gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
ae8693db68
phpmyadmin/libraries
History
Michal Čihař ae8693db68 Backport cookie encryption from 4.6 branch 
- Use hash_hmac for MAC rather than plain SHA1
- Use different secret for MAC than encryption
- Merge pmaServer and pmaPass cookies
- Document 32 chars length for blowfish_secret

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-22 14:40:02 +02:00
..
bfShapeFiles
config Sanitize MySQL host name before connecting 2016-07-12 15:10:59 +02:00
dbi Define missing queries in the dummy driver 2016-01-28 14:33:37 +01:00
engines Add rel="noopener noreferrer" to all target="_blank" links 2016-07-12 10:59:38 +02:00
gis bug #4594 [security] Path traversal in file inclusion of GIS factory 2014-11-17 11:03:55 +05:30
navigation Recursive function too deep 2015-01-07 07:52:29 -05:00
php-gettext Update PHP-gettext to 1.0.11 2013-05-13 11:32:41 +02:00
phpseclib/Crypt Fix #11891 Error with PMA 4.0.10.13 with PHP 5.2 2016-01-28 22:08:02 +11:00
plugins Backport cookie encryption from 4.6 branch 2016-07-22 14:40:02 +02:00
properties Anonymous functions are incompatible with PHP 5.2 2013-01-26 06:44:36 -05:00
rte bug #4488 [security] XSS injection due to unescaped table name (triggers) 2014-07-17 16:29:40 -04:00
schema Ensure page number is integer 2016-07-12 16:49:15 +02:00
tcpdf Avoid skipping the SSL certificate check in TCPDF 2016-02-25 10:29:26 +01:00
.gitignore
Advisor.class.php Better injection of variables into eval'd code 2013-07-23 11:20:56 +02:00
advisory_rules.txt Fix rule definition (value and check were mixed) 2013-07-23 11:34:33 +02:00
bookmark.lib.php Fix merge conflicts 2013-07-17 15:05:23 -04:00
build_html_for_db.lib.php Properly escape translated string 2016-06-17 14:48:05 +02:00
charset_conversion.lib.php
check_user_privileges.lib.php Removed unnecessary empty lines in functions 2012-09-19 00:15:15 +05:30
cleanup.lib.php
common.inc.php Allow url.php to be used without valid token 2016-05-30 09:28:35 +02:00
Config.class.php Release 4.0.10.16 2016-06-23 00:01:11 -04:00
config.default.php Remove Swekey support 2016-07-11 08:57:21 +02:00
config.values.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
core.lib.php Backport cookie encryption from 4.6 branch 2016-07-22 14:40:02 +02:00
data_dictionary_relations.lib.php
database_interface.lib.php Fallback to default collation connection 2016-01-26 15:05:42 +01:00
db_common.inc.php Don't redirect when no db is selected during ajax requests 2012-10-30 20:16:58 +00:00
db_info.inc.php bug #3975 Table grouping isn't implemented properly 2013-09-19 23:13:47 +05:30
db_table_exists.lib.php Don't use PMA_sendHeaderLocation during ajax requests 2012-11-30 19:41:54 +00:00
DBQbe.class.php Fix bug #3907 undefined variables, function parameter problems 2013-05-13 11:27:56 +02:00
DbSearch.class.php Fix XSS in DB_search.php 2016-01-19 21:01:32 +11:00
display_change_password.lib.php improve coding style 2013-01-15 20:15:50 +01:00
display_create_database.lib.php Escape suggested database name 2016-07-12 16:40:36 +02:00
display_create_table.lib.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
display_export.lib.php Fix bug #3874 [export] No preselected option when exporting table 2013-04-14 14:46:00 +02:00
display_git_revision.lib.php Add rel="noopener noreferrer" to all target="_blank" links 2016-07-12 10:59:38 +02:00
