Michal Čihař 36ddf8b61e Escape special chars when displaying filename template cookies.

2009-03-24 08:55:07 +00:00

..

auth

bug #2031221 [auth] Links to version number on login screen

2008-08-01 19:00:36 +00:00

dbg

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

dbi

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

engines

start QA_11

2007-07-18 15:55:11 +00:00

export

bug #2045512 [export] Numbers in Excel export

2008-08-13 16:28:43 +00:00

import

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

tcpdf

start QA_11

2007-07-18 15:55:11 +00:00

transformations

patch #1879031 [transform] dateformat transformation and UNIX timestamps

2008-01-27 14:07:50 +00:00

.htaccess

start QA_11

2007-07-18 15:55:11 +00:00

blowfish.php

start QA_11

2007-07-18 15:55:11 +00:00

bookmark.lib.php

dead code

2008-03-16 11:28:18 +00:00

charset_conversion.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

check_user_privileges.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

cleanup.lib.php

bug #1807923 [login] Login with html entities in password fails

2007-10-05 09:46:30 +00:00

common.inc.php

bug #2027102 quotes around lang missing

2008-07-25 12:25:33 +00:00

common.lib.php

bug #1989081 [profiling] Profiling causes query to be executed again

2008-06-13 16:26:21 +00:00

Config.class.php

2.11.9 and 2.11.10-dev

2008-08-28 16:41:57 +00:00

config.default.php

protection against cross-frame scripting

2008-07-24 17:12:32 +00:00

core.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

database_interface.lib.php

[security] Code execution vulnerability

2008-09-15 12:03:45 +00:00

db_common.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

db_info.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

db_links.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

db_routines.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

db_table_exists.lib.php

[security] possible XSRF on several pages

2008-12-09 13:45:32 +00:00

display_change_password.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

display_create_database.lib.php

port 2.11.7.1 fix

2008-07-15 18:42:50 +00:00

display_create_table.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

display_export.lib.php

Escape special chars when displaying filename template cookies.

2009-03-24 08:55:07 +00:00

display_import.lib.php

bug #2018595 [import] Potential data loss on import resubmit

2008-07-17 14:02:26 +00:00

display_select_lang.lib.php

bug #2031221 [auth] Links to version number on login screen

2008-08-01 19:00:36 +00:00

display_tbl_links.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

display_tbl.lib.php

(really) revert patch

2008-06-10 16:32:39 +00:00

file_listing.php

avoid a warning on opendir

2007-12-15 14:30:37 +00:00

File.class.php

Do not automatically set and create TempDir, it might lead to secrity issue (thanks to Thijs Kinkhorst).

2008-09-02 17:35:48 +00:00

footer.inc.php

port 2.11.7.1 fix

2008-07-15 18:42:50 +00:00

get_foreign.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

grab_globals.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

header_http.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

header_meta_style.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

header_printview.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

header.inc.php

protection against cross-frame scripting

2008-07-24 17:12:32 +00:00

iconv_wrapper.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

import.lib.php

bug #2004915 [bookmarks] Saved queries greater than 1000 chars not displayed

2008-08-01 20:02:21 +00:00

information_schema_relations.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

ip_allow_deny.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

js_escape.lib.php

typos

2008-09-22 14:09:44 +00:00

kanji-encoding.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

language.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

List_Database.class.php

fix for fixed possible XSS in database name - thanks to Omer Singer, The DigiTrust Group

2007-11-09 21:24:40 +00:00

List.class.php

it should not be possible to move or copy a table to information_schema

2007-10-14 12:23:22 +00:00

mcrypt.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

mult_submits.inc.php

bug #1989813 [interface] Deleting multiple views (space in name)

2008-06-24 17:33:50 +00:00

mysql_charsets.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

navigation_header.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

ob.lib.php

patch #1818389 to remove a notice (failed to flush buffer)

2007-11-01 20:48:43 +00:00

opendocument.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

parse_analyze.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

plugin_interface.lib.php

bug #2022182 [import, export] Import/Export fails because of Mac files

2008-07-23 16:55:33 +00:00

relation_cleanup.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

relation.lib.php

Do not save too big queries in history

2008-07-09 14:17:19 +00:00

sanitizing.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

select_lang.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

select_server.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

server_common.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

server_links.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

session.inc.php

bug #2032707 [core] PMA does not start if ini_set() is disabled

2008-08-01 19:15:01 +00:00

sql_query_form.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

sqlparser.data.php

bug #1992628 [parser] SQL parser removes essential space

2008-06-24 17:51:49 +00:00

sqlparser.lib.php

bug #2074250 [parser] Undefined variable seen_from

2008-08-28 16:17:53 +00:00

sqlvalidator.class.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

sqlvalidator.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

StorageEngine.class.php

bug #1798627 [GUI] Wrong storage engine displayed

2007-09-20 16:25:32 +00:00

string_mb.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

string_native.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

string_type_ctype.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

string_type_native.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

string.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

Table.class.php

PMA_getTableDef() is also called from Table.class.php

2008-06-27 14:27:18 +00:00

tbl_common.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

tbl_indexes.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

tbl_info.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

tbl_links.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

tbl_properties.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

tbl_replace_fields.inc.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

tbl_triggers.lib.php

protection against XSS when register_globals is on and .htaccess has no effect

2008-06-21 14:01:54 +00:00

Theme_Manager.class.php

start QA_11

2007-07-18 15:55:11 +00:00

Theme.class.php

bug #1864468 [display] Theme does not switch to darkblue_orange

2008-01-05 13:33:05 +00:00

transformations.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

unzip.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

url_generating.lib.php

start QA_11

2007-07-18 15:55:11 +00:00

zip.lib.php

start QA_11

2007-07-18 15:55:11 +00:00