Commit Graph

179 Commits

Author SHA1 Message Date
Michal Čihař
862e3ca2a7 Merge branch 'QA_3_3'
Conflicts:
	libraries/core.lib.php
	server_databases.php
	server_privileges.php
2010-08-20 13:40:37 +02:00
Michal Čihař
41145feb12 Merge branch 'MAINT_3_3_5' into QA_3_3
Conflicts:
	ChangeLog
	libraries/common.lib.php
2010-08-20 13:36:49 +02:00
Michal Čihař
be0f47a931 Fix XSS on hostname. 2010-08-18 12:13:59 +02:00
Michal Čihař
cd205cc55a Fix XSS on username. 2010-08-18 12:12:09 +02:00
Michal Čihař
7dc6cea065 Fix XSS on tablename and pred_tablename. 2010-08-18 12:09:13 +02:00
Michal Čihař
6028221d97 Fix XSS on dbname. 2010-08-18 12:07:45 +02:00
Michal Čihař
2a1233b69c Fix XSS on checkprivs. 2010-08-18 12:05:32 +02:00
Michal Čihař
d291827444 No need to require_once footer
It is the last thing executed anyway (ends with exit).
2010-07-26 16:20:24 +02:00
Marc Delisle
cdcc5d7443 Merge branch 'QA_3_3' 2010-07-25 13:33:03 -04:00
Marc Delisle
053d6ca88e bug #3033063 [core] Navi gets wrong db name 2010-07-25 13:32:35 -04:00
Marc Delisle
084c0dbcf5 functions.js included automatically 2010-07-24 08:11:48 -04:00
Michal Čihař
318dc4b650 Drop @version tag from docblocks. 2010-07-20 13:59:17 +02:00
Marc Delisle
4e5061d323 Generate password only available if JS is enabled 2010-07-19 10:03:17 -04:00
Marc Delisle
5ed4790db0 move remaining old-format messages to the script that uses them, when possible 2010-06-08 12:32:18 -04:00
Marc Delisle
5dfe98a378 bug [privileges] List of tables not shown when the db name has a wildcard 2010-06-02 12:37:19 -04:00
Marc Delisle
5d525e89eb bug [privileges] List of tables not shown when the db name has a wildcard 2010-06-02 12:32:54 -04:00
Michal Čihař
fd7ced8404 This don't have to be plural. 2010-05-25 14:30:13 +02:00
Marc Delisle
632211d065 gettext conversion 2010-05-09 16:24:32 -04:00
Marc Delisle
f8f475419d gettext conversion 2010-05-06 12:49:07 -04:00
Michal Čihař
352ee7834c Reintroduce escaping. 2010-05-05 11:53:32 +02:00
Michal Čihař
139339eb3c Proper context. 2010-05-05 11:53:31 +02:00
Michal Čihař
2f67c8331c Use context here as it might be translated differently. 2010-05-05 11:48:36 +02:00
Marc Delisle
2182098af6 strings to gettext, second batch 2010-05-04 20:07:19 -04:00
Marc Delisle
ab57b74d40 similar messages had been merged 2010-05-03 07:35:37 -04:00
Michal Čihař
e4e121234b There is no longer message for MySQL < 5. 2010-04-19 14:25:17 +02:00
Michal Čihař
5426dec6e4 Unify order of wildcards in messages. 2010-03-12 00:24:15 +01:00
Michal Čihař
8781e81c5e Move some messages to places where they belong.
This is bascially just test that everything works as expected, much more
messages should follow.
2010-03-11 23:58:38 +01:00
Marc Delisle
819324ede6 remove author names, as discussed at the 2010 developer meeting and according to the book Producing Open Source Software 2010-03-06 18:04:17 +00:00
Herman van Rink
7e4bc32a6b rfe #838637 Added semicolon to privilege export 2010-02-24 09:26:20 +00:00
Herman van Rink
6045e72cd3 [privileges] Improve escaping of hostname 2010-01-06 08:08:42 +00:00
Herman van Rink
fa735255b8 [privileges] Improve escaping of hostname 2010-01-06 08:08:42 +00:00
Marc Delisle
61855289e5 add protection in generated SQL query, thanks to Herman van Rink 2010-01-04 16:40:20 +00:00
Marc Delisle
5f7084b8e3 rfe #838637 Export user privileges 2010-01-03 16:01:49 +00:00
Marc Delisle
294d699e84 Action should always be displayed here 2010-01-03 13:04:15 +00:00
Marc Delisle
bb8084e0ca Action should always be displayed here 2010-01-03 13:04:15 +00:00
Marc Delisle
526dce65cb 3.3 2009-12-31 13:11:19 +00:00
Marc Delisle
f3833884e4 3.3 2009-12-31 13:09:18 +00:00
Marc Delisle
e22d2204e5 improved escaping, thanks to Herman van Rink 2009-10-12 21:53:01 +00:00
Herman van Rink
2c80454a14 bug [gui] Generate Password not working for 'Change Login Information', only for 'Change password' 2009-07-12 12:13:11 +00:00
Marc Delisle
f440d45fc4 bug #2816840 [priv] Cannot change details for a user 2009-07-06 19:52:47 +00:00
Herman van Rink
933eb845de [security] XSS: Insufficient output sanitizing (not exploitable without a valid token) 2009-06-30 13:19:39 +00:00
Marc Delisle
8480ffb665 improve function names 2009-06-07 11:09:13 +00:00
Marc Delisle
28751aba54 bug #2796066 [priv] Inconsistent display of databases list 2009-06-02 16:53:44 +00:00
Marc Delisle
70c6e5a32c rfe #2657696 Automatically copy generated password 2009-05-04 16:32:16 +00:00
Marc Delisle
01dbe95dff add reference to mysql_upgrade command 2009-03-05 16:57:43 +00:00
Michal Čihař
eceb0aa5bc rfe #2186820 Explanation for using Host table. 2009-03-03 15:08:13 +00:00
Marc Delisle
de126075ef patch #2596230 [XHTML] View table headers/footers completely 2009-02-20 09:22:20 +00:00
Marc Delisle
3755869d83 patch #2541261, improvement to patch #2506831 2009-02-01 12:26:33 +00:00
Marc Delisle
e37c506dd6 patch #2505255 [privileges] Cleanup, thanks to Virsacer - virsacer 2009-01-27 17:54:57 +00:00
Marc Delisle
fba0302bd1 patch #2506831 [privileges] Create user for existing database 2009-01-17 22:22:52 +00:00