gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
83,276 Commits 12 Branches 481 Tags 2.4 GiB
632380d3d9
Commit Graph

83276 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michal Čihař
632380d3d9 Test with PHP 5.2 to ensure we don't again release something broken 
Issue #11891

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-28 14:00:27 +01:00
Michal Čihař
980ccb6ffb Use changelog from release notes 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-28 10:09:27 +01:00
Michal Čihař
28b5882b96 Document last release 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-28 09:30:00 +01:00
Isaac Bennetch
16136ea0ef Increment version for 4.0.10.13 release 
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
 2016-01-27 21:30:00 -05:00
Michal Čihař
5b79467245 Enable localization before redirect 
This is needed in case of IIS which needs full HTML response.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-27 08:55:07 +01:00
Michal Čihař
25738352df Fallback to default collation connection 
If user supplied wrong string we should gracefully fallback.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-26 15:05:42 +01:00
Michal Čihař
7056ca9458 Do not process subforms with PMA_MINIMUM_COMMON 
In such case needed infrastructure is not loaded, so related code won't
work anyway.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-26 14:34:01 +01:00
Michal Čihař
215f4a8ebe Can not use PMA_fatalError when including fails 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-26 14:30:08 +01:00
Michal Čihař
8023340a25 Include common libraries in setup 
We use PMA_fatalError which in turn needs Response and related objects.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-26 14:25:57 +01:00
Michal Čihař
fe62b69a5b Use hash_equals for comparing token 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-26 13:00:50 +01:00
Madhura Jayaratne
27eb98faed Escape javascript variable content 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2016-01-26 22:21:24 +11:00
Michal Čihař
6fe54dfa00 Use phpseclib's Crypt::Random to generate CSRF token 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-26 09:51:12 +01:00
Michal Čihař
2369daa7f5 Use full alphabet to generate random passwords 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-26 09:39:19 +01:00
Michal Čihař
6a96e67487 Use secure RNG if available 
Recent browsers come with better RNG, so let's use it for generating
password instead of Math.random if available.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-26 09:39:09 +01:00
Madhura Jayaratne
0ce4fd2750 Fix XSS in DB_search.php 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2016-01-19 21:01:32 +11:00
Madhura Jayaratne
9f3488fc3a Fix XSS in zoom search 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2016-01-19 20:59:37 +11:00
Madhura Jayaratne
ac81596bfc [Security] Fix path disclosure, items 1.4.x, 1.5 and 1.6 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2016-01-15 08:12:48 +11:00
Marc Delisle
66149607b1 4.0.10.12 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2015-12-25 15:25:34 -05:00
Marc Delisle
f79d30dd98 [Security] Path disclosure, see PMASA-2015-6 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2015-12-25 15:24:18 -05:00
Marc Delisle
2694c36ef6 4.0.10.11 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2015-09-23 07:00:32 -04:00
Madhura Jayaratne
9730b16dd0 issue #11464 phpMyAdmin suggests upgrading to newer version not usable on that system 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2015-09-22 23:59:20 +10:00
Marc Delisle
d81165f345 4.0.10.10 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2015-05-13 11:06:36 -04:00
Madhura Jayaratne
e97e7fb0ea bug #4900 [security] Vulnerability allowing Man-in-the-middle attack 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2015-05-13 07:32:02 +05:30
Madhura Jayaratne
fea1d39fef bug #4899 [security] CSRF vulnerability in setup 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2015-05-12 19:56:53 +05:30
Marc Delisle
a395665715 4.0.10.9 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2015-03-04 10:34:18 -05:00
Marc Delisle
e1a68ad02c bug [security] Risk of BREACH attack 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2015-03-04 10:32:07 -05:00
Marc Delisle
5004dc4098 4.0.10.8 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2015-01-07 08:10:02 -05:00
Marc Delisle
1da7417fc2 ChangeLog entries 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2015-01-07 08:06:31 -05:00
Ian P. Christian
394bf9183c Support early versions of PHP5.2 (register_shutdown_function) 
Signed-off-by: Ian P. Christian <ichristian@users.sf.net>
 2015-01-07 08:03:09 -05:00
Ian P. Christian
9b7fbe29ce Recursive function too deep 
Signed-off-by: Ian P. Christian <ichristian@users.sf.net>
 2015-01-07 07:52:29 -05:00
Michal Čihař
26ce63dbde Cache composer cache 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2014-12-04 13:14:56 +01:00
Michal Čihař
853f7255c5 Create database for test 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2014-12-04 13:12:21 +01:00
Michal Čihař
9daeaff5f0 Use composer to install correct phpunit version 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2014-12-04 13:09:26 +01:00
Marc Delisle
00828f9ccb 4.0.10.7 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-12-03 07:55:56 -05:00
Madhura Jayaratne
095729d812 bug #4611 [security] DOS attack with long passwords 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-12-01 20:49:45 +05:30
Marc Delisle
13a288d0da 4.0.10.6 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-11-20 10:09:42 -05:00
Madhura Jayaratne
c7685e5acd bug #4597 [security] XSS through pma_fontsize cookie 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-11-18 10:15:34 +05:30
Madhura Jayaratne
c5783321cd bug #4598 [security] XSS in multi submit 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-11-17 12:13:09 +05:30
Madhura Jayaratne
2e3f0b9457 bug #4594 [security] Path traversal in file inclusion of GIS factory 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-11-17 11:03:55 +05:30
Madhura Jayaratne
58cdd91fc8 bug #4579 [security] XSS vulnerability in zoom search page 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-11-04 16:20:15 +05:30
Madhura Jayaratne
42b64e12b5 bug #4578 XSS vulnerability in table print view 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-11-04 16:05:06 +05:30
Marc Delisle
d0f7dc7990 4.0.10.5 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-10-21 10:07:51 -04:00
Madhura Jayaratne
a150ea1df4 bug #4563 [security] XSS in monitor query analyzer 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-10-18 06:52:40 +05:30
Madhura Jayaratne
57594febab bug #4562 [security] XSS in debug SQL output 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-10-17 18:07:08 +05:30
Marc Delisle
5118938f10 4.0.10.4 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-10-01 07:20:09 -04:00
Marc Delisle
c6c77589a5 [security] XSS with malicious ENUM values 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-09-28 09:48:13 -04:00
Marc Delisle
ceb7d7e1b2 4.0.10.3 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-09-13 11:12:44 -04:00
Marc Delisle
ab0dba4533 bug #4530 [security] DOM based XSS that results to a CSRF that creates a ROOT account in certain conditions 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-09-12 08:22:14 -04:00
Marc Delisle
5e52612841 4.0.10.2 release 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-08-17 06:59:44 -04:00
Madhura Jayaratne
098caf93b6 bug #4517 [security] XSS in relation view 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-08-16 22:00:13 +05:30