Madhura Jayaratne
5857fe163d
Fix spacing after opening brace
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2015-04-28 11:05:08 +05:30
Madhura Jayaratne
0cb93d6870
File is being conditionally included; use "include" instead
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2015-04-27 19:11:26 +05:30
Madhura Jayaratne
d162f4f3bd
Per server iv
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2015-03-11 15:32:46 +05:30
Marc Delisle
ff35677c26
Merge pull request #1523 from madhuracj/rfe1602
...
Alternative implementation for rfe #1602
2015-03-01 06:33:41 -05:00
Madhura Jayaratne
1b939fb3d3
rfe #1441 Add regexp match when using AllowArbitraryServer
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2015-02-26 17:02:09 +05:30
Madhura Jayaratne
e506afc3b0
Revert "Save unfinished work"
...
This reverts commit 3007c6a6ef .
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2015-02-26 11:53:48 +05:30
Hugues Peccatte
05ebf9a3a7
Fix typos.
...
Minor PHPDoc update.
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2015-02-22 22:54:09 +01:00
Zhang Hao
3007c6a6ef
Save unfinished work
...
Signed-off-by: Zhang Hao <jason.daurus@gmail.com>
2015-02-13 18:46:09 +08:00
Marc Delisle
be03cb3f27
Remove dead code
...
Signed-off-by: Marc Delisle <marc@infomarc.info>
2015-02-02 06:25:37 +01:00
Madhura Jayaratne
743a528835
rfe #1590 Recaptcha API v2
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2015-01-08 15:49:24 +05:30
Marc Delisle
69052a0663
Fix coding style
...
Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-12-07 18:40:53 -05:00
Marc Delisle
f87458719e
Merge branch 'QA_4_3'
2014-12-07 06:41:20 -05:00
Robert Scheck
d9468e3fff
Bug #4623 Incomplete PHP OpenSSL support
...
Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-12-07 06:37:15 -05:00
Madhura Jayaratne
478e781f1b
Replace more instances of .live() and .die() with .on() and .off()
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2014-12-04 18:33:37 +05:30
Marc Delisle
41c02abc41
Merge branch 'MAINT_4_3_0' into QA_4_3
2014-12-03 09:02:25 -05:00
Madhura Jayaratne
a4e8d008f4
bug #4611 [security] DOS attack with long passwords
...
Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-12-03 08:50:14 -05:00
Michal Čihař
2ce7aa70c4
Move storing password/username after checking password
...
The cookie encryption is quite expensive, so let's move it after we
check password validity.
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-12-01 09:50:16 +01:00
Madhura Jayaratne
eb79ad9181
Fix typo
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2014-11-28 11:09:04 +05:30
Madhura Jayaratne
ea7ca462e5
Document what these flags do
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2014-11-28 10:57:19 +05:30
Madhura Jayaratne
b92d3e1047
Workaround for token mismatch error on server session timeout for config and http authentication types
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2014-11-28 10:56:28 +05:30
Marc Delisle
9e9d9c08c7
Fix typos
...
Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-11-26 07:46:06 -05:00
Marc Delisle
6f8a253daf
Merge pull request #1407 from madhuracj/tokenMismatch
...
Workaround for token mismatch error on server session timeout for config and http authentication types
2014-11-26 07:42:46 -05:00
Madhura Jayaratne
090c10cccf
Document what these flags do
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2014-11-26 09:39:16 +05:30
Madhura Jayaratne
783cacbd1e
Workaround for token mismatch error on server session timeout for config and http authentication types
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2014-11-20 17:37:39 +05:30
Michal Čihař
8fc377d83a
Share code for resetting IV size
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-11-20 10:27:01 +01:00
Michal Čihař
5f1a5a78bc
Shared check for OpenSSL support
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-11-20 10:14:47 +01:00
Robert Scheck
491c426623
Patch by Robert Scheck <robert@fedoraproject.org> for phpMyAdmin 4.2.6
...
which enhances cookie encryption/decryption by the optional usage of
PHP OpenSSL. Unfortunately PHP Mcrypt is not shipped by all Linux
distributions however PHP OpenSSL is often enabled by default.
