Michal Čihař
ee776a570c
Convert mcrypt warning to generic function.
2010-05-05 11:35:32 +02:00
Marc Delisle
2182098af6
strings to gettext, second batch
2010-05-04 20:07:19 -04:00
Marc Delisle
f55823f47f
strings to gettext, first batch
2010-05-03 12:57:46 -04:00
Michal Čihař
71ff89c2fe
Include non minified version in Git.
...
The JS compression will happen on release.
2010-04-13 11:52:33 +02:00
Marc Delisle
7d106d4aa3
missing jQuery on login page (needed by update-location.js
2010-04-01 16:30:59 -04:00
Michal Čihař
5ecbd6941d
Better name for javascript file.
2010-04-01 11:24:38 +02:00
Michal Čihař
7b754395e9
Provide way for vendors to easily change paths to config files.
2010-03-31 12:29:21 +02:00
Marc Delisle
819324ede6
remove author names, as discussed at the 2010 developer meeting and according to the book Producing Open Source Software
2010-03-06 18:04:17 +00:00
Marc Delisle
5d96387808
bug #2961609 Potential information disclosure at login page
2010-03-04 13:00:35 +00:00
Michal Čihař
ecc4913a8c
Reenable bookmarking code.
...
Just disable it for webkit based browsers, because they do not allow to
update any part of location without reload.
bug#2937481
2010-01-25 11:50:48 +00:00
Michal Čihař
b6a7def809
Reloading also on login page.
2010-01-22 21:45:49 +00:00
Michal Čihař
94c2f864ae
[core] Remove config data from session as it brings chicken-egg problem.
...
Configuration data stores PmaAbsoluteUri, which should be accessible
before initiating session. Otherwise there is no way to make
PmaAbsoluteUri work. PmaAbsoluteUri is needed at least for reverse
proxy setups, for example http webserver running behind https proxy.
2010-01-21 11:18:18 +00:00
Marc Delisle
e0579f1b9e
bug #2905629 [auth] Blowfish secret is not hashed
2009-11-29 21:36:13 +00:00
Herman van Rink
9df074aad3
patch #2665440 Detect mcrypt initialization failure
2009-05-07 07:56:13 +00:00
Marc Delisle
2647ce6a5e
patch #1863739 [auth] cache control missing (PHP-CGI), thanks to stmfd
2009-04-12 12:19:08 +00:00
Michal Čihař
8e607841f9
rfe #2127983 Readd documentation link, it does not protect against anything.
2009-03-03 13:30:49 +00:00
Michal Čihař
a09b9c2bb2
rfe #2123386 Added option to disable mcrypt warning.
2009-03-03 11:07:04 +00:00
Marc Delisle
4b67c7483f
[auth] New setting AllowNoPassword (supercedes AllowNoPasswordRoot) that applies to all accounts (even the anonymous user)
2009-03-02 16:19:36 +00:00
Marc Delisle
842ed504d2
bug #2414056 [auth] AllowNoPasswordRoot error message is too vague
2009-02-10 18:15:18 +00:00
Michal Čihař
610cc27c57
Some more phpdoc fixes (adding packages, ignoring some symbols,...).
2008-11-24 09:31:30 +00:00
Michal Čihař
5d010348da
Add phpdoc package header to some files.
2008-11-24 09:14:31 +00:00
Marc Delisle
2fae2ca8f9
avoid error Call to a member function getThemeUniqueValue() on a non-object
2008-10-04 15:06:00 +00:00
Marc Delisle
65e48911de
bug #2136986 [auth] Cannot create database after session timeout
2008-10-04 14:43:36 +00:00
Marc Delisle
8ac47fad78
put back lost code, thanks to Michal
2008-09-07 12:04:41 +00:00
Marc Delisle
930ee57a1c
latest Swekey fixes
2008-09-06 12:41:34 +00:00
Michal Čihař
5fe66c5891
Cleanup temporary variables.
2008-09-03 15:34:30 +00:00
Michal Čihař
432487b99d
rfe #1778908 [auth] arbitrary server auth can now also accept port
2008-09-03 15:11:03 +00:00
Michal Čihař
92295fc3ec
Dead code.
2008-09-03 14:25:26 +00:00
Michal Čihař
85cdc82d4d
Cookie auth now autogenerates blowfish_secret, but it has some limitations and you still should set it in config file
2008-09-03 13:27:43 +00:00
Michal Čihař
21d72b9d99
Some more corrections.
2008-09-03 13:00:48 +00:00
Michal Čihař
7199c3123c
A little bit of coding style.
2008-09-03 12:59:52 +00:00
Marc Delisle
1bd7ec70e2
bug #2046883 [core] Notices about deprecated dl() (so stop using it)
2008-08-16 14:06:27 +00:00
Marc Delisle
2f81b47624
bug #2031221 [auth] Links to version number on login screen
2008-08-01 19:00:36 +00:00
Marc Delisle
6a707344eb
remove version info on cookie login screen
2008-07-15 14:14:09 +00:00
Marc Delisle
544831fda7
patch #2007196 , Typos in comments, thanks to knittl - knittl
2008-07-01 19:21:28 +00:00
Marc Delisle
afbb2a9dc2
protection against XSS when register_globals is on and .htaccess has no effect
2008-06-21 15:01:27 +00:00
Marc Delisle
fdff4d6b71
patch #1972915 version 3 + Luc modifs + Marc modifs (link in contrib/swekey.sample.conf
2008-06-17 17:20:53 +00:00
Marc Delisle
f5a76baa0c
[auth] support Feebee hardware authentication
2008-06-12 12:36:10 +00:00
Marc Delisle
3c01ca4b4e
typos
2008-04-05 12:35:24 +00:00
Marc Delisle
2d1c29d3f8
bug #1813508 [login] Missing parameter: field after re-login
2007-12-18 18:13:24 +00:00
Sebastian Mendel
c7cf86e3cf
bug #1764182 [cookies] Suhosin cookie encryption breaks phpMyAdmin
2007-12-18 08:02:41 +00:00
Marc Delisle
f1a266c778
fix multi-server login bug introduced in revision 10855; ensure that the new _form_params are really used by the called function; missing doc for PMA_generate_common_hidden_inputs()
2007-10-26 17:08:12 +00:00
Marc Delisle
6e39abf02a
patch #1817529 [auth] Incorrect login via URL when AllowArbitraryServer is true, thanks to Juergen Wind
2007-10-22 16:47:52 +00:00
Sebastian Mendel
62ee5d8491
cleanup
2007-10-18 12:10:22 +00:00
Sebastian Mendel
1c47906d0a
cleanup
...
display errors in place
2007-10-16 08:31:13 +00:00
Sebastian Mendel
5dd96d42ce
replaced $PMA_errors with new PMA_Error_Handler
2007-10-08 16:02:58 +00:00
Marc Delisle
235fc3679c
move mcrypt code in-line (avoid one require); also add a constant for better protection
2007-09-23 15:12:42 +00:00
Marc Delisle
5b6c3d7867
this comment is no longer true
2007-07-03 00:28:32 +00:00
Marc Delisle
93bbd8b148
use session_destroy() instead of session_cleanup.lib.php
2007-06-25 11:41:58 +00:00
Marc Delisle
244b62f61d
cleanup of user's choices stored in session
2007-06-23 22:18:15 +00:00
