Commit graph

103 commits

Author SHA1 Message Date
yusuke.kawai.sg 951a08c972 Removed check to reject server URL path added in version 4.8.4. The server URL path is required by the Oracle Database service name. 2024-04-10 14:40:44 +09:00
Peter Knut bad57d349e Change 'Invalid credentials.' message 2024-03-23 18:58:39 +01:00
Peter Knut 27132d1175 Validate server input
- Allow only scheme, host and port in the server field.
- Use proper default host and port in Elasticsearch and ClickHouse driver.
2024-03-23 18:45:39 +01:00
adminerevo 6283155f69 First bunch of fixes for PHP8.3 2023-11-17 06:24:10 +01:00
Lionel Laffineur 496ab9a262 Regenerated language files and added missing french translations 2023-07-01 21:07:09 +02:00
Lionel Laffineur e3c1f24ad6 Code cosmetics : removed trailing tabs 2023-05-21 15:03:36 +02:00
Jakub Vrana ccb7442d1b Fix more PHP 8 warnings (bug #781) 2021-02-12 09:53:20 +01:00
Jakub Vrana 63484fb875 Remove newline before error message 2021-02-08 16:06:22 +01:00
Jakub Vrana 3d88cc2c8e Display CSRF logout error after connecting
Context: https://sourceforge.net/p/adminer/discussion/960418/thread/74e1d2d4bc/
2021-02-07 14:23:46 +01:00
David Grudl 6e5315349b fixed Unsupported operand types when $port is socket 2021-02-07 09:31:28 +01:00
Jakub Vrana 35bfaa7506 Improve check for numeric ports (bug #769) 2020-12-06 13:14:41 +01:00
Jakub Vrana 0293613c21 Disallow connecting to ports > 65535 (bug #730) 2020-01-30 17:13:17 +01:00
Jakub Vrana 15900301ee Do not attempt logging in without password (bug #676) 2019-05-14 09:07:51 +02:00
Jakub Vrana 0f08592bc0 Warn when using password with leading or trailing spaces 2018-09-13 16:08:57 +02:00
Jakub Vrana a5cbad504c Update donation link 2018-09-06 17:22:56 +02:00
Jakub Vrana 3f4f3454f8 Centralize stopping session 2018-02-20 23:14:36 +01:00
Jakub Vrana 846435aef8 Stop session before connecting (thanks to Kareem Zidane) 2018-02-20 23:11:05 +01:00
Jakub Vrana cf7fe88990 Display notification about performing action after relogin 2018-02-08 16:49:56 +01:00
Jakub Vrana 964a988fef Avoid Invalid credentials with no credentials 2018-02-07 16:29:57 +01:00
Jakub Vrana cac523402a Display Invalid credentials if connection error is empty 2018-02-07 11:37:53 +01:00
Jakub Vrana a137f248f7 Translate message added in 4.4.0 2018-01-24 18:22:20 +01:00
Jakub Vrana 03e3f517a8 Extract file_open_lock and file_write_unlock 2018-01-24 12:04:53 +01:00
Jakub Vrana b14aa75a98 Hide window.opener from pages opened in a new window (bug #561) 2018-01-23 12:53:22 +01:00
Jakub Vrana 3b4ce4a0b4 Fix single driver non-MySQL compiled versions (regression from 150301ed) 2018-01-22 11:42:17 +01:00
Jakub Vrana 0fae40fb61 Disallow connecting to privileged ports (thanks to hyp3rlinx) 2018-01-16 11:18:32 +01:00
Jakub Vrana 0e5df34ea8 Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx) 2018-01-16 11:17:25 +01:00
Jakub Vrana c0a3f30060 Add a donate link 2017-04-16 10:42:27 +02:00
Jakub Vrana 2d6451b99a Improve SQLite login error message 2017-03-01 11:23:20 +01:00
Jakub Vrana 7a33661b72 SQLite: Require credentials to use (thanks to Vincent Waart) 2016-06-01 09:59:20 -07:00
Jakub Vrana a01b2efc22 Change links to HTTPS 2015-09-10 09:26:36 -07:00
Jakub Vrana c990de3b3e Fix XSS in login form (bug #436) 2015-02-07 10:40:51 -08:00
Jakub Vrana 536e9a58ad Improve CSRF message 2014-10-28 09:24:13 -07:00
Jakub Vrana 594085c6f5 Send 403 for auth error 2014-09-14 14:49:33 -07:00
Jakub Vrana ad96c516ac Rename variable to reduce confusion 2014-04-21 09:45:15 -07:00
Jakub Vrana ee124dadb1 Silence error for unwriteable file 2014-03-25 09:35:49 -07:00
Jakub Vrana 06f4346cfe Prevent against brute force login attempts from the same IP address 2014-03-21 22:47:57 -07:00
Jakub Vrana ef81b5c1b2 SQLite: Ignore server, username and password 2014-02-21 08:53:58 -08:00
Jakub Vrana 1602db304a Document password functions 2014-02-19 09:27:22 -08:00
Jakub Vrana 150301ed5f Allow using in ->login() (bug #381) 2014-02-07 19:35:26 -08:00
Jakub Vrana 6acf188c2f Don't store invalid credentials to session (bug #376) 2014-01-30 10:28:05 -08:00
Jakub Vrana 0830f5ce89 Add sefeguard agains null 2014-01-10 11:16:36 -08:00
Jakub Vrana 372a0e22a7 Fix saving permanent login 2013-10-24 22:40:05 -07:00
Jakub Vrana a564bba261 Protect CSRF token against BREACH 2013-10-24 19:10:50 -07:00
Jakub Vrana 994fa4f1ea Save bytes 2013-08-11 09:29:41 -07:00
Jakub Vrana 6160604023 Encrypt passwords stored in session by a key stored in cookie (thanks to Michal Spacek) 2013-08-11 09:26:18 -07:00
Jakub Vrana 1bdb65c4dc Save bytes 2013-08-10 19:21:23 -07:00
Jakub Vrana c0fe3a6ff7 Prepare for crypting passwords stored in session 2013-08-10 19:21:18 -07:00
Jakub Vrana 1f7fa44923 Abstract DELETE, INSERT and INSERT+UPDATE 2013-07-09 10:34:52 -07:00
Jakub Vrana 48356d8d4f Rename variable 2013-07-05 08:28:37 -07:00
Jakub Vrana 1aa3144d05 Use stricter regexp in URL 2013-07-03 10:34:19 -07:00