Michal Čihař
9a682e2054
Point to new setup script in all places, drop old one.
2008-08-29 18:07:50 +00:00
Marc Delisle
1bd7ec70e2
bug #2046883 [core] Notices about deprecated dl() (so stop using it)
2008-08-16 14:06:27 +00:00
Marc Delisle
524823353d
other version numbers to avoid displaying
2008-08-08 16:15:16 +00:00
Marc Delisle
8f5bc064cb
Swekey patch #4 by Luc Andre
2008-08-05 17:28:28 +00:00
Marc Delisle
2f81b47624
bug #2031221 [auth] Links to version number on login screen
2008-08-01 19:00:36 +00:00
Marc Delisle
6a707344eb
remove version info on cookie login screen
2008-07-15 14:14:09 +00:00
Marc Delisle
544831fda7
patch #2007196 , Typos in comments, thanks to knittl - knittl
2008-07-01 19:21:28 +00:00
Marc Delisle
afbb2a9dc2
protection against XSS when register_globals is on and .htaccess has no effect
2008-06-21 15:01:27 +00:00
Marc Delisle
fdff4d6b71
patch #1972915 version 3 + Luc modifs + Marc modifs (link in contrib/swekey.sample.conf
2008-06-17 17:20:53 +00:00
Marc Delisle
f5a76baa0c
[auth] support Feebee hardware authentication
2008-06-12 12:36:10 +00:00
Marc Delisle
3c01ca4b4e
typos
2008-04-05 12:35:24 +00:00
Marc Delisle
cb692f0267
patch #1930057 [auth] colon in password prevents HTTP login on CGI/IIS
2008-04-03 12:42:33 +00:00
Marc Delisle
2d1c29d3f8
bug #1813508 [login] Missing parameter: field after re-login
2007-12-18 18:13:24 +00:00
Sebastian Mendel
c7cf86e3cf
bug #1764182 [cookies] Suhosin cookie encryption breaks phpMyAdmin
2007-12-18 08:02:41 +00:00
Marc Delisle
e57fcde535
improve formatting of strAccessDeniedExplanation
2007-12-07 17:57:45 +00:00
Marc Delisle
d3a46e209c
patch #1821154 , HTTP authentication: fix auth working with php/mod_fastcgi
2007-11-01 20:59:48 +00:00
Marc Delisle
f1a266c778
fix multi-server login bug introduced in revision 10855; ensure that the new _form_params are really used by the called function; missing doc for PMA_generate_common_hidden_inputs()
2007-10-26 17:08:12 +00:00
Marc Delisle
6e39abf02a
patch #1817529 [auth] Incorrect login via URL when AllowArbitraryServer is true, thanks to Juergen Wind
2007-10-22 16:47:52 +00:00
Sebastian Mendel
62ee5d8491
cleanup
2007-10-18 12:10:22 +00:00
Sebastian Mendel
d138f1f856
cleanup
2007-10-18 09:03:01 +00:00
Sebastian Mendel
085a7c8f22
make use of PMA_Message
2007-10-17 12:14:19 +00:00
Sebastian Mendel
1c47906d0a
cleanup
...
display errors in place
2007-10-16 08:31:13 +00:00
Sebastian Mendel
5dd96d42ce
replaced $PMA_errors with new PMA_Error_Handler
2007-10-08 16:02:58 +00:00
Sebastian Mendel
4355a564d5
refactored tooltip handling (please test!)
