gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
109,918 Commits 12 Branches 481 Tags 2.4 GiB
QA_4_7
Commit Graph

383 Commits

Author SHA1 Message Date
Michal Čihař
edd929216a Bring back token validation to GET requests 
This is necessary to avoid CSRF on SQL queries. This is really more a
short term fix, proper fix (to be implemented in master) is to avoid
accepting SQL queries from GET requests.

This reverts commits:

* dae3390a02
* ea73fded71
* 90433788d6
* f797a8d87d
* 9c1cfc8553

Signed-off-by: Michal Čihař <michal@cihar.com>
 2017-12-14 17:27:22 +01:00
Michal Čihař
c40a1d1a5d Adjust tests to changed API usage in SQL export 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2017-08-21 12:49:43 +02:00
Michal Čihař
8d6b1dce57 Improved handling of logout with disabled LoginCookieDeleteAll 
- avoid removing session for cookie auth if LoginCookieDeleteAll is
  disabled
- redirect user to other server rather than to login page
- show message about partial logout
- adjust tests
- this is based on #13221

Fixes #12301

Signed-off-by: Michal Čihař <michal@cihar.com>
 2017-04-28 16:02:11 +02:00
Michal Čihař
82f13e34d0 Better handle multiple open browser windows 
Calculate session expiry per browser (tracking is based on
sessionStorage which is unique per tab). With this we're able to detect
that there is another window open and actively used and avoid logging it
out by inactive one.

Issue #11231

Signed-off-by: Michal Čihař <michal@cihar.com>
 2017-02-14 17:00:44 +01:00
Michal Čihař
1b7914a4e5 Remove connect_type setting 
It is really not necessary as MySQL decides connection type rather based
on hostname than on anything else.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2017-02-02 16:08:44 +01:00
Michal Čihař
d2ade81788 Assert for language selection only in case locales are available 
Fixes #12911

Signed-off-by: Michal Čihař <michal@cihar.com>
 2017-01-21 12:46:42 +01:00
Michal Čihař
815149c3f9 Share more of response mocking 
Issue #12079

Signed-off-by: Michal Čihař <michal@cihar.com>
 2017-01-18 16:32:19 +01:00
Michal Čihař
028f32da5f Share more code for reponse mocking 
Issue #12079

Signed-off-by: Michal Čihař <michal@cihar.com>
 2017-01-18 16:14:25 +01:00
Michal Čihař
ffb28560c7 Merge pull request #12879 from ragnerok/patch 
use shared response mock
 2017-01-18 10:03:39 +01:00
Isaac Bennetch
77c33d0444 Rename Relations to Relationships in many places; Fixes issue #12536 
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
 2017-01-13 18:20:30 -05:00
osaid
f98832c691 remove tab and unused code 
Signed-off-by: osaid <osaid.nasir@gmail.com>
 2017-01-08 19:21:47 +05:30
osaid
528d702e6b use shared response mock 
Signed-off-by: osaid <osaid.nasir@gmail.com>
 2017-01-08 19:04:03 +05:30
Michal Čihař
3c2867c02a Use shared response mock in cookie auth tests 
Issue #12079

Signed-off-by: Michal Čihař <michal@cihar.com>
 2017-01-08 10:51:25 +01:00
Michal Čihař
10416615cd Merge remote-tracking branch 'origin/pull/12799' 2017-01-02 16:15:58 +01:00
Michal Čihař
92aa487c54 Merge branch 'QA_4_6' 2016-12-20 14:44:03 +01:00
Michal Čihař
09da5eb49f Test both with and without phpseclib 
This ensures we generate compatible data in both cases.

