Commit Graph

82683 Commits

Author SHA1 Message Date
Marc Delisle
f7065ee2a8 Delete .htaccess which does not work on all web servers 2013-07-17 15:25:17 -04:00
Marc Delisle
142e465c80 [security] Avoid full path disclosure from some libraries scripts, see PMASA-2013-12 2013-07-17 15:24:24 -04:00
Marc Delisle
7bfe445f99 Fix merge conflicts 2013-07-17 15:23:42 -04:00
Marc Delisle
7992beb8e4 Move protection statement at beginning of script 2013-07-17 15:18:52 -04:00
Marc Delisle
90d968b447 Fix merge conflicts 2013-07-17 15:18:09 -04:00
Marc Delisle
8e4fe7c57a [security] Avoid full path disclosure from libraries/common.inc.php, see PMASA-2013-12 2013-07-17 15:06:18 -04:00
Marc Delisle
45d3f4326c Fix merge conflicts 2013-07-17 15:05:23 -04:00
Marc Delisle
0fea53b7b8 [security] Avoid full path disclosure from some libraries script, see
PMASA-2013-12

Move the PHPMYADMIN constant definition earlier
2013-07-17 14:56:50 -04:00
J.M
e0d8568ac6 [security] Fix self-XSS in setup, trusted proxies validation, see PMASA-2013-9 2013-07-07 17:11:16 +02:00
J.M
d096a0fc46 [security] Fix stored XSS in navigation panel logo link, see PMASA-2013-9 2013-07-07 16:52:20 +02:00
J.M
2005c4b7c1 [security] Fix stored XSS in Server status monitor, see PMASA-2013-9 2013-07-07 15:55:18 +02:00
Dieter Adriaenssens
ff27a2c5e0 add total as parameter to message 2013-07-07 15:32:17 +02:00
Dieter Adriaenssens
56e9ede522 fix unescaped parameter, see PMASA-2013-8 for details 2013-07-07 15:15:57 +02:00
Marc Delisle
e0c1ed02a1 4.0.4.1 release 2013-06-30 06:58:32 -04:00
Marc Delisle
43b75a7a4f 4.0.4.1 release date 2013-06-30 06:36:09 -04:00
Marc Delisle
0124642684 [security] Global variables scope injection vulnerability (see PMASA-2013-7) 2013-06-28 13:09:13 -04:00
Marc Delisle
64c2b9a59c 4.0.4 release 2013-06-17 12:25:41 -04:00
Marc Delisle
5778f641b3 4.0.4-rc1 2013-06-13 13:40:16 -04:00
Atul Pratap Singh
80dec52d98 Fix bug#3922, user privileges, in QA_4_0 2013-06-12 18:10:38 +05:30
Weblate
99222656ee Merge remote-tracking branch 'origin/QA_4_0' into QA_4_0 2013-06-12 12:42:32 +02:00
Peter Rosa
a0d0ab9ecb Translated using Weblate (Slovak)
Currently translated at 83.7% (2180 of 2603)
2013-06-12 12:42:28 +02:00
Michal Čihař
385b04c86f Translated using Weblate (Indonesian)
Currently translated at 74.8% (1947 of 2603)
2013-06-12 12:42:24 +02:00
Marc Delisle
f5d631dbf6 bug #3976 Number of pages 2013-06-12 06:40:20 -04:00
Weblate
a0e86e92f1 Merge remote-tracking branch 'origin/QA_4_0' into QA_4_0 2013-06-11 14:58:24 +02:00
Peter Rosa
7d4a8fa3d2 Translated using Weblate (Slovak)
Currently translated at 78.3% (2038 of 2603)
2013-06-11 14:58:21 +02:00
Madhura Jayaratne
31f7230fa7 Translated using Weblate (Sinhala)
Currently translated at 81.7% (2127 of 2603)
2013-06-11 14:58:19 +02:00
Michal Čihař
85e5a3b5ce bug #3645 Better handling of invalid ODS documents 2013-06-11 14:58:02 +02:00
Weblate
b369f6a912 Merge remote-tracking branch 'origin/QA_4_0' into QA_4_0 2013-06-11 13:31:53 +02:00
Peter Rosa
29519cb165 Translated using Weblate (Slovak)
Currently translated at 76.1% (1981 of 2603)
2013-06-11 13:31:50 +02:00
Michal Čihař
f414eb577b bug #3631 Drop not working Visio schema export. 2013-06-11 13:31:33 +02:00
Michal Čihař
68dfc347f9 Fixed formatting of documentation URL (can contain %, so it can not be used as format string) 2013-06-11 13:23:43 +02:00
Weblate
207f04a1d7 Merge remote-tracking branch 'origin/QA_4_0' into QA_4_0 2013-06-11 08:58:58 +02:00
Dadan Setia
a019f7e7b7 Translated using Weblate (Indonesian)
Currently translated at 74.8% (1947 of 2603)
2013-06-11 08:58:55 +02:00
Michal Čihař
d34f8d5182 Disable response wrapper in fatal error path
There might be some critical pieces (eg. json, pcre or session) missing
and there is no way to make Response class working at this point.

