Commit Graph

291 Commits

Author SHA1 Message Date
Michal Čihař
9a682e2054 Point to new setup script in all places, drop old one. 2008-08-29 18:07:50 +00:00
Marc Delisle
1bd7ec70e2 bug #2046883 [core] Notices about deprecated dl() (so stop using it) 2008-08-16 14:06:27 +00:00
Marc Delisle
524823353d other version numbers to avoid displaying 2008-08-08 16:15:16 +00:00
Marc Delisle
8f5bc064cb Swekey patch #4 by Luc Andre 2008-08-05 17:28:28 +00:00
Marc Delisle
2f81b47624 bug #2031221 [auth] Links to version number on login screen 2008-08-01 19:00:36 +00:00
Marc Delisle
6a707344eb remove version info on cookie login screen 2008-07-15 14:14:09 +00:00
Marc Delisle
544831fda7 patch #2007196, Typos in comments, thanks to knittl - knittl 2008-07-01 19:21:28 +00:00
Marc Delisle
afbb2a9dc2 protection against XSS when register_globals is on and .htaccess has no effect 2008-06-21 15:01:27 +00:00
Marc Delisle
fdff4d6b71 patch #1972915 version 3 + Luc modifs + Marc modifs (link in contrib/swekey.sample.conf 2008-06-17 17:20:53 +00:00
Marc Delisle
f5a76baa0c [auth] support Feebee hardware authentication 2008-06-12 12:36:10 +00:00
Marc Delisle
3c01ca4b4e typos 2008-04-05 12:35:24 +00:00
Marc Delisle
cb692f0267 patch #1930057 [auth] colon in password prevents HTTP login on CGI/IIS 2008-04-03 12:42:33 +00:00
Marc Delisle
2d1c29d3f8 bug #1813508 [login] Missing parameter: field after re-login 2007-12-18 18:13:24 +00:00
Sebastian Mendel
c7cf86e3cf bug #1764182 [cookies] Suhosin cookie encryption breaks phpMyAdmin 2007-12-18 08:02:41 +00:00
Marc Delisle
e57fcde535 improve formatting of strAccessDeniedExplanation 2007-12-07 17:57:45 +00:00
Marc Delisle
d3a46e209c patch #1821154, HTTP authentication: fix auth working with php/mod_fastcgi 2007-11-01 20:59:48 +00:00
Marc Delisle
f1a266c778 fix multi-server login bug introduced in revision 10855; ensure that the new _form_params are really used by the called function; missing doc for PMA_generate_common_hidden_inputs() 2007-10-26 17:08:12 +00:00
Marc Delisle
6e39abf02a patch #1817529 [auth] Incorrect login via URL when AllowArbitraryServer is true, thanks to Juergen Wind 2007-10-22 16:47:52 +00:00
Sebastian Mendel
62ee5d8491 cleanup 2007-10-18 12:10:22 +00:00
Sebastian Mendel
d138f1f856 cleanup 2007-10-18 09:03:01 +00:00
Sebastian Mendel
085a7c8f22 make use of PMA_Message 2007-10-17 12:14:19 +00:00
Sebastian Mendel
1c47906d0a cleanup
display errors in place
2007-10-16 08:31:13 +00:00
Sebastian Mendel
5dd96d42ce replaced $PMA_errors with new PMA_Error_Handler 2007-10-08 16:02:58 +00:00
Sebastian Mendel
4355a564d5 refactored tooltip handling (please test!) 2007-10-05 13:18:04 +00:00
Marc Delisle
235fc3679c move mcrypt code in-line (avoid one require); also add a constant for better protection 2007-09-23 15:12:42 +00:00
Marc Delisle
733fd1d242 patch #1791576 HTTP auth: support REDIRECT_REMOTE_USER, thanks to Allard 2007-09-17 16:39:25 +00:00
Marc Delisle
5b6c3d7867 this comment is no longer true 2007-07-03 00:28:32 +00:00
Marc Delisle
93bbd8b148 use session_destroy() instead of session_cleanup.lib.php 2007-06-25 11:41:58 +00:00
