Commit graph

1291 commits

Author SHA1 Message Date
Jakub Vrana 8b8cfd9f04 Respect empty tableName in tablesPrint 2018-02-08 10:35:54 +01:00
Jakub Vrana 686865bc10 Sticky position of table actions 2018-02-08 00:14:32 +01:00
Jakub Vrana 964a988fef Avoid Invalid credentials with no credentials 2018-02-07 16:29:57 +01:00
Jakub Vrana ca336427f5 Do not wrap alter table thead 2018-02-07 14:22:58 +01:00
Jakub Vrana 8a75cbc630 Add version() to use in plugins 2018-02-07 12:49:53 +01:00
Jakub Vrana 42eec7d728 Support connecting to MySQL via SSL 2018-02-07 12:13:58 +01:00
Jakub Vrana cac523402a Display Invalid credentials if connection error is empty 2018-02-07 11:37:53 +01:00
Jakub Vrana 19653de764 PostgreSQL: Unescape bytea fields 2018-02-06 16:05:50 +01:00
Jakub Vrana 29c127e94a Save bytes 2018-02-06 15:54:19 +01:00
Jakub Vrana 17b110f0d5 PostgreSQL: Upload binary files to bytea fields 2018-02-06 15:42:14 +01:00
Jakub Vrana b649fb2f3f Allow using number_type() as pattern 2018-02-06 14:52:12 +01:00
Jakub Vrana d3914ea58e Translate thousands separator in JS 2018-02-06 14:47:43 +01:00
Jakub Vrana d43b773214 Move tableCheck() below </form> 2018-02-06 13:53:15 +01:00
Jakub Vrana f09a04ed09 Pass operator from db.inc.php 2018-02-06 13:51:56 +01:00
Jakub Vrana d7f9b6b5de PostgreSQL: Cast to string when searching using LIKE (bug #325) 2018-02-06 13:51:53 +01:00
Jakub Vrana 197abdcb70 MySQL: Support non-utf8 charset in search in column 2018-02-06 13:51:23 +01:00
Jakub Vrana c52fb951b0 Do not modify $_GET["where"] 2018-02-06 13:00:17 +01:00
Jakub Vrana 14429ff355 Display empty operator as LIKE %% 2018-02-06 12:56:18 +01:00
Jakub Vrana 967d5c64a3 Avoid deprecated each() 2018-02-06 12:49:39 +01:00
Jakub Vrana c34ada5368 PostgreSQL: Fix condition for selecting no rows 2018-02-06 12:43:10 +01:00
Jakub Vrana 2d7bda4d1e Fix error display in Search tables 2018-02-06 12:40:28 +01:00
Jakub Vrana 6cfb3676a7 PostgreSQL: Don't treat interval type as number (bug #474) 2018-02-06 12:17:01 +01:00
Jakub Vrana 89ceb06208 Use primary key instead of LIMIT 1 if available 2018-02-05 11:21:19 +01:00
Jakub Vrana d2ed0f7810 Release 4.6.0 2018-02-05 09:30:33 +01:00
Jakub Vrana 3b55c4c0f7 Fix 5.1 being displayed as 5.09999... 2018-02-05 08:42:25 +01:00
Jakub Vrana c75096f173 Space between DB and Use 2018-02-01 22:22:29 +01:00
Jakub Vrana c0b2c506bc Translate DB 2018-02-01 22:20:56 +01:00
Jakub Vrana 09920e0056 Fix count_rows with more than one group by column 2018-02-01 20:45:49 +01:00
Jakub Vrana 685bf29abc Use separator in limit1 2018-02-01 18:53:53 +01:00
Jakub Vrana 52d98e16fa PostgreSQL: Limit rows in data manipulation without unique key 2018-02-01 16:58:01 +01:00
Jakub Vrana e55f0d7cb2 MySQL: Add FIND_IN_SET search operator 2018-02-01 15:25:38 +01:00
Jakub Vrana 2e6190fdf1 Fix links to PostgreSQL 10 documentation 2018-02-01 14:02:25 +01:00
Jakub Vrana ae91088cb3 Don't display warnings for failed queries 2018-02-01 13:16:37 +01:00
Jakub Vrana 51a574926d Fix variable name 2018-02-01 13:08:28 +01:00
Jakub Vrana 532a4ee083 Reorder variables 2018-02-01 12:27:22 +01:00
Jakub Vrana be75939344 Print warnings in call 2018-02-01 11:58:04 +01:00
Jakub Vrana d667f585e0 Pass start time to selectQuery 2018-02-01 11:54:56 +01:00
Jakub Vrana e9add6d985 Return string from warnings() 2018-02-01 11:43:44 +01:00
Jakub Vrana e3346fb0bc Display warnings in messages 2018-02-01 09:21:50 +01:00
