- Git - lists.phpmyadmin.net

[phpmyadmin/phpmyadmin] b71aee: Disable sending referer
by Michal Čihař 01 Mar '16

01 Mar '16

Branch: refs/heads/master Home: https://github.com/phpmyadmin/phpmyadmin Commit: b71aeefa3abb70e379daf4b801ec4a542403b4fb https://github.com/phpmyadmin/phpmyadmin/commit/b71aeefa3abb70e379daf4b801e… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M libraries/Header.php Log Message: ----------- Disable sending referer We don't use it and this can help us get rid of url.php once the browser support is good enough (as usual, there is no support in IE and broken support in Edge right now). Signed-off-by: Michal Čihař <michal(a)cihar.com>

1 0

[phpmyadmin/phpmyadmin] 3a6a9a: Escape query when displaying
by Isaac Bennetch 01 Mar '16

01 Mar '16

Branch: refs/heads/QA_4_5 Home: https://github.com/phpmyadmin/phpmyadmin Commit: 3a6a9a807d99371ee126635e1a505fc1fe0df32c https://github.com/phpmyadmin/phpmyadmin/commit/3a6a9a807d99371ee126635e1a5… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M libraries/sql-parser/src/Utils/Error.php Log Message: ----------- Escape query when displaying Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: 7877a9c0084bf8ae15cbd8d2729b126271f682cc https://github.com/phpmyadmin/phpmyadmin/commit/7877a9c0084bf8ae15cbd8d2729… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M js/functions.js Log Message: ----------- Escape SQL query for inline editing Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: 16a6a02fca663264de9b034f4acad9c92295586f https://github.com/phpmyadmin/phpmyadmin/commit/16a6a02fca663264de9b034f4ac… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M libraries/tcpdf/include/tcpdf_static.php Log Message: ----------- Avoid skipping the SSL certificate check in TCPDF This code is never used in phpMyAdmin, but we fix it just to avoid potential security reports. Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: e42b7e3aedd29dd0f7a48575f20bfc5aca0ff976 https://github.com/phpmyadmin/phpmyadmin/commit/e42b7e3aedd29dd0f7a48575f20… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M libraries/Config.class.php M test/classes/PMA_Config_test.php Log Message: ----------- Bring back SSL certificate validation Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: 983faa94f161df3623ecd371d3696a1b3f91c15f https://github.com/phpmyadmin/phpmyadmin/commit/983faa94f161df3623ecd371d36… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M templates/database/structure/sortable_header.phtml Log Message: ----------- Fix XSS in database structure page Forward ported commit 90df124797175688a63be0d0a311210e92f09895 Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: 38fa1191049ac0c626a6684eea52068dfbbb5078 https://github.com/phpmyadmin/phpmyadmin/commit/38fa1191049ac0c626a6684eea5… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M libraries/Config.class.php Log Message: ----------- Urlencode hostname This can come from the HTTP header, so we need to be sure to sanitize it. Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: 746240bd13b62b5956fc34389cfbdc09e1e67775 https://github.com/phpmyadmin/phpmyadmin/commit/746240bd13b62b5956fc34389cf… Author: Madhura Jayaratne <madhura.cj(a)gmail.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M normalization.php Log Message: ----------- Fix XSS in normalization Signed-off-by: Madhura Jayaratne <madhura.cj(a)gmail.com> Commit: e65f375918a1eef5b1289d890ced645d3925464a https://github.com/phpmyadmin/phpmyadmin/commit/e65f375918a1eef5b1289d890ce… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M ChangeLog M libraries/plugins/export/ExportSql.class.php Log Message: ----------- Merge branch 'MAINT_4_5_5' into MAINT_4_5_5-security Commit: c842a0de9288033d25404d1d6eb22dd83033675f https://github.com/phpmyadmin/phpmyadmin/commit/c842a0de9288033d25404d1d6eb… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M file_echo.php Log Message: ----------- Use correct headers for json data It was previously not marked as such what could potentially lead to browsers doing some autodetection. Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: b3d36dc836df31a7d1b1c4f61f578a9b42bd1f98 https://github.com/phpmyadmin/phpmyadmin/commit/b3d36dc836df31a7d1b1c4f61f5… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M libraries/Config.class.php M test/classes/PMA_Config_test.php Log Message: ----------- Merge pull request #23 from phpmyadmin/ssl-cert Bring back SSL certificate validation Commit: f33a42f1da9db943a67bda7d29f7dd91957a8e7e https://github.com/phpmyadmin/phpmyadmin/commit/f33a42f1da9db943a67bda7d29f… Author: Madhura Jayaratne <madhura.cj(a)gmail.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M js/functions.js M js/normalization.js Log Message: ----------- Fix XSS in normalization.js Signed-off-by: Madhura Jayaratne <madhura.cj(a)gmail.com> Commit: 37c34d089aa19f30d11203bb0c7f85b486424372 https://github.com/phpmyadmin/phpmyadmin/commit/37c34d089aa19f30d11203bb0c7… Author: Madhura Jayaratne <madhura.cj(a)gmail.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M js/normalization.js Log Message: ----------- Escape selectors Signed-off-by: Madhura Jayaratne <madhura.cj(a)gmail.com> Commit: 9bce7dafaf746559c617f674e27b9c0f75ae97a2 https://github.com/phpmyadmin/phpmyadmin/commit/9bce7dafaf746559c617f674e27… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-25 (Thu, 25 Feb 2016) Changed paths: M ChangeLog Log Message: ----------- Add changes for security issues Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: bcd4ce8cba1272fca52f2331c08f2e3ac19cbbef https://github.com/phpmyadmin/phpmyadmin/commit/bcd4ce8cba1272fca52f2331c08… Author: Madhura Jayaratne <madhura.cj(a)gmail.com> Date: 2016-02-27 (Sat, 27 Feb 2016) Changed paths: M js/normalization.js Log Message: ----------- Fix XSS in normalization.js Signed-off-by: Madhura Jayaratne <madhura.cj(a)gmail.com> Commit: ab1283e8366c97a155d4e9ae58628a248458ea32 https://github.com/phpmyadmin/phpmyadmin/commit/ab1283e8366c97a155d4e9ae586… Author: Madhura Jayaratne <madhura.cj(a)gmail.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M libraries/server_privileges.lib.php Log Message: ----------- Fix XSS in User accounts page Signed-off-by: Madhura Jayaratne <madhura.cj(a)gmail.com> Commit: cc55f44a4a90147a007dee1aefa1cb529e23798b https://github.com/phpmyadmin/phpmyadmin/commit/cc55f44a4a90147a007dee1aefa… Author: Madhura Jayaratne <madhura.cj(a)gmail.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M db_central_columns.php Log Message: ----------- Fix XSS in Central columns page Signed-off-by: Madhura Jayaratne <madhura.cj(a)gmail.com> Commit: 4650ad7fbde189678d180b8f294af3591f50b829 https://github.com/phpmyadmin/phpmyadmin/commit/4650ad7fbde189678d180b8f294… Author: Madhura Jayaratne <madhura.cj(a)gmail.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M templates/table/search/input_box.phtml M templates/table/search/rows_zoom.phtml Log Message: ----------- A better way of escaping Signed-off-by: Madhura Jayaratne <madhura.cj(a)gmail.com> Commit: 41c4e0214c286f28830cca54423b5db57e7c0ce4 https://github.com/phpmyadmin/phpmyadmin/commit/41c4e0214c286f28830cca54423… Author: Madhura Jayaratne <madhura.cj(a)gmail.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M libraries/controllers/TableSearchController.class.php Log Message: ----------- Fix XSS in zoom search Signed-off-by: Madhura Jayaratne <madhura.cj(a)gmail.com> Commit: 2925d6468b60363669a08cfd8e689c1a05191744 https://github.com/phpmyadmin/phpmyadmin/commit/2925d6468b60363669a08cfd8e6… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M templates/table/search/input_box.phtml M templates/table/search/rows_zoom.phtml Log Message: ----------- Merge pull request #29 from phpmyadmin/escape A better way of escaping Commit: 3c583b86d46f72f3ac331fea64fa02c3fbf38561 https://github.com/phpmyadmin/phpmyadmin/commit/3c583b86d46f72f3ac331fea64f… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M ChangeLog M libraries/sql-parser/autoload.php Log Message: ----------- Merge branch 'MAINT_4_5_5' into MAINT_4_5_5-security Commit: 51a0d2f25a71432570f59dd9053b9dbbc93733b3 https://github.com/phpmyadmin/phpmyadmin/commit/51a0d2f25a71432570f59dd9053… Author: Isaac Bennetch <bennetch(a)gmail.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M ChangeLog M README M doc/conf.py M libraries/Config.class.php Log Message: ----------- 4.5.5.1 release Signed-off-by: Isaac Bennetch <bennetch(a)gmail.com> Compare: https://github.com/phpmyadmin/phpmyadmin/compare/88e0944cfd6c...51a0d2f25a71

1 0

[phpmyadmin/phpmyadmin] 3c583b: Merge branch 'MAINT_4_5_5' into MAINT_4_5_5-securi...
by Michal Čihař 01 Mar '16

