Michal Čihař
b01a58118f
Remove error.php
...
Redirecting to other script introduces possibility of inject custom
messages to it. Though there is no clear security issue in this, it
might confuse users and mistake them to go to external site as it allows
to include links.
Conflicts:
error.php
libraries/core.lib.php
2011-01-06 09:39:23 +01:00
Marc Delisle
6e33006754
bug #2027102 quotes around lang missing
2008-07-25 12:25:33 +00:00
Marc Delisle
a56294f275
revert language changing problem introduced with 2.11.7.1; version number 2.11.8-rc1
2008-07-24 18:01:10 +00:00
Marc Delisle
d7e910e296
port 2.11.7.1 fix
2008-07-15 18:42:50 +00:00
Marc Delisle
5da6e4cc36
protection against XSS when register_globals is on and .htaccess has no effect
2008-06-21 14:01:54 +00:00
Marc Delisle
87e6dd4689
enable testing under PHP 5.3.0-dev
2008-03-29 11:16:04 +00:00
Marc Delisle
533bb88e32
bug #1909711 [security] Sensitive data in session files
2008-03-29 06:06:35 +00:00
Marc Delisle
a018a82b0a
bug #1910485 [core] Unsetting the whitelist during the loop
2008-03-11 16:57:55 +00:00
Marc Delisle
481baeb24b
bug #1905711 [compatibility] Functions deprecated in PHP 5.3
2008-03-03 13:51:34 +00:00
Marc Delisle
c57b39bed9
bug [core] Remove cookies from $_REQUEST for better coexistence with other applications
2008-02-23 21:16:42 +00:00
Marc Delisle
5240975939
typos
2008-02-23 20:46:36 +00:00
Marc Delisle
4a750441a8
These should go to ['userconf']
2008-01-01 15:03:50 +00:00
Marc Delisle
c464754478
bug #1814679 [display] Database selection pagination when switching servers
2008-01-01 13:39:49 +00:00
Marc Delisle
5c90ac9678
remove older comments
2008-01-01 13:14:34 +00:00
Marc Delisle
4f0a4c1c26
bug #1824506 [profiling] Profile command repeated on older MySQL servers
2007-11-02 17:34:58 +00:00
Sebastian Mendel
71e40e7144
for last XSS fix: forgot to whitelist PMA_PHP_SELF
2007-10-16 07:24:29 +00:00
Sebastian Mendel
c32d999eb1
- fixed XSS in server_status.php, thanks to Omer Singer, The DigiTrust Group
...
- fixed some possible XSS with PHP_SELF (PATH_INFO)
2007-10-16 07:09:50 +00:00
Marc Delisle
decc0b5c83
undefined constant when ServerDefault == 0
2007-07-22 18:36:05 +00:00
Marc Delisle
609d38a9cd
start QA_11
2007-07-18 15:55:11 +00:00
Marc Delisle
e2599e32c5
start QA_2_11
2007-07-18 15:54:09 +00:00
Marc Delisle
941dee7e41
Profiling (work in progress)
2007-06-27 21:01:13 +00:00
Marc Delisle
8d23f41628
more PHP6 compatibility
2007-06-15 15:46:53 +00:00
Sebastian Mendel
6240555e43
typos
2007-05-18 05:47:08 +00:00
Sebastian Mendel
c5cba195f1
renamed class files according to PMA standard (or at least how i guess)
2007-05-15 06:18:21 +00:00
Sebastian Mendel
573a6161bd
fixed code indention
2007-05-09 12:18:57 +00:00
Sebastian Mendel
adb39168cc
coding standard: no braces around include
2007-04-01 09:51:41 +00:00
Sebastian Mendel
b2f3ae5fcf
make $sql_query persistent (init it, never unset it, always assume it is set)
2007-04-01 09:26:14 +00:00
Sebastian Mendel
858a4d1b42
make use of PMA_isValid() and initialize $sql_query
2007-03-29 06:02:22 +00:00
Sebastian Mendel
c28969acbd
no need to globalize $_REQUEST['is_js_confirmed']
2007-03-27 11:29:18 +00:00
Sebastian Mendel
e63059cbaa
replaced ctype_digit() with is_numeric()
2007-03-27 11:27:36 +00:00
Sebastian Mendel
d0facc3d4f
splitted common.lib.php into common.inc.php, core.lib.php and common.lib.php
2007-03-20 14:16:18 +00:00
