Marc Delisle [Fri, 20 Aug 2010 16:59:21 +0000 (20 12:59 -0400)]
3.3.6-rc1
Michal Čihař [Fri, 20 Aug 2010 11:42:29 +0000 (20 13:42 +0200)]
Merge branch 'MAINT_3_3_5' into QA_3_3
Michal Čihař [Fri, 20 Aug 2010 11:42:17 +0000 (20 13:42 +0200)]
Set version to 3.3.5.1.
Michal Čihař [Fri, 20 Aug 2010 11:36:49 +0000 (20 13:36 +0200)]
Merge branch 'MAINT_3_3_5' into QA_3_3
Conflicts:
ChangeLog
libraries/common.lib.php
Michal Čihař [Fri, 20 Aug 2010 11:33:32 +0000 (20 13:33 +0200)]
Changelog.
Michal Čihař [Fri, 20 Aug 2010 09:35:42 +0000 (20 11:35 +0200)]
Escape error message coming from MySQL to avoid XSS on bad parameters.
Michal Čihař [Fri, 20 Aug 2010 09:31:11 +0000 (20 11:31 +0200)]
Avoid information disclossure on error.
Michal Čihař [Fri, 20 Aug 2010 09:19:28 +0000 (20 11:19 +0200)]
Fix possible XSS on IIS redirect page.
Michal Čihař [Fri, 20 Aug 2010 09:09:15 +0000 (20 11:09 +0200)]
bug #
3042495 [core] Move PMA_sendHeaderLocation to core.lib.php.
It might be needed from common.inc.php even if PMA_MINIMUM_COMMON is
defined.
Michal Čihař [Fri, 20 Aug 2010 09:02:38 +0000 (20 11:02 +0200)]
bug #
3044189 [doc] Cleared documentation for hide_db.
Herman van Rink [Fri, 20 Aug 2010 08:42:03 +0000 (20 10:42 +0200)]
Fix XSS on error with very long query.
Michal Čihař [Fri, 20 Aug 2010 08:38:32 +0000 (20 10:38 +0200)]
Fix XSS with $cfg['SQP']['fmtType'] = 'text'.
Michal Čihař [Thu, 19 Aug 2010 13:37:06 +0000 (19 15:37 +0200)]
Revert "Do not assume that DefaultLang is escaped."
This reverts commit
05ca00e0a20d0eb4848d69bf7a1365df5bba872d.
There does not seem to be bug here.
Michal Čihař [Wed, 18 Aug 2010 10:37:20 +0000 (18 12:37 +0200)]
Do not assume that DefaultLang is escaped.
Michal Čihař [Wed, 18 Aug 2010 10:31:54 +0000 (18 12:31 +0200)]
Properly check validity of sort parameter.
Michal Čihař [Wed, 18 Aug 2010 10:13:59 +0000 (18 12:13 +0200)]
Fix XSS on hostname.
Michal Čihař [Wed, 18 Aug 2010 10:12:09 +0000 (18 12:12 +0200)]
Fix XSS on username.
Michal Čihař [Wed, 18 Aug 2010 10:09:13 +0000 (18 12:09 +0200)]
Fix XSS on tablename and pred_tablename.
Michal Čihař [Wed, 18 Aug 2010 10:07:45 +0000 (18 12:07 +0200)]
Fix XSS on dbname.
Michal Čihař [Wed, 18 Aug 2010 10:05:32 +0000 (18 12:05 +0200)]
Fix XSS on checkprivs.
Michal Čihař [Wed, 18 Aug 2010 09:42:08 +0000 (18 11:42 +0200)]
Document PMA_sanitize.
Michal Čihař [Tue, 17 Aug 2010 14:10:27 +0000 (17 16:10 +0200)]
Escape html chars in form values.
Michal Čihař [Tue, 17 Aug 2010 14:09:07 +0000 (17 16:09 +0200)]
Add option to escape PMA_sanitize output.
This is required when it is used in form values.
Marc Delisle [Tue, 17 Aug 2010 14:46:16 +0000 (17 16:46 +0200)]
Limit list of correct values for sort order.
Michal Čihař [Tue, 17 Aug 2010 14:33:30 +0000 (17 16:33 +0200)]
Fix handling of unknown sort order.
