Sven Strickroth
7909da2ea0
quick fix for issue #3383711
...
Signed-off-by: Sven Strickroth <email@cs-ware.de >
2011-08-03 23:48:42 +05:30
Madhura Jayaratne
11ad4fd992
bug #3313235 [interface] Error div misplaced
2011-07-29 06:38:07 +05:30
Marc Delisle
09b30b8b6e
3.4.4-rc1
2011-07-25 10:15:14 -04:00
Marc Delisle
871aaa9b64
3.4.5-dev
2011-07-25 10:12:37 -04:00
Marc Delisle
08ee54d4a4
bug #3358750 [core] With Suhosin, urls are too long in edit links
2011-07-24 08:08:38 -04:00
Marc Delisle
3534dda30a
Fix merge conflicts
2011-07-23 08:16:00 -04:00
Sven Strickroth
201ad07ea8
Do not add backquotes for normal displayed text
...
Signed-off-by: Sven Strickroth <email@cs-ware.de >
2011-07-22 09:33:30 -04:00
Sven Strickroth
54398f8a12
Do not call PMA_showHint with bbcode=true in display_tbl.lib.php
...
This fixes an issue with an InnoDB-table on sql.php with "select * from tbl" showing that "total ~ N <sup>1</sup>" rows are displayed and with a JavaScript enabled browser the footnote gets hidden and it's impossible to find out what the <sup>1</sup> means.
Signed-off-by: Sven Strickroth <email@cs-ware.de >
2011-07-22 15:16:13 +02:00
Madhura Jayaratne
58b48a3d45
bug #3367986 [navi] Drop field -> lost active table
2011-07-21 08:55:57 +05:30
Rouslan Placella
40d7c3b8ba
tabs -> spaces
2011-07-15 16:02:37 +01:00
Piotr Przybylski
2cc22c8aba
Fix CodeGen export
2011-07-14 23:48:17 +02:00
Piotr Przybylski
70083ad583
Fix XML export so it actually can export table structure
...
More escaping fixes
2011-07-14 23:43:56 +02:00
Piotr Przybylski
65d962d397
Better escaping in XML export
...
Note: it's still incorrect
2011-07-14 23:40:58 +02:00
Piotr Przybylski
6d0f28b425
Improve readability of XML export code
2011-07-14 23:38:09 +02:00
Michal Čihař
571cdc6ff4
Pass token along with swekey auth requests
2011-07-11 14:50:44 +02:00
Michal Čihař
ed88c4a7b6
Fix error when gettext is not yet loaded and we want to warn.
...
This happens when PHP is compiled without session support, which is
checked before gettext is loaded.
2011-07-10 22:46:46 +02:00
Herman van Rink
e7bb42c002
[security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-12
2011-07-09 23:10:23 +02:00
Herman van Rink
3ae58f0cd6
[security] Fixed local file inclusion vulnerability and code execution, see PMASA-2011-11
2011-07-08 21:43:38 +02:00
Michal Čihař
90a232d8fb
Add definition for Breton
2011-07-07 13:46:15 +02:00
Marc Delisle
58d86350c4
Merge branch 'MAINT_3_4_3' into QA_3_4
2011-07-02 20:49:29 -04:00
Marc Delisle
e214683f9f
3.4.3.1 release
2011-07-02 20:49:01 -04:00
Madhura Jayaratne
5217946601
bug #3340151 [export] Working SQL query exports error page
2011-07-02 07:05:54 +05:30
Madhura Jayaratne
4d1540cc1c
bug #3348995 [config] $cfg['Export']['asfile'] set to false does not select asText option
2011-07-01 22:58:35 +05:30
Herman van Rink
b434320eff
Fixed filtering of a file path, which allowed for directory traversal, see PMASA-2011-8
2011-06-30 20:26:08 +02:00
Herman van Rink
69fb0f8e7d
Fixed regexp quoting issue in Synchronize code, see PMASA-2011-7
2011-06-30 13:26:29 +02:00
Herman van Rink
7ebd958b2b
Fixed possible session manipulation in swekey authentication, see PMASA-2011-5
2011-06-30 12:30:58 +02:00
Marc Delisle
e21d6073e4
3.4.3 release
2011-06-27 08:20:21 -04:00
Rouslan Placella
9e224184d7
Fixed bug #3323101 - Invalid escape sequence in SQL parser
2011-06-21 20:38:42 +01:00
Rouslan Placella
c2dd99965d
Fixed bug #3323060 - SQL parser breaks AJAX requests if query has unclosed quotes
2011-06-21 20:33:32 +01:00
Marc Delisle
7ecb1abaa4
3.4.4-dev
2011-06-20 12:21:11 -04:00
Marc Delisle
a8caf74fda
3.4.3-rc1
2011-06-20 12:18:57 -04:00
Marc Delisle
2d56821c0f
Improved fix for bug #3313210
2011-06-07 11:43:30 -04:00
Marc Delisle
82ac1e8028
bug #3313210 [interface] Columns class sometimes changed for nothing
2011-06-07 11:06:38 -04:00
Marc Delisle
60089624dd
bug #3304544 [parser] master is not a reserved word
2011-06-04 06:39:09 -04:00
Yuichiro
2bdfe06982
patch #3304473 [setup] Redefine a lable that was wrong
2011-06-04 05:59:34 -04:00
Madhura Jayaratne
612f8f3d67
Partial fix for bug #3291306 - Inline edit does not honor bit fields. Works with mysqli extension.
2011-06-04 00:02:11 +05:30
Marc Delisle
8feecf6647
3.4.3-dev
2011-06-02 12:16:51 -04:00
Marc Delisle
99eb0cde32
bug #3308072 [auth] Version disclosure to anonymous visitors
2011-05-30 16:32:29 -04:00
Marc Delisle
72bc4b6543
bug #3308476 [interface] "Show all" not persistent after a sort
2011-05-27 16:00:40 -04:00
Michal Čihař
adc6de0685
[auth] Fixed error handling for signon auth method.
...
The message is now stored in caller session data and properly displayed
in example script.
2011-05-23 10:33:14 +02:00
Madhura Jayaratne
e936257d44
bug #3305883 [interface] Table is dropped regardless of confirmation
2011-05-22 22:01:47 +05:30
Madhura Jayaratne
16305005c5
bug #3305517 [config] Config for export compression not used
2011-05-22 13:00:39 +05:30
Marc Delisle
8fd8e3efd8
Merge branch 'MAINT_3_4_1' into QA_3_4
2011-05-20 12:50:38 -04:00
Herman van Rink
7e10c132a3
XSS in Tracking page, more
2011-05-20 12:49:49 -04:00
Michal Čihař
e22344168f
Merge remote-tracking branch 'origin/MAINT_3_4_1' into QA_3_4
2011-05-20 10:02:48 +02:00
Michal Čihař
b7a8179eb6
Can not use redirector for setup.
...
We currently have no reasonable way to protect it there.
2011-05-20 09:46:15 +02:00
Michal Čihař
1a1e548a39
Merge remote-tracking branch 'origin/MAINT_3_4_1' into QA_3_4
2011-05-20 09:02:05 +02:00
Michal Čihař
ecfc8ba4f7
Make redirector require valid token
2011-05-20 09:01:20 +02:00
Yuichiro
81f939f5df
patch #3303813 [setup] Define a label that was missing
2011-05-18 08:06:44 -04:00
Marc Delisle
9a8407e5ce
3.4.2-dev
2011-05-17 07:43:15 -04:00