phpmyadmin

bfShapeFiles

…

config

Merge remote-tracking branch 'security/QA_4_6-security' into QA_4_6

2016-08-16 16:34:37 -04:00

controllers

Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support.

2016-08-14 12:26:01 +01:00

dbi

Merge branch 'QA_4_6' into QA_4_6-security

2016-07-28 09:43:26 +02:00

di

…

engines

Merge branch 'QA_4_6' into QA_4_6-security

2016-07-27 16:26:57 +02:00

gis

Ensure GIS point coordinates are numeric

2016-07-23 10:22:56 +02:00

navigation

Add appr. escaping for $cfg options 'hide_db' and 'only_db'

2016-08-25 19:36:35 +05:30

php-gettext

Fix check for not set domain

2016-04-06 08:47:50 +02:00

phpseclib

…

plugins

Use one code to check external links

2016-08-24 11:38:03 +02:00

properties

…

rte

Fix listing routines for non privileged user

2016-06-17 08:55:04 +02:00

sql-parser

Update SQL parser to 3.4.4

2016-04-26 15:54:04 +02:00

tcpdf

Remove potentionally license problematic sRGB profile

2016-08-17 09:04:26 +02:00

.gitignore

…

advisor.lib.php

…

Advisor.php

Add rel="noopener noreferrer" to all external target="_blank" links

2016-08-18 17:35:20 +02:00

advisory_rules.txt

Fix advisory rule 'Slow launch time'

2016-08-01 12:27:53 +01:00

autoloader.php

Autoloading for phpseclib

2016-02-01 21:53:53 +01:00

bookmark.lib.php

Avoid not needed urlencode/urldecode for bookmarked SQL query

2016-05-23 09:12:52 +02:00

browse_foreigners.lib.php

Properly escape configuration parameters when rendering

2016-07-26 16:47:01 +02:00

central_columns.lib.php

Properly escape database name in central column queries

2016-06-15 11:29:31 +02:00

charset_conversion.lib.php

…

check_user_privileges.lib.php

Use https for links to dev.mysql.com

2016-05-17 10:16:44 +02:00

cleanup.lib.php

Do not remove globals on parameters cleanup

2016-05-23 13:36:49 +02:00

common.inc.php

Remove option to show phpinfo() ($cfg['ShowPhpInfo'])

2016-07-23 11:31:46 +02:00

config.default.php

Reintroduce PmaAbsoluteUri setting

2016-08-17 15:14:46 +02:00

Config.php

Validate git commit hash before using

2016-08-25 14:56:41 +02:00

config.values.php

…

Console.php

Simplify and improve message about listing bookmarks

2016-02-17 11:53:17 +01:00

core.lib.php

Always use UTC time in HTTP headers

2016-08-18 17:07:00 +02:00

create_addfield.lib.php

Merge pull request #12430 from rpv-tomsk/improve-partitions-support

2016-08-17 11:37:44 +02:00

database_interface.inc.php

Avoid confusing warning when mysql extension is missing

2016-05-23 10:53:13 +02:00

DatabaseInterface.php

Do not error on unset server port

2016-08-02 08:53:06 +02:00

db_common.inc.php

Remove PmaAbsoluteUri from redirects

2016-02-03 14:32:14 +01:00

db_designer.lib.php

Ensure page number is integer

2016-07-12 16:57:35 +02:00

db_table_exists.lib.php

Remove PmaAbsoluteUri from redirects

2016-02-03 14:32:14 +01:00

DbList.php

Use https when linking to php.net

2016-05-17 10:10:13 +02:00

DbQbe.php

Escape saved search name

2016-06-22 11:00:14 +02:00

DbSearch.php

Escape string when showing confirmation message

2016-07-28 10:30:49 +02:00

display_change_password.lib.php

…

display_create_table.lib.php

…

display_export.lib.php

Add missing escaping to the export type

2016-07-13 09:43:07 +02:00

display_git_revision.lib.php

Add rel="noopener noreferrer" to all target="_blank" links

2016-07-12 11:02:53 +02:00

display_import_ajax.lib.php

…

display_import.lib.php

Ensure we have integer as offset

2016-06-17 13:01:56 +02:00

display_select_lang.lib.php

Fixed activation of some languages

2016-03-24 23:30:24 +01:00

DisplayResults.php

Avoid double escaping of built in transformation URLs

2016-08-24 11:48:48 +02:00

error_report.lib.php

Merge remote-tracking branch 'security/QA_4_6-security' into QA_4_6

2016-08-16 16:34:37 -04:00

error.inc.php

…

Error.php

Include only relative path in backtrace

2016-07-11 09:18:19 +02:00

ErrorHandler.php

Do not fail on errors stored in session

2016-05-23 17:15:23 +02:00

export.lib.php

Escape generated query

2016-06-18 09:13:02 +10:00

file_listing.lib.php

Do not allow symlinks in UploadDir

2016-07-12 12:50:36 +02:00

File.php

Do not allow symlinks in UploadDir

2016-07-12 12:50:36 +02:00

Font.php

…

Footer.php

Add rel="noopener noreferrer" to all external target="_blank" links

2016-08-18 17:35:20 +02:00

Header.php

Include X-Robots-Tag header in responses

2016-07-12 10:28:03 +02:00

iconv_wrapper.lib.php

Use https for outbound links where applicable

2016-07-28 09:19:13 +02:00

import.lib.php

Use https for outbound links where applicable

2016-07-28 09:19:13 +02:00

index.lib.php

…

Index.php

Add missing escaping

2016-06-16 16:17:36 +02:00

IndexColumn.php

…

information_schema_relations.lib.php

…

insert_edit.lib.php

When editing table records, display readonly inputs for fields without write access .

