Michal Čihař
35cf83bc12
Merge remote branch 'knittl/inline-edit-xss'
2010-09-21 10:30:19 +02:00
Daniel Knittl-Frank
4b313daa7a
Fix persistent XSS in table browsing mode
...
$where_clause was used instead of escaped $where_clause_html. This would
only come into play when a string field was contained in the index (and
thus used in the where clause).
Signed-off-by: Daniel Knittl-Frank <knittl89+git@googlemail.com >
2010-09-20 18:16:10 +02:00
Marc Delisle
98a5ba7317
misleading variable name
2010-09-04 07:01:30 -04:00
Michal Čihař
1d67babd52
Do not fail on non analyzed query (eg. because of parser failure).
2010-08-30 16:11:46 +02:00
Michal Čihař
61fe92976f
This variable does not seem to be used.
2010-08-30 16:10:51 +02:00
ninadsp
d304002fc0
Re-initialize for each data field. It was being cleared in a BLOB field, which caused inline editing to fail for all further fields in that row
2010-08-30 08:36:18 -04:00
Michal Čihař
d17fba309c
Fix permissions.
...
Most files were made executable somewhere in ninadsp tree, reverting
this.
2010-08-30 09:53:37 +02:00
ninadsp
9c34a0eec9
Merged branch official/master. Resolved merge conflicts introduced due to merging of Piotr and Martynas's branches
2010-08-28 01:53:52 +05:30
ninadsp
6a2445ccf2
Fixed the error caused due to a missing index , relocated the code that sets the null class for a null element
2010-08-22 12:59:25 +05:30
ninadsp
0b2b21712e
Added documentation to PHP files
2010-08-15 01:50:47 +05:30
ninadsp
2ba0095ab5
We can now edit NULL fields and set fields to NULL in inline editing.
2010-08-09 00:49:11 +05:30
ninadsp
a2f78a6d38
Resolve merge conflicts for upstream merge
2010-07-29 19:17:25 +05:30
ninadsp
2bec345a46
Trying to improve jQuery's behaviour for transformed field inline editing
2010-07-29 19:07:18 +05:30
Martynas Mickevicius
b0888714b6
Merge commit 'origin/master' into local
...
Conflicts:
server_status.php
2010-07-29 14:14:26 +03:00
Michal Čihař
3910ce6121
Remove explicit inclusion of Table.class.php as it is included in common.inc anyway.
2010-07-26 16:35:52 +02:00
ninadsp
fd4b33de85
Added handling of enum values to inline editing
2010-07-26 01:21:52 +05:30
ninadsp
e646a2760c
Fixed conflict due to upstream merge
2010-07-23 21:59:15 +05:30
Marc Delisle
56ebe05af7
blob streaming code cleanup (work in progress)
2010-07-22 13:15:27 -04:00
Barry Leslie
f8653e5803
Update blob streaming to match the current API and use the PBMS PHP extension.
2010-07-22 11:23:37 -04:00
ninadsp
f7076ab686
Added classes and hidden input fields for inline edit
2010-07-21 00:11:54 +05:30
Michal Čihař
3e57a8eca9
No @uses __('Something').
2010-07-20 15:06:34 +02:00
Michal Čihař
318dc4b650
Drop @version tag from docblocks.
2010-07-20 13:59:17 +02:00
ninadsp
ec38092bde
Added classes to data fields that are truncated/transformed/relation keys so that they can be distinguished while handling ajax inline edit
2010-07-15 22:21:57 +05:30
ninadsp
57fa27e22e
Added classes to the edit link and data fields that allow for inline editing
2010-07-15 15:48:10 +05:30
ninadsp
94a911a623
Removed inline call in libraries/display_tbl.lib.php to confirmAction()
...
for 'Calculate Real End' action on large InnoDB tables.
2010-07-11 22:23:57 +05:30
Martynas Mickevicius
12d875dadc
early code to show a chart for query results
2010-06-21 17:35:42 +03:00
Martynas Mickevicius
f9d20c8c7a
added chart button. Will be used later to draw a chart of the query results.
2010-06-17 19:04:59 +03:00
ninadsp
160f4314eb
Merge remote branch 'origin/master'
2010-06-03 22:34:52 +05:30
Marc Delisle
caa98445d8
conform to relational terminology regarding columns and rows
2010-05-31 14:33:21 -04:00
ninadsp
bed1948d04
testing git setup - no major change made in code yet
...
only added a few comments
2010-05-23 01:22:01 +05:30
Michal Čihař
b22daddbb7
Merge branch 'QA_3_3'
2010-05-11 11:56:31 +02:00
Michal Čihař
bc5d816449
[browse] Fix handling of sort order if only column is specified.
2010-05-11 11:56:25 +02:00
Marc Delisle
632211d065
gettext conversion
2010-05-09 16:24:32 -04:00
Marc Delisle
f8f475419d
gettext conversion
2010-05-06 12:49:07 -04:00
Marc Delisle
2182098af6
strings to gettext, second batch
2010-05-04 20:07:19 -04:00
Marc Delisle
bd90d40def
bug #2974067 non-binary fields shown as hex
2010-04-23 14:07:03 -04:00
Marc Delisle
acdf39e95b
bug #2974067 non-binary fields shown as hex
2010-04-23 14:00:53 -04:00
Michal Čihař
87d19393b3
rfe #2972969 [interface] Fix flipping of headers in non-IE browsers.
2010-04-16 15:41:13 +02:00
Marc Delisle
3ca82375d5
continue removing author names in code
2010-04-05 09:16:36 -04:00
Marc Delisle
9785bbc561
remove author names
2010-03-26 17:44:10 -04:00
Marc Delisle
79ce179bae
Merge branch 'QA_3_3'
2010-03-14 10:06:24 -04:00
Marc Delisle
7a366c3f08
bug #2967366 Some results of Propose table structure are shown in hex
2010-03-14 10:05:51 -04:00
Marc Delisle
279d9c23d4
rename this variable to avoid confusion with SQL primary keys, for example
2010-03-14 09:13:44 -04:00
Marc Delisle
a3bbb9aada
Merge branch 'QA_3_3'
2010-03-14 08:48:11 -04:00
Marc Delisle
b686640a06
bug #2966078 Incorrect LIMIT is saved and sticks while browsing
2010-03-14 08:46:01 -04:00
Marc Delisle
819324ede6
remove author names, as discussed at the 2010 developer meeting and according to the book Producing Open Source Software
2010-03-06 18:04:17 +00:00
Michal Čihař
596bb4812d
[browse] Properly display NULL value for BLOB.
2010-01-22 17:19:07 +00:00
Michal Čihař
bdaedd3f83
rfe #1025696 [browse] Add direct download of binary fields.
2010-01-22 16:17:41 +00:00
Michal Čihař
1a6e594442
rfe #2835109 [interface] Move ^1 to the end of message.
2010-01-21 16:27:26 +00:00
Michal Čihař
94c2f864ae
[core] Remove config data from session as it brings chicken-egg problem.
...
Configuration data stores PmaAbsoluteUri, which should be accessible
before initiating session. Otherwise there is no way to make
PmaAbsoluteUri work. PmaAbsoluteUri is needed at least for reverse
proxy setups, for example http webserver running behind https proxy.
2010-01-21 11:18:18 +00:00