2007-10-05 13:18:04 +00:00
Marc Delisle
235fc3679c
move mcrypt code in-line (avoid one require); also add a constant for better protection
2007-09-23 15:12:42 +00:00
Marc Delisle
733fd1d242
patch #1791576 HTTP auth: support REDIRECT_REMOTE_USER, thanks to Allard
2007-09-17 16:39:25 +00:00
Marc Delisle
5b6c3d7867
this comment is no longer true
2007-07-03 00:28:32 +00:00
Marc Delisle
93bbd8b148
use session_destroy() instead of session_cleanup.lib.php
2007-06-25 11:41:58 +00:00
Marc Delisle
244b62f61d
cleanup of user's choices stored in session
2007-06-23 22:18:15 +00:00
Marc Delisle
c5399453a8
patch #1712514 specify host for single signon, thanks to Thierry
2007-06-07 17:14:21 +00:00
Sebastian Mendel
573a6161bd
fixed code indention
2007-05-09 12:18:57 +00:00
Sebastian Mendel
cfeb306526
coding standard: no spaces inside braces
2007-04-01 11:02:46 +00:00
Sebastian Mendel
adb39168cc
coding standard: no braces around include
2007-04-01 09:51:41 +00:00
Sebastian Mendel
008734f8b0
do NEVER unset $table or $db;
...
no need to test for isset() on $db and $table;
always test with strlen() for valid $table or $db;
2007-03-30 09:12:05 +00:00
Marc Delisle
b949c7459a
bug #1676012 [auth] strip non-US-ASCII characters (RFC2616)
2007-03-21 13:16:31 +00:00
Sebastian Mendel
817e790762
synced/fixed vim line
2007-03-19 17:55:39 +00:00
Sebastian Mendel
3ab281b786
fixed display of timeout message
2007-03-19 13:06:23 +00:00
Marc Delisle
b61b210703
with the "set" command vim no longer complains
2007-03-16 17:12:25 +00:00
Sebastian Mendel
c29b8627f9
hopefully cookie login is now working again as expected ...
2007-03-16 16:55:45 +00:00
Marc Delisle
e190478d01
vim complains with a */ at the end of options
2007-03-16 16:38:42 +00:00
Sebastian Mendel
319947b3fb
fixed last fix of fix
2007-03-15 17:38:51 +00:00
Sebastian Mendel
82a014ca7a
fixed Notice: Undefined index (thanks to Marc Delisle)
2007-03-15 15:19:58 +00:00
Sebastian Mendel
d2b12f612c
bug #1666657 Cookie password delete on timeout / inactivity
2007-03-15 11:49:12 +00:00
Sebastian Mendel
3e9a417afa
bug #1668724 JavaScript focus login Opera
2007-03-15 10:16:15 +00:00
Marc Delisle
911316238b
bug 1658160, warning about mcrypt
2007-02-14 21:09:18 +00:00
Marc Delisle
42ac66ad74
get rid of propicon
2007-02-10 15:58:46 +00:00
Michal Čihař
6b128566f3
Make server switching honour more server settings (patch #1630104 ).
2007-01-18 11:11:15 +00:00
Michal Čihař
fb9a3a598e
Check before commit!
2006-11-17 08:49:30 +00:00
Michal Čihař
0e48825a46
Finalise SVN migration.
2006-10-12 16:27:13 +00:00
Michal Čihař
91c7b9a8d3
Sync token name.
2006-10-03 13:12:35 +00:00
Sebastian Mendel
1eadc0a41a
use @todo tag for todo items, to show up in generated documentation
2006-09-21 14:28:46 +00:00
Michal Čihař
1b77a0c4d9
Fix typo.
2006-08-25 07:46:52 +00:00
Michal Čihař
554b4a00e4
Add support for LogoutURL.
2006-08-24 12:39:16 +00:00
Michal Čihař
862bc35be7
Add single signon authentication method (patch #1545366 , patch #1541379 , patch #1531302 and RFE #1031391 ).
