Michal Čihař
02aa0729dc
Make PMA_fatalError work even early
...
The messaging framework can not make assumptions about available objects
as this doesn't have to be satisfied in early PMA_fatalError case.
Issue #12056
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-03-01 15:36:05 +01:00
Michal Čihař
a6b3a9ce51
Fix error when we can not generate random string
...
Fixes #12056
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-03-01 15:35:53 +01:00
Michal Čihař
8eee22be3a
Lint templates as well
...
This will help us spotting syntax errors even in files which are not
covered by tests.
Fixes #12055
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-03-01 08:06:48 +01:00
Michal Čihař
35becb00ee
Fix duplicate function call
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-03-01 08:06:06 +01:00
Michal Čihař
ed5a8307c7
Fix wrong merge
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-03-01 08:00:54 +01:00
Weblate
d280e53aaa
Merge remote-tracking branch 'origin/QA_4_6' into QA_4_6
2016-02-29 21:36:45 +01:00
Kenzo Martins Matuzawa
8563303004
Translated using Weblate (Portuguese (Brazil))
...
Currently translated at 92.2% (2963 of 3211 strings)
[CI skip]
2016-02-29 21:36:44 +01:00
Isaac Bennetch
73fd0dc2a8
4.6.0-rc1 pre-release
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2016-02-29 08:56:32 -05:00
Michal Čihař
ed17d3c450
Merge branch 'QA_4_6' into QA_4_6-security
2016-02-29 19:06:23 +01:00
Michal Čihař
2ebabd11fd
Merge branch 'QA_4_5' into QA_4_6
2016-02-29 12:13:45 +01:00
Michal Čihař
88e0944cfd
Honor vendor configuration for gettext inclusion
...
Fixes #12048
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-29 12:12:34 +01:00
Michal Čihař
a29f154f37
Merge branch 'MAINT_4_5_5-security' into QA_4_6-security
2016-02-29 10:35:47 +01:00
Michal Čihař
2925d6468b
Merge pull request #29 from phpmyadmin/escape
...
A better way of escaping
2016-02-29 10:32:56 +01:00
Madhura Jayaratne
41c4e0214c
Fix XSS in zoom search
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-02-29 12:26:44 +11:00
Madhura Jayaratne
4650ad7fbd
A better way of escaping
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-02-29 12:14:46 +11:00
Madhura Jayaratne
cc55f44a4a
Fix XSS in Central columns page
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-02-29 11:12:07 +11:00
Madhura Jayaratne
ab1283e836
Fix XSS in User accounts page
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-02-29 11:08:38 +11:00
Madhura Jayaratne
bcd4ce8cba
Fix XSS in normalization.js
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-02-27 09:56:12 +11:00
Weblate
19c7a069c7
Merge remote-tracking branch 'origin/QA_4_6' into QA_4_6
2016-02-26 03:28:05 +01:00
Ray Santos
19308231b3
Translated using Weblate (Portuguese (Brazil))
...
Currently translated at 92.2% (2962 of 3211 strings)
[CI skip]
2016-02-26 03:28:05 +01:00
Andre Evertz
f825abc8a7
Fix for wrong mysql_upgrade message on Users tab with Percona Server >= 5.7
...
Signed-off-by: Andre Evertz <andre.evertz@devil-coding.de>
2016-02-26 13:26:35 +11:00
Michal Čihař
9bce7dafaf
Add changes for security issues
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-25 13:34:02 +01:00
Madhura Jayaratne
37c34d089a
Escape selectors
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-02-25 13:09:32 +01:00
Madhura Jayaratne
f33a42f1da
Fix XSS in normalization.js
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-02-25 13:08:43 +01:00
Michal Čihař
b3d36dc836
Merge pull request #23 from phpmyadmin/ssl-cert
...
Bring back SSL certificate validation
2016-02-25 13:03:30 +01:00
Michal Čihař
c842a0de92
Use correct headers for json data
...