Issue #12293

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-12-20 14:40:31 +01:00
Michal Čihař
30cd5fc358 Use same encryption key with openssl and phpseclib 
Issue #12293

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-12-20 14:38:34 +01:00
Michal Čihař
6bf4f3bf39 Merge branch 'QA_4_6' 2016-12-19 16:20:57 +01:00
Michal Čihař
a856a61c9d Fix HTTP auth test expectations 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-12-19 16:20:51 +01:00
Ashus
40825597df Fixed tests for SignonCookieParams parameter 
Signed-off-by: Ashus <github.com@ashus.net>
 2016-12-10 17:19:25 +01:00
Ashus
e63ffe1ab8 Added SignonCookieParams parameter 
Signed-off-by: Ashus <github.com@ashus.net>
 2016-12-10 15:52:44 +01:00
Michal Čihař
f86aca5b80 Merge branch 'QA_4_6' 2016-12-06 10:48:16 +01:00
Michal Čihař
ec9139edef Do not try to run gd based tests if gd extension is not there 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-12-06 10:44:06 +01:00
Michal Čihař
dad93483c1 Merge branch 'QA_4_6' 2016-11-10 11:08:36 +01:00
Deven Bansod
06e9b62a25 Remove tests against unsupported versions 
Remove duplicate test, fix other tests

Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-11-07 20:42:28 +05:30
Deven Bansod
67501106e0 clear some more tests 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-11-07 11:51:47 +05:30
Deven Bansod
28a658fda0 Fix more tests 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-11-07 00:18:50 +05:30
Deven Bansod
0d03c97ce6 Fix more test errors 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-11-06 23:47:23 +05:30
Deven Bansod
3f48d9cb5f Fixed some more test errors 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-11-05 09:49:55 +05:30
Deven Bansod
8b6e102cf7 Fixed small error in XML test 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-11-04 20:54:23 +05:30
Deven Bansod
02dcfc8198 Fix errors with TrackerTest 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-11-04 19:16:01 +05:30
Deven Bansod
675186ee00 Fixed tests in Designer, Insert edit for, UserGroups, User preferences 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-11-04 18:17:31 +05:30
Deven Bansod
6a79e7c0c0 Fixed some tests in Export, Import and Node 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-11-04 14:21:02 +05:30
Deven Bansod
956f3179cb Fix Navigation tests and Export tests 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-11-04 11:55:46 +05:30
Deven Bansod
f14cffdbe7 Properly escape strings in MySQL statement values 
Use *_real_escape string functions provided by connectors to escape strings while exporting

Fix #12453

Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>

Conflicts:
	libraries/server_privileges.lib.php
 2016-10-29 10:45:12 +05:30
Deven Bansod
201ba095ce Adjust tests 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-10-14 10:01:04 +05:30
Deven Bansod
6ed1da5a45 Merge branch 'QA_4_6' 2016-10-14 09:59:32 +05:30
Deven Bansod
3accab1764 Adjust tests 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-10-14 09:55:50 +05:30
Michal Čihař
1d09172f14 Turn OpenDocument wrapper to a class 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-09-16 11:49:53 +02:00
Michal Čihař
23e01d306a Merge branch 'QA_4_6' 2016-08-17 15:38:22 +02:00
Michal Čihař
83476322ba Use PmaAbsolueUri for cookie path 
Issue #12374

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 15:35:15 +02:00
Michal Čihař
7ef6fecb87 Merge branch 'master' into master-security 2016-08-01 11:07:33 +02:00
Michal Čihař
ea73fded71 Adjust tests to token removal from GET 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-28 11:22:45 +02:00
Michal Čihař
360b8e8a11 Merge branch 'master' into master-security 2016-07-28 09:44:08 +02:00
Michal Čihař
d31ff5a1e7 Merge branch 'QA_4_6' into QA_4_6-security 2016-07-28 09:43:26 +02:00
Michal Čihař
6d8e1d7935 Merge branch 'QA_4_6' 2016-07-28 09:38:08 +02:00
Michal Čihař
4072c1d29a Use example.com for sample test urls 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-28 09:12:01 +02:00
Michal Čihař
d15490088c Merge branch 'QA_4_6' 2016-07-27 16:30:47 +02:00
Michal Čihař
af337d2054 Use https to access phpmyadmin.net 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-27 16:29:08 +02:00
Michal Čihař
f5015c2ea3 Merge branch 'QA_4_6-security' into master-security 2016-07-26 16:31:21 +02:00