William Desportes
fc014c5b72
Harden the HMAC secret by using the blowfish_secret
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-13 20:05:11 +02:00
William Desportes
80a7f0a75c
Make the hmac secret a secret for the user
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-13 19:05:04 +02:00
William Desportes
fb4a8d61b7
Add Unit test case for session renewal
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-13 07:43:48 +02:00
William Desportes
80d88d2f18
Add a key for hhvm
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-12 13:47:20 +02:00
William Desportes
c59790b05e
Remove typehints for hhvm
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-12 13:36:58 +02:00
William Desportes
b61d878ac4
Add unit tests
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-12 13:31:24 +02:00
William Desportes
4bf8bfcaa1
Fix broken foreign key links
...
Fixes : #15225 - Using Command+Click to open in new tab does not work (Firefox/Safari)
Fixes : #14270 - Middle-click on foreign key link broken
Fixes : #14363 - Broken relational links in tables
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-12 10:43:15 +02:00
William Desportes
ec74b34010
Fix "logout and try as another user link"
...
- I changed the link to not use ajax mode
Try the query 'GRANT PROXY ON 'root'@'localhost' TO 'root'@'localhost' WITH GRANT OPTION' to reproduce
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-09 17:15:16 +02:00
William Desportes
70b271a491
Add ChangeLog entry for #15315
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-09 17:00:26 +02:00
William Desportes
64dc20460e
Fix #15315 - Cannot edit or export TIMESTAMP column with default CURRENT_TIMESTAMP in MySQL >= 8.0.13
...
Fixes : #15315
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-09 16:43:45 +02:00
Maurício Meneghini Fauth
338cfb31cc
Add ChangeLog entry for #15313
...
Add support for Twig 2
[ci skip]
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2019-06-08 15:22:03 -03:00
Maurício Meneghini Fauth
665e385fac
Merge pull request #15313 from mauriciofauth/twig2-4.9
...
Add support for Twig 2
2019-06-08 15:20:42 -03:00
Maurício Meneghini Fauth
3f0ef0f288
Add support for Twig 2
...
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2019-06-08 14:40:27 -03:00
Maurício Meneghini Fauth
2fe5150548
Change version to 4.9.1-dev in package.json
...
Related to e7b73831e5
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2019-06-06 16:14:57 -03:00
Isaac Bennetch
3d0f481555
Finish fixing theme tests for 4.9
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-05 21:56:52 -04:00
Isaac Bennetch
5bece6b081
Fix theme tests for 4.9
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-05 21:46:19 -04:00
Maurício Meneghini Fauth
06ee362fbf
Change branch-alias to 4.9.x-dev in composer.json
...
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2019-06-04 15:49:10 -03:00
Isaac Bennetch
e7b73831e5
Prepare for version 4.9.1
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-04 12:21:25 -04:00
Isaac Bennetch
a5f19ea80d
Removing composer.lock
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-04 12:08:48 -04:00
Isaac Bennetch
c60a750764
Adding composer lock for 4.9.0.1
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-04 12:06:12 -04:00
Isaac Bennetch
004848d93f
Prepare version 4.9.0.1
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-04 12:05:18 -04:00
Isaac Bennetch
7cb6e69186
Merge remote-tracking branch 'security/security/designer/save-page' into QA_4_8
2019-06-04 12:03:17 -04:00
Isaac Bennetch
712e4a2d98
Prepare for 4.9.1-dev
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-04 11:34:38 -04:00
Isaac Bennetch
114bc0f0bf
Removing composer.lock
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-04 11:29:32 -04:00
Isaac Bennetch
4ab33481be
Adding composer lock for 4.9.0
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-04 11:27:19 -04:00
Isaac Bennetch
10a2b2e01f
Make themes compatible with 4.9
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-04 11:19:49 -04:00
Isaac Bennetch
519c32bc08
Prepare for release 4.9.0
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-04 10:45:01 -04:00
Isaac Bennetch
5fba017127
ChangeLog for security issues
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-04 10:43:07 -04:00
Isaac Bennetch
8108eb7ded
Merge remote-tracking branch 'security/QA_4_8-security' into QA_4_8
2019-06-04 10:41:26 -04:00
Isaac Bennetch
4b5e04d0a1
Merge pull request #277 from phpmyadmin/security/issue-276
...
