Commit graph

539 commits

Author SHA1 Message Date
Jakub Vrana 187dd56b1c Release 4.4.0 2018-01-17 12:41:38 +01:00
Jakub Vrana 0268aba85a Avoid count(null) 2018-01-16 16:22:24 +01:00
Jakub Vrana 0fae40fb61 Disallow connecting to privileged ports (thanks to hyp3rlinx) 2018-01-16 11:18:32 +01:00
Jakub Vrana 0e5df34ea8 Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx) 2018-01-16 11:17:25 +01:00
Jakub Vrana 80d030f51a Disallow scripts without nonce 2018-01-13 22:19:16 +01:00
Jakub Vrana 3fe0d88f98 Editor: Fix Search data in tables 2018-01-12 23:59:04 +01:00
Jakub Vrana e614ae08c4 Add Content Security Policy 2018-01-11 18:39:49 +01:00
Jakub Vrana 552d2a6be4 Always send security headers in customization 2018-01-11 18:39:49 +01:00
Jakub Vrana 415253b1b1 Add nosniff header 2018-01-11 18:39:22 +01:00
Jakub Vrana 3de101dff4 Editor: Fix doubleclick on database page 2018-01-11 17:24:57 +01:00
Jakub Vrana 72b199378a Prevent PHP 7.1 warning about non-numeric values 2018-01-11 16:22:29 +01:00
Jakub Vrana 7bcba262df Editor: Display field comment's text inside [] only in edit form 2017-10-01 08:45:17 -07:00
Jakub Vrana b10e9e127e Add Hebrew translation 2017-09-09 12:06:14 +02:00
Lukas Tribus 32f1e856ad Editor: Don't set time zone from PHP
Current implementation checks the delta between the local time and
UTC, and applies the delta as time zone for MySQL.

This assumption is wrong if the current time is DST enabled, but the
time that is converted isn't - and vice versa.

For example, Europe/Prague is "CET-1CEST,M3.5.0,M10.5.0/3", when
the MySQL connections is setup now (September, DST enabled) and
we are reading a TIMESTAMP from November, then MySQL applies +0200
instead of +0100 to that timestamp even though November is supposed
to be DST disabled.

There is no reliable and portable way in PHP to understand the
time zone, especially since PHP >= 5.4.0 ignores environment
variable and OS settings [1].

MySQL needs to be properly setup (TZ data loaded [2] and default
TZ set [3]), then everything will work just fine.

The current implementation however causes wrong data 50% of the
time, even when OS/MySQL/PHP is properly setup. As a MySQL
connection will converte timestamps from both DST enabled and
DST disabled dates, a static UTC offset must never be set at
connection level (set time_zone = ...).

This change removes the current implementation, therefor maintaining
OS/MySQL defaults, fixing the DST issue in properly configured
environments.

[1] http://php.net/manual/en/function.date-default-timezone-get.php
[2] https://dev.mysql.com/doc/refman/5.5/en/mysql-tzinfo-to-sql.html
[3] https://dev.mysql.com/doc/refman/5.5/en/time-zone-support.html
2017-09-09 11:44:42 +02:00
Jakub Vrana 70aef8a55a MySQL: Remove dedicated view for replication status 2017-05-19 11:11:44 +02:00
Jakub Vrana 0b824dad29 Sort table names (bug #552) 2017-05-19 10:57:20 +02:00
Jakub Vrana 7af1ee3702 Release 4.3.1 2017-04-14 09:48:11 +02:00
Jakub Vrana 3cbece1ec0 Fix SQL command autofocus 2017-04-09 12:30:34 +02:00
Jakub Vrana 0d73372c50 Add a todo 2017-04-09 12:13:18 +02:00
Jakub Vrana fb7bd02713 Don't overwrite previous cookies (bug #539) 2017-04-09 11:04:57 +02:00
Jakub Vrana 504c56216c PostgreSQL: Support JSON and JSONB data types (bug #542) 2017-04-08 19:59:13 +02:00
Deni 105aca9b04 Fix PostgreSQL nullable fields in export 2017-04-08 19:37:56 +02:00
Jakub Vrana f556f6acb1 PostgreSQL: Fix index size computation in PostgreSQL < 9.0 (reverts 4c78976c) 2017-04-08 19:33:46 +02:00
Jakub Vrana 22d0cf4171 Release 4.3.0 2017-03-15 18:24:12 +01:00
Jakub Vrana fa0963f370 Reorder changelog 2017-03-15 16:57:58 +01:00
Jakub Vrana b616c57352 MySQL: Support JSON data type 2017-03-10 08:15:52 +01:00
Jakub Vrana 50390ea38c Support MySQL 8 2017-03-09 18:52:00 +01:00
Jakub Vrana 46f39f3cdb Bump version 2017-02-21 12:07:13 +01:00
Jakub Vrana 9df33e82e6 Elasticsearch: Support HTTPS by inputting https://server (bug #446) 2017-02-20 18:06:14 +01:00
Jakub Vrana d5b329a1a4 MySQL: Support spatial indexes (bug #455) 2017-02-20 17:25:34 +01:00
Matthew Gamble 2a534798fa Add basic support for MySQL replication 2017-02-20 12:54:40 +01:00
Lubor Bilek 32334f1106 PostgreSQL export: table structure, columns, sequences, indexes, foreign keys, comments, trigger definition 2017-02-19 09:26:47 +01:00
Jakub Vrana 45712a5d4c Document changes 2017-02-18 17:37:12 +01:00
Jakub Vrana 9bb75e1230 Add accessibility labels to databases and tables checkboxes 2017-01-23 14:05:47 -08:00
Jakub Vrana af25827ff4 Add Cache-Control: immutable to static files 2016-09-27 21:53:11 -07:00
Jakub Vrana 9872229e11 Make maxlength in edit fields a soft limit 2016-09-19 10:12:33 -07:00
Jakub Vrana 682e86d236 Add accessibility labels to Create Table fields 2016-09-19 15:33:12 +02:00
Jakub Vrana f0a5fb56a5 Update Indonesian translation (thanks to Benny) 2016-07-22 17:30:38 +02:00
Jakub Vrana 53dfafd2ea Release 4.2.5 2016-06-01 10:09:29 -07:00
Jakub Vrana 7a33661b72 SQLite: Require credentials to use (thanks to Vincent Waart) 2016-06-01 09:59:20 -07:00
Jakub Vrana a5b65fba5b Fix remote execution in SQLite query (thanks to Vincent Waart) 2016-06-01 09:56:40 -07:00
Bernhard J. M. Gruen 3289eca040 improved kill command support for MySQL and initial support for PgSQL 2016-02-28 12:27:45 -08:00
Jakub Vrana 49e2ac4559 Release 4.2.4 2016-02-06 11:10:16 -08:00
Jakub Vrana e5352cc5ac Fix remote execution in SQLite query (discovered by 庞申杰(千霄)) 2016-02-06 11:00:19 -08:00
Jakub Vrana 0bb5a52dc4 Add Finnish translation 2016-02-06 10:50:57 -08:00
Jakub Vrana 37b9f0ec01 Add Bosnian translation 2016-02-01 09:10:07 -08:00
Jakub Vrana b317fe156a Support PHP 7 2016-01-24 12:02:41 -08:00
Jakub Vrana f83e3f41d2 Release 4.2.3 2015-11-15 10:49:48 -08:00
Jakub Vrana 4be0b6655e Fix XSS in indexes (non-MySQL only) 2015-11-08 12:12:16 -08:00
Jakub Vrana 0a31742ee8 Add Bulgarian translation 2015-11-01 11:33:04 -08:00