webapp/phpmyadmin
1
0
Fork 0
mirror of https://github.com/phpmyadmin/phpmyadmin.git synced 2026-10-31 10:54:46 +03:00
Code Activity
Files
b63bd9977c436f6ad564d429e663bb580bb4e730
phpmyadmin/libraries
History
Michal Čihař b63bd9977c Stricter validation of NavigationLogoLink 
It now has to be URL including scheme. Otherwise it's not really
possible to validate it for being just http/https.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-08-18 11:22:04 +02:00
..
bfShapeFiles
There is no need to reset() before foreach()
2016-01-05 11:26:34 +01:00
config
Merge remote-tracking branch 'security/QA_4_6-security' into QA_4_6
2016-08-16 16:34:37 -04:00
controllers
Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support.
2016-08-14 12:26:01 +01:00
dbi
Merge branch 'QA_4_6' into QA_4_6-security
2016-07-28 09:43:26 +02:00
di
…
engines
Merge branch 'QA_4_6' into QA_4_6-security
2016-07-27 16:26:57 +02:00
gis
Ensure GIS point coordinates are numeric
2016-07-23 10:22:56 +02:00
navigation
Stricter validation of NavigationLogoLink
2016-08-18 11:22:04 +02:00
php-gettext
Fix check for not set domain
2016-04-06 08:47:50 +02:00
phpseclib
Move security check behind namespace
2016-01-27 11:10:13 +01:00
plugins
Use hash_equals for checking username
2016-08-18 09:41:21 +02:00
properties
Allow to specify name and text directly in OptionsPropertyItem contructor
2016-01-05 15:04:02 +01:00
rte
Fix listing routines for non privileged user
2016-06-17 08:55:04 +02:00
sql-parser
Update SQL parser to 3.4.4
2016-04-26 15:54:04 +02:00
tcpdf
Remove potentionally license problematic sRGB profile
2016-08-17 09:04:26 +02:00
.gitignore
…
advisor.lib.php
Remove logic code in declaration files.
2015-10-27 18:56:39 +01:00
Advisor.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
advisory_rules.txt
Fix advisory rule 'Slow launch time'
2016-08-01 12:27:53 +01:00
autoloader.php
Autoloading for phpseclib
2016-02-01 21:53:53 +01:00
bookmark.lib.php
Avoid not needed urlencode/urldecode for bookmarked SQL query
2016-05-23 09:12:52 +02:00
browse_foreigners.lib.php
Properly escape configuration parameters when rendering
2016-07-26 16:47:01 +02:00
central_columns.lib.php
Properly escape database name in central column queries
2016-06-15 11:29:31 +02:00
charset_conversion.lib.php
Check whether iconv works before using it
2015-12-28 11:28:03 +01:00
check_user_privileges.lib.php
Use https for links to dev.mysql.com
2016-05-17 10:16:44 +02:00
cleanup.lib.php
Do not remove globals on parameters cleanup
2016-05-23 13:36:49 +02:00
common.inc.php
Remove option to show phpinfo() ($cfg['ShowPhpInfo'])
2016-07-23 11:31:46 +02:00
config.default.php
Reintroduce PmaAbsoluteUri setting
2016-08-17 15:14:46 +02:00
Config.php
Ensure PmaAbsoluteUri ends with /
2016-08-17 15:37:20 +02:00
config.values.php
Make PHPCS happy.
2015-10-24 13:30:22 +02:00
Console.php
Simplify and improve message about listing bookmarks
2016-02-17 11:53:17 +01:00
core.lib.php
Strip null bytes from MySQL username
2016-08-18 09:11:45 +02:00
create_addfield.lib.php
Merge pull request #12430 from rpv-tomsk/improve-partitions-support
2016-08-17 11:37:44 +02:00
database_interface.inc.php
Avoid confusing warning when mysql extension is missing
2016-05-23 10:53:13 +02:00
DatabaseInterface.php
Do not error on unset server port
2016-08-02 08:53:06 +02:00
db_common.inc.php
Remove PmaAbsoluteUri from redirects
2016-02-03 14:32:14 +01:00
db_designer.lib.php
Ensure page number is integer
2016-07-12 16:57:35 +02:00
db_table_exists.lib.php
Remove PmaAbsoluteUri from redirects
2016-02-03 14:32:14 +01:00
DbList.php
Use https when linking to php.net
2016-05-17 10:10:13 +02:00
DbQbe.php
Escape saved search name
2016-06-22 11:00:14 +02:00
DbSearch.php
Escape string when showing confirmation message
2016-07-28 10:30:49 +02:00
display_change_password.lib.php
Fix merge conflicts
2015-11-29 07:29:32 -05:00
display_create_table.lib.php
…
display_export.lib.php
Add missing escaping to the export type
2016-07-13 09:43:07 +02:00
display_git_revision.lib.php
Add rel="noopener noreferrer" to all target="_blank" links
2016-07-12 11:02:53 +02:00
display_import_ajax.lib.php
Remove checks for PHP versions we no longer support
2016-01-28 16:08:47 +01:00
display_import.lib.php
Ensure we have integer as offset
2016-06-17 13:01:56 +02:00
display_select_lang.lib.php
Fixed activation of some languages