Marc Delisle
244b62f61d cleanup of user's choices stored in session 2007-06-23 22:18:15 +00:00
Marc Delisle
c5399453a8 patch #1712514 specify host for single signon, thanks to Thierry 2007-06-07 17:14:21 +00:00
Sebastian Mendel
573a6161bd fixed code indention 2007-05-09 12:18:57 +00:00
Sebastian Mendel
cfeb306526 coding standard: no spaces inside braces 2007-04-01 11:02:46 +00:00
Sebastian Mendel
adb39168cc coding standard: no braces around include 2007-04-01 09:51:41 +00:00
Sebastian Mendel
008734f8b0 do NEVER unset $table or $db;
no need to test for isset() on $db and $table;
always test with strlen() for valid $table or $db;
2007-03-30 09:12:05 +00:00
Marc Delisle
b949c7459a bug #1676012 [auth] strip non-US-ASCII characters (RFC2616) 2007-03-21 13:16:31 +00:00
Sebastian Mendel
817e790762 synced/fixed vim line 2007-03-19 17:55:39 +00:00
Sebastian Mendel
3ab281b786 fixed display of timeout message 2007-03-19 13:06:23 +00:00
Marc Delisle
b61b210703 with the "set" command vim no longer complains 2007-03-16 17:12:25 +00:00
Sebastian Mendel
c29b8627f9 hopefully cookie login is now working again as expected ... 2007-03-16 16:55:45 +00:00
Marc Delisle
e190478d01 vim complains with a */ at the end of options 2007-03-16 16:38:42 +00:00
Sebastian Mendel
319947b3fb fixed last fix of fix 2007-03-15 17:38:51 +00:00
Sebastian Mendel
82a014ca7a fixed Notice: Undefined index (thanks to Marc Delisle) 2007-03-15 15:19:58 +00:00
Sebastian Mendel
d2b12f612c bug #1666657 Cookie password delete on timeout / inactivity 2007-03-15 11:49:12 +00:00
Sebastian Mendel
3e9a417afa bug #1668724 JavaScript focus login Opera 2007-03-15 10:16:15 +00:00
Marc Delisle
911316238b bug 1658160, warning about mcrypt 2007-02-14 21:09:18 +00:00
Marc Delisle
42ac66ad74 get rid of propicon 2007-02-10 15:58:46 +00:00
Michal Čihař
6b128566f3 Make server switching honour more server settings (patch #1630104). 2007-01-18 11:11:15 +00:00
Michal Čihař
fb9a3a598e Check before commit! 2006-11-17 08:49:30 +00:00
Michal Čihař
0e48825a46 Finalise SVN migration. 2006-10-12 16:27:13 +00:00
Michal Čihař
91c7b9a8d3 Sync token name. 2006-10-03 13:12:35 +00:00
Sebastian Mendel
1eadc0a41a use @todo tag for todo items, to show up in generated documentation 2006-09-21 14:28:46 +00:00
Michal Čihař
1b77a0c4d9 Fix typo. 2006-08-25 07:46:52 +00:00
Michal Čihař
554b4a00e4 Add support for LogoutURL. 2006-08-24 12:39:16 +00:00
Michal Čihař
862bc35be7 Add single signon authentication method (patch #1545366, patch #1541379, patch #1531302 and RFE #1031391). 2006-08-24 12:38:29 +00:00
Marc Delisle
efad3a52d2 bug #1542875 Cookie auth on IIS 2006-08-21 11:59:24 +00:00
Marc Delisle
8642016a3a bug #1536112, config not loaded on MySQL error 2002 or 2003 2006-08-12 15:33:55 +00:00
Marc Delisle
37a5d112d9 bug #1477402, if default server fails you cannot switch in config auth 2006-07-06 15:59:32 +00:00
Marc Delisle
1948d9b030 improvement suggested by Sebastian 2006-06-21 16:08:59 +00:00
Marc Delisle
4af5042b1a bug #1504662, server message for http auth_type 2006-06-21 12:33:08 +00:00
