gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
106,504 Commits 12 Branches 481 Tags 2.4 GiB
dae3390a02
Commit Graph

106504 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michal Čihař
dae3390a02 Remove token from GET requests 
The CSRF token really should be used only in POST requests. The reason
for that is that it's a bit harder to get to if it is in request body
(with POST) compared to GET request, where it is in the URL (being
easily available in server logs).

Also this will make the URLs look nicer ;-).

This change will definite break some functionality, but since #6297 most
of the code should be safe and remaining bugs can be fixed for upcoming
release.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-28 11:00:23 +02:00
Michal Čihař
a2e6c78fb7 Use https for outbound links where applicable 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-28 09:41:52 +02:00
Michal Čihař
6d8e1d7935 Merge branch 'QA_4_6' 2016-07-28 09:38:08 +02:00
Michal Čihař
298f19b3be Use https links in docs where available 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-28 09:30:29 +02:00
Michal Čihař
257e65ba9f Use https for outbound links where applicable 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-28 09:19:13 +02:00
Michal Čihař
4072c1d29a Use example.com for sample test urls 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-28 09:12:01 +02:00
Michal Čihař
10d0ffb871 Enable file sync on sftp 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-28 08:17:36 +02:00
Michal Čihař
e01d58ff4b Merge branch 'QA_4_6' 2016-07-28 08:15:10 +02:00
Michal Čihař
43a199bdca Use single quotes for filename 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-28 08:15:04 +02:00
Michal Čihař
5caabf2d1f Merge branch 'QA_4_6' 2016-07-27 17:26:41 +02:00
Michal Čihař
3c4226cb8c Add documentation for user groups 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-27 17:26:29 +02:00
Michal Čihař
301522ae43 Merge branch 'QA_4_6' 2016-07-27 17:09:52 +02:00
Michal Čihař
07d75e1b00 Clarify documentation on AllowUserDropDatabase 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-27 17:09:46 +02:00
Michal Čihař
9e3aa4e01f Merge branch 'QA_4_6' 2016-07-27 17:01:21 +02:00
Michal Čihař
dd55324a1f Merge remote-tracking branch 'origin/QA_4_6' 2016-07-27 17:01:17 +02:00
Michal Čihař
2f4fec52d6 Document setup of *Dirs 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-27 17:01:02 +02:00
Michal Čihař
35854dd69c Merge remote-tracking branch 'weblate-master/master' 2016-07-27 16:50:04 +02:00
Weblate
6cff8cada5 Merge remote-tracking branch 'origin/QA_4_6' into QA_4_6 2016-07-27 16:31:12 +02:00
jorge jansen abreu
23b6499dc8 Translated using Weblate (Spanish) 
Currently translated at 99.7% (3202 of 3209 strings)

[CI skip]
 2016-07-27 16:31:11 +02:00
jorge jansen abreu
a014c98453 Translated using Weblate (Spanish) 
Currently translated at 99.4% (3189 of 3208 strings)

[CI skip]
 2016-07-27 16:31:09 +02:00
Michal Čihař
d15490088c Merge branch 'QA_4_6' 2016-07-27 16:30:47 +02:00
Michal Čihař
af337d2054 Use https to access phpmyadmin.net 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-27 16:29:08 +02:00
Michal Čihař
870ca1cc7a Use https for wiki links 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-27 16:28:07 +02:00
Michal Čihař
a39b9909bb Change url to https 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-27 16:25:48 +02:00
Michal Čihař
94f4a5439c Remove confusing mentions about InnoDB plugin 
It is integrated in MySQL for years.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-27 16:22:12 +02:00
Michal Čihař
f727695dd3 Use new URL for phpsysinfo 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-27 16:21:00 +02:00
Michal Čihař
d1635a7f56 Use https link to apache docs 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-26 20:34:49 +02:00
Michal Čihař
e14c334d7a Merge branch 'QA_4_6' 2016-07-26 16:47:33 +02:00
Michal Čihař
16c4ca0daa Properly escape configuration parameters when rendering 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-26 16:47:01 +02:00
Michal Čihař
5f0eafe1b2 Merge branch 'QA_4_6' 2016-07-26 16:33:24 +02:00
Michal Čihař
5f0267979f Fix typos in changelog 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-26 16:33:20 +02:00
Michal Čihař
b9d823f4e8 Remove unused tests code 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-26 16:27:53 +02:00
Michal Čihař
22c4ede46d Merge branch 'QA_4_6' 2016-07-26 16:26:57 +02:00
Michal Čihař
64f033d3b9 Tighthen control on PHP sessions and session cookies 
- use only cookies for session
- use http only cookies
- disable transparent session IDs

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-26 16:23:51 +02:00
Michal Čihař
6c95b73f90 Do not append session IDs to all URLs in redirect 
There is no need to do that as we rely on session cookies anyway. Also
appending sesson ID to external URLs is not a good idea.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-26 16:20:04 +02:00
Michal Čihař
2f247ea461 Merge branch 'QA_4_6' 2016-07-26 16:07:01 +02:00
Michal Čihař
53af6a5699 Simplify session handling on possibly long requests 
We really do not have to reconfigure sessions on restarting them.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-26 16:04:56 +02:00
Michal Čihař
3618801dfc Add link to related PHP bug 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-26 14:05:09 +02:00
Michal Čihař
e825b1e401 Generate and upload SHA256 hashes as well 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-26 12:40:28 +02:00
Deven Bansod
68903ae7a7 Merge branch 'QA_4_6' 2016-07-26 01:05:17 +05:30
Deven Bansod
25182fb6c3 Fix #12391 : Message with 'Change password successfully' displayed, but does not take effect 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-07-26 00:25:08 +05:30
Deven Bansod
e3e51db544 Merge branch 'QA_4_6' 2016-07-23 15:46:21 +05:30
Deven Bansod
7d0ce4bb8b ChangeLog entry for #12394 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-07-23 15:42:08 +05:30
Deven Bansod
622a6f2389 Fix #12394 : Create view should require a view name 
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-07-23 15:07:54 +05:30
Michal Čihař
7de035439d Merge branch 'QA_4_6' 2016-07-22 16:42:58 +02:00
Michal Čihař
61150656df Fixed invalid Content-Length in some HTTP responses 
Use strlen for calculating HTTP response size, we're interested in bytes
not utf-8 chars.

Issue #12397

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-22 16:41:51 +02:00
Michal Čihař
76e87c3e33 Do not use mb_strlen on data we know are bytes 
Issue #12397

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-22 16:39:12 +02:00
Michal Čihař
cd111e481a Merge branch 'QA_4_6' 2016-07-22 15:47:50 +02:00
Michal Čihař
99903101d9 Enfornce numeric field length when creating table 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-22 15:47:38 +02:00
Michal Čihař
9bde04b188 Limit what upload script accepts as version 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-22 13:17:54 +02:00