Michal Čihař [Tue, 17 Aug 2010 14:31:03 +0000 (17 16:31 +0200)]
Secure handling of sort_by and sort_order in server_databases.php.
Michal Čihař [Tue, 17 Aug 2010 14:23:09 +0000 (17 16:23 +0200)]
Fix XSS on delimiter in tbl_sql.php.
Marc Delisle [Tue, 17 Aug 2010 14:21:37 +0000 (17 16:21 +0200)]
Fix XSS on delimiter in db_sql.php.
Michal Čihař [Tue, 17 Aug 2010 14:20:15 +0000 (17 16:20 +0200)]
Fix XSS on field_str in db_search.php.
Michal Čihař [Tue, 17 Aug 2010 13:30:47 +0000 (17 15:30 +0200)]
Generate new token on forcible generating of session id.
Michal Čihař [Tue, 17 Aug 2010 11:38:37 +0000 (17 13:38 +0200)]
Ignore non default themes in git.
Michal Čihař [Tue, 17 Aug 2010 11:36:41 +0000 (17 13:36 +0200)]
Update translation based on current master branch.
Marc Delisle [Tue, 10 Aug 2010 21:55:04 +0000 (10 17:55 -0400)]
bug #
3042706 [pmadb] Relations, bookmarks, etc deleted after table drop
Marc Delisle [Sat, 7 Aug 2010 11:08:11 +0000 (7 07:08 -0400)]
Withdraw or edit FAQ entries related to older MySQL or PHP
Marc Delisle [Sat, 7 Aug 2010 10:27:04 +0000 (7 06:27 -0400)]
bug #
3040226 [XHTML] LockFromUpdate checkbox not checked by default
Marc Delisle [Thu, 5 Aug 2010 16:22:56 +0000 (5 12:22 -0400)]
patch #
3039269 [dbi] Wrong variable checked for nopassword option
Will Palmer [Wed, 4 Aug 2010 08:32:58 +0000 (4 09:32 +0100)]
bug [mysqli] non-global $cfg referenced where $GLOBAL['cfg'] expected
Marc Delisle [Sun, 1 Aug 2010 10:17:03 +0000 (1 06:17 -0400)]
bug #
3036132 [core] Triggers not fetched if dbname has an hyphen
Marc Delisle [Sat, 31 Jul 2010 19:06:28 +0000 (31 15:06 -0400)]
incorrect HTML entity
Marc Delisle [Sat, 31 Jul 2010 18:54:05 +0000 (31 14:54 -0400)]
bug #
3034026 [confirmation] TRUNCATE queries get no confirmation request
Michal Čihař [Mon, 26 Jul 2010 16:29:37 +0000 (26 18:29 +0200)]
Merge branch 'MAINT_3_3_5' into QA_3_3
Marc Delisle [Mon, 26 Jul 2010 16:27:30 +0000 (26 12:27 -0400)]
3.3.5 release
Marc Delisle [Mon, 26 Jul 2010 16:26:41 +0000 (26 12:26 -0400)]
3.3.5 release
Michal Čihař [Mon, 26 Jul 2010 13:51:26 +0000 (26 15:51 +0200)]
bug #
3031705 [core] Fix generating condition for real numbers by comparing them to string.
Michal Čihař [Mon, 26 Jul 2010 13:45:36 +0000 (26 15:45 +0200)]
Revert "bug #
3031705 [core] Do not use CONCAT for DECIMAL fields."
This reverts commit
ef500cd23fd863e62bf810537776b45a4ed76c34.
We probably need to use CONCAT still, just the other side should be
converted to string as well.
Marc Delisle [Sun, 25 Jul 2010 17:32:35 +0000 (25 13:32 -0400)]
bug #
3033063 [core] Navi gets wrong db name
Marc Delisle [Sun, 25 Jul 2010 11:53:41 +0000 (25 07:53 -0400)]
Merge branch 'MAINT_3_3_5' into QA_3_3
Marc Delisle [Sun, 25 Jul 2010 11:53:07 +0000 (25 07:53 -0400)]
bug [scripts] MySQL 5.5.5 does not accept TIMESTAMP(14) in create_tables.sql
Michal Čihař [Tue, 20 Jul 2010 12:41:29 +0000 (20 14:41 +0200)]
Merge remote branch 'origin/MAINT_3_3_5' into QA_3_3
Michal Čihař [Tue, 20 Jul 2010 12:37:53 +0000 (20 14:37 +0200)]
bug #
3031705 [core] Do not use CONCAT for DECIMAL fields.
