Commit Graph

69 Commits

Author SHA1 Message Date
Marc Delisle
c7e897b1e5 [core] Compatibility with PHP 5.3.0RC2 2009-05-08 14:15:55 +00:00
Michal Čihař
49036e6003 rfe #1694104 Allow logging of user status with Apache. 2009-03-03 16:20:41 +00:00
Marc Delisle
4b67c7483f [auth] New setting AllowNoPassword (supercedes AllowNoPasswordRoot) that applies to all accounts (even the anonymous user) 2009-03-02 16:19:36 +00:00
Marc Delisle
842ed504d2 bug #2414056 [auth] AllowNoPasswordRoot error message is too vague 2009-02-10 18:15:18 +00:00
Marc Delisle
5ed0400bdd patch #2520747 [core] E_DEPRECATED compatibility for PHP 5.3 2009-01-20 18:04:20 +00:00
Marc Delisle
30bda361bf patch #2478940 [core] PHP 5.2+ warning does not work 2009-01-01 23:37:14 +00:00
Marc Delisle
0de70e7d79 bug #2397877 [core] ForceSSL and http auth_type 2008-12-28 14:50:07 +00:00
Michal Čihař
688c9986de Fix markup. 2008-11-24 10:36:00 +00:00
Michal Čihař
9561f56875 Fix some phpdoc errors. 2008-11-24 09:55:30 +00:00
Raj Kissu Rajandran
e960406e5d Fixed MIME type change issue. 2008-11-02 06:54:27 +00:00
Marc Delisle
f2c9af09e3 improved calling parameter and explanation 2008-10-08 12:14:19 +00:00
Marc Delisle
fd03f05f4d bug #1914066 [core] ForceSSL generates incorrectly escaped redirections, this time with the correct fix 2008-10-06 21:36:08 +00:00
Marc Delisle
3c458497aa bug #114066 [core] ForceSSL generates incorrectly escaped redirections 2008-09-26 16:22:42 +00:00
Michal Čihař
e0987bfbc8 do not allow root user without password unless explicitly enabled by AllowEmptyRoot 2008-09-03 13:45:12 +00:00
Marc Delisle
300ac33342 patch #2075263 [auth] Single sign-on and cookie clearing 2008-09-02 16:44:02 +00:00
Marc Delisle
e77938bb20 BLOBstreaming support (Google Summer of Code 2008, Raj Kissu Rajandran) -- work in progress 2008-08-20 17:04:37 +00:00
Marc Delisle
d3687045ae mooRainbow fix for mootools 1.2; Reset buton for custom color 2008-07-15 19:28:27 +00:00
Marc Delisle
62461e5477 port 2.11.7.1 fix 2008-07-15 19:03:11 +00:00
Marc Delisle
bb2c1fbb8d color picker (work in progress) 2008-07-10 17:53:31 +00:00
Marc Delisle
544831fda7 patch #2007196, Typos in comments, thanks to knittl - knittl 2008-07-01 19:21:28 +00:00
Marc Delisle
afbb2a9dc2 protection against XSS when register_globals is on and .htaccess has no effect 2008-06-21 15:01:27 +00:00
Michal Čihař
00f893361f This has been fixed in PHP 5.1.0, we support 5.2+. 2008-06-02 14:04:29 +00:00
Michal Čihař
efc4f5a9ba Translation is already loaded by libraries/select_lang.lib.php. 2008-06-02 13:20:00 +00:00
Sebastian Mendel
fa21fe3ea5 make the database list more magic:
load/fetch only if really required
use SPL ArrayObject to behave like an array
2008-05-09 10:41:16 +00:00
Marc Delisle
fd34e26ca1 enable testing under PHP 5.3.0-dev 2008-03-29 11:16:04 +00:00
Marc Delisle
ba57a90e8b bug #1909711 [security] Sensitive data in session files 2008-03-29 06:06:35 +00:00
Marc Delisle
c8e25f9459 bug #1910485 [core] Unsetting the whitelist during the loop 2008-03-11 16:57:55 +00:00
Marc Delisle
e80a9cda23 bug #1905711 [compatibility] Functions deprecated in PHP 5.3 2008-03-03 13:51:34 +00:00
Marc Delisle
8ad4a854e4 bug [core] Remove cookies from $_REQUEST for better coexistence with other applications 2008-02-23 21:16:42 +00:00
Marc Delisle
f990acca9e typos 2008-02-23 20:46:36 +00:00
Sebastian Mendel
32ba2d44bf no need to call PMA_profilingSupported() if isset($_REQUEST['profiling']) is false 2008-01-21 11:44:37 +00:00
Marc Delisle
358dfaf08c These should go to ['userconf'] 2008-01-01 15:03:50 +00:00
Marc Delisle
85983dd6e7 bug #1814679 [display] Database selection pagination when switching servers 2008-01-01 13:39:49 +00:00
Sebastian Mendel
9613eb2625 save settings stored in cookies before calling the auth module (calling the auth module will end script execution and never reach the place where settings get stored in cookie) 2007-11-05 13:25:17 +00:00
Marc Delisle
a4be8e0efd bug #1824506 [profiling] Profile command repeated on older MySQL servers 2007-11-02 17:34:58 +00:00
Sebastian Mendel
afc5d44bed minor cosmetic changes 2007-10-18 12:12:07 +00:00
Sebastian Mendel
2ebc28fe34 cleanup 2007-10-17 14:01:50 +00:00
Sebastian Mendel
177ea6c5d5 do not connect twice if no controluser is defined, no controluser query should affect user connection (no DB change) 2007-10-16 12:52:36 +00:00
Sebastian Mendel
568e735186 for last XSS fix: forgot to whitelist PMA_PHP_SELF 2007-10-16 07:24:29 +00:00
Sebastian Mendel
ef7a052074 - fixed XSS in server_status.php, thanks to Omer Singer, The DigiTrust Group
- fixed some possible XSS with PHP_SELF (PATH_INFO)
- commented out some use of PATH_INFO ... needs further testing
2007-10-16 07:11:28 +00:00
Sebastian Mendel
5dd96d42ce replaced $PMA_errors with new PMA_Error_Handler 2007-10-08 16:02:58 +00:00
Sebastian Mendel
b43ab99c15 new error handler ... 2007-10-08 15:13:44 +00:00
Sebastian Mendel
e623dc42cf new error handler - needs some more work, but works already:
- errors are gathered through all pages till displayed
 - errors are displayed in main footer
 - configurable error gathering
 - configurable error displaying
 - configurable error logging
2007-10-08 14:58:18 +00:00
Sebastian Mendel
4355a564d5 refactored tooltip handling (please test!) 2007-10-05 13:18:04 +00:00
Sebastian Mendel
98c8a7719e refactored JavaScript handling 2007-10-05 11:45:55 +00:00
Sebastian Mendel
29b8ec66a4 initialize $js_messages, now you can add JavaScript messages and libraries at any point in phpMyAdmin (before HTML headers are sent) 2007-10-05 07:39:55 +00:00
Sebastian Mendel
40b3ce9fd1 use array to define included JavaScript libraries 2007-10-04 09:22:50 +00:00
Marc Delisle
270b42c219 obsolete comments 2007-09-23 15:31:30 +00:00
Marc Delisle
235fc3679c move mcrypt code in-line (avoid one require); also add a constant for better protection 2007-09-23 15:12:42 +00:00
Marc Delisle
dccab77870 MySQL 5.0.15 is the minimum 2007-09-13 16:57:14 +00:00