display_import_ajax.lib.php bug #3964 Import using https does not work 2013-06-10 08:02:00 -04:00
display_import.lib.php Fix import status being called with HTML-escaped GET params in JS section 2013-04-27 21:27:32 +02:00
display_select_lang.lib.php wrap long line 2013-01-24 17:31:07 +01:00
DisplayResults.class.php Fix variable name 2013-09-17 11:25:15 +02:00
Error_Handler.class.php [security] Avoid full path disclosure from some libraries script, see 2013-07-17 14:56:50 -04:00
Error.class.php [security] Avoid full path disclosure from some libraries script, see 2013-07-17 14:56:50 -04:00
error.inc.php Disable response wrapper in fatal error path 2013-06-11 08:57:49 +02:00
file_listing.lib.php Do not allow symlinks in UploadDir 2016-07-12 12:47:35 +02:00
File.class.php Do not allow symlinks in UploadDir 2016-07-12 12:47:35 +02:00
Footer.class.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
gis_visualization.lib.php
Header.class.php Update referrer <meta> to match current standards 2016-06-20 10:46:51 +02:00
iconv_wrapper.lib.php
import.lib.php Use https for wiki links 2016-07-09 09:10:57 +02:00
Index.class.php Bug fix 3898-Structure/page not refreshed. Updating Table stats 2013-05-12 21:37:32 +05:30
index.lib.php moved the method PMA_getHtmlForDisplayIndexes to the index.lib.php file 2013-03-21 14:35:22 +02:00
information_schema_relations.lib.php Add missing relations 2013-09-14 12:30:04 +05:30
insert_edit.lib.php bug #4091 Insert ignore option does not work 2013-09-13 12:50:25 -04:00
ip_allow_deny.lib.php Fix syntax error in older PHP versions 2016-07-11 09:36:56 +02:00
js_escape.lib.php remove unused variables 2013-01-24 17:31:07 +01:00
kanji-encoding.lib.php
List_Database.class.php Fix merge conflicts 2013-07-17 15:05:23 -04:00
List.class.php
logging.lib.php Various docblocks improvements 2012-09-19 15:05:26 +02:00
Menu.class.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
Message.class.php Fixed coding style 2013-03-08 22:50:33 +05:30
mime.lib.php
mult_submits.inc.php bug #4598 [security] XSS in multi submit 2014-11-17 12:13:09 +05:30
mysql_charsets.lib.php Resolved conflicts 2012-09-19 00:46:28 +05:30
opendocument.lib.php Include missing number namespace from our ODS export 2013-07-01 13:24:00 +02:00
operations.lib.php bug #4007 Analyze option not shown for InnoDB tables 2013-07-10 08:29:09 -04:00
OutputBuffering.class.php Send standard set of HTTP headers on redirect 2016-07-22 12:22:53 +02:00
parse_analyze.lib.php improve docblock : add file description 2013-01-19 13:55:18 +01:00
Partition.class.php remove unused variables : key is not used 2013-01-24 17:31:06 +01:00
PDF.class.php fix compat with tcpdf >= 6.0 (tested with 6.0.012) 2013-05-09 14:49:29 -04:00
plugin_interface.lib.php Do not try to create non existing classes 2016-07-13 09:48:21 +02:00
PMA.php Fix merge conflicts 2013-07-17 15:05:23 -04:00
pmd_common.php [security] Avoid full path disclosure from some libraries scripts, see PMASA-2013-12 2013-07-17 15:24:24 -04:00
RecentTable.class.php Correctly escape MySQL username in queries 2016-07-12 17:35:56 +02:00
relation_cleanup.lib.php Various docblocks improvements 2012-09-19 15:05:26 +02:00
relation.lib.php bug #3998 Non-permanent SQL history not working 2013-07-26 08:59:04 -04:00
replication_gui.lib.php Fix XSS in server_replication.php 2016-07-12 12:05:07 +10:00
replication.inc.php Sanitize MySQL host name before connecting 2016-07-12 15:10:59 +02:00