2006-08-24 12:38:29 +00:00
Marc Delisle
efad3a52d2
bug #1542875 Cookie auth on IIS
2006-08-21 11:59:24 +00:00
Marc Delisle
8642016a3a
bug #1536112 , config not loaded on MySQL error 2002 or 2003
2006-08-12 15:33:55 +00:00
Marc Delisle
37a5d112d9
bug #1477402 , if default server fails you cannot switch in config auth
2006-07-06 15:59:32 +00:00
Marc Delisle
1948d9b030
improvement suggested by Sebastian
2006-06-21 16:08:59 +00:00
Marc Delisle
4af5042b1a
bug #1504662 , server message for http auth_type
2006-06-21 12:33:08 +00:00
Marc Delisle
8c3380e1ba
unnecessary disc access
2006-06-09 20:58:16 +00:00
Marc Delisle
e32dceaa78
unnecessary disc access
2006-06-09 20:55:08 +00:00
Marc Delisle
110277793a
patch #1502453 , unnecessary disc access
2006-06-09 20:45:17 +00:00
Marc Delisle
6ed8175b45
only show the Cookies message if we detect that cookies are disabled
2006-06-02 12:39:53 +00:00
Michal Čihař
c542c2ee09
custom headers are not part of container
2006-05-15 13:58:50 +00:00
Michal Čihař
e7a09aad1a
Not so wide login form (RFE #1445541 ).
2006-05-15 13:38:11 +00:00
Michal Čihař
15eb10076c
Logout from all servers by default (RFE #1370874 ).
2006-04-27 08:40:22 +00:00
Michal Čihař
d91c1fff8e
Allow configuration of cookie storage on client (RFE #1095227 ).
2006-04-26 21:36:34 +00:00
Michal Čihař
d561a14419
Remove unused function.
2006-04-26 21:31:51 +00:00
Michal Čihař
d8e41fbaac
Do not include empty values.
2006-04-25 14:53:30 +00:00
Sebastian Mendel
44a0f36096
use PMA_getenv()
2006-04-11 14:33:17 +00:00
Sebastian Mendel
bb282af7a6
PHP_AUTH_* is only available in $_SERVER
2006-04-11 13:41:18 +00:00
Michal Čihař
2741f16ecb
Show possible error messages.
2006-03-16 22:13:52 +00:00
Sebastian Mendel
5bdcd33740
replaced $_SERVER with getenv()
2006-03-06 11:32:58 +00:00
Sebastian Mendel
0ae8842353
(not complete) PEAR coding standard
2006-01-17 17:03:02 +00:00
Sebastian Mendel
7358f5a712
allow 0 as name for database, table collumn, alias and index
2006-01-14 23:17:17 +00:00
Sebastian Mendel
5b9cab5a91
check magic_quotes only once in common.inc.php
2005-12-12 14:28:28 +00:00
Michal Čihař
cde0c1670f
Fix typos.
2005-12-09 12:15:38 +00:00
Michal Čihař
c10246cc1e
Improved and cleaned up http auth.
2005-12-09 11:11:44 +00:00
Michal Čihař
6eff6bfcdc
should be ==
2005-12-08 20:47:24 +00:00
Michal Čihař
bfdb94c249
Suggest to run setup script if auth with default values fails.
2005-12-08 18:56:40 +00:00
Marc Delisle
8fb1f3ce4c
bug #1374753 , Language change on login panel not propagated
2005-12-06 19:57:42 +00:00
Sebastian Mendel
a7b7f0bd11
- make use of new PMA_Theme and PMA_Theme_Manager classes
...
- remove libraries/select_theme.lib.php
2005-11-29 12:25:31 +00:00
Michal Čihař
319cabce52
Display PMA_errors on login form.
2005-11-28 13:54:45 +00:00
Michal Čihař
8fb8197346
Fix undefined indexes.
2005-11-27 21:54:53 +00:00
Sebastian Mendel
42feed2cca
use PMA_sendHeaderLocation() and new functionality of PMA_generate_common_url()
2005-11-25 10:25:27 +00:00
Michal Čihař
562c710eed
Do not create URLs like index.php?&.
2005-11-25 09:12:13 +00:00
Michal Čihař
9935bfd907
Ignore custom headers and temporary files from Vim.
2005-11-25 08:44:56 +00:00
Michal Čihař
ab9aef8977
Header and footer per themes (RFE #984152 ), config.{header,footer}.inc.php files are now optional.
2005-11-25 08:37:54 +00:00
Michal Čihař
6aeabf44d1
Move footer.inc.php, header.inc.php and header_printview.inc.php to libraries folder as it does not require direct access.
2005-11-24 09:12:17 +00:00
Michal Čihař
c82587ab32
Remember selected page when login time outs.
