Introduce Adminer::headers method

This commit is contained in:
Jakub Vrana 2010-10-17 22:13:32 +02:00
parent 1cd506ee1e
commit 9db4259409
4 changed files with 13 additions and 1 deletions

View file

@ -32,6 +32,13 @@ class Adminer {
return DB; return DB;
} }
/** Headers to send before HTML output
* @return null
*/
function headers() {
header("X-Frame-Options: deny"); // ClickJacking protection in IE8, Safari 4, Chrome 2, Firefox NoScript plugin
}
/** Print login form /** Print login form
* @return null * @return null
*/ */

View file

@ -9,7 +9,7 @@
function page_header($title, $error = "", $breadcrumb = array(), $title2 = "") { function page_header($title, $error = "", $breadcrumb = array(), $title2 = "") {
global $LANG, $HTTPS, $adminer, $connection, $drivers; global $LANG, $HTTPS, $adminer, $connection, $drivers;
header("Content-Type: text/html; charset=utf-8"); header("Content-Type: text/html; charset=utf-8");
header("X-Frame-Options: deny"); // ClickJacking protection in IE8, Safari 4, Chrome 2, Firefox NoScript plugin $adminer->headers();
$title_all = $title . ($title2 != "" ? ": " . h($title2) : ""); $title_all = $title . ($title2 != "" ? ": " . h($title2) : "");
$protocol = ($HTTPS ? "https" : "http"); $protocol = ($HTTPS ? "https" : "http");
?> ?>

View file

@ -1,6 +1,7 @@
Adminer 3.0.1-dev: Adminer 3.0.1-dev:
Send the form by Ctrl+Enter in all textareas Send the form by Ctrl+Enter in all textareas
Disable creating SQLite databases with extension other than db, sdb, sqlite Disable creating SQLite databases with extension other than db, sdb, sqlite
Ability to use Adminer in a frame through customization
Catalan translation Catalan translation
MS SQL 2005 compatibility MS SQL 2005 compatibility
PostgreSQL: connect if the eponymous database does not exist PostgreSQL: connect if the eponymous database does not exist

View file

@ -26,6 +26,10 @@ class Adminer {
); );
} }
function headers() {
header("X-Frame-Options: deny");
}
function loginForm() { function loginForm() {
?> ?>
<table cellspacing="0"> <table cellspacing="0">