Marc Delisle
8c3380e1ba unnecessary disc access 2006-06-09 20:58:16 +00:00
Marc Delisle
e32dceaa78 unnecessary disc access 2006-06-09 20:55:08 +00:00
Marc Delisle
110277793a patch #1502453, unnecessary disc access 2006-06-09 20:45:17 +00:00
Marc Delisle
6ed8175b45 only show the Cookies message if we detect that cookies are disabled 2006-06-02 12:39:53 +00:00
Michal Čihař
c542c2ee09 custom headers are not part of container 2006-05-15 13:58:50 +00:00
Michal Čihař
e7a09aad1a Not so wide login form (RFE #1445541). 2006-05-15 13:38:11 +00:00
Michal Čihař
15eb10076c Logout from all servers by default (RFE #1370874). 2006-04-27 08:40:22 +00:00
Michal Čihař
d91c1fff8e Allow configuration of cookie storage on client (RFE #1095227). 2006-04-26 21:36:34 +00:00
Michal Čihař
d561a14419 Remove unused function. 2006-04-26 21:31:51 +00:00
Michal Čihař
d8e41fbaac Do not include empty values. 2006-04-25 14:53:30 +00:00
Sebastian Mendel
44a0f36096 use PMA_getenv() 2006-04-11 14:33:17 +00:00
Sebastian Mendel
bb282af7a6 PHP_AUTH_* is only available in $_SERVER 2006-04-11 13:41:18 +00:00
Michal Čihař
2741f16ecb Show possible error messages. 2006-03-16 22:13:52 +00:00
Sebastian Mendel
5bdcd33740 replaced $_SERVER with getenv() 2006-03-06 11:32:58 +00:00
Sebastian Mendel
0ae8842353 (not complete) PEAR coding standard 2006-01-17 17:03:02 +00:00
Sebastian Mendel
7358f5a712 allow 0 as name for database, table collumn, alias and index 2006-01-14 23:17:17 +00:00
Sebastian Mendel
5b9cab5a91 check magic_quotes only once in common.inc.php 2005-12-12 14:28:28 +00:00
Michal Čihař
cde0c1670f Fix typos. 2005-12-09 12:15:38 +00:00
Michal Čihař
c10246cc1e Improved and cleaned up http auth. 2005-12-09 11:11:44 +00:00
Michal Čihař
6eff6bfcdc should be == 2005-12-08 20:47:24 +00:00
Michal Čihař
bfdb94c249 Suggest to run setup script if auth with default values fails. 2005-12-08 18:56:40 +00:00
Marc Delisle
8fb1f3ce4c bug #1374753, Language change on login panel not propagated 2005-12-06 19:57:42 +00:00
Sebastian Mendel
a7b7f0bd11 - make use of new PMA_Theme and PMA_Theme_Manager classes
- remove libraries/select_theme.lib.php
2005-11-29 12:25:31 +00:00
Michal Čihař
319cabce52 Display PMA_errors on login form. 2005-11-28 13:54:45 +00:00
Michal Čihař
8fb8197346 Fix undefined indexes. 2005-11-27 21:54:53 +00:00
Sebastian Mendel
42feed2cca use PMA_sendHeaderLocation() and new functionality of PMA_generate_common_url() 2005-11-25 10:25:27 +00:00
Michal Čihař
562c710eed Do not create URLs like index.php?&. 2005-11-25 09:12:13 +00:00
Michal Čihař
9935bfd907 Ignore custom headers and temporary files from Vim. 2005-11-25 08:44:56 +00:00
Michal Čihař
ab9aef8977 Header and footer per themes (RFE #984152), config.{header,footer}.inc.php files are now optional. 2005-11-25 08:37:54 +00:00
Michal Čihař
6aeabf44d1 Move footer.inc.php, header.inc.php and header_printview.inc.php to libraries folder as it does not require direct access. 2005-11-24 09:12:17 +00:00
Michal Čihař
c82587ab32 Remember selected page when login time outs. 2005-11-23 20:31:47 +00:00