2005-11-23 20:31:47 +00:00
Michal Čihař
fef607cd64
Move error message on top of page.
2005-11-23 16:45:13 +00:00
Michal Čihař
8996ff60a1
Functionalised server selection and use it in cookie auth (RFE #1362727 ).
2005-11-23 15:03:57 +00:00
Sebastian Mendel
8fc4a4ce05
moved styles into css
2005-11-23 15:01:29 +00:00
Michal Čihař
d6391f6346
Use fieldsets on login form (RFE #1364546 ).
2005-11-23 14:43:55 +00:00
Michal Čihař
8ddefe075b
Use notice box for cookie information.
2005-11-23 14:29:12 +00:00
Michal Čihař
331fb423ef
Use fieldsets on login form (RFE #1364546 ).
2005-11-23 14:25:08 +00:00
Sebastian Mendel
0567bfe215
drop PMA_setFontSizes()
2005-11-23 14:17:53 +00:00
Michal Čihař
ccb2e11f67
Try to load mcrypt extension.
2005-11-23 12:14:39 +00:00
Michal Čihař
23167de8bf
Common code for language selection form.
2005-11-23 11:12:58 +00:00
Michal Čihař
bee36e92a8
Escape verbose server name (bug #1362671 ).
2005-11-21 12:03:12 +00:00
Sebastian Mendel
a51f2533ea
unified message boxes (error, warning, confirmation)
2005-10-26 17:32:19 +00:00
Michal Čihař
52bb3fd79b
Use common header.
2005-10-13 15:01:19 +00:00
Sebastian Mendel
96d1b5cc8b
XHTML 1.0 trans. compliance
2005-10-11 16:07:27 +00:00
Michal Čihař
b64dccc2ae
Removed unused code parts.
2005-10-08 14:59:56 +00:00
Michal Čihař
81d01ac2ce
Keep database and table selection over login, needed for RFE #1278312 .
2005-10-08 13:07:27 +00:00
Sebastian Mendel
87764fc859
introducing sessions
2005-09-27 16:26:18 +00:00
Michal Čihař
64bd56dfba
Support for browsing selected columns (RFE #1275909 ).
2005-09-26 19:03:11 +00:00
Marc Delisle
0191fc3c33
bug #1240880 , XSS on the cookie-based login panel
2005-07-21 11:55:25 +00:00
Michal Čihař
ff0fe8ebaf
Support FastGCI in http auth (patch #1192219 )
2005-07-10 18:03:19 +00:00
Michal Čihař
a9aedbe951
Unified cookie path handling, added / to end of path (bug #1155373 ).
2005-03-06 21:10:53 +00:00
Marc Delisle
38bd402072
bug 1149565, tooltip.js undefined var
2005-03-01 14:54:19 +00:00
Marc Delisle
296c925db6
but #1149373 , error when blowfish_secret is empty
2005-02-23 16:13:24 +00:00
Michal Čihař
f1f39b8ed1
added infou about UFPDF to documentation
2004-12-29 14:16:51 +00:00
Michal Čihař
aca8292833
Allow simple blocking of root login (RFE #1012971 ), show just Access denied in case we denied it.
2004-10-20 15:50:52 +00:00
Alexander M. Turek
6f96840173
use Traditional Chinese for Hong Kong users
2004-10-12 21:29:08 +00:00
Michal Čihař
a5d9f7d1d9
Remember database when using cookie login (bug #1027873 ).
2004-09-14 14:42:47 +00:00
Marc Delisle
783defa2a9
bug 939531 undefined offset in blowfish.php
2004-09-01 16:16:42 +00:00
Marc Delisle
fed720adcb
remove /images
2004-06-23 14:29:01 +00:00
Marc Delisle
bef979f32e
improved error messages
2004-06-16 23:44:47 +00:00
Marc Delisle
b1a600d1d4
forgot this one for redesign
2004-06-14 12:32:05 +00:00
Marc Delisle
041245c24d
bug 968089 mysqli fix
2004-06-10 17:17:58 +00:00
Marc Delisle
478fccda5e
bug 968089, catch when server is not responding
2004-06-10 14:11:45 +00:00
Michal Čihař
1aaa89fa54
Little code reorganistaion (RFE #957308 ), removed some remaining php3 compatibility code in SQL parser.