It was previously not marked as such what could potentially lead to
browsers doing some autodetection.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-25 12:33:56 +01:00
Michal Čihař
e65f375918
Merge branch 'MAINT_4_5_5' into MAINT_4_5_5-security
2016-02-25 12:31:50 +01:00
Michal Čihař
33f0b947db
Merge branch 'QA_4_5' into QA_4_6
2016-02-25 12:30:42 +01:00
Michal Čihař
1297747a65
Fixed incorrect usage of SQL parser context in SQL export
...
Fixes #12029
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-25 12:29:34 +01:00
Michal Čihař
57607e062b
Add changelog for SQL parser update
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-25 12:28:24 +01:00
Michal Čihař
5fb33a7af4
Merge commit '2b1a68cc4eb935ef3df5c7401d0d1338df09bc72' into MAINT_4_5_5
2016-02-25 12:25:07 +01:00
Madhura Jayaratne
746240bd13
Fix XSS in normalization
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-02-25 12:19:26 +01:00
Michal Čihař
38fa119104
Urlencode hostname
...
This can come from the HTTP header, so we need to be sure to sanitize
it.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-25 12:09:56 +01:00
Michal Čihař
983faa94f1
Fix XSS in database structure page
...
Forward ported commit 90df124797
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-25 11:30:14 +01:00
Michal Čihař
e42b7e3aed
Bring back SSL certificate validation
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-25 11:08:44 +01:00
Michal Čihař
16a6a02fca
Avoid skipping the SSL certificate check in TCPDF
...
This code is never used in phpMyAdmin, but we fix it just to avoid
potential security reports.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-25 10:34:01 +01:00
Michal Čihař
7877a9c008
Escape SQL query for inline editing
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-25 09:14:32 +01:00
Michal Čihař
3a6a9a807d
Escape query when displaying
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-25 09:06:52 +01:00
Michal Čihař
9702259f81
Merge remote-tracking branch 'security/MAINT_4_5_4-security' into MAINT_4_5_5
2016-02-25 08:55:45 +01:00
Michal Čihař
67c5514e65
Merge branch 'MAINT_4_5_4' into MAINT_4_5_4-security
2016-02-25 08:53:52 +01:00
Dan Ungureanu
70e326deb9
Added changelog entries.
...
Signed-off-by: Dan Ungureanu <udan1107@gmail.com>
2016-02-24 20:56:33 +02:00
Dan Ungureanu
90605cc9a8
Merge branch 'QA_4_5' into QA_4_6
2016-02-24 20:48:14 +02:00
Dan Ungureanu
2b1a68cc4e
Updates sql-parser to phpmyadmin/sql-parser@5c489d91f5 (v3.4.0).
...
Fixes #11971 . CREATE UNIQUE INDEX index type is not recognized by parser.
Fixes #11982 . Row count wrong when grouping joined tables.
Fixes #12012 . Column definition with default value and comment in CREATE TABLE expoerted faulty.
Fixes #12020 . New statement but no delimiter and unexpected token with REPLACE.
Signed-off-by: Dan Ungureanu <udan1107@gmail.com>
2016-02-24 20:41:54 +02:00
Weblate
968edb64bd
Merge remote-tracking branch 'origin/QA_4_6' into QA_4_6
2016-02-24 14:41:34 +01:00
Yury Vidal
18de5389b9
Translated using Weblate (Portuguese (Brazil))
...
Currently translated at 92.1% (2960 of 3211 strings)
[CI skip]
2016-02-24 14:41:33 +01:00
Michal Čihař
7ca6299093
Merge branch 'QA_4_5' into QA_4_6
2016-02-24 14:39:39 +01:00
Stefano Martinelli
4450a44d54
Translated using Weblate (Italian)
...
Currently translated at 100.0% (3211 of 3211 strings)
[CI skip]
2016-02-22 22:09:10 +01:00
Isaac Bennetch
4b3c91b0f5
Version 4.5.5 release
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2016-02-22 09:56:51 -05:00
Isaac Bennetch
2e26e33671
Archive old changelog entries
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2016-02-22 09:53:25 -05:00
Isaac Bennetch
386c4bef20
Document Isaac as the new release manager
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2016-02-22 09:50:14 -05:00