PHP < 5.3.4 does not support passing an IV, thus this has been added as
a requirement. I could have used 'BF-CBC' rather 'AES-128-CBC' but Blowfish
(even it is fast) is seen by experts as weaker algorithm than
AES. If this should be a show-stopper for upstream merging just replace
'AES-128-CBC' by 'BF-CBC', please.
Patch adapted for 4.3.x and tests modified by Marc Delisle
Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-11-19 07:38:32 -05:00
Madhura Jayaratne
0bca6a096f
Determine the databases the user has access to based on GRANTs and query only for them
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2014-11-06 08:13:58 +05:30
Hugues Peccatte
fd7f02f929
Fix typos.
...
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2014-11-02 14:33:41 +01:00
Hugues Peccatte
e17de11c74
Improve multibytes string manipulation performances.
...
Review SQL import process.
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2014-10-30 17:40:09 +01:00
Hugues Peccatte
74f0beda8f
Fix syntax error.
...
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2014-10-20 20:56:12 +02:00
Ann + J.M
a540e6ba87
More fixes to new PMA_URL_getCommon style
...
Signed-off-by: Ann + J.M <phpMyAdmin@ZweiSteinSoft.de>
2014-10-18 19:42:39 +02:00
Ann + J.M
b1a7039ae3
Convert PMA_URL_getCommon calls to new style
...
Rewritten tests need validation
Signed-Off-By: Ann + J.M. <phpMyAdmin@ZweiSteinSoft.de>
2014-10-18 19:42:29 +02:00
Madhura Jayaratne
ae148f37e6
Merge branch 'QA_4_2'
2014-10-17 13:16:45 +05:30
Madhura Jayaratne
bdd76f18ce
bug #4259 reCaptcha sound session expired problem
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2014-10-17 13:14:28 +05:30
Hugues Peccatte
70a21ec25c
Merge from master.
...
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2014-10-08 21:49:37 +02:00
Madhura Jayaratne
f96841ebf4
Merge branch 'QA_4_2'
2014-10-02 11:44:45 +05:30
Madhura Jayaratne
43ec83fbda
bug #4259 reCaptcha sound session expired problem
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2014-10-02 11:42:44 +05:30
Hugues Peccatte
3de88162ff
Replace PMA_String uses by mb_* calls.
...
Remove part of unused variables.
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2014-09-28 20:53:01 +02:00
Smita Kumari
42223e1bf6
avoid session timeout when user is active FR#1529
...
Signed-off-by: Smita Kumari <kumarismita62@gmail.com>
2014-09-13 03:10:40 +05:30
Hugues Peccatte
9b77d746ab
Mass modifications to use PMA_String.
...
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2014-09-06 10:44:03 +02:00
Michal Čihař
7089858ab0
Allow to use system phpseclib
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-07-08 16:29:54 +02:00
Michal Čihař
6be21dcb47
Merge pull request #1251 from WhaleWatching/console
...
PMA console, history and bookmarks.
2014-06-25 15:37:29 +02:00
Edward Cheng
fb14e92d62
PMA console, history and bookmarks.
...
Modified: resizer of navigation bar: whole-time-bind events removed.
Signed-off-by: Edward Cheng <c4150221@gmail.com>
2014-06-25 21:22:33 +08:00
Michal Čihař
34fec13115
Merge pull request #1252 from nijel/remove-observer
...
Remove plugin manager and observer classes
2014-06-25 14:27:45 +02:00
Michal Čihař
06b1ffc8da
Fix comments
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-06-25 14:11:01 +02:00
Michal Čihař
e6f6dab3b0
Fixed cookie based login for installations without mcrypt
...
bug #4469
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-06-25 14:08:03 +02:00
Michal Čihař
dca981481d
Remove plugin manager and observer classes
...
We don't really need the observer pattern, so let's simplify the code.
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-06-25 09:25:59 +02:00
Ann + J.M
6b778e09d9
Fix coding style
...
Signed-off-by: Ann + J.M <phpMyAdmin@ZweiSteinSoft.de>
2014-06-22 16:34:34 +02:00
Dhananjay Nakrani
7b8006651b
Make "Ignore All" button work on login page.
...
Signed-off-by: Dhananjay Nakrani <dhananjaynakrani@gmail.com>
2014-06-16 11:50:52 +05:30