Commit Graph

114397 Commits

Author SHA1 Message Date
Kristjan Räts
a01e296f07
Translated using Weblate (Estonian)
Currently translated at 100.0% (3307 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/et/
Signed-off-by: Kristjan Räts <kristjanrats@gmail.com>
2020-03-30 08:26:47 +02:00
Burak Yavuz
941122a7ef
Translated using Weblate (Turkish)
Currently translated at 100.0% (3307 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/tr/
Signed-off-by: Burak Yavuz <hitowerdigit@hotmail.com>
2020-03-23 21:52:54 +01:00
Isaac Bennetch
b2fc6760f7 Removing composer.lock
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-03-21 00:10:18 -04:00
Isaac Bennetch
1651d674d6 Adding composer lock for 4.9.5
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-03-21 00:07:58 -04:00
Isaac Bennetch
2ee7e9840f Fix transformation test
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-03-20 23:00:57 -04:00
Isaac Bennetch
28a79c9d09 Prepare for version 4.9.5
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-03-20 22:02:51 -04:00
Isaac Bennetch
10c9709f7d Merge branch 'QA_4_9-security' into QA_4_9 2020-03-20 20:31:11 -04:00
Isaac Bennetch
d193fdc31b ChangeLog for 4.9.5
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-03-20 20:27:36 -04:00
Isaac Bennetch
1aee403733
Merge pull request #307 from phpmyadmin/security/302
Fix External Transformation RCE
2020-03-20 19:07:35 -04:00
Isaac Bennetch
163f05cac1 Improve warning message for external transformation
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-03-20 18:58:15 -04:00
Isaac Bennetch
155f3b2b41
Merge pull request #297 from phpmyadmin/security/296
SQL Injection in SearchController
2020-03-20 18:21:05 -04:00
Isaac Bennetch
9ce61ea0e5
Merge pull request #306 from phpmyadmin/security/295
Fix SQL Injection and Data Extraction with XS-Search
2020-03-19 22:38:27 -04:00
Isaac Bennetch
1a1f00bad4 Corrected documentation for External Transformation
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-03-19 22:34:35 -04:00
Isaac Bennetch
51d54d62bb
Merge pull request #310 from phpmyadmin/298
Another instance to escape username and password when changing password
2020-03-19 09:58:40 -04:00
yagoub fadel
f8035a7c62
Translated using Weblate (Arabic)
Currently translated at 49.5% (1639 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/ar/
Signed-off-by: yagoub fadel <yagoub76@gmail.com>
2020-03-19 12:36:27 +01:00
William Desportes
748864742b
Translated using Weblate (Arabic)
Currently translated at 49.5% (1639 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/ar/
Signed-off-by: William Desportes <williamdes@wdes.fr>
2020-03-19 12:36:27 +01:00
Isaac Bennetch
3258978c38 More escaping of username and password.
Improves upon 89fbcd7c39

Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-03-18 22:16:53 -04:00
William Desportes
0bd0e72908
Translated using Weblate (Arabic)
Currently translated at 49.5% (1638 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/ar/
Signed-off-by: William Desportes <williamdes@wdes.fr>
2020-03-18 10:57:09 +01:00
yagoub fadel
2bd75fb4cb
Translated using Weblate (Arabic)
Currently translated at 49.5% (1638 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/ar/
Signed-off-by: yagoub fadel <yagoub76@gmail.com>
2020-03-18 05:36:27 +01:00
Maurício Meneghini Fauth
799ce5e3a6 Add warning for external transformations option usage
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2020-03-17 19:46:20 -03:00
Maurício Meneghini Fauth
13e6a01838 Add support for E_USER_DEPRECATED in the error handler
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2020-03-17 19:37:31 -03:00
Isaac Bennetch
0184c2884e
Merge pull request #308 from phpmyadmin/security/303
Fix SQL Injection in getCurrentUserAndHost
2020-03-15 20:42:26 -04:00
yagoub fadel
5d98877e91
Translated using Weblate (Arabic)
Currently translated at 48.7% (1613 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/ar/
Signed-off-by: yagoub fadel <yagoub76@gmail.com>
2020-03-15 09:36:56 +01:00
Burak Yavuz
2a28877670
Translated using Weblate (Turkish)
Currently translated at 100.0% (3307 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/tr/
Signed-off-by: Burak Yavuz <hitowerdigit@hotmail.com>
2020-03-15 09:36:50 +01:00
William Desportes
efa811e932
Translated using Weblate (Arabic)
Currently translated at 48.3% (1599 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/ar/
Signed-off-by: William Desportes <williamdes@wdes.fr>
2020-03-11 09:19:12 +01:00
yagoub fadel
7396ef4515
Translated using Weblate (Arabic)
Currently translated at 48.3% (1599 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/ar/
Signed-off-by: yagoub fadel <yagoub76@gmail.com>
2020-03-10 23:33:00 +01:00
Maurício Meneghini Fauth
89fbcd7c39 Escape user and hostname when getting auth plugin
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2020-03-05 20:10:13 -03:00
Maurício Meneghini Fauth
2489837213
Add l10n notes
Signed-off-by: William Desportes <williamdes@wdes.fr>
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>