Response.class.php Don't add any extra data to failed ajax requests 2012-11-30 19:40:54 +00:00
sanitizing.lib.php Add rel="noopener noreferrer" to all target="_blank" links 2016-07-12 10:59:38 +02:00
Scripts.class.php Fix #11457 414 Request-URI Too Large 2016-06-15 18:04:16 +02:00
select_lang.lib.php bug [security] Risk of BREACH attack 2015-03-04 10:32:07 -05:00
select_server.lib.php Dropped more pointless target attributes 2012-11-05 22:30:39 +00:00
server_common.inc.php Dropped main.php 2012-10-30 20:10:20 +00:00
server_privileges.lib.php Fix XSS in User accounts page 2016-02-29 11:24:04 +11:00
server_variables_doc.php Modified some untracked files 2012-09-16 17:09:12 +05:30
ServerStatusData.class.php Fix merge conflicts 2013-02-09 07:50:16 -05:00
session.inc.php Fix #11891 Error with PMA 4.0.10.13 with PHP 5.2 2016-01-28 22:08:02 +11:00
special_schema_links.lib.php Add missing schema link 2013-09-14 17:08:30 +05:30
sql_query_form.lib.php Bug Fix #4150 2013-11-02 20:59:35 +05:30
sqlparser.data.php bug #3942 Warnings about reserved word for many non reserved words 2013-05-24 05:28:58 -04:00
sqlparser.lib.php bug #3995 Drizzle server charset notice 2013-10-06 09:32:24 -04:00
sqlvalidator.class.php Fix bug #3907 undefined variables, function parameter problems 2013-05-13 11:27:56 +02:00
sqlvalidator.lib.php Implement linking to new documentation 2012-11-12 09:48:05 +01:00
StorageEngine.class.php Fix typos 2013-02-03 08:15:31 -05:00
string_mb.lib.php
string_native.lib.php
string_type_ctype.lib.php
string_type_native.lib.php
string.lib.php
structure.lib.php Avoid notice on Drizzle 2013-09-26 06:28:21 -04:00
sysinfo.lib.php sysinfo: Support DragonFly BSD 2013-03-06 11:49:38 -08:00
Table.class.php Correctly escape MySQL username in queries 2016-07-12 17:35:56 +02:00
TableSearch.class.php HML encode embedded JSON data 2016-07-13 11:31:55 +02:00
tbl_columns_definition_form.inc.php Quote delimiter before using preg_replace 2016-06-20 12:13:24 +02:00
tbl_common.inc.php Do not show table as tracked if request for deactivation has been submitted 2013-03-28 16:05:30 +05:30
tbl_info.inc.php Renamed PMA_CommonFunctions::getInstance()-> with PMA_Util:: 2012-09-16 14:41:47 +05:30
tbl_views.lib.php Fix table name in comments 2013-01-31 10:33:41 +01:00
Theme_Manager.class.php Submit forms that reload the page via GET to avoid browser notices 2012-12-02 20:12:55 +00:00
Theme.class.php bug #4597 [security] XSS through pma_fontsize cookie 2014-11-18 10:15:34 +05:30
Tracker.class.php Prevent null-byte injection in preg_replace() 2013-04-23 11:46:53 -04:00
transformations.lib.php Simplify and cleanup transformation plugins 2016-06-17 16:19:31 +02:00
Types.class.php fix incorrect description of BLOB 2013-01-18 14:16:32 +01:00
url_generating.lib.php bug #4899 [security] CSRF vulnerability in setup 2015-05-12 19:56:53 +05:30
user_preferences.inc.php Replace "frame" with "panel" and "left" with "navi" or "navigation" 2012-11-03 07:27:17 -04:00
user_preferences.lib.php Dropped server side functionality for reloading the left frame from user preferences forms 2012-10-30 20:23:59 +00:00
Util.class.php Use https to access phpmyadmin.net 2016-07-18 16:20:34 +02:00
vendor_config.php add tcpdf path to vendor_config.php 2013-05-09 13:39:36 -04:00
zip_extension.lib.php Sanitize filename on SHP import 2016-07-22 11:49:35 +02:00
zip.lib.php