01 Mar '16

Branch: refs/heads/QA_4_6 Home: https://github.com/phpmyadmin/phpmyadmin Commit: 3c583b86d46f72f3ac331fea64fa02c3fbf38561 https://github.com/phpmyadmin/phpmyadmin/commit/3c583b86d46f72f3ac331fea64f… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M ChangeLog M libraries/sql-parser/autoload.php Log Message: ----------- Merge branch 'MAINT_4_5_5' into MAINT_4_5_5-security Commit: 51a0d2f25a71432570f59dd9053b9dbbc93733b3 https://github.com/phpmyadmin/phpmyadmin/commit/51a0d2f25a71432570f59dd9053… Author: Isaac Bennetch <bennetch(a)gmail.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M ChangeLog M README M doc/conf.py M libraries/Config.class.php Log Message: ----------- 4.5.5.1 release Signed-off-by: Isaac Bennetch <bennetch(a)gmail.com> Commit: 9eee3353a6141342f8b109d09737afde5550daf9 https://github.com/phpmyadmin/phpmyadmin/commit/9eee3353a6141342f8b109d0973… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M ChangeLog Log Message: ----------- Merge branch 'QA_4_5' into QA_4_6 Compare: https://github.com/phpmyadmin/phpmyadmin/compare/12bf06e0166a...9eee3353a614

1 0

[phpmyadmin/phpmyadmin] 3c583b: Merge branch 'MAINT_4_5_5' into MAINT_4_5_5-securi...
by Michal Čihař 01 Mar '16

01 Mar '16

Branch: refs/heads/master Home: https://github.com/phpmyadmin/phpmyadmin Commit: 3c583b86d46f72f3ac331fea64fa02c3fbf38561 https://github.com/phpmyadmin/phpmyadmin/commit/3c583b86d46f72f3ac331fea64f… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M ChangeLog M libraries/sql-parser/autoload.php Log Message: ----------- Merge branch 'MAINT_4_5_5' into MAINT_4_5_5-security Commit: 51a0d2f25a71432570f59dd9053b9dbbc93733b3 https://github.com/phpmyadmin/phpmyadmin/commit/51a0d2f25a71432570f59dd9053… Author: Isaac Bennetch <bennetch(a)gmail.com> Date: 2016-02-29 (Mon, 29 Feb 2016) Changed paths: M ChangeLog M README M doc/conf.py M libraries/Config.class.php Log Message: ----------- 4.5.5.1 release Signed-off-by: Isaac Bennetch <bennetch(a)gmail.com> Commit: 9eee3353a6141342f8b109d09737afde5550daf9 https://github.com/phpmyadmin/phpmyadmin/commit/9eee3353a6141342f8b109d0973… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M ChangeLog Log Message: ----------- Merge branch 'QA_4_5' into QA_4_6 Commit: 4efb1c8a595f0fcbef5aad4d7460ec7b228f0cc4 https://github.com/phpmyadmin/phpmyadmin/commit/4efb1c8a595f0fcbef5aad4d746… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M ChangeLog Log Message: ----------- Merge branch 'QA_4_6' Commit: 380deb4f3956cba4a6f5e3781cc0c0d14752556d https://github.com/phpmyadmin/phpmyadmin/commit/380deb4f3956cba4a6f5e3781cc… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M libraries/session.inc.php M libraries/session.lib.php Log Message: ----------- Share code for generating token There is no need to have two copies of that. Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: b856502d6443a41b1772661ad9f33da01758d7e9 https://github.com/phpmyadmin/phpmyadmin/commit/b856502d6443a41b1772661ad9f… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M libraries/plugins/auth/AuthenticationCookie.php M libraries/session.lib.php Log Message: ----------- Prefer phpseclib if avaible It does better decisions about which backend to use than simply using openssl. Signed-off-by: Michal Čihař <michal(a)cihar.com> Compare: https://github.com/phpmyadmin/phpmyadmin/compare/eb536f2c764d...b856502d6443

1 0

[phpmyadmin/phpmyadmin] 12bf06: Add changelog for issue #12055
by Michal Čihař 01 Mar '16

01 Mar '16

Branch: refs/heads/QA_4_6 Home: https://github.com/phpmyadmin/phpmyadmin Commit: 12bf06e0166a6779b88e2c6f1a28edde546f9682 https://github.com/phpmyadmin/phpmyadmin/commit/12bf06e0166a6779b88e2c6f1a2… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M ChangeLog Log Message: ----------- Add changelog for issue #12055 Signed-off-by: Michal Čihař <michal(a)cihar.com>

1 0

[phpmyadmin/phpmyadmin] 12bf06: Add changelog for issue #12055
by Michal Čihař 01 Mar '16