Marc Delisle [Sun, 18 Jul 2010 18:34:32 +0000 (18 14:34 -0400)]
3.3.6-dev
Marc Delisle [Sun, 18 Jul 2010 18:31:53 +0000 (18 14:31 -0400)]
3.3.5-rc1
Marc Delisle [Sat, 17 Jul 2010 13:54:54 +0000 (17 09:54 -0400)]
typo
Dieter Adriaenssens [Wed, 14 Jul 2010 20:29:26 +0000 (14 22:29 +0200)]
Converting number of Excel column names no longer limited
Dieter Adriaenssens [Tue, 13 Jul 2010 21:39:42 +0000 (13 23:39 +0200)]
remove todo, after upgrade PHPExcel
Dieter Adriaenssens [Tue, 13 Jul 2010 21:23:51 +0000 (13 23:23 +0200)]
Convert Excel column name correctly
Dieter Adriaenssens [Wed, 26 May 2010 19:24:26 +0000 (26 21:24 +0200)]
cleanup (re)moved files
Dieter Adriaenssens [Thu, 3 Jun 2010 18:35:06 +0000 (3 20:35 +0200)]
Update library PHPExcel to version 1.7.3c
Dieter Adriaenssens [Tue, 25 May 2010 20:10:48 +0000 (25 22:10 +0200)]
Update library PHPExcel to version 1.7.3
Dieter Adriaenssens [Sun, 2 May 2010 19:01:53 +0000 (2 21:01 +0200)]
upgrade to PHPExcel 1.7.2
Dieter Adriaenssens [Sun, 2 May 2010 18:20:06 +0000 (2 20:20 +0200)]
upgrade to PHPExcel 1.7.0
Marc Delisle [Mon, 12 Jul 2010 13:00:39 +0000 (12 09:00 -0400)]
typo
Marc Delisle [Mon, 12 Jul 2010 12:56:30 +0000 (12 08:56 -0400)]
bug [export] CSV for MS Excel (Windows) should have semi-colon as separator
Marc Delisle [Sun, 11 Jul 2010 12:00:42 +0000 (11 08:00 -0400)]
bug #
3023507 [core] No result set display from stored procedure SELECT
Marc Delisle [Sat, 10 Jul 2010 12:01:07 +0000 (10 08:01 -0400)]
bug #
3027557 [PHP] split() deprecated in PHP 5.3 (backport fixes from master, todo: update PHP excel?)
Marc Delisle [Thu, 8 Jul 2010 11:49:11 +0000 (8 07:49 -0400)]
bug #
3026400 [PHP] ereg functions are deprecated
Marc Delisle [Wed, 7 Jul 2010 13:44:44 +0000 (7 09:44 -0400)]
remove reference to some old stuff
Marc Delisle [Wed, 7 Jul 2010 11:03:31 +0000 (7 07:03 -0400)]
improve English
Marc Delisle [Wed, 7 Jul 2010 10:13:06 +0000 (7 06:13 -0400)]
revert to previous value and add a comment in default configuration file
Marc Delisle [Tue, 6 Jul 2010 20:58:13 +0000 (6 16:58 -0400)]
bug #
3025975 [auth] Odd LoginCookieValidity default value
Marc Delisle [Fri, 2 Jul 2010 16:28:44 +0000 (2 12:28 -0400)]
document MemoryLimit as being a string value
Marc Delisle [Fri, 2 Jul 2010 16:26:54 +0000 (2 12:26 -0400)]
bug #
3024344 [setup] Setup forces numeric MemoryLimit
Marc Delisle [Fri, 2 Jul 2010 15:22:36 +0000 (2 11:22 -0400)]
clarify code behavior
Marc Delisle [Thu, 1 Jul 2010 11:50:29 +0000 (1 07:50 -0400)]
new FAQ 6.26, selecting a range of rows
Marc Delisle [Thu, 1 Jul 2010 11:34:55 +0000 (1 07:34 -0400)]
typo
Marc Delisle [Wed, 30 Jun 2010 15:35:46 +0000 (30 11:35 -0400)]
