Commit Graph

152 Commits

Author SHA1 Message Date
Michal Čihař
d03954bf9c Enable LOAD DATA LOCAL INFILE only when needed
There is no need to have this feature allowed for normal SQL queries, it
can lead to leaking sensitive files from the web server. It's enough to
enable it only in LDI import plugin, where we control what queries are
executed.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-23 08:59:02 +02:00
J.M
529903e0dd Fix bug #3907 undefined variables, function parameter problems
Thanks Rasmus Lerdorf for analyzing!
2013-05-13 11:27:56 +02:00
Michal Čihař
57a97a7057 Use up to date links to bugs and feature requests 2013-02-04 11:52:47 +01:00
Michal Čihař
ed83a0874a Various coding style improvements 2012-09-18 16:57:22 +02:00
Michal Čihař
3628d0a593 Remove dead code 2012-09-18 16:50:40 +02:00
Michal Čihař
0a10ad15c3 Add some docblocks 2012-09-18 16:40:54 +02:00
Michal Čihař
c198b82a69 Various coding style improvements 2012-09-18 16:37:56 +02:00
Chanaka Indrajith
b81935e05c Use PMA_DBI_real_multi_query function, inside PMA_DBI_try_multi_query function 2012-07-23 21:34:54 +05:30
Chanaka Indrajith
9f1f8d6c75 Support for stored procedures with multiple queries 2012-07-22 16:22:49 +05:30
Chanaka Indrajith
d5acfed0e8 Multiple results support for SQL executions 2012-07-20 23:13:04 +05:30
Alex Marin
0565b0e12a oop: integrate authentication plugins 2012-06-22 11:43:54 +03:00
Michal Čihař
5370d0d6c3 Fix spacing of @package used together with @subpackage 2012-05-02 11:29:34 +02:00
Madhura Jayaratne
8efb862408 More coding style fixes 2012-04-25 22:06:29 +05:30
Madhura Jayaratne
2575cccf2d Coding style improvements (Last parameter comment requires a blank newline after it) 2012-04-25 22:04:14 +05:30
Michal Čihař
0e3589619f Improve docs 2012-04-24 13:25:16 +02:00
Jo Michael
62d46b63be Merge remote-tracking branch 'remotes/origin/QA_3_5' 2012-03-29 20:30:04 +02:00
Jo Michael
05112a541c mysqli persistent connections only for PHP 5.3+ 2012-03-29 20:19:22 +02:00
Dieter Adriaenssens
43b41a8cbb cleanup package tags 2012-03-14 15:37:36 +01:00
Michal Čihař
e56949f160 Use package name PhpMyAdmin
Needed to match phpdoc rules as package name must begin with upper case.
2011-10-25 10:13:17 +02:00
Michal Čihař
6d1bd82939 Factor out error message formatting 2011-10-24 17:42:07 +02:00
Michal Čihař
97f89e63c4 Coding style improvements 2011-10-24 17:34:52 +02:00
Piotr Przybylski
e9158da818 Add MYSQLI_TYPE_VARCHAR to mysqli dbi (required for Drizzle) 2011-08-20 00:36:41 +02:00
Michal Čihař
1ec0b69e6b Coding style, function definitions 2011-08-05 14:49:23 +02:00
Piotr Przybylski
c326cfeec4 Comments 2011-07-28 13:32:38 +02:00
Piotr Przybylski
e82682d0e4 Simplify PMA_DBI_free_result
It was never used with multiple arguments
2011-07-27 19:59:49 +02:00
Piotr Przybylski
b9ff7b7ce2 Support persistent connections with mysqli extension (only PHP 5.3.0 and newer) 2011-07-27 19:59:49 +02:00
Piotr Przybylski
46cd0f9a09 Comments 2011-07-27 19:59:49 +02:00
Piotr Przybylski
b0ce7c20c4 Improve readability 2011-07-27 19:59:48 +02:00
Piotr Przybylski
69ac509584 This should be checked in common, not in dbi library 2011-07-27 19:59:48 +02:00
Michal Čihař
e57f27e50b Remove @uses tags from docblocks 2011-06-27 11:20:20 +02:00
Rouslan Placella
0189a62776 Merge branch 'master' into rte 2011-06-06 17:18:35 +01:00
Rouslan Placella
48532dfad0 Fixed "Commands out of sync" error when executing stored Routines. 2011-06-06 17:18:24 +01:00
Michal Čihař
4603ca7001 Factor out common code for PMA_DBI_try_query.
PMA_DBI_try_query is now shared for mysql and mysqli as the only
difference there was real call to the database, the rest was same
(timing, tracking, debugging,..).
2011-06-06 14:03:13 +02:00
Michal Čihař
3cf4830bbb Replace TRUE/FALSE with true/false.
At least this seems to be the coding standard, so make all files
compliant.
2011-06-06 11:55:09 +02:00
Piotr Przybylski
651b357f8a Whitespace cleanup 2011-02-15 17:38:08 +01:00
Marc Delisle
89552c74c4 Merge branch 'QA_3_3' 2011-01-12 08:05:40 -05:00
Marc Delisle
31cd4bdd6a bug #3155842 [core] Edit relational page and page number 2011-01-12 08:04:57 -05:00
Marc Delisle
45eb47fe14 Merge branch 'QA_3_3' 2011-01-08 13:45:40 -05:00
Marc Delisle
8244589813 Bug #3153409 [core] 0 row(s) affected 2011-01-08 13:44:28 -05:00
Marc Delisle
d1bebc67f6 fix merge conflicts 2010-10-03 09:42:40 -04:00
Marc Delisle
1623c7e065 Browsing a table containing geometry columns 2010-10-03 09:20:32 -04:00
Michal Čihař
d17fba309c Fix permissions.
Most files were made executable somewhere in ninadsp tree, reverting
this.
2010-08-30 09:53:37 +02:00
ninadsp
9c34a0eec9 Merged branch official/master. Resolved merge conflicts introduced due to merging of Piotr and Martynas's branches 2010-08-28 01:53:52 +05:30
Michal Čihař
5c63cbd231 Merge branch 'QA_3_3'
Conflicts:
	Documentation.html
	README
	libraries/Config.class.php
	translators.html
2010-08-23 17:10:04 +02:00
Michal Čihař
a24e418527 Avoid PHP error when false is passed to PMA_DBI_getError.
This can be caused by controllink set to false.
2010-08-23 17:02:15 +02:00
ninadsp
c9253c0a0e Merge conflict resolved for Lori's tree merge to main 2010-08-22 12:42:54 +05:30
Michal Čihař
862e3ca2a7 Merge branch 'QA_3_3'
Conflicts:
	libraries/core.lib.php
	server_databases.php
	server_privileges.php
2010-08-20 13:40:37 +02:00
Michal Čihař
41145feb12 Merge branch 'MAINT_3_3_5' into QA_3_3
Conflicts:
	ChangeLog
	libraries/common.lib.php
2010-08-20 13:36:49 +02:00
Michal Čihař
59b3b4916b Escape error message coming from MySQL to avoid XSS on bad parameters. 2010-08-20 11:35:42 +02:00
ninadsp
95a8521f11 Merge remote branch 'origin/master' 2010-08-10 00:55:22 +05:30