Co-Authored-By: William Desportes <williamdes@wdes.fr>
2020-03-05 18:53:35 -03:00
Maurício Meneghini Fauth
46a7aa7cd4 Fix Display\ResultsTest errors
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2020-03-05 18:49:50 -03:00
Maurício Meneghini Fauth
6b9b2601d8 Add where_clause check in tbl_get_field.php
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2020-03-05 17:34:49 -03:00
Olivier Humbert
09c89bab75
Translated using Weblate (French)
Currently translated at 100.0% (3307 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/fr/
Signed-off-by: Olivier Humbert <trebmuh@tuxfamily.org>
2020-02-13 15:50:21 +01:00
Petr Pešula
44d96e9f5e
Translated using Weblate (Czech)
Currently translated at 90.3% (2986 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/cs/
Signed-off-by: Petr Pešula <p.pesula@gmail.com>
2020-02-03 17:50:10 +01:00
Alessandro Re
cbbb9e05c4
Translated using Weblate (Italian)
Currently translated at 99.9% (3304 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/it/
Signed-off-by: Alessandro Re <alescann86@gmail.com>
2020-01-31 13:50:13 +01:00
Domen
f9c550c2de
Translated using Weblate (Slovenian)
Currently translated at 100.0% (3307 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/sl/
Signed-off-by: Domen <mitenem@outlook.com>
2020-01-29 21:50:08 +01:00
Володимир Бриняк
815dd23adb
Translated using Weblate (Ukrainian)
Currently translated at 99.9% (3305 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/uk/
Signed-off-by: Володимир Бриняк <bardvv@gmail.com>
2020-01-27 15:21:26 +01:00
Nabin Ghimire
c51ccc7c5f
Translated using Weblate (Nepali)
Currently translated at 2.1% (71 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/ne/
Signed-off-by: Nabin Ghimire <nnabinn@hotmail.com>
2020-01-25 12:21:27 +01:00
William Desportes
058f63e73f
Translated using Weblate (Serbian (latin))
Currently translated at 42.5% (1405 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/sr_Latn/
Signed-off-by: William Desportes <williamdes@wdes.fr>
2020-01-22 23:05:57 +01:00
lemniscata
3464582faa
Translated using Weblate (Belarusian)
Currently translated at 62.8% (2076 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/be/
Signed-off-by: lemniscata <lemniscata.web@gmail.com>
2020-01-22 12:21:24 +01:00
Maurício Meneghini Fauth
a8acd7a42c Use Util::backquote in getDataRowAction
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2020-01-18 22:13:03 -03:00
William Desportes
2ab95fc47c
Fix CI after sql-parser version 4.5.0
Signed-off-by: William Desportes <williamdes@wdes.fr>
2020-01-09 20:04:39 +01:00
Isaac Bennetch
6c12159a0b Removing composer.lock
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-01-07 21:01:27 -05:00
Isaac Bennetch
b732639282 Adding composer lock for 4.9.4
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-01-07 20:58:59 -05:00
Isaac Bennetch
fa53b374ad Prepare for version 4.9.4
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2020-01-07 14:10:45 -05:00
Isaac Bennetch
ce10567b74 Merge remote-tracking branch 'security/fix/293-sql-injection' into QA_4_9 2020-01-07 14:07:17 -05:00
William Desportes
156231d5bf
Fix not isset $GLOBALS['dblist']
Signed-off-by: William Desportes <williamdes@wdes.fr>
2020-01-06 15:22:35 +01:00
William Desportes
71e67af91f
Add ChangeLog entry for #15724
Signed-off-by: William Desportes <williamdes@wdes.fr>
2020-01-06 14:20:08 +01:00
William Desportes
6c35ea3be7
Fix #15724 - Fix 2FA disabled
Signed-off-by: William Desportes <williamdes@wdes.fr>
2020-01-06 14:17:03 +01:00
Olivier Humbert
62f068d048
Translated using Weblate (French)
Currently translated at 100.0% (3307 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/fr/
Signed-off-by: Olivier Humbert <trebmuh@tuxfamily.org>
2020-01-04 15:21:17 +01:00
Olivier Humbert
abe433ea7e
Translated using Weblate (French)
Currently translated at 100.0% (3307 of 3307 strings)

[CI skip]

Translation: phpMyAdmin/4.9
Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/4-9/fr/
Signed-off-by: Olivier Humbert <trebmuh@tuxfamily.org>
2020-01-02 14:21:19 +01:00
William Desportes
c86acbf3ed
Fix sql injection in user exists request
Signed-off-by: William Desportes <williamdes@wdes.fr>
2020-01-01 13:55:06 +01:00