Developers June 2006

developers@phpmyadmin.net

8 participants
14 discussions

[Phpmyadmin-devel] Documentation.html and FAQ numbers
by Marc Delisle 09 Jun '06

09 Jun '06

Hi, not sure if this bug https://sourceforge.net/tracker/index.php?func=detail&aid=1446538&group_id=… was discussed in this list. Anyway due to poor support from some popular browser I also think we should go back to the non-CSS way of displaying the FAQ numbers. Marc

1 0

[Phpmyadmin-devel] cookie restriction
by Marc Delisle 01 Jun '06

01 Jun '06

Hi, ok, so in 2.8.2 we add in doc + release notes the restriction about cookies. In 2.9.0, we detect if cookies are disabled. If so, we inform the user (implies a new message, this is why I push it to 2.9.0), then we a) refuse to work? b) accept to work but with broken output? Marc

1 1

[Phpmyadmin-devel] Fw: no documentation
by Michal Čihař 01 Jun '06

01 Jun '06

Hi all there seems to be problem with our website: Begin forwarded message: Date: Wed, 31 May 2006 06:45:06 -0700 From: "Duke" <dukes909(a)users.sourceforge.net> To: nijel(a)users.sourceforge.net Cc: dukes909(a)users.sourceforge.net Subject: no documentation Message body follows: There's no documentation when going to the phpMyadmin documentation page (or FAQ or anything else). Just blank pages. -- Michal Čihař | http://cihar.com | http://blog.cihar.com

2 1

Re: [Phpmyadmin-devel] Re: token and cookies
by Sebastian Mendel 01 Jun '06

01 Jun '06

Micheal Winger schrieb: > You guys really need a secure forum to talk through, heh. > > Here is a suggestion (keep in mind though I am not entirely aware of > security flaws of how things are done with stuff.. and you guys can > entirely dismiss this idea if you see fit). > > When a user first logs in, it gives them a url to use (one specific to > that computer alone) but of course that also then poses the problem of > computers on a network, if it is able to grab network IP's you could > match that as well, then phpMyAdmin would lock that url code with that > IP. this code would then be included on all urls inside the use of > phpMyAdmin to keep track of the user. If the user then goes to use > phpMyAdmin on another computer, they would have to log another code for > that computer. you cannot bind the ip to the session, as you cannot ensure that a user uses only one IP (proxy array) and not all proxies deliver the forwarded-for header. > This at least takes away the possibility of people stealing other > peoples urls as every time the page is loaded it would be verified, > however.. this method also imposes an obligation on the user to either > bookmark the url and not lose it, or to keep it somewhere safe where > they wouldn't misplace it. Such a url would also have to be lengthy in > order to have a large amount of people using the system. > > This could be an option in the config as a seperate method? I don't know > if there are security flaws or any undesired measures in here, you guys > can do with it what you will.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

Developers June 2006