1
0
mirror of https://github.com/phpmyadmin/phpmyadmin.git synced 2026-10-31 10:54:46 +03:00
Commit Graph

1374 Commits

Author SHA1 Message Date
Michal Čihař
41c4855575 Remove no longer used Util::pow and tests for it
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-09-27 09:34:32 +02:00
Michal Čihař
61d8dc4791 Merge branch 'QA_4_6' 2016-09-19 10:47:31 +02:00
Michal Čihař
e2ac325a7a Merge remote-tracking branch 'origin/pull/12557' into QA_4_6 2016-09-19 10:46:56 +02:00
Deven Bansod
774e8d505b Merge branch 'QA_4_6' 2016-09-18 12:05:28 +05:30
Deven Bansod
ea5870bb9b Fix class name in export test comments
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
2016-09-18 12:04:38 +05:30
Michal Čihař
08d491d021 Merge branch 'QA_4_6' 2016-09-16 10:37:59 +02:00
Deven Bansod
14616cbcdf Fixed tests
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
2016-09-16 13:56:15 +05:30
Deven Bansod
093620495b Added tests for Usergroup as hidden field in Copy User form
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
2016-09-13 22:25:24 +05:30
Michal Čihař
91d648d480 Merge pull request #12537 from Seldar/master
Using number_format parameters instead of Util::localizeNumber
2016-09-07 12:06:10 +02:00
Volkan Ulukut
7ce0234a2c Using number_format parameters instead of Util::localizeNumber
Signed-off-by: Volkan Ulukut <arthan@gmail.com>
2016-09-07 11:42:09 +03:00
Michal Čihař
3debfa5d1f Merge branch 'QA_4_6' 2016-09-06 11:33:32 +02:00
Deven Bansod
715403c0e7 Fix #12531 : Properly flag queries as DROP DATABASE
Parser recognizes various DROP statements correctly, but the flags set by SQL Parser are incorrectly used.
In js/functions.js, removed the Regex-based matching, rather handle it in PHP as we have correct flags available from SQL Parser

Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
2016-09-06 14:20:19 +05:30
Michal Čihař
92cb95c6d5 Fix other places of wrong value for # in tests
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-09-06 10:24:04 +02:00
Michal Čihař
eb233da10a Set reasonable mock value for tests
Set integer where we do a COUNT() SQL.

See also #12539

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-09-06 10:00:14 +02:00
Michal Čihař
7cb6830ec8 Fix test expectations
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-09-06 09:51:45 +02:00
Michal Čihař
f23c0b9db9 Set correct Uptime value for tests
MySQL returns this as integer, so we should do the same for tests.

See also #12539

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-09-06 09:48:38 +02:00
Michal Čihař
2148df85f1 Merge branch 'QA_4_6' 2016-08-30 15:53:06 +02:00
Michal Čihař
f3ca367efa Fix number formatting with different settings of precision in PHP
- fixed Util::formatNumber to avoid rounding issues to mess up display
- force precision = 14 to ensure we get sane behavior

With precision set to higher value many things do not behave as expected
producing strange numbers in various places.

For example with precision=19 you get:

php > echo round(1.2, 2);
1.199999999999999956

Fixes #12303

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-08-30 15:51:18 +02:00
Michal Čihař
23e01d306a Merge branch 'QA_4_6' 2016-08-17 15:38:22 +02:00
Michal Čihař
83476322ba Use PmaAbsolueUri for cookie path
Issue #12374

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-08-17 15:35:15 +02:00
Michal Čihař
d3222bd925 Merge branch 'QA_4_6' 2016-08-17 11:22:07 +02:00
Michal Čihař
a53bc7c0e3 Merge pull request #12459 from rpv-tomsk/column-privileges
When editing table records, display readonly inputs for fields without write access.
2016-08-17 11:20:14 +02:00
Pavel Rochnyack
c660c627f0 When editing table records, display readonly inputs for fields without write access .
Signed-off-by: Pavel Rochnyack <pavel2000@ngs.ru>
2016-08-14 19:51:51 +01:00
Michal Čihař
7ef6fecb87 Merge branch 'master' into master-security 2016-08-01 11:07:33 +02:00
Michal Čihař
ea73fded71 Adjust tests to token removal from GET
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-28 11:22:45 +02:00
Michal Čihař
360b8e8a11 Merge branch 'master' into master-security 2016-07-28 09:44:08 +02:00
Michal Čihař
d31ff5a1e7 Merge branch 'QA_4_6' into QA_4_6-security 2016-07-28 09:43:26 +02:00
Michal Čihař
6d8e1d7935 Merge branch 'QA_4_6' 2016-07-28 09:38:08 +02:00
Michal Čihař
4072c1d29a Use example.com for sample test urls
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-28 09:12:01 +02:00
Michal Čihař
d15490088c Merge branch 'QA_4_6' 2016-07-27 16:30:47 +02:00
Michal Čihař
af337d2054 Use https to access phpmyadmin.net
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-27 16:29:08 +02:00
Michal Čihař
870ca1cc7a Use https for wiki links
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-27 16:28:07 +02:00
Michal Čihař
6e49998555 Merge branch 'master' into master-security 2016-07-26 16:31:40 +02:00
Michal Čihař
f5015c2ea3 Merge branch 'QA_4_6-security' into master-security 2016-07-26 16:31:21 +02:00
Michal Čihař
99492bf42a Merge branch 'QA_4_6' into QA_4_6-security 2016-07-26 16:29:07 +02:00
Michal Čihař
b9d823f4e8 Remove unused tests code
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-26 16:27:53 +02:00
Michal Čihař
22c4ede46d Merge branch 'QA_4_6' 2016-07-26 16:26:57 +02:00
Michal Čihař
6c95b73f90 Do not append session IDs to all URLs in redirect
There is no need to do that as we rely on session cookies anyway. Also
appending sesson ID to external URLs is not a good idea.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-26 16:20:04 +02:00
Michal Čihař
1d70a1ba64 Allow only https outgoing links
We no longer produce http links, so it's better to filter out these at
all levels.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-22 12:10:11 +02:00
Michal Čihař
52586bd949 Merge branch 'QA_4_6-security' into master-security 2016-07-22 11:53:23 +02:00
Michal Čihař
ddeab2a11f Sanitize filename on SHP import
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-22 11:52:49 +02:00
Michal Čihař
2adf1ca83e Merge branch 'QA_4_6-security' into master-security 2016-07-22 11:35:14 +02:00
Michal Čihař
67d6eeac42 Improve URL filtering in url.php
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-18 16:39:25 +02:00
Michal Čihař
7e6edaf756 Add tests for PMA_isAllowedDomain
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-18 16:36:55 +02:00
Michal Čihař
3f98ad5414 Merge branch 'QA_4_6-security' into master-security 2016-07-18 16:24:12 +02:00
Michal Čihař
1543be7138 Use https to access phpmyadmin.net
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-18 16:22:33 +02:00
Michal Čihař
dfa389aa5a Merge branch 'QA_4_6-security' into master-security 2016-07-12 16:29:26 +02:00
Michal Čihař
ba072e42dc Validate serialized data before unserializing
We need only strings, integers or arrays, so there is no need to
unserialize strings containing any complex types.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 16:29:11 +02:00
Michal Čihař
5299b36983 Merge branch 'QA_4_6-security' into master-security 2016-07-12 15:15:15 +02:00
Michal Čihař
767195e197 Sanitize MySQL host name before connecting
It can contain p: prefix which we don't want to honor.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 15:14:57 +02:00