Commit graph

102 commits

Author SHA1 Message Date
Peter Knut bad57d349e Change 'Invalid credentials.' message 2024-03-23 18:58:39 +01:00
Peter Knut 27132d1175 Validate server input
- Allow only scheme, host and port in the server field.
- Use proper default host and port in Elasticsearch and ClickHouse driver.
2024-03-23 18:45:39 +01:00
adminerevo 6283155f69 First bunch of fixes for PHP8.3 2023-11-17 06:24:10 +01:00
Lionel Laffineur 496ab9a262 Regenerated language files and added missing french translations 2023-07-01 21:07:09 +02:00
Lionel Laffineur e3c1f24ad6 Code cosmetics : removed trailing tabs 2023-05-21 15:03:36 +02:00
Jakub Vrana ccb7442d1b Fix more PHP 8 warnings (bug #781) 2021-02-12 09:53:20 +01:00
Jakub Vrana 63484fb875 Remove newline before error message 2021-02-08 16:06:22 +01:00
Jakub Vrana 3d88cc2c8e Display CSRF logout error after connecting
Context: https://sourceforge.net/p/adminer/discussion/960418/thread/74e1d2d4bc/
2021-02-07 14:23:46 +01:00
David Grudl 6e5315349b fixed Unsupported operand types when $port is socket 2021-02-07 09:31:28 +01:00
Jakub Vrana 35bfaa7506 Improve check for numeric ports (bug #769) 2020-12-06 13:14:41 +01:00
Jakub Vrana 0293613c21 Disallow connecting to ports > 65535 (bug #730) 2020-01-30 17:13:17 +01:00
Jakub Vrana 15900301ee Do not attempt logging in without password (bug #676) 2019-05-14 09:07:51 +02:00
Jakub Vrana 0f08592bc0 Warn when using password with leading or trailing spaces 2018-09-13 16:08:57 +02:00
Jakub Vrana a5cbad504c Update donation link 2018-09-06 17:22:56 +02:00
Jakub Vrana 3f4f3454f8 Centralize stopping session 2018-02-20 23:14:36 +01:00
Jakub Vrana 846435aef8 Stop session before connecting (thanks to Kareem Zidane) 2018-02-20 23:11:05 +01:00
Jakub Vrana cf7fe88990 Display notification about performing action after relogin 2018-02-08 16:49:56 +01:00
Jakub Vrana 964a988fef Avoid Invalid credentials with no credentials 2018-02-07 16:29:57 +01:00
Jakub Vrana cac523402a Display Invalid credentials if connection error is empty 2018-02-07 11:37:53 +01:00
Jakub Vrana a137f248f7 Translate message added in 4.4.0 2018-01-24 18:22:20 +01:00
Jakub Vrana 03e3f517a8 Extract file_open_lock and file_write_unlock 2018-01-24 12:04:53 +01:00
Jakub Vrana b14aa75a98 Hide window.opener from pages opened in a new window (bug #561) 2018-01-23 12:53:22 +01:00
Jakub Vrana 3b4ce4a0b4 Fix single driver non-MySQL compiled versions (regression from 150301ed) 2018-01-22 11:42:17 +01:00
Jakub Vrana 0fae40fb61 Disallow connecting to privileged ports (thanks to hyp3rlinx) 2018-01-16 11:18:32 +01:00
Jakub Vrana 0e5df34ea8 Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx) 2018-01-16 11:17:25 +01:00
Jakub Vrana c0a3f30060 Add a donate link 2017-04-16 10:42:27 +02:00
Jakub Vrana 2d6451b99a Improve SQLite login error message 2017-03-01 11:23:20 +01:00
Jakub Vrana 7a33661b72 SQLite: Require credentials to use (thanks to Vincent Waart) 2016-06-01 09:59:20 -07:00
Jakub Vrana a01b2efc22 Change links to HTTPS 2015-09-10 09:26:36 -07:00
Jakub Vrana c990de3b3e Fix XSS in login form (bug #436) 2015-02-07 10:40:51 -08:00
Jakub Vrana 536e9a58ad Improve CSRF message 2014-10-28 09:24:13 -07:00
Jakub Vrana 594085c6f5 Send 403 for auth error 2014-09-14 14:49:33 -07:00
Jakub Vrana ad96c516ac Rename variable to reduce confusion 2014-04-21 09:45:15 -07:00
Jakub Vrana ee124dadb1 Silence error for unwriteable file 2014-03-25 09:35:49 -07:00
Jakub Vrana 06f4346cfe Prevent against brute force login attempts from the same IP address 2014-03-21 22:47:57 -07:00
Jakub Vrana ef81b5c1b2 SQLite: Ignore server, username and password 2014-02-21 08:53:58 -08:00
Jakub Vrana 1602db304a Document password functions 2014-02-19 09:27:22 -08:00
Jakub Vrana 150301ed5f Allow using in ->login() (bug #381) 2014-02-07 19:35:26 -08:00
Jakub Vrana 6acf188c2f Don't store invalid credentials to session (bug #376) 2014-01-30 10:28:05 -08:00
Jakub Vrana 0830f5ce89 Add sefeguard agains null 2014-01-10 11:16:36 -08:00
Jakub Vrana 372a0e22a7 Fix saving permanent login 2013-10-24 22:40:05 -07:00
Jakub Vrana a564bba261 Protect CSRF token against BREACH 2013-10-24 19:10:50 -07:00
Jakub Vrana 994fa4f1ea Save bytes 2013-08-11 09:29:41 -07:00
Jakub Vrana 6160604023 Encrypt passwords stored in session by a key stored in cookie (thanks to Michal Spacek) 2013-08-11 09:26:18 -07:00
Jakub Vrana 1bdb65c4dc Save bytes 2013-08-10 19:21:23 -07:00
Jakub Vrana c0fe3a6ff7 Prepare for crypting passwords stored in session 2013-08-10 19:21:18 -07:00
Jakub Vrana 1f7fa44923 Abstract DELETE, INSERT and INSERT+UPDATE 2013-07-09 10:34:52 -07:00
Jakub Vrana 48356d8d4f Rename variable 2013-07-05 08:28:37 -07:00
Jakub Vrana 1aa3144d05 Use stricter regexp in URL 2013-07-03 10:34:19 -07:00
Jakub Vrana 2e32bf1f97 Suggest using adminer.sql 2013-06-24 06:12:13 -07:00