Michal Čihař
fef607cd64 Move error message on top of page. 2005-11-23 16:45:13 +00:00
Michal Čihař
8996ff60a1 Functionalised server selection and use it in cookie auth (RFE #1362727). 2005-11-23 15:03:57 +00:00
Sebastian Mendel
8fc4a4ce05 moved styles into css 2005-11-23 15:01:29 +00:00
Michal Čihař
d6391f6346 Use fieldsets on login form (RFE #1364546). 2005-11-23 14:43:55 +00:00
Michal Čihař
8ddefe075b Use notice box for cookie information. 2005-11-23 14:29:12 +00:00
Michal Čihař
331fb423ef Use fieldsets on login form (RFE #1364546). 2005-11-23 14:25:08 +00:00
Sebastian Mendel
0567bfe215 drop PMA_setFontSizes() 2005-11-23 14:17:53 +00:00
Michal Čihař
ccb2e11f67 Try to load mcrypt extension. 2005-11-23 12:14:39 +00:00
Michal Čihař
23167de8bf Common code for language selection form. 2005-11-23 11:12:58 +00:00
Michal Čihař
bee36e92a8 Escape verbose server name (bug #1362671). 2005-11-21 12:03:12 +00:00
Sebastian Mendel
a51f2533ea unified message boxes (error, warning, confirmation) 2005-10-26 17:32:19 +00:00
Michal Čihař
52bb3fd79b Use common header. 2005-10-13 15:01:19 +00:00
Sebastian Mendel
96d1b5cc8b XHTML 1.0 trans. compliance 2005-10-11 16:07:27 +00:00
Michal Čihař
b64dccc2ae Removed unused code parts. 2005-10-08 14:59:56 +00:00
Michal Čihař
81d01ac2ce Keep database and table selection over login, needed for RFE #1278312. 2005-10-08 13:07:27 +00:00
Sebastian Mendel
87764fc859 introducing sessions 2005-09-27 16:26:18 +00:00
Michal Čihař
64bd56dfba Support for browsing selected columns (RFE #1275909). 2005-09-26 19:03:11 +00:00
Marc Delisle
0191fc3c33 bug #1240880, XSS on the cookie-based login panel 2005-07-21 11:55:25 +00:00
Michal Čihař
ff0fe8ebaf Support FastGCI in http auth (patch #1192219) 2005-07-10 18:03:19 +00:00
Michal Čihař
a9aedbe951 Unified cookie path handling, added / to end of path (bug #1155373). 2005-03-06 21:10:53 +00:00
Marc Delisle
38bd402072 bug 1149565, tooltip.js undefined var 2005-03-01 14:54:19 +00:00
Marc Delisle
296c925db6 but #1149373, error when blowfish_secret is empty 2005-02-23 16:13:24 +00:00
Michal Čihař
f1f39b8ed1 added infou about UFPDF to documentation 2004-12-29 14:16:51 +00:00
Michal Čihař
aca8292833 Allow simple blocking of root login (RFE #1012971), show just Access denied in case we denied it. 2004-10-20 15:50:52 +00:00
Alexander M. Turek
6f96840173 use Traditional Chinese for Hong Kong users 2004-10-12 21:29:08 +00:00
Michal Čihař
a5d9f7d1d9 Remember database when using cookie login (bug #1027873). 2004-09-14 14:42:47 +00:00
Marc Delisle
783defa2a9 bug 939531 undefined offset in blowfish.php 2004-09-01 16:16:42 +00:00
Marc Delisle
fed720adcb remove /images 2004-06-23 14:29:01 +00:00
Marc Delisle
bef979f32e improved error messages 2004-06-16 23:44:47 +00:00
Marc Delisle
b1a600d1d4 forgot this one for redesign 2004-06-14 12:32:05 +00:00
Marc Delisle
041245c24d bug 968089 mysqli fix 2004-06-10 17:17:58 +00:00
Marc Delisle
478fccda5e bug 968089, catch when server is not responding 2004-06-10 14:11:45 +00:00
Michal Čihař