2016-03-24 23:30:24 +01:00
DisplayResults.php
Properly escape configuration parameters when rendering
2016-07-26 16:47:01 +02:00
error_report.lib.php
Merge remote-tracking branch 'security/QA_4_6-security' into QA_4_6
2016-08-16 16:34:37 -04:00
error.inc.php
…
Error.php
Strip path even if openbasedir restrictions apply
2016-08-18 10:16:39 +02:00
ErrorHandler.php
Do not fail on errors stored in session
2016-05-23 17:15:23 +02:00
export.lib.php
Remove debugging code
2016-08-18 10:00:06 +02:00
file_listing.lib.php
Do not allow symlinks in UploadDir
2016-07-12 12:50:36 +02:00
File.php
Do not allow symlinks in UploadDir
2016-07-12 12:50:36 +02:00
Font.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
Footer.php
Improved indents, alignment and rtl in Original theme
2016-08-01 03:08:48 +01:00
Header.php
Include X-Robots-Tag header in responses
2016-07-12 10:28:03 +02:00
iconv_wrapper.lib.php
Use https for outbound links where applicable
2016-07-28 09:19:13 +02:00
import.lib.php
Use https for outbound links where applicable
2016-07-28 09:19:13 +02:00
index.lib.php
Merge branch 'master' into psr1_master
2015-11-08 16:16:05 +01:00
Index.php
Add missing escaping
2016-06-16 16:17:36 +02:00
IndexColumn.php
No nested ternary operators
2015-12-02 09:19:33 -05:00
information_schema_relations.lib.php
…
insert_edit.lib.php
When editing table records, display readonly inputs for fields without write access .
2016-08-14 19:51:51 +01:00
ip_allow_deny.lib.php
Use hash_equals for comparing username in allow/deny rules
2016-08-18 09:17:50 +02:00
js_escape.lib.php
PMA_jsFormat accepts only strings
2016-06-17 11:43:51 +02:00
kanji-encoding.lib.php
Fixed Kanji encoding in some specific cases
2015-12-28 10:48:31 +01:00
Language.php
Add infrastructure to map language to MySQL locale
2016-01-13 08:44:24 +01:00
LanguageManager.php
Fixed setting mixed case languages
2016-05-11 13:57:22 +02:00
Linter.php
Do not use mb_strlen on data we know are bytes
2016-07-22 16:39:12 +02:00
ListAbstract.php
…
ListDatabase.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
logging.lib.php
Remove logic code in declaration files.
2015-10-27 18:56:39 +01:00
Menu.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
Message.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
mime.lib.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
mult_submits.inc.php
Move common code inside the method
2016-01-14 13:09:55 +11:00
mult_submits.lib.php
Fix #12433 : Copy table with prefix does not copy the indexes
2016-08-03 16:43:24 +05:30
mysql_charsets.inc.php
Remove not needed reset()
2016-01-05 12:33:39 +01:00
mysql_charsets.lib.php
Merge branch 'QA_4_5'
2015-12-27 11:04:56 +05:30
mysql_relations.lib.php
…
normalization.lib.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
opendocument.lib.php
…
operations.lib.php
Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support.
2016-08-14 12:26:01 +01:00
OutputBuffering.php
Make PHPCS happy.
2015-11-08 15:58:48 +01:00
parse_analyze.lib.php
Make PHPCS happy.
2015-10-24 12:50:30 +02:00
Partition.php
Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support.
2016-08-14 12:26:01 +01:00
PDF.php
Fixed invalid Content-Length in some HTTP responses
2016-07-22 16:41:51 +02:00
plugin_interface.lib.php
Do not try to create non existing classes
2016-07-13 09:47:09 +02:00
pmd_common.php
Ensure page number is integer
2016-07-12 16:57:35 +02:00
Psr4Autoloader.php
Make PHPCS happy
2015-10-29 07:37:55 +11:00
RecentFavoriteTable.php
Correctly escape MySQL username in queries
2016-07-12 17:42:45 +02:00
relation_cleanup.lib.php
Merge branch 'master' into psr1_master
2015-11-08 16:16:05 +01:00
relation.lib.php
Ensure page number is integer
2016-07-12 16:57:35 +02:00
replication_gui.lib.php
Fix XSS in server_replication.php
2016-07-12 11:49:53 +10:00
replication.inc.php
Move hostname sanitization to correct place
2016-07-29 14:09:37 +02:00
Response.php
Do not try to wrap output in case response handling is disabled
2016-07-28 10:50:35 +02:00
sanitizing.lib.php
Merge branch 'QA_4_6' into QA_4_6-security
2016-07-22 12:12:32 +02:00
SavedSearches.php
Avoid undefined index in case of incomplete bookmark
2016-06-22 10:57:11 +02:00
Scripts.php
Remove unsued code for generating events
2016-08-03 11:36:41 +02:00
select_server.lib.php
Remove logic code in declaration files.
