Commit Graph

10146 Commits

Author SHA1 Message Date
Michal Čihař
b337f45a0a Revert "Do not assume that DefaultLang is escaped."
This reverts commit 05ca00e0a2.

There does not seem to be bug here.
2010-08-19 15:37:06 +02:00
Michal Čihař
05ca00e0a2 Do not assume that DefaultLang is escaped. 2010-08-18 12:37:20 +02:00
Michal Čihař
48e9096600 Properly check validity of sort parameter. 2010-08-18 12:31:54 +02:00
Michal Čihař
be0f47a931 Fix XSS on hostname. 2010-08-18 12:13:59 +02:00
Michal Čihař
cd205cc55a Fix XSS on username. 2010-08-18 12:12:09 +02:00
Michal Čihař
7dc6cea065 Fix XSS on tablename and pred_tablename. 2010-08-18 12:09:13 +02:00
Michal Čihař
6028221d97 Fix XSS on dbname. 2010-08-18 12:07:45 +02:00
Michal Čihař
2a1233b69c Fix XSS on checkprivs. 2010-08-18 12:05:32 +02:00
Michal Čihař
25ac7de38c Document PMA_sanitize. 2010-08-18 11:42:08 +02:00
Michal Čihař
fa30188dde Escape html chars in form values. 2010-08-18 11:38:19 +02:00
Michal Čihař
00add5c43f Add option to escape PMA_sanitize output.
This is required when it is used in form values.
2010-08-18 11:38:19 +02:00
Marc Delisle
c75e41d5d8 Limit list of correct values for sort order. 2010-08-18 11:30:19 +02:00
Michal Čihař
533e102135 Fix handling of unknown sort order. 2010-08-18 11:30:19 +02:00
Michal Čihař
ea3b718fc3 Secure handling of sort_by and sort_order in server_databases.php. 2010-08-18 11:30:19 +02:00
Michal Čihař
7f266483b8 Fix XSS on delimiter in tbl_sql.php. 2010-08-18 11:30:19 +02:00
Marc Delisle
5bcd95a42c Fix XSS on delimiter in db_sql.php. 2010-08-18 11:30:19 +02:00
Michal Čihař
6d548f7d44 Fix XSS on field_str in db_search.php. 2010-08-18 11:30:19 +02:00
Marc Delisle
f3f073a0ba 3.3.5 release 2010-07-26 12:26:41 -04:00
Marc Delisle
58021a8e6c bug [scripts] MySQL 5.5.5 does not accept TIMESTAMP(14) in create_tables.sql 2010-07-25 07:53:07 -04:00
Marc Delisle
31c18cbe11 3.3.5-rc1 2010-07-18 14:31:53 -04:00
Marc Delisle
0b9cf14f75 typo 2010-07-17 09:54:54 -04:00
Dieter Adriaenssens
dbe5daaad3 Converting number of Excel column names no longer limited 2010-07-14 22:29:26 +02:00
Dieter Adriaenssens
22b0ac9079 remove todo, after upgrade PHPExcel 2010-07-13 23:39:42 +02:00
Dieter Adriaenssens
6648c620d9 Convert Excel column name correctly 2010-07-13 23:23:51 +02:00
Dieter Adriaenssens
8b8562b435 cleanup (re)moved files 2010-07-13 20:35:14 +02:00
Dieter Adriaenssens
64a2832ac8 Update library PHPExcel to version 1.7.3c 2010-07-13 20:07:41 +02:00
Dieter Adriaenssens
ee0b2895ce Update library PHPExcel to version 1.7.3 2010-07-13 20:02:18 +02:00
Dieter Adriaenssens
b90a1b496b upgrade to PHPExcel 1.7.2 2010-07-13 19:42:07 +02:00
Dieter Adriaenssens
798def6e45 upgrade to PHPExcel 1.7.0 2010-07-13 19:39:40 +02:00
Marc Delisle
768de14815 typo 2010-07-12 09:00:39 -04:00
Marc Delisle
cda9df7101 bug [export] CSV for MS Excel (Windows) should have semi-colon as separator 2010-07-12 08:56:30 -04:00
Marc Delisle
b55ba34d43 bug #3023507 [core] No result set display from stored procedure SELECT 2010-07-11 08:00:42 -04:00
Marc Delisle
b2616ac46d bug #3027557 [PHP] split() deprecated in PHP 5.3 (backport fixes from master, todo: update PHP excel?) 2010-07-10 08:01:07 -04:00
Marc Delisle
20d4c3a894 bug #3026400 [PHP] ereg functions are deprecated 2010-07-08 07:49:11 -04:00
Marc Delisle
104b0ee99a remove reference to some old stuff 2010-07-07 09:44:44 -04:00
Marc Delisle
3d23bcf1da improve English 2010-07-07 07:03:31 -04:00
Marc Delisle
8a153086a1 revert to previous value and add a comment in default configuration file 2010-07-07 06:13:06 -04:00
Marc Delisle
9903c5f3d0 bug #3025975 [auth] Odd LoginCookieValidity default value 2010-07-06 16:58:13 -04:00
Marc Delisle
43e41e0654 document MemoryLimit as being a string value 2010-07-02 12:28:44 -04:00
Marc Delisle
6ea9467949 bug #3024344 [setup] Setup forces numeric MemoryLimit 2010-07-02 12:26:54 -04:00
Marc Delisle
1db012abc8 clarify code behavior 2010-07-02 11:22:36 -04:00
Marc Delisle
a7afb107eb new FAQ 6.26, selecting a range of rows 2010-07-01 07:50:29 -04:00
Marc Delisle
f007adce6b typo 2010-07-01 07:34:55 -04:00
Marc Delisle
108f3305e9 bug: avoid loading twice a js file 2010-06-30 11:35:46 -04:00
Marc Delisle
b2fdf039db clarify what is meant by "put the table name" 2010-06-30 09:35:44 -04:00
Marc Delisle
852ed51c27 bug [replication] Do not offer information_schema in the list of databases 2010-06-29 08:14:31 -04:00
Marc Delisle
f463b1cc7a bug #3022705 [import] Import button does not work in Catalan when there is no progress bar possible 2010-06-29 07:48:28 -04:00
Michal Čihař
f70bd16ce3 Merge remote branch 'origin/MAINT_3_3_4' into QA_3_3 2010-06-28 13:48:34 +02:00
Marc Delisle
c699af70e9 3.3.4 release 2010-06-28 07:37:55 -04:00
Marc Delisle
9c3ad0c8b1 3.3.4 release 2010-06-28 07:36:13 -04:00