gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
105,821 Commits 12 Branches 481 Tags 2.4 GiB
df29d8ae41
Commit Graph

105821 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Deven Bansod
df29d8ae41 Add appr. escaping for $cfg options 'hide_db' and 'only_db' 
These can lead to SQL injection.

Fix #12497

Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
 2016-08-25 19:36:35 +05:30
Michal Čihař
26cc80324e Validate git commit hash before using 
Just to ensure we've parsed correct data.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-25 14:56:41 +02:00
Michal Čihař
9882dcba3a Fixed editing of ENUM/SET/DECIMAL fields structure 
Fixes #12480

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-25 14:33:21 +02:00
Michal Čihař
33348c5ed5 Allow to specify length of 0 
Issue #12480

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-25 14:32:48 +02:00
Michal Čihař
fb3b722da1 Fixed random logouts due to wrong cookie path 
Some script did not properly configure their relative path and this
could lead to wrong cookie path being set. This doesn't happen in all
cases as the PHP session engine doesn't seem to set the cookie session
in every request.

Fixes #12251
Fixes phpmyadmin/docker#32

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-25 09:38:17 +02:00
Renan Souza do Nascimento
54a0594493 Translated using Weblate (Portuguese) 
Currently translated at 53.7% (1724 of 3206 strings)

[CI skip]
 2016-08-25 09:38:10 +02:00
Michal Čihař
6879923acc Do not show warning about short blowfish_secret if none is set 
With empty blowfish_secret user would always get both warnings...

Fixes #12485

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-24 12:03:22 +02:00
Michal Čihař
cbd6137c03 Avoid double escaping of built in transformation URLs 
We do already escape them in the tranformation, so avoid doing that
before.

Issue #12483

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-24 11:48:48 +02:00
Michal Čihař
ed6188d2c8 Whitelist relative URLs from built in transformatons 
Fixes #12483

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-24 11:46:46 +02:00
Michal Čihař
38cf234707 Force relative paths in links 
This way we avoid potential problem if script name resolves to a domain.

Issue #12483

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-24 11:45:40 +02:00
Michal Čihař
48b6dd58d8 Use one code to check external links 
There is no good reason to duplicate the check in several places.

Fixes #12479

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-24 11:38:03 +02:00
Michal Čihař
265efb046f Extend PMA_checkLink to cover more use cases 
- allow to support mailto, ftp or http links on request
- do not use multibyte functions as we're interested in first chars
  anyway and we're comparing against ascii ones

Issue #12479

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-24 11:33:52 +02:00
Giovanni Sora
4a9b84faa2 Translated using Weblate (Interlingua) 
Currently translated at 73.5% (2357 of 3206 strings)

[CI skip]
 2016-08-24 11:19:48 +02:00
Lucius Gaitán
09597d9c5e Translated using Weblate (Portuguese (Brazil)) 
Currently translated at 93.1% (2987 of 3206 strings)

[CI skip]
 2016-08-24 06:45:39 +02:00
Satnam S Virdi
d4352a3097 Translated using Weblate (Punjabi) 
Currently translated at 3.1% (102 of 3206 strings)

[CI skip]
 2016-08-23 15:45:45 +02:00
Παναγιώτης Παπάζογλου
6ab7c1318f Translated using Weblate (Greek) 
Currently translated at 100.0% (3206 of 3206 strings)

[CI skip]
 2016-08-23 00:44:56 +02:00
Bohdan S
140d0e5a5b Translated using Weblate (Ukrainian) 
Currently translated at 80.3% (2575 of 3206 strings)

[CI skip]
 2016-08-21 15:46:18 +02:00
Domen
232bbd0461 Translated using Weblate (Slovenian) 
Currently translated at 100.0% (3206 of 3206 strings)

[CI skip]
 2016-08-21 06:46:02 +02:00
Michal Čihař
6faa1fe46a Add rel="noopener noreferrer" to all external target="_blank" links 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-18 17:35:20 +02:00
Michal Čihař
c44f5ab080 Always use UTC time in HTTP headers 
Using timezones in this context can cause problem when DST changes
apply.