2015-10-27 18:56:39 +01:00
server_common.inc.php
…
server_common.lib.php
Remove logic code in declaration files.
2015-10-27 18:56:39 +01:00
server_privileges.lib.php
Merge branch 'QA_4_6' into QA_4_6-security
2016-07-26 16:06:29 +02:00
server_status_advisor.lib.php
Remove useless empty lines at beginning of files.
2015-10-27 18:56:40 +01:00
server_status_monitor.lib.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
server_status_processes.lib.php
Merge branch 'QA_4_5'
2016-01-27 21:45:08 +11:00
server_status_queries.lib.php
Merge branch 'master' into psr1_master
2015-11-08 16:16:05 +01:00
server_status_variables.lib.php
Properly escape MySQL status variables
2016-07-10 18:07:59 +02:00
server_status.lib.php
Remove useless empty lines at beginning of files.
2015-10-27 18:56:40 +01:00
server_user_groups.lib.php
Add missing escaping in user group queries
2016-07-13 10:40:13 +02:00
server_users.lib.php
Remove logic code in declaration files.
2015-10-27 18:56:39 +01:00
ServerStatusData.php
Fix division by zero in case of misconfigured MySQL server
2016-06-09 09:49:13 +02:00
session.inc.php
Rename getCookiePath() to getRootPath()
2016-08-17 15:35:15 +02:00
session.lib.php
Do not try to secure session in testsuite
2016-05-23 15:00:57 +02:00
special_schema_links.lib.php
…
sql_query_form.lib.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
sql.lib.php
Fix #12399: Adding index to table shows wrong top navigation
2016-08-01 11:41:44 +05:30
StorageEngine.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
string.lib.php
…
stringMb.lib.php
Merge branch 'QA_4_5'
2015-12-28 10:07:23 +01:00
stringNative.lib.php
…
SubPartition.php
…
sysinfo.lib.php
Use new URL for phpsysinfo
2016-07-27 16:21:00 +02:00
SysInfo.php
Make PHPCS happy.
2015-10-18 22:51:01 +02:00
SysInfoLinux.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
SysInfoSunOS.php
Make PHPCS happy.
2015-10-18 22:51:01 +02:00
SysInfoWINNT.php
There is no need to reset() before foreach()
2016-01-05 11:26:34 +01:00
SystemDatabase.php
…
Table.php
Merge branch 'QA_4_6' into QA_4_6-security
2016-07-22 15:48:09 +02:00
tbl_columns_definition_form.inc.php
Fixed parsing of field definition
2016-03-09 09:02:07 +01:00
tbl_common.inc.php
Simplify detection of current script
2015-12-24 08:12:56 -05:00
tbl_info.inc.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
tbl_partition_definition.inc.php
Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support.
2016-08-14 12:26:01 +01:00
Template.php
Assign helperFunctions before doing extract
2016-06-20 12:07:13 +02:00
Theme.php
Apparently, variable interpolation also suffers from an unneeded memory copy
2015-12-06 07:40:20 -05:00
ThemeManager.php
No need for unset() as we are not in global context
2015-12-09 08:37:51 +01:00
Tracker.php
Quote delimiter before using preg_replace
2016-06-20 12:16:03 +02:00
tracking.lib.php
Merge branch 'QA_4_6' into QA_4_6-security
2016-07-22 16:50:12 +02:00
transformations.lib.php
Do not try to load old transformation plugins
2016-08-02 15:13:07 +02:00
Types.php
…
TypesMySQL.php
JSON data type is not supported in MariaDB
2016-03-28 22:17:48 +11:00
url_generating.lib.php
Use https for outbound links where applicable
2016-07-28 09:19:13 +02:00
user_preferences.inc.php
Make PHPCS happy.
2015-11-08 15:58:48 +01:00
user_preferences.lib.php
Remove PmaAbsoluteUri from redirects
2016-02-03 14:32:14 +01:00
util.lib.php
…
Util.php
Merge branch 'QA_4_6' into QA_4_6-security
2016-07-29 14:05:48 +02:00
vendor_config.php
Initial implementation of LanguageManager
2016-01-12 14:51:07 +01:00
VersionInformation.php
Silent errors when getting remote file
2016-08-18 09:50:33 +02:00
zip_extension.lib.php
Sanitize filename on SHP import
2016-07-22 11:52:49 +02:00
ZipFile.php
Change url to https
2016-07-27 16:25:48 +02:00