4837 Commits

Author SHA1 Message Date
Sven Strickroth
7909da2ea0 quick fix for issue #3383711
Signed-off-by: Sven Strickroth <email@cs-ware.de>
2011-08-03 23:48:42 +05:30
Madhura Jayaratne
11ad4fd992 bug #3313235 [interface] Error div misplaced 2011-07-29 06:38:07 +05:30
Marc Delisle
09b30b8b6e 3.4.4-rc1 2011-07-25 10:15:14 -04:00
Marc Delisle
871aaa9b64 3.4.5-dev 2011-07-25 10:12:37 -04:00
Marc Delisle
08ee54d4a4 bug #3358750 [core] With Suhosin, urls are too long in edit links 2011-07-24 08:08:38 -04:00
Marc Delisle
3534dda30a Fix merge conflicts 2011-07-23 08:16:00 -04:00
Sven Strickroth
201ad07ea8 Do not add backquotes for normal displayed text
Signed-off-by: Sven Strickroth <email@cs-ware.de>
2011-07-22 09:33:30 -04:00
Sven Strickroth
54398f8a12 Do not call PMA_showHint with bbcode=true in display_tbl.lib.php
This fixes an issue with an InnoDB-table on sql.php with "select * from tbl" showing that "total ~ N <sup>1</sup>" rows are displayed and with a JavaScript enabled browser the footnote gets hidden and it's impossible to find out what the <sup>1</sup> means.

Signed-off-by: Sven Strickroth <email@cs-ware.de>
2011-07-22 15:16:13 +02:00
Madhura Jayaratne
58b48a3d45 bug #3367986 [navi] Drop field -> lost active table 2011-07-21 08:55:57 +05:30
Rouslan Placella
40d7c3b8ba tabs -> spaces 2011-07-15 16:02:37 +01:00
Piotr Przybylski
2cc22c8aba Fix CodeGen export 2011-07-14 23:48:17 +02:00
Piotr Przybylski
70083ad583 Fix XML export so it actually can export table structure
More escaping fixes
2011-07-14 23:43:56 +02:00
Piotr Przybylski
65d962d397 Better escaping in XML export
Note: it's still incorrect
2011-07-14 23:40:58 +02:00
Piotr Przybylski
6d0f28b425 Improve readability of XML export code 2011-07-14 23:38:09 +02:00
Michal Čihař
571cdc6ff4 Pass token along with swekey auth requests 2011-07-11 14:50:44 +02:00
Michal Čihař
ed88c4a7b6 Fix error when gettext is not yet loaded and we want to warn.
This happens when PHP is compiled without session support, which is
checked before gettext is loaded.
2011-07-10 22:46:46 +02:00
Herman van Rink
e7bb42c002 [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-12 2011-07-09 23:10:23 +02:00
Herman van Rink
3ae58f0cd6 [security] Fixed local file inclusion vulnerability and code execution, see PMASA-2011-11 2011-07-08 21:43:38 +02:00
Michal Čihař
90a232d8fb Add definition for Breton 2011-07-07 13:46:15 +02:00
Marc Delisle
58d86350c4 Merge branch 'MAINT_3_4_3' into QA_3_4 2011-07-02 20:49:29 -04:00
Marc Delisle
e214683f9f 3.4.3.1 release 2011-07-02 20:49:01 -04:00
Madhura Jayaratne
5217946601 bug #3340151 [export] Working SQL query exports error page 2011-07-02 07:05:54 +05:30
Madhura Jayaratne
4d1540cc1c bug #3348995 [config] $cfg['Export']['asfile'] set to false does not select asText option 2011-07-01 22:58:35 +05:30
Herman van Rink
b434320eff Fixed filtering of a file path, which allowed for directory traversal, see PMASA-2011-8 2011-06-30 20:26:08 +02:00
Herman van Rink
69fb0f8e7d Fixed regexp quoting issue in Synchronize code, see PMASA-2011-7 2011-06-30 13:26:29 +02:00
Herman van Rink
7ebd958b2b Fixed possible session manipulation in swekey authentication, see PMASA-2011-5 2011-06-30 12:30:58 +02:00
Marc Delisle
e21d6073e4 3.4.3 release 2011-06-27 08:20:21 -04:00
Rouslan Placella
9e224184d7 Fixed bug #3323101 - Invalid escape sequence in SQL parser 2011-06-21 20:38:42 +01:00
Rouslan Placella
c2dd99965d Fixed bug #3323060 - SQL parser breaks AJAX requests if query has unclosed quotes 2011-06-21 20:33:32 +01:00
Marc Delisle
7ecb1abaa4 3.4.4-dev 2011-06-20 12:21:11 -04:00
Marc Delisle
a8caf74fda 3.4.3-rc1 2011-06-20 12:18:57 -04:00
Marc Delisle
2d56821c0f Improved fix for bug #3313210 2011-06-07 11:43:30 -04:00
Marc Delisle
82ac1e8028 bug #3313210 [interface] Columns class sometimes changed for nothing 2011-06-07 11:06:38 -04:00
Marc Delisle
60089624dd bug #3304544 [parser] master is not a reserved word 2011-06-04 06:39:09 -04:00
Yuichiro
2bdfe06982 patch #3304473 [setup] Redefine a lable that was wrong 2011-06-04 05:59:34 -04:00
Madhura Jayaratne
612f8f3d67 Partial fix for bug #3291306 - Inline edit does not honor bit fields. Works with mysqli extension. 2011-06-04 00:02:11 +05:30
Marc Delisle
8feecf6647 3.4.3-dev 2011-06-02 12:16:51 -04:00
Marc Delisle
99eb0cde32 bug #3308072 [auth] Version disclosure to anonymous visitors 2011-05-30 16:32:29 -04:00
Marc Delisle
72bc4b6543 bug #3308476 [interface] "Show all" not persistent after a sort 2011-05-27 16:00:40 -04:00
Michal Čihař
adc6de0685 [auth] Fixed error handling for signon auth method.
The message is now stored in caller session data and properly displayed
in example script.
2011-05-23 10:33:14 +02:00
Madhura Jayaratne
e936257d44 bug #3305883 [interface] Table is dropped regardless of confirmation 2011-05-22 22:01:47 +05:30
Madhura Jayaratne
16305005c5 bug #3305517 [config] Config for export compression not used 2011-05-22 13:00:39 +05:30
Marc Delisle
8fd8e3efd8 Merge branch 'MAINT_3_4_1' into QA_3_4 2011-05-20 12:50:38 -04:00
Herman van Rink
7e10c132a3 XSS in Tracking page, more 2011-05-20 12:49:49 -04:00
Michal Čihař
e22344168f Merge remote-tracking branch 'origin/MAINT_3_4_1' into QA_3_4 2011-05-20 10:02:48 +02:00
Michal Čihař
b7a8179eb6 Can not use redirector for setup.
We currently have no reasonable way to protect it there.
2011-05-20 09:46:15 +02:00
Michal Čihař
1a1e548a39 Merge remote-tracking branch 'origin/MAINT_3_4_1' into QA_3_4 2011-05-20 09:02:05 +02:00
Michal Čihař
ecfc8ba4f7 Make redirector require valid token 2011-05-20 09:01:20 +02:00
Yuichiro
81f939f5df patch #3303813 [setup] Define a label that was missing 2011-05-18 08:06:44 -04:00
Marc Delisle
9a8407e5ce 3.4.2-dev 2011-05-17 07:43:15 -04:00