bug: avoid loading twice a js file
Marc Delisle [Wed, 30 Jun 2010 13:35:44 +0000 (30 09:35 -0400)]
clarify what is meant by "put the table name"
Marc Delisle [Tue, 29 Jun 2010 12:14:31 +0000 (29 08:14 -0400)]
bug [replication] Do not offer information_schema in the list of databases
Marc Delisle [Tue, 29 Jun 2010 11:48:28 +0000 (29 07:48 -0400)]
bug #
3022705 [import] Import button does not work in Catalan when there is no progress bar possible
Michal Čihař [Mon, 28 Jun 2010 11:48:34 +0000 (28 13:48 +0200)]
Merge remote branch 'origin/MAINT_3_3_4' into QA_3_3
Marc Delisle [Mon, 28 Jun 2010 11:37:55 +0000 (28 07:37 -0400)]
3.3.4 release
Marc Delisle [Mon, 28 Jun 2010 11:36:13 +0000 (28 07:36 -0400)]
3.3.4 release
Stéphane Pontier [Thu, 24 Jun 2010 14:01:21 +0000 (24 10:01 -0400)]
patch #
2932113 Slow export when having lots of databases
Michal Čihař [Sun, 20 Jun 2010 14:24:28 +0000 (20 16:24 +0200)]
Merge branch 'MAINT_3_3_4' into QA_3_3
Conflicts:
Documentation.html
README
libraries/Config.class.php
translators.html
Michal Čihař [Sun, 20 Jun 2010 14:22:54 +0000 (20 16:22 +0200)]
Sort language files.
Michal Čihař [Sun, 20 Jun 2010 14:20:16 +0000 (20 16:20 +0200)]
Update translation based on ones in master.
Michal Čihař [Sun, 20 Jun 2010 14:15:38 +0000 (20 16:15 +0200)]
Fixup of language update script.
Marc Delisle [Sun, 20 Jun 2010 10:25:07 +0000 (20 06:25 -0400)]
3.3.5-dev
Marc Delisle [Sun, 20 Jun 2010 10:20:39 +0000 (20 06:20 -0400)]
3.3.4-rc1
Marc Delisle [Sun, 20 Jun 2010 10:01:52 +0000 (20 06:01 -0400)]
3.3.4-rc1
Marc Delisle [Fri, 18 Jun 2010 16:46:52 +0000 (18 12:46 -0400)]
specific PBMS version supported
Marc Delisle [Sun, 13 Jun 2010 12:42:24 +0000 (13 08:42 -0400)]
bug #
2986422 [import] Results for query are not displayed
Michal Čihař [Fri, 11 Jun 2010 10:41:18 +0000 (11 12:41 +0200)]
[engines] Fix getting InnoDB status.
Isaac Bennetch [Tue, 8 Jun 2010 16:41:26 +0000 (8 12:41 -0400)]
patch #
3013264 FAQ 1.40 correction
Marc Delisle [Sat, 5 Jun 2010 12:20:36 +0000 (5 08:20 -0400)]
bug #
3011126 [display] Edit link missing after long query
Michal Čihař [Thu, 3 Jun 2010 12:47:12 +0000 (3 14:47 +0200)]
Update translations from master branch.
Michal Čihař [Thu, 3 Jun 2010 12:46:59 +0000 (3 14:46 +0200)]
Fix some unicode problems with the script.
Marc Delisle [Wed, 2 Jun 2010 16:32:54 +0000 (2 12:32 -0400)]
bug [privileges] List of tables not shown when the db name has a wildcard
Marc Delisle [Tue, 1 Jun 2010 16:34:57 +0000 (1 12:34 -0400)]
bug [synchronize] Rows were deleted in target table regardless of the "Would you like to delete..." option
Marc Delisle [Mon, 31 May 2010 14:55:49 +0000 (31 10:55 -0400)]
French update