5ee643bbbb
Remove non-English language support
2025-04-22 00:05:23 -07:00
Marc Delisle
e2b6af5a99
Avoid showing the password in phpinfo()'s output
2011-11-21 12:41:13 -05:00
Marc Delisle
99eb0cde32
bug #3308072 [auth] Version disclosure to anonymous visitors
2011-05-30 16:32:29 -04:00
Michal Čihař
cd74e9fa5d
bug #3175227 [auth] Reset user cache on login.
2011-02-08 13:15:01 +01:00
Michal Čihař
5a2835ec86
Readd redirect login to top frame
2011-02-02 11:44:56 +01:00
Michal Čihař
685e199c16
Use standard javascript loading on login page.
2011-02-01 17:52:14 +01:00
Michal Čihař
67e4994490
Single place to handle redirection.
2011-01-31 15:22:25 +01:00
Michal Čihař
dc0c6938b2
[security] Redirect external links to avoid Referer leakage.
2011-01-28 13:22:41 +01:00
Marc Delisle
b923bb3fbb
Upgrade to jQuery 1.4.4
2011-01-02 08:00:25 -05:00
Michal Čihař
d17fba309c
Fix permissions.
...
Most files were made executable somewhere in ninadsp tree, reverting
this.
2010-08-30 09:53:37 +02:00
ninadsp
a2f78a6d38
Resolve merge conflicts for upstream merge
2010-07-29 19:17:25 +05:30
Michal Čihař
6c3ad9e942
Fix back showing login form in frames.
2010-07-26 17:31:56 +02:00
ninadsp
e646a2760c
Fixed conflict due to upstream merge
2010-07-23 21:59:15 +05:30
Michal Čihař
eeae8bec21
Get rid of inline javascript in login form.
2010-07-21 09:21:58 +02:00
Michal Čihař
3e57a8eca9
No @uses __('Something').
2010-07-20 15:06:34 +02:00
Michal Čihař
318dc4b650
Drop @version tag from docblocks.
2010-07-20 13:59:17 +02:00
ninadsp
bcbf327139
Merge remote branch 'origin/master'
2010-06-29 23:54:01 +05:30
Dieter Adriaenssens
16ed06531a
remove author names
2010-06-28 20:36:12 +02:00
ninadsp
bed1948d04
testing git setup - no major change made in code yet
...
only added a few comments
2010-05-23 01:22:01 +05:30
Michal Čihař
ee776a570c
Convert mcrypt warning to generic function.
2010-05-05 11:35:32 +02:00
Marc Delisle
2182098af6
strings to gettext, second batch
2010-05-04 20:07:19 -04:00
Marc Delisle
f55823f47f
strings to gettext, first batch
2010-05-03 12:57:46 -04:00
Michal Čihař
71ff89c2fe
Include non minified version in Git.
...
The JS compression will happen on release.
2010-04-13 11:52:33 +02:00
Marc Delisle
7d106d4aa3
missing jQuery on login page (needed by update-location.js
2010-04-01 16:30:59 -04:00
Michal Čihař
5ecbd6941d
Better name for javascript file.
2010-04-01 11:24:38 +02:00
Michal Čihař
7b754395e9
Provide way for vendors to easily change paths to config files.
2010-03-31 12:29:21 +02:00
Marc Delisle
819324ede6
remove author names, as discussed at the 2010 developer meeting and according to the book Producing Open Source Software
2010-03-06 18:04:17 +00:00
Marc Delisle
5d96387808
bug #2961609 Potential information disclosure at login page
2010-03-04 13:00:35 +00:00
Michal Čihař
ecc4913a8c
Reenable bookmarking code.
...
Just disable it for webkit based browsers, because they do not allow to
update any part of location without reload.
bug#2937481
2010-01-25 11:50:48 +00:00
Michal Čihař
b6a7def809
Reloading also on login page.
2010-01-22 21:45:49 +00:00
Michal Čihař
94c2f864ae
[core] Remove config data from session as it brings chicken-egg problem.
...
Configuration data stores PmaAbsoluteUri, which should be accessible
before initiating session. Otherwise there is no way to make
PmaAbsoluteUri work. PmaAbsoluteUri is needed at least for reverse
proxy setups, for example http webserver running behind https proxy.
2010-01-21 11:18:18 +00:00
Marc Delisle
e0579f1b9e
bug #2905629 [auth] Blowfish secret is not hashed
2009-11-29 21:36:13 +00:00
Herman van Rink
9df074aad3
patch #2665440 Detect mcrypt initialization failure
2009-05-07 07:56:13 +00:00
Marc Delisle
2647ce6a5e
patch #1863739 [auth] cache control missing (PHP-CGI), thanks to stmfd
2009-04-12 12:19:08 +00:00
Michal Čihař
8e607841f9
rfe #2127983 Readd documentation link, it does not protect against anything.
2009-03-03 13:30:49 +00:00
Michal Čihař
a09b9c2bb2
rfe #2123386 Added option to disable mcrypt warning.
2009-03-03 11:07:04 +00:00
Marc Delisle
4b67c7483f
[auth] New setting AllowNoPassword (supercedes AllowNoPasswordRoot) that applies to all accounts (even the anonymous user)
2009-03-02 16:19:36 +00:00
Marc Delisle
842ed504d2
bug #2414056 [auth] AllowNoPasswordRoot error message is too vague
2009-02-10 18:15:18 +00:00
Michal Čihař
610cc27c57
Some more phpdoc fixes (adding packages, ignoring some symbols,...).
2008-11-24 09:31:30 +00:00
Michal Čihař
5d010348da
Add phpdoc package header to some files.
2008-11-24 09:14:31 +00:00
Marc Delisle
2fae2ca8f9
avoid error Call to a member function getThemeUniqueValue() on a non-object
2008-10-04 15:06:00 +00:00
Marc Delisle
65e48911de
bug #2136986 [auth] Cannot create database after session timeout
2008-10-04 14:43:36 +00:00
Marc Delisle
8ac47fad78
put back lost code, thanks to Michal
2008-09-07 12:04:41 +00:00
Marc Delisle
930ee57a1c
latest Swekey fixes
2008-09-06 12:41:34 +00:00
Michal Čihař
5fe66c5891
Cleanup temporary variables.
2008-09-03 15:34:30 +00:00
Michal Čihař
432487b99d
rfe #1778908 [auth] arbitrary server auth can now also accept port
2008-09-03 15:11:03 +00:00
Michal Čihař
92295fc3ec
Dead code.
2008-09-03 14:25:26 +00:00
Michal Čihař
85cdc82d4d
Cookie auth now autogenerates blowfish_secret, but it has some limitations and you still should set it in config file
2008-09-03 13:27:43 +00:00
Michal Čihař
21d72b9d99
Some more corrections.
2008-09-03 13:00:48 +00:00
Michal Čihař
7199c3123c
A little bit of coding style.
2008-09-03 12:59:52 +00:00