Commit Graph

8789 Commits

Author SHA1 Message Date
Michal Čihař
c910f4c9ec Fix handling of unknown sort order. 2010-08-18 11:46:29 +02:00
Michal Čihař
08e27b8907 Secure handling of sort_by and sort_order in server_databases.php. 2010-08-18 11:46:29 +02:00
Michal Čihař
110c44a7a3 Fix XSS on delimiter in tbl_sql.php. 2010-08-18 11:46:29 +02:00
Marc Delisle
4951fd1c85 Fix XSS on delimiter in db_sql.php. 2010-08-18 11:46:29 +02:00
Michal Čihař
8ae41bbc02 Merge remote branch 'origin/MAINT_2_11_10' into QA_2_11
Conflicts:
	ChangeLog
	Documentation.html
	README
	libraries/Config.class.php
	translators.html
2010-03-11 13:51:07 +01:00
Herman van Rink
f175026ff0 [core] Fix broken cleanup of $_GET 2009-12-28 15:50:36 +00:00
Marc Delisle
8535d48ae9 2.11.10 release 2009-12-07 17:13:18 +00:00
Marc Delisle
13fc94b844 2.11.11-dev 2009-12-07 17:01:31 +00:00
Michal Čihař
719e0dce65 [setup] avoid usage of (un)serialize, what might be unsafe in some cases 2009-12-07 13:09:09 +00:00
Marc Delisle
628b38373b 2.11.9.6 release 2009-10-12 22:27:06 +00:00
Marc Delisle
212daad0c0 [security] XSS and SQL injection 2009-10-12 21:47:40 +00:00
Marc Delisle
deb1b31cae [security] XSS and SQL injection 2009-10-12 21:47:40 +00:00
Michal Čihař
72f86848c3 Document removal of config directory after configuring phpMyAdmin. 2009-03-25 08:30:28 +00:00
Michal Čihař
a6a45d7138 Document removal of config directory after configuring phpMyAdmin. 2009-03-25 08:30:28 +00:00
Marc Delisle
7b5ec357bc 2.11.9.5 2009-03-24 21:04:18 +00:00
Marc Delisle
8e18c2d8df 2.11.9.5 2009-03-24 21:04:18 +00:00
Michal Čihař
aeae6df369 Use official names for wiki (wiki.phpmyadmin.net) and demo server (demo.phpmyadmin.net). 2009-03-24 12:56:58 +00:00
Michal Čihař
649d13e234 Use official names for wiki (wiki.phpmyadmin.net) and demo server (demo.phpmyadmin.net). 2009-03-24 12:56:58 +00:00
Michal Čihař
36ddf8b61e Escape special chars when displaying filename template cookies. 2009-03-24 08:55:07 +00:00
Michal Čihař
c05d94cdd9 Escape special chars when displaying filename template cookies. 2009-03-24 08:55:07 +00:00
Michal Čihař
460a649dbc Do not output unescaped chars to generated configuration file. 2009-03-24 08:34:23 +00:00
Michal Čihař
e70d7b4332 Do not output unescaped chars to generated configuration file. 2009-03-24 08:34:23 +00:00
Marc Delisle
18d7934405 2.11.9.4 2008-12-09 17:03:54 +00:00
Michal Čihař
2748fc9fac Forgotten branch. 2008-12-09 14:03:57 +00:00
Michal Čihař
0d4adbfc19 [security] possible XSRF on several pages 2008-12-09 13:45:32 +00:00
Michal Čihař
fb0bb67f49 Adjust create-release.sh instructions to match current website. 2008-11-21 08:58:00 +00:00
Michal Čihař
1639051ec7 Adjust create-release.sh instructions to match current website. 2008-11-21 08:58:00 +00:00
Marc Delisle
bcd216e529 2.11.9.3 2008-10-30 20:40:33 +00:00
Marc Delisle
625e9f2e93 [security] XSS in a Designer component 2008-10-30 12:47:24 +00:00
Marc Delisle
f1a0d3d2da [security] XSS in a Designer component 2008-10-30 12:47:24 +00:00
Marc Delisle
7a958e11a2 2.11.9.2 2008-09-22 16:39:00 +00:00
Marc Delisle
9155163f6e typos 2008-09-22 14:09:44 +00:00
Marc Delisle
3a3e3f99e3 typos 2008-09-22 14:09:44 +00:00
Michal Čihař
44f9f2f8b7 XSS in MSIE using NUL byte, thanks to JPCERT. 2008-09-22 10:13:32 +00:00
Michal Čihař
6efe63b354 XSS in MSIE using NUL byte, thanks to JPCERT. 2008-09-22 10:13:32 +00:00
Marc Delisle
fe3d30d982 2.11.9.1 2008-09-15 16:22:04 +00:00
Marc Delisle
f8d65ec564 [security] Code execution vulnerability 2008-09-15 12:03:45 +00:00
Marc Delisle
555962b34a [security] Code execution vulnerability 2008-09-15 12:03:45 +00:00
Marc Delisle
4680cab381 TempDir new doc 2008-09-03 14:04:44 +00:00
Michal Čihař
6c96a59db5 Do not automatically set and create TempDir, it might lead to secrity issue (thanks to Thijs Kinkhorst). 2008-09-02 17:35:48 +00:00
Marc Delisle
ca5d9f1afc typos 2008-08-29 16:38:37 +00:00
Michal Čihař
8fcdad4306 safer handling of temporary files with open_basedir (thanks to Thijs Kinkhorst) 2008-08-29 15:49:06 +00:00
Marc Delisle
d11b211b62 2.11.9 and 2.11.10-dev 2008-08-28 16:41:57 +00:00
Marc Delisle
274b5c9eed 2.11.9 and 2.11.10-dev 2008-08-28 16:41:57 +00:00
Marc Delisle
454d50201b bug #2074250 [parser] Undefined variable seen_from 2008-08-28 16:17:53 +00:00
Marc Delisle
cab54b7cb4 Norwegian UTF-8 original file remerged 2008-08-26 16:33:00 +00:00
Marc Delisle
de7abbdd5b bug #2045512 [export] Numbers in Excel export 2008-08-13 16:28:43 +00:00
Marc Delisle
f2e2499116 bug #2037375 [export] DROP PROCEDURE needs IF EXISTS 2008-08-09 13:58:44 +00:00
Marc Delisle
f5e6b809dd bug #2037381 [export] Export type "replace" does not work 2008-08-06 17:25:31 +00:00
Marc Delisle
f969ed1fa6 bug #2004915 [bookmarks] Saved queries greater than 1000 chars not displayed 2008-08-01 20:02:21 +00:00