Introduce Adminer::headers method

This commit is contained in:
Jakub Vrana 2010-10-17 22:13:32 +02:00
parent 1cd506ee1e
commit 9db4259409
4 changed files with 13 additions and 1 deletions

View file

@ -32,6 +32,13 @@ class Adminer {
return DB;
}
/** Headers to send before HTML output
* @return null
*/
function headers() {
header("X-Frame-Options: deny"); // ClickJacking protection in IE8, Safari 4, Chrome 2, Firefox NoScript plugin
}
/** Print login form
* @return null
*/

View file

@ -9,7 +9,7 @@
function page_header($title, $error = "", $breadcrumb = array(), $title2 = "") {
global $LANG, $HTTPS, $adminer, $connection, $drivers;
header("Content-Type: text/html; charset=utf-8");
header("X-Frame-Options: deny"); // ClickJacking protection in IE8, Safari 4, Chrome 2, Firefox NoScript plugin
$adminer->headers();
$title_all = $title . ($title2 != "" ? ": " . h($title2) : "");
$protocol = ($HTTPS ? "https" : "http");
?>

View file

@ -1,6 +1,7 @@
Adminer 3.0.1-dev:
Send the form by Ctrl+Enter in all textareas
Disable creating SQLite databases with extension other than db, sdb, sqlite
Ability to use Adminer in a frame through customization
Catalan translation
MS SQL 2005 compatibility
PostgreSQL: connect if the eponymous database does not exist

View file

@ -26,6 +26,10 @@ class Adminer {
);
}
function headers() {
header("X-Frame-Options: deny");
}
function loginForm() {
?>
<table cellspacing="0">