1aaa89fa54 Little code reorganistaion (RFE #957308), removed some remaining php3 compatibility code in SQL parser. 2004-05-20 16:14:13 +00:00
Michal Čihař
7ddc4f69bb Show login form in top frame. 2004-05-19 12:57:17 +00:00
Michal Čihař
22b5117239 Use one cookie set for each server, not just one global (patch #952917, bug #687009). 2004-05-14 10:05:15 +00:00
Marc Delisle
ac10dc4aff about PMA_sendHeaderLocation 2004-05-11 14:38:02 +00:00
Michal Čihař
98d5498fe5 Do not double frames on login (bug #944870). 2004-04-30 09:53:58 +00:00
Michal Čihař
bc9ecc3962 Fix LoginCookieValidity behaviour. 2004-04-18 10:00:44 +00:00
Michal Čihař
519e32afbe Fix possible undefined variable use. 2004-04-15 16:19:14 +00:00
Michal Čihař
cd65e1f844 Set correct variable to avoid attempting sending headers twice. 2004-03-22 16:29:34 +00:00
Michal Čihař
ab6f25e097 Support for site configurable header and footer (patch #893477). 2004-03-09 17:07:43 +00:00
Michal Čihař
36bb7a6acf more secure cookie login 2004-02-27 13:56:34 +00:00
Alexander M. Turek
2915b5c3ce Added MySQLi library; Removed calls to old mysql_wrappers library. 2004-01-22 02:13:48 +00:00
Alexander M. Turek
7eced930bc database abstraction, part I 2004-01-17 01:47:36 +00:00
Alexander M. Turek
37d50c1822 Huge set of optimizations, please test! 2003-11-26 22:52:25 +00:00
Garvin Hicking
f0da471ec3 /libraries cleanup hopefully done. Double-Checked every change, my installation still works. ;)
Will continue working on remaining files tomorrow and hope to make it to the end of the next day.
2003-11-20 16:31:51 +00:00
Garvin Hicking
d3f84bca94 First batch of PHP4/MySQL compatibility/performance changes.
Everything should be non-intrusive for installations meeting our new 4.1.0/3.23.32 specs.

I will commit my files every now and then for easier code review and to let you see which constructs I replace. Jump in if there are any objections. The basic thing I'm doing is documented in the changelog.

I'll continue with files in the libraries/ subdirectory and will move to the root-level files in last instance.
2003-11-20 10:34:35 +00:00
Michal Čihař
6884f9701a no more support for php3 2003-11-18 15:20:45 +00:00
Marc Delisle
a199e51025 clarification 2003-09-30 16:44:33 +00:00
Marc Delisle
9bd29efba4 Cookies required should not look like an error 2003-08-09 10:41:24 +00:00
Marc Delisle
9a6a496468 path disclosure 2003-07-19 22:47:29 +00:00
Michal Čihař
ca55aae520 one more fix for backslash in username 2003-07-09 10:06:16 +00:00
Michal Čihař
0522b2f466 fixes for backslash in password/username 2003-07-09 10:01:23 +00:00
Marc Delisle
7ad32db10f one blowfish secret is enough 2003-07-07 11:12:24 +00:00
Marc Delisle
f9f6d75f65 AccessDeniedExplanation 2003-07-06 11:57:28 +00:00
Marc Delisle
f38887ff82 typo 2003-07-06 11:16:18 +00:00
Marc Delisle
d248de79f0 protect binary contents in cookies 2003-07-04 14:35:04 +00:00
Marc Delisle
68d346035a PHP3 compatibility 2003-07-04 13:37:06 +00:00
Marc Delisle
384e5acf7c blowfish encryption 2003-07-01 21:24:56 +00:00
Marc Delisle
d9ac381ce1 undefined scheme in cookie mode 2003-06-11 13:50:37 +00:00