Also this can be information leak of server timezone.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-18 17:07:00 +02:00
Domen
717adf40f3 Translated using Weblate (Slovenian) 
Currently translated at 100.0% (3206 of 3206 strings)

[CI skip]
 2016-08-17 23:05:28 +02:00
Weblate
df5099459d Merge remote-tracking branch 'origin/QA_4_6' into QA_4_6 2016-08-17 15:38:55 +02:00
Stefano Martinelli
9d3263c9f3 Translated using Weblate (Italian) 
Currently translated at 100.0% (3206 of 3206 strings)

[CI skip]
 2016-08-17 15:38:53 +02:00
dingo thirteen
a02f9c6ad0 Translated using Weblate (Dutch) 
Currently translated at 100.0% (3206 of 3206 strings)

[CI skip]
 2016-08-17 15:38:52 +02:00
Michal Čihař
7898060916 Ensure PmaAbsoluteUri ends with / 
This was probably most frequest user error we want to fix.

Issue #12374

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 15:37:20 +02:00
Michal Čihař
f6a64ed835 Reintroduced simplified PmaAbsoluteUri configuration directive 
Fixes #12374

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 15:35:15 +02:00
Michal Čihař
a458b70412 Use PmaAbsoluteUri for isHttps 
Issue #12374

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 15:35:15 +02:00
Michal Čihař
01b9db6b1c Rename getCookiePath() to getRootPath() 
It is not used only for cookies, so generic name makes more sense.

Issue #12374

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 15:35:15 +02:00
Michal Čihař
83476322ba Use PmaAbsolueUri for cookie path 
Issue #12374

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 15:35:15 +02:00
Michal Čihař
1099f68c1a Reintroduce PmaAbsoluteUri setting 
It has no affect yet.

Issue #12374

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 15:14:46 +02:00
Michal Čihař
b53fff29b2 Crossreference docs for PmaAbsoluteUri 
Issue #12374

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 14:44:21 +02:00
Michal Čihař
76a471a790 Avoid problems with PHP comparison 
- allow password where empty returns true
- compare using ===

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 13:18:45 +02:00
Michal Čihař
311be7515c Use https when available 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 13:17:41 +02:00
Kristjan Räts
41613c512d Translated using Weblate (Estonian) 
Currently translated at 100.0% (3206 of 3206 strings)

[CI skip]
 2016-08-17 12:25:59 +02:00
Burak Yavuz
5410e3859b Translated using Weblate (Turkish) 
Currently translated at 100.0% (3206 of 3206 strings)

[CI skip]
 2016-08-17 12:18:45 +02:00
Michal Čihař
1d3608b6a9 Merge branch 'QA_4_6' of github.com:phpmyadmin/phpmyadmin into QA_4_6 2016-08-17 11:38:57 +02:00
Michal Čihař
27936aa8bf Changelog entry for issue #12430 
Impove partitioning support

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 11:38:29 +02:00
Michal Čihař
ba59178a75 Merge pull request #12430 from rpv-tomsk/improve-partitions-support 
Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support.
 2016-08-17 11:37:44 +02:00
Michal Čihař
fa60ccfca0 Update po files 
[CI skip]

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 11:29:26 +02:00
Michal Čihař
03461d85c8 Merge pull request #12458 from rpv-tomsk/fix-ru-translation 
Translation improvements
 2016-08-17 11:23:46 +02:00
Michal Čihař
7412f90aaf Add changelog entries 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 11:21:38 +02:00
Michal Čihař
a53bc7c0e3 Merge pull request #12459 from rpv-tomsk/column-privileges 
When editing table records, display readonly inputs for fields without write access.
 2016-08-17 11:20:14 +02:00
Michal Čihař
cff9e555ae Merge pull request #12462 from devenbansod/fix_12384 
Reload Navigation if no previous entry stored
 2016-08-17 11:16:25 +02:00
Michal Čihař
27f4ff93ee Document how to set up credentials on Docker 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 10:40:13 +02:00
Michal Čihař
28bfcebcf1 Remove potentionally license problematic sRGB profile 
We really do not need it, so there is no reason to ship it.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-17 09:04:26 +02:00
Isaac Bennetch
b3d8ebad3f Prepare for 4.6.5 
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
 2016-08-16 21:35:34 -04:00
Weblate
0c3dac812c Merge remote-tracking branch 'origin/QA_4_6' into QA_4_6 2016-08-17 03:35:10 +02:00
Axel Rindle
bd403cdbd2 Translated using Weblate (German) 
Currently translated at 100.0% (3214 of 3214 strings)

[CI skip]
 2016-08-17 03:35:08 +02:00
Isaac Bennetch
b9a6a9993e Release 4.6.4 
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
 2016-08-16 16:38:46 -04:00
Isaac Bennetch
0f6b76b578 Merge remote-tracking branch 'security/QA_4_6-security' into QA_4_6 2016-08-16 16:34:37 -04:00