Fixes #3981
2013-06-11 08:57:49 +02:00
Marc Delisle
be6d6733d9 ChangeLog entry for pull request 409 2013-06-10 13:00:13 -04:00
Kari Söderholm
0a13fa1938 Fix missing post params in export.php for removeCRLF option in ExportCsv
and ExportExcel plugins.

This is needed after commit a564d981e9
2013-06-10 12:58:39 -04:00
Kari Söderholm
0181fa9400 Fix regression: Missing removeCRLF option in ExportCsv and ExportExcel plugins. 2013-06-10 12:57:27 -04:00
Weblate
9b414c0025 Merge remote-tracking branch 'origin/QA_4_0' into QA_4_0 2013-06-10 14:02:19 +02:00
Dadan Setia
3215d68c24 Translated using Weblate (Indonesian)
Currently translated at 74.8% (1946 of 2603)
2013-06-10 14:02:16 +02:00
Marc Delisle
063a2d9937 bug #3964 Import using https does not work 2013-06-10 08:02:00 -04:00
J.M
1ac9560aa7 Update session upload progress bug comment in import_status.php 2013-06-09 16:46:01 +02:00
Weblate
a2593c0c93 Merge remote-tracking branch 'origin/QA_4_0' into QA_4_0 2013-06-09 13:43:08 +02:00
Ghanshyam Bagul
8f61a48478 Translated using Weblate (Hindi)
Currently translated at 57.0% (1483 of 2603)
2013-06-09 13:43:05 +02:00
Rouslan Placella
b5089cf908 bug #3971 Ctrl/shift + click opens links in same window 2013-06-09 07:42:21 -04:00
Rodrigo Souza
70a3d4ac47 Translated using Weblate (Portuguese (Brazil))
Currently translated at 100.0% (2603 of 2603)
2013-06-09 06:04:43 +02:00
Weblate
c061790525 Merge remote-tracking branch 'origin/QA_4_0' into QA_4_0 2013-06-08 19:28:03 +02:00
Yungu Kim
b7844a1504 Translated using Weblate (Korean)
Currently translated at 69.0% (1797 of 2603)
2013-06-08 19:28:00 +02:00
Marc Delisle
30e0e3648d bug #3921 Call to undefined function PMA_isSuperuser() if default server is not set 2013-06-08 13:27:29 -04:00
Weblate
f94103628d Merge remote-tracking branch 'origin/QA_4_0' into QA_4_0 2013-06-08 14:41:47 +02:00
Yungu Kim
168fa47420 Translated using Weblate (Korean)
Currently translated at 69.0% (1795 of 2603)
2013-06-08 14:41:44 +02:00