gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
83,437 Commits 12 Branches 481 Tags 2.4 GiB
e5f1555e1b
Commit Graph

2768 Commits

Author SHA1 Message Date
Michal Čihař
b2605ebba6 Fix hash validation 
- use copy of hash to avoid race condition
- stricter regex to match whole string

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-18 11:25:21 +02:00
Michal Čihař
c2f7a898dd Store copy of hash instead of working on live object 
This avoids possible race conditions when doing the checks.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-08-18 11:05:56 +02:00
Michal Čihař
533ffa4942 Add login and token validation to version_check 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-28 10:53:31 +02:00
Michal Čihař
b974b56781 Fixed rendering of chart of columns with HTML inside 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-22 13:10:37 +02:00
Michal Čihař
02971f754f Escape HTML when rendering AJAX error 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-20 10:06:42 +02:00
Michal Čihař
abfd97983a Escape attributes when showing images in javascript 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-20 10:03:40 +02:00
Michal Čihař
805225a28c Limit number of included scripts in get_scripts.js.php 
This avoids potential DOS, the limit is same as we use for generating
the URLs.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-15 18:04:43 +02:00
Michal Čihař
b8f1e0f325 Escape SQL query for inline editing 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-02-25 09:13:09 +01:00
Michal Čihař
2369daa7f5 Use full alphabet to generate random passwords 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-26 09:39:19 +01:00
Michal Čihař
6a96e67487 Use secure RNG if available 
Recent browsers come with better RNG, so let's use it for generating
password instead of Math.random if available.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-01-26 09:39:09 +01:00
Madhura Jayaratne
9730b16dd0 issue #11464 phpMyAdmin suggests upgrading to newer version not usable on that system 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2015-09-22 23:59:20 +10:00
Madhura Jayaratne
a150ea1df4 bug #4563 [security] XSS in monitor query analyzer 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-10-18 06:52:40 +05:30
Marc Delisle
ab0dba4533 bug #4530 [security] DOM based XSS that results to a CSRF that creates a ROOT account in certain conditions 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-09-12 08:22:14 -04:00
Madhura Jayaratne
03b92aa6e9 bug #4504 [security] Self-XSS in query charts 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-08-06 19:58:02 +05:30
Madhura Jayaratne
3668255202 bug #4503 [security] Self-XSSes in monitor 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-08-06 07:28:14 +05:30
Madhura Jayaratne
0433d463b6 bug #4502 [security] Self-XSS in enum value editor 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2014-08-06 07:20:52 +05:30
Madhura Jayaratne
285ed5b8d3 bug #4501 [security] XSS in table browse page 2014-08-06 07:16:17 +05:30
Marc Delisle
a92753bd65 bug #4492 [security] XSS in AJAX confirmation messages 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-07-17 17:06:00 -04:00
Spun Nakandala
cff55cd200 removed to fix bug 4141 2013-11-13 15:50:46 +05:30
Spun Nakandala
f5fc4e0ae8 removed to fix bug 4141 2013-11-12 01:20:43 +05:30
Atul Pratap Singh
c2f48525dc Fix bug#4059: Running delete query asks for confirmation but says it was already executed 2013-10-28 01:53:50 +05:30
Umair Khan
6982892ef9 #4144 "DROP DATABASE" displays wrong database name FIX 2013-10-27 13:30:46 +05:30
Atul Pratap Singh
06a1f782e1 Left in 8640de9 2013-10-14 16:02:22 +05:30
Atul Pratap Singh
8640de951c Adjust navigation only when there is database/table change, bug#4129 2013-10-14 15:28:54 +05:30
Madhura Jayaratne
3c89e2ca6b bug #3911 Filtering database names includes empty groupings 2013-10-09 18:58:40 +05:30
Marc Delisle
98aeddc71e bug #4108 Missing refresh by deleting databases 2013-10-05 17:44:51 -04:00
Madhura Jayaratne
58e196045e Merge branch 'QA_4_0' of github.com:phpmyadmin/phpmyadmin into QA_4_0 
Conflicts:
	ChangeLog
 2013-10-02 07:17:46 +05:30
Madhura Jayaratne
ae3eef1b9f bug #3992 Multi-row edit doesn't clear values when checking NULL 2013-10-02 07:11:27 +05:30
Atul Pratap Singh
72cf44f6d1 Remove unused parameter 2013-10-01 15:59:43 +05:30
Atul Pratap Singh
37eccc8e42 Fix bug 4105: More disappears in table Structure 2013-10-01 11:45:38 +05:30
Spun Nakandala
7eb7286393 Bug fix 4074 2013-09-26 14:35:46 -04:00
Marc Delisle
509970d9e8 bug #4002 Edit Index on big table does not show "Loading" or any message 2013-09-22 09:55:12 -04:00
Madhura Jayaratne
e69bcce043 bug #4041 Interaction between linkified fields and grid editing 2013-09-19 15:24:53 +05:30
Michal Čihař
da664c9947 End sentence with comma 2013-09-12 10:40:48 +02:00
Kasun Chathuranga
6693a9ebb3 Proceed only if the database is found 2013-09-05 07:24:50 +05:30
Kasun Chathuranga
9c8267a9a8 Properly open and select database when "Use <db>" command is issued 2013-08-31 12:42:45 +05:30
Kasun Chathuranga
6f29a89aec Make scrolling work for table/views as well 2013-08-31 07:18:31 +05:30
Kasun Chathuranga
b43f4c7fed Expand the navigation and highlight the current database or table/view 2013-08-30 12:30:05 +05:30
Atul Pratap Singh
f7e298bbf4 Remove multiple navigation reloads, fix autoexpand on use query 2013-08-27 17:34:45 +05:30
Atul Pratap Singh
278145ffd3 Hide throbber on navigation reload 2013-08-27 16:56:09 +05:30
Atul Pratap Singh
2f3f1bcccb Dynamically set tree_content's height too, bug#4069 2013-08-27 05:26:41 +05:30
J.M
7b5b660471 Add ResizeHandler.treeResize event handler, call it on window resize, and now and then 2013-08-26 22:14:57 +02:00
J.M
34633b26ed Trim trailing space in navigation.js 2013-08-26 22:13:58 +02:00
Atul Pratap Singh
e1740a0833 missing docs 2013-08-26 17:23:40 +05:30
Atul Pratap Singh
790d8fd764 fix some logic related to auto-expand/scroll 2013-08-26 17:12:57 +05:30
Atul Pratap Singh
cadb2cb803 Merge branch 'QA_4_0' of github.com:phpmyadmin/phpmyadmin into QA_4_0 2013-08-26 08:53:22 +05:30
Atul Pratap Singh
a865344279 fix autoscroll, to set to view the currently selected database 2013-08-26 08:51:52 +05:30
Atul Pratap Singh
28041ddb80 Hide throbber when not in use to free some area 2013-08-25 22:56:37 +05:30
Atul Pratap Singh
73c3cd906e Fast-filter box, recent-tables and page-selector should be visible while scrolling navigation, (it eliminates the need to scroll up to find datatbase/recent-table) 2013-08-25 22:55:43 +05:30
Atul Pratap Singh
f0b063400c fix autoexpand on use query 2013-08-25 18:45:11 +05:30