2016-08-14 19:51:51 +01:00

ip_allow_deny.lib.php

Merge branch 'QA_4_6' into QA_4_6-security

2016-07-28 09:43:26 +02:00

js_escape.lib.php

PMA_jsFormat accepts only strings

2016-06-17 11:43:51 +02:00

kanji-encoding.lib.php

…

Language.php

…

LanguageManager.php

Fixed setting mixed case languages

2016-05-11 13:57:22 +02:00

Linter.php

Do not use mb_strlen on data we know are bytes

2016-07-22 16:39:12 +02:00

ListAbstract.php

…

ListDatabase.php

…

logging.lib.php

…

Menu.php

…

Message.php

…

mime.lib.php

…

mult_submits.inc.php

…

mult_submits.lib.php

Fix #12433 : Copy table with prefix does not copy the indexes

2016-08-03 16:43:24 +05:30

mysql_charsets.inc.php

…

mysql_charsets.lib.php

…

mysql_relations.lib.php

…

normalization.lib.php

…

opendocument.lib.php

…

operations.lib.php

Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support.

2016-08-14 12:26:01 +01:00

OutputBuffering.php

…

parse_analyze.lib.php

…

Partition.php

Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support.

2016-08-14 12:26:01 +01:00

PDF.php

Fixed invalid Content-Length in some HTTP responses

2016-07-22 16:41:51 +02:00

plugin_interface.lib.php

Do not try to create non existing classes

2016-07-13 09:47:09 +02:00

pmd_common.php

Ensure page number is integer

2016-07-12 16:57:35 +02:00

Psr4Autoloader.php

…

RecentFavoriteTable.php

Correctly escape MySQL username in queries

2016-07-12 17:42:45 +02:00

relation_cleanup.lib.php

…

relation.lib.php

Ensure page number is integer

2016-07-12 16:57:35 +02:00

replication_gui.lib.php

Fix XSS in server_replication.php

2016-07-12 11:49:53 +10:00

replication.inc.php

Move hostname sanitization to correct place

2016-07-29 14:09:37 +02:00

Response.php

Do not try to wrap output in case response handling is disabled

2016-07-28 10:50:35 +02:00

sanitizing.lib.php

Whitelist relative URLs from built in transformatons

2016-08-24 11:46:46 +02:00

SavedSearches.php

Avoid undefined index in case of incomplete bookmark

2016-06-22 10:57:11 +02:00

Scripts.php

Remove unsued code for generating events

2016-08-03 11:36:41 +02:00

select_server.lib.php

…

server_common.inc.php

…

server_common.lib.php

…

server_privileges.lib.php

Merge branch 'QA_4_6' into QA_4_6-security

2016-07-26 16:06:29 +02:00

server_status_advisor.lib.php

…

server_status_monitor.lib.php

…

server_status_processes.lib.php

…

server_status_queries.lib.php

…

server_status_variables.lib.php

Properly escape MySQL status variables

2016-07-10 18:07:59 +02:00

server_status.lib.php

…

server_user_groups.lib.php

Add missing escaping in user group queries

2016-07-13 10:40:13 +02:00

server_users.lib.php

…

ServerStatusData.php

Fix division by zero in case of misconfigured MySQL server

2016-06-09 09:49:13 +02:00

session.inc.php

Rename getCookiePath() to getRootPath()

2016-08-17 15:35:15 +02:00

session.lib.php

Do not try to secure session in testsuite

2016-05-23 15:00:57 +02:00

special_schema_links.lib.php

Force relative paths in links

2016-08-24 11:45:40 +02:00

sql_query_form.lib.php

…

sql.lib.php

Fix #12399 : Adding index to table shows wrong top navigation

2016-08-01 11:41:44 +05:30

StorageEngine.php

…

string.lib.php

…

stringMb.lib.php

…

stringNative.lib.php

…

SubPartition.php

…

sysinfo.lib.php

Use new URL for phpsysinfo

2016-07-27 16:21:00 +02:00

SysInfo.php

…

SysInfoLinux.php

…

SysInfoSunOS.php

…

SysInfoWINNT.php

…

SystemDatabase.php

…

Table.php

Fixed editing of ENUM/SET/DECIMAL fields structure

2016-08-25 14:33:21 +02:00

tbl_columns_definition_form.inc.php

Fixed parsing of field definition

2016-03-09 09:02:07 +01:00

tbl_common.inc.php

…

tbl_info.inc.php

…

tbl_partition_definition.inc.php

Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support.

2016-08-14 12:26:01 +01:00

Template.php

Assign helperFunctions before doing extract

2016-06-20 12:07:13 +02:00

Theme.php

…

ThemeManager.php

…

Tracker.php

Quote delimiter before using preg_replace

2016-06-20 12:16:03 +02:00

tracking.lib.php

Merge branch 'QA_4_6' into QA_4_6-security

2016-07-22 16:50:12 +02:00

transformations.lib.php

Do not try to load old transformation plugins

2016-08-02 15:13:07 +02:00

Types.php

…

TypesMySQL.php

JSON data type is not supported in MariaDB

2016-03-28 22:17:48 +11:00

url_generating.lib.php

Use https for outbound links where applicable

2016-07-28 09:19:13 +02:00

user_preferences.inc.php

…

user_preferences.lib.php

Remove PmaAbsoluteUri from redirects

2016-02-03 14:32:14 +01:00

util.lib.php

…

Util.php

Add rel="noopener noreferrer" to all external target="_blank" links

2016-08-18 17:35:20 +02:00

vendor_config.php

…

VersionInformation.php

Merge branch 'QA_4_6' into QA_4_6-security

2016-07-26 16:06:29 +02:00

zip_extension.lib.php

Sanitize filename on SHP import

2016-07-22 11:52:49 +02:00

ZipFile.php

Change url to https

2016-07-27 16:25:48 +02:00