ee01a1e
removed obsolete PHP < 5.2 code (doc)
2007-10-08 06:43:45 +00:00
Sebastian Mendel
da1b3a97dd
removed obsolete PHP < 5.2 code
2007-10-08 06:29:55 +00:00
Marc Delisle
f5018d7f61
bug #1728590 , last part of the fix
2007-06-05 16:32:49 +00:00
Sebastian Mendel
374abd5173
fixed/added page level docblock
2007-03-20 10:32:13 +00:00
Sebastian Mendel
817e790762
synced/fixed vim line
2007-03-19 17:55:39 +00:00
Marc Delisle
42ac66ad74
get rid of propicon
2007-02-10 15:58:46 +00:00
Marc Delisle
acbfe50ca9
prevent attack on the session name cookie
2007-01-08 18:06:00 +00:00
Marc Delisle
8ae34fdf2e
bug #1538132 , remove the setting of session.save_handler to 'files'
2007-01-05 12:00:37 +00:00
Marc Delisle
8cda2c9b41
allow caching of phpmyadmin.css.php
2006-12-10 13:30:40 +00:00
Michal Čihař
fb9a3a598e
Check before commit!
2006-11-17 08:49:30 +00:00
Marc Delisle
6455e65bc9
wrong parameter when calling error.php
2006-10-19 20:48:14 +00:00
Marc Delisle
094d4d1db0
security fixes
2006-09-29 13:52:08 +00:00
Sebastian Mendel
1eadc0a41a
use @todo tag for todo items, to show up in generated documentation
2006-09-21 14:28:46 +00:00
Michal Čihař
8bfebb7072
Remove unused code.
2006-05-30 14:50:40 +00:00
Michal Čihař
0bf717892f
Protect against external links which could perform any action (CVE-2006-1804).
2006-04-20 14:45:42 +00:00
Marc Delisle
df17ff7448
bug #1411996 , support session.autostart=1 without the need of .htaccess
2006-03-02 16:14:45 +00:00
Sebastian Mendel
dcfec7c4df
stop execution and ommit warning on session.auto_start enabled
2006-02-10 10:09:46 +00:00
Marc Delisle
672c5e5ab5
bug #1414628 , session.save_handler not set to files
2006-01-29 19:41:59 +00:00
Sebastian Mendel
0ae8842353
(not complete) PEAR coding standard
2006-01-17 17:03:02 +00:00
Sebastian Mendel
3d5994dd7d
session cookie path (bug #1370294 )
2005-12-01 10:46:56 +00:00
Sebastian Mendel
76f7c21270
session cookie path (bug #1370294 )
2005-12-01 08:57:20 +00:00
Marc Delisle
001062a994
bug #1352479 , message if no session support
2005-11-10 20:02:48 +00:00
Sebastian Mendel
9df9bcd23a
dont use 6-bit chars on windows
2005-10-12 11:15:07 +00:00
Marc Delisle
5c981c774f
workaround for warning on sf.net
2005-10-08 18:45:35 +00:00
Sebastian Mendel
6dbd2398c6
introduced PMA_secureSession()
2005-09-28 11:57:04 +00:00
Sebastian Mendel
87764fc859
introducing sessions
2005-09-27 16:26:18 +00:00