Fix CSRF Vulnerability in login form
2019-06-04 10:31:16 -04:00
Isaac Bennetch
034538e0c6
Update FAQ 4.8 to reflect removing pma_username and pma_password due to the security flaw reported in PMASA-2019-4
...
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2019-06-03 21:43:21 -04:00
Maurício Meneghini Fauth
914212f617
Update sql-parser to version 4.3.2
...
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2019-06-03 20:16:04 -03:00
William Desportes
3a48b985f7
Add ChangeLog entry for #10846
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-03 21:03:09 +02:00
William Desportes
69e08d8503
Fix #10846 - TypeError: Cannot read property 'substring' of undefined
...
Fixes : #10846
Pull-request: #15284
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-06-03 21:00:31 +02:00
Maurício Meneghini Fauth
015c404038
Retrieve parameters from $_POST in AuthenticationCookie plugin
...
Retrieves pma_username and pma_password parameters from $_POST instead of $_REQUEST
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2019-06-01 15:50:33 -03:00
Maurício Meneghini Fauth
7923567d5b
Add ChangeLog entry for #15079
...
Responsive behaviour of instruction dialog box
[ci skip]
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2019-05-31 13:30:37 -03:00
Apoorv Khare
499f552794
Fixes #15079 Responsive behaviour of instruction dialog box ( #15089 )
...
Signed-off-by: Apoorv Khare <apoorvkhare007@gmail.com>
2019-05-31 13:24:22 -03:00
Eugene Kazakov
9edcc5e43a
Bug #10846 TypeError: Cannot read property 'substring' of undefined
...
Signed-off-by: Eugene Kazakov <ekazakov@plesk.com>
2019-05-31 18:21:30 +02:00
Maurício Meneghini Fauth
9a6f077975
Fix empty PMA_gotoWhitelist JavaScript array
...
Related to commit 738f527242
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2019-05-29 17:06:19 -03:00
William Desportes
d198598b93
Fix class name
...
Introduced-by: 9d586fc539
[ci skip]
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-05-28 00:00:56 +02:00
William Desportes
2d4c330b0f
Add ChangeLog entry for #15283
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-05-27 23:40:16 +02:00
William Desportes
6d59e25039
Use _POST instead of _REQUEST for changing collations in Operations
...
- Added a space after the table name
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-05-27 23:34:05 +02:00
William Desportes
fd7f2397d3
Fix #15283 - phpMyAdmin tries to change collation on Views when changing collation on all tables/fields
...
Fixes : #15283
# 1347 [Name of View] is not BASE TABLE
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-05-27 23:29:19 +02:00
William Desportes
9d586fc539
#15041 - Fix logo link for internal links
...
As documented here: 761a1f623b
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-05-27 21:42:45 +02:00
William Desportes
5d40d309cd
Use spaces instead of a tab for DCO
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-05-27 21:28:15 +02:00
William Desportes
761a1f623b
Fix #15041 - Update documentation for NavigationLogoLink
...
Pull-request: #15124
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-05-27 21:27:09 +02:00
Ravgeet Dhillon
3e1a6772c5
Update config.rst
...
I have done some changes based on the suggestion of members.
Fixes #15041
Signed-off-by: Ravgeet Dhillon <ravgeetdhillon@gmail.com>
2019-05-27 21:03:07 +02:00
William Desportes
e723e34e84
Add ChangeLog entry for #15287
...
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-05-27 20:43:26 +02:00
William Desportes
9393db41e7
Fix #15287 - Fix auto_increment field is too small
...
Fixes : #15287
Pull-request: #15294
Signed-off-by: William Desportes <williamdes@wdes.fr>
2019-05-27 20:42:20 +02:00
Ankush Patil
61a62f4e02
Fix phpmyadmin#15287 : Fix auto_increment field is too small
...
Signed-off-by: Ankush Patil <aspraz2658@gmail.com>
2019-05-28 00:01:31 +05:30