2004-05-20 16:14:13 +00:00
Michal Čihař
7ddc4f69bb
Show login form in top frame.
2004-05-19 12:57:17 +00:00
Michal Čihař
22b5117239
Use one cookie set for each server, not just one global (patch #952917 , bug #687009 ).
2004-05-14 10:05:15 +00:00
Marc Delisle
ac10dc4aff
about PMA_sendHeaderLocation
2004-05-11 14:38:02 +00:00
Michal Čihař
98d5498fe5
Do not double frames on login (bug #944870 ).
2004-04-30 09:53:58 +00:00
Michal Čihař
bc9ecc3962
Fix LoginCookieValidity behaviour.
2004-04-18 10:00:44 +00:00
Michal Čihař
519e32afbe
Fix possible undefined variable use.
2004-04-15 16:19:14 +00:00
Michal Čihař
cd65e1f844
Set correct variable to avoid attempting sending headers twice.
2004-03-22 16:29:34 +00:00
Michal Čihař
ab6f25e097
Support for site configurable header and footer (patch #893477 ).
2004-03-09 17:07:43 +00:00
Michal Čihař
36bb7a6acf
more secure cookie login
2004-02-27 13:56:34 +00:00
Alexander M. Turek
2915b5c3ce
Added MySQLi library; Removed calls to old mysql_wrappers library.
2004-01-22 02:13:48 +00:00
Alexander M. Turek
7eced930bc
database abstraction, part I
2004-01-17 01:47:36 +00:00
Alexander M. Turek
37d50c1822
Huge set of optimizations, please test!
2003-11-26 22:52:25 +00:00
Garvin Hicking
f0da471ec3
/libraries cleanup hopefully done. Double-Checked every change, my installation still works. ;)
...
Will continue working on remaining files tomorrow and hope to make it to the end of the next day.
2003-11-20 16:31:51 +00:00
Garvin Hicking
d3f84bca94
First batch of PHP4/MySQL compatibility/performance changes.
...
Everything should be non-intrusive for installations meeting our new 4.1.0/3.23.32 specs.
I will commit my files every now and then for easier code review and to let you see which constructs I replace. Jump in if there are any objections. The basic thing I'm doing is documented in the changelog.
I'll continue with files in the libraries/ subdirectory and will move to the root-level files in last instance.
2003-11-20 10:34:35 +00:00
Michal Čihař
6884f9701a
no more support for php3
2003-11-18 15:20:45 +00:00
Marc Delisle
a199e51025
clarification
2003-09-30 16:44:33 +00:00
Marc Delisle
9bd29efba4
Cookies required should not look like an error
2003-08-09 10:41:24 +00:00
Marc Delisle
9a6a496468
path disclosure
2003-07-19 22:47:29 +00:00
Michal Čihař
ca55aae520
one more fix for backslash in username
2003-07-09 10:06:16 +00:00
Michal Čihař
0522b2f466
fixes for backslash in password/username
2003-07-09 10:01:23 +00:00
Marc Delisle
7ad32db10f
one blowfish secret is enough
2003-07-07 11:12:24 +00:00
Marc Delisle
f9f6d75f65
AccessDeniedExplanation
2003-07-06 11:57:28 +00:00
Marc Delisle
f38887ff82
typo
2003-07-06 11:16:18 +00:00
Marc Delisle
d248de79f0
protect binary contents in cookies
2003-07-04 14:35:04 +00:00
Marc Delisle
68d346035a
PHP3 compatibility
2003-07-04 13:37:06 +00:00
Marc Delisle
384e5acf7c
blowfish encryption
2003-07-01 21:24:56 +00:00
Marc Delisle
d9ac381ce1
undefined scheme in cookie mode
2003-06-11 13:50:37 +00:00