50 Commits

Author SHA1 Message Date
Marc Delisle
d68c8bb8ed bug #3398788 [session] No feedback when result is empty (signon auth_type) 2011-12-05 11:04:16 -05:00
Michal Čihař
d17fba309c Fix permissions.
Most files were made executable somewhere in ninadsp tree, reverting
this.
2010-08-30 09:53:37 +02:00
ninadsp
c9253c0a0e Merge conflict resolved for Lori's tree merge to main 2010-08-22 12:42:54 +05:30
Michal Čihař
0f39dc040a Merge branch 'QA_3_3' 2010-08-17 15:31:06 +02:00
Michal Čihař
e8cf1ac677 Generate new token on forcible generating of session id. 2010-08-17 15:30:47 +02:00
ninadsp
e646a2760c Fixed conflict due to upstream merge 2010-07-23 21:59:15 +05:30
Michal Čihař
318dc4b650 Drop @version tag from docblocks. 2010-07-20 13:59:17 +02:00
ninadsp
bed1948d04 testing git setup - no major change made in code yet
only added a few comments
2010-05-23 01:22:01 +05:30
Michal Čihař
f8f7b5661b This can not use translations as they are initialized after sessions. 2010-05-17 11:35:29 +02:00
Marc Delisle
b05a903dc3 gettext conversion 2010-05-14 07:47:50 -04:00
Michal Čihař
b1109fa7f4 Convert session module warning to generic message function. 2010-05-05 11:36:10 +02:00
Michal Čihař
7f9126fde9 rfe #1379201 [core] Add option to configure session_save_path. 2010-01-22 17:46:55 +00:00
Michal Čihař
b29ef818d9 Properly initialize session cookie params.
This was mistakenly commented out. We can also use httponly parameter
instead of injecting it manually because PHP >= 5.2.0 supports it.
2010-01-21 13:01:27 +00:00
Michal Čihař
94c2f864ae [core] Remove config data from session as it brings chicken-egg problem.
Configuration data stores PmaAbsoluteUri, which should be accessible
before initiating session. Otherwise there is no way to make
PmaAbsoluteUri work. PmaAbsoluteUri is needed at least for reverse
proxy setups, for example http webserver running behind https proxy.
2010-01-21 11:18:18 +00:00
Marc Delisle
526dce65cb 3.3 2009-12-31 13:11:19 +00:00
Marc Delisle
f3833884e4 3.3 2009-12-31 13:09:18 +00:00
Marc Delisle
60536d78e1 patch #2798592 [import] Progress bar 2009-07-02 12:12:06 +00:00
Michal Čihař
f38ec8587c bug #2355753 [core] do not bail out creating session on any PHP warning 2008-11-28 13:25:26 +00:00
Michal Čihař
56941e509c Adding @package, second part. 2008-11-24 11:05:40 +00:00
Marc Delisle
8ea82ad46c bug #2186823 [core] bad session.save_path not detected 2008-11-23 14:55:59 +00:00
Marc Delisle
9ff701560f bug #2032707 [core] PMA does not start if ini_set() is disabled 2008-08-01 19:15:01 +00:00
Marc Delisle
afbb2a9dc2 protection against XSS when register_globals is on and .htaccess has no effect 2008-06-21 15:01:27 +00:00
Marc Delisle
5620fa7a1f bug #1955386 [session] Overriding session.hash_bits_per_character 2008-05-01 16:41:25 +00:00
Marc Delisle
3f1f70f0c7 bug #1763343 [session] Behavior with session.auto_start enabled 2007-11-25 13:33:54 +00:00
Sebastian Mendel
db1ee01a1e removed obsolete PHP < 5.2 code (doc) 2007-10-08 06:43:45 +00:00
Sebastian Mendel
da1b3a97dd removed obsolete PHP < 5.2 code 2007-10-08 06:29:55 +00:00
Marc Delisle
f5018d7f61 bug #1728590, last part of the fix 2007-06-05 16:32:49 +00:00
Sebastian Mendel
374abd5173 fixed/added page level docblock 2007-03-20 10:32:13 +00:00
Sebastian Mendel
817e790762 synced/fixed vim line 2007-03-19 17:55:39 +00:00
Marc Delisle
42ac66ad74 get rid of propicon 2007-02-10 15:58:46 +00:00
Marc Delisle
acbfe50ca9 prevent attack on the session name cookie 2007-01-08 18:06:00 +00:00
Marc Delisle
8ae34fdf2e bug #1538132, remove the setting of session.save_handler to 'files' 2007-01-05 12:00:37 +00:00
Marc Delisle
8cda2c9b41 allow caching of phpmyadmin.css.php 2006-12-10 13:30:40 +00:00
Michal Čihař
fb9a3a598e Check before commit! 2006-11-17 08:49:30 +00:00
Marc Delisle
6455e65bc9 wrong parameter when calling error.php 2006-10-19 20:48:14 +00:00
Marc Delisle
094d4d1db0 security fixes 2006-09-29 13:52:08 +00:00
Sebastian Mendel
1eadc0a41a use @todo tag for todo items, to show up in generated documentation 2006-09-21 14:28:46 +00:00
Michal Čihař
8bfebb7072 Remove unused code. 2006-05-30 14:50:40 +00:00
Michal Čihař
0bf717892f Protect against external links which could perform any action (CVE-2006-1804). 2006-04-20 14:45:42 +00:00
Marc Delisle
df17ff7448 bug #1411996, support session.autostart=1 without the need of .htaccess 2006-03-02 16:14:45 +00:00
Sebastian Mendel
dcfec7c4df stop execution and ommit warning on session.auto_start enabled 2006-02-10 10:09:46 +00:00
Marc Delisle
672c5e5ab5 bug #1414628, session.save_handler not set to files 2006-01-29 19:41:59 +00:00
Sebastian Mendel
0ae8842353 (not complete) PEAR coding standard 2006-01-17 17:03:02 +00:00
Sebastian Mendel
3d5994dd7d session cookie path (bug #1370294) 2005-12-01 10:46:56 +00:00
Sebastian Mendel
76f7c21270 session cookie path (bug #1370294) 2005-12-01 08:57:20 +00:00
Marc Delisle
001062a994 bug #1352479, message if no session support 2005-11-10 20:02:48 +00:00
Sebastian Mendel
9df9bcd23a dont use 6-bit chars on windows 2005-10-12 11:15:07 +00:00
Marc Delisle
5c981c774f workaround for warning on sf.net 2005-10-08 18:45:35 +00:00
Sebastian Mendel
6dbd2398c6 introduced PMA_secureSession() 2005-09-28 11:57:04 +00:00
Sebastian Mendel
87764fc859 introducing sessions 2005-09-27 16:26:18 +00:00