01 Mar '16

Branch: refs/heads/master Home: https://github.com/phpmyadmin/phpmyadmin Commit: 12bf06e0166a6779b88e2c6f1a28edde546f9682 https://github.com/phpmyadmin/phpmyadmin/commit/12bf06e0166a6779b88e2c6f1a2… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M ChangeLog Log Message: ----------- Add changelog for issue #12055 Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: eb536f2c764d06b78db0be8734adf235adf95066 https://github.com/phpmyadmin/phpmyadmin/commit/eb536f2c764d06b78db0be8734a… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M ChangeLog Log Message: ----------- Merge branch 'QA_4_6' Compare: https://github.com/phpmyadmin/phpmyadmin/compare/4dce6ec2db40...eb536f2c764d

1 0

[phpmyadmin/phpmyadmin] a6b3a9: Fix error when we can not generate random string
by Michal Čihař 01 Mar '16

01 Mar '16

Branch: refs/heads/QA_4_6 Home: https://github.com/phpmyadmin/phpmyadmin Commit: a6b3a9ce5132af6000d204760b9bfd51cd3e0ac8 https://github.com/phpmyadmin/phpmyadmin/commit/a6b3a9ce5132af6000d204760b9… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M ChangeLog M libraries/session.inc.php Log Message: ----------- Fix error when we can not generate random string Fixes #12056 Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: 02aa0729dcb876e0c87f6744309b6e5880f4e663 https://github.com/phpmyadmin/phpmyadmin/commit/02aa0729dcb876e0c87f6744309… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M libraries/Util.php M libraries/core.lib.php Log Message: ----------- Make PMA_fatalError work even early The messaging framework can not make assumptions about available objects as this doesn't have to be satisfied in early PMA_fatalError case. Issue #12056 Signed-off-by: Michal Čihař <michal(a)cihar.com> Compare: https://github.com/phpmyadmin/phpmyadmin/compare/8eee22be3ae7...02aa0729dcb8

1 0

[phpmyadmin/phpmyadmin] a6b3a9: Fix error when we can not generate random string
by Michal Čihař 01 Mar '16

01 Mar '16

Branch: refs/heads/master Home: https://github.com/phpmyadmin/phpmyadmin Commit: a6b3a9ce5132af6000d204760b9bfd51cd3e0ac8 https://github.com/phpmyadmin/phpmyadmin/commit/a6b3a9ce5132af6000d204760b9… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M ChangeLog M libraries/session.inc.php Log Message: ----------- Fix error when we can not generate random string Fixes #12056 Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: 02aa0729dcb876e0c87f6744309b6e5880f4e663 https://github.com/phpmyadmin/phpmyadmin/commit/02aa0729dcb876e0c87f6744309… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M libraries/Util.php M libraries/core.lib.php Log Message: ----------- Make PMA_fatalError work even early The messaging framework can not make assumptions about available objects as this doesn't have to be satisfied in early PMA_fatalError case. Issue #12056 Signed-off-by: Michal Čihař <michal(a)cihar.com> Commit: 4dce6ec2db4001c5af5c8dae7c077334c55c145a https://github.com/phpmyadmin/phpmyadmin/commit/4dce6ec2db4001c5af5c8dae7c0… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M ChangeLog M libraries/Util.php M libraries/core.lib.php M libraries/session.inc.php Log Message: ----------- Merge branch 'QA_4_6' Compare: https://github.com/phpmyadmin/phpmyadmin/compare/faa1229ed7ee...4dce6ec2db40

1 0

[phpmyadmin/website] cfb2b8: Adjust sponsors alt text
by Michal Čihař 01 Mar '16

01 Mar '16

Branch: refs/heads/master Home: https://github.com/phpmyadmin/website Commit: cfb2b88f58b61a9e0ac46942e2c81937f4234394 https://github.com/phpmyadmin/website/commit/cfb2b88f58b61a9e0ac46942e2c819… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: M pmaweb/templates/_sponsors.html M pmaweb/templates/sponsors.html Log Message: ----------- Adjust sponsors alt text Signed-off-by: Michal Čihař <michal(a)cihar.com>

1 0

[phpmyadmin/website] afae12: Add new gold sponsor
by Michal Čihař 01 Mar '16

01 Mar '16

Branch: refs/heads/master Home: https://github.com/phpmyadmin/website Commit: afae129c8bd0cbd8c37bb4e7784d1cf0ecb21d9c https://github.com/phpmyadmin/website/commit/afae129c8bd0cbd8c37bb4e7784d1c… Author: Michal Čihař <michal(a)cihar.com> Date: 2016-03-01 (Tue, 01 Mar 2016) Changed paths: A pmaweb/static/images/chameleon-john.png M pmaweb/templates/_sponsors.html M pmaweb/templates/sponsors.html Log Message: ----------- Add new gold sponsor Signed-off-by: Michal Čihař <michal(a)cihar.com>

1 0