Jakub Vrana ae2ea56681 Show select warnings 2018-02-01 08:59:46 +01:00
Colin Mollenhour 080fd0f374 Support X-Forwarded-Prefix (e.g. Traefik PathPrefixStrip feature) 2018-01-31 20:38:14 +01:00
Jakub Vrana 40038d4210 Fix return type 2018-01-31 18:29:01 +01:00
Jakub Vrana 2adc174541 MySQL: Display warnings in SQL command 2018-01-31 17:28:12 +01:00
Jakub Vrana 2fb2d208c0 Quote default values not starting with a letter 2018-01-31 16:46:50 +01:00
Jakub Vrana 4de6e3180d Stop redirecting links via adminer.org 2018-01-31 11:11:34 +01:00
Jakub Vrana 8829ccdf93 Fix min_version use 2018-01-30 23:53:04 +01:00
Jakub Vrana 0320bcdda6 Quote dates in default value 2018-01-30 17:00:34 +01:00
Jakub Vrana 851700516d Fully support functions in default values 2018-01-30 16:50:37 +01:00
Jakub Vrana 4bb2f806b1 PostgreSQL: Allow now() as default value (bug #525) 2018-01-30 16:24:31 +01:00
Jakub Vrana cc31a69b65 Fix edit_type after 1f21cd43 2018-01-30 16:21:04 +01:00
Jakub Vrana 1f21cd4329 PostgreSQL: Allow creating trigger functions 2018-01-30 15:55:50 +01:00
Jakub Vrana e81334ef87 PostgreSQL: Support functions 2018-01-30 15:18:26 +01:00
Jakub Vrana 75450548b3 Support JSON since MariaDB 10.2 (bug #590) 2018-01-29 21:08:38 +01:00
Jakub Vrana c3b4208853 Use min_version 2018-01-29 20:54:24 +01:00
Jakub Vrana d38c673e2a Add min_version 2018-01-29 19:34:26 +01:00
Pisyek 224ddb5a33 add malay translation 2018-01-29 18:25:58 +01:00
Jakub Vrana 8d0cbb6eb4 Fix counting selected rows after going back to select page 2018-01-26 08:52:12 +01:00
Jakub Vrana 536999d4dc Release 4.5.0 2018-01-24 21:55:47 +01:00
Jakub Vrana a954f7d4b4 Simplify drop object confirmation questions 2018-01-24 18:36:19 +01:00
Jakub Vrana a137f248f7 Translate message added in 4.4.0 2018-01-24 18:22:20 +01:00
Jakub Vrana 95d02bb924 Display name of the object in confirmation when dropping it 2018-01-24 18:13:05 +01:00
Jakub Vrana 25f9655a38 Avoid CONVERT() except in MySQL (bug #509) 2018-01-24 17:37:14 +01:00
Jakub Vrana 919204dd38 Bump version 2018-01-24 16:51:53 +01:00
Jakub Vrana 8b29ae910f Verify if adminer.version was created on www.adminer.org 2018-01-24 15:10:44 +01:00
Jakub Vrana 6c96b060e7 Store current Adminer version server-side to avoid excessive requests 2018-01-24 15:09:11 +01:00
Jakub Vrana f4662d5e27 Send token as last param 2018-01-24 13:44:31 +01:00
Jakub Vrana b15618fcfd Allow using adminer.invalid by other users in a group 2018-01-24 12:11:26 +01:00
Jakub Vrana 03e3f517a8 Extract file_open_lock and file_write_unlock 2018-01-24 12:04:53 +01:00
Jakub Vrana f0d2af329a Display boolean values as code (bug #562) 2018-01-24 10:53:25 +01:00
Jakub Vrana b14aa75a98 Hide window.opener from pages opened in a new window (bug #561) 2018-01-23 12:53:22 +01:00
Jakub Vrana 6d774794c8 Add plugin for switching designs 2018-01-23 12:15:38 +01:00
Jakub Vrana 0cdd8beab1 Editor: Fix displaying of false values in PostgreSQL (bug #568) 2018-01-23 11:02:15 +01:00
Jakub Vrana 7b9d5a29aa Decrease float precision (bug #578) 2018-01-23 10:52:57 +01:00
Andrea Giacobino 5cc831c1e1 Add ability to override file name (path) when loading dump from webserver 2018-01-23 09:24:57 +01:00
Jakub Vrana 72aa3c5127 Support current_timestamp() as default of time fields (bug #572) 2018-01-23 08:36:11 +01:00
Jakub Vrana 43ccfcef8f Display newlines in column comments (bug #573) 2018-01-22 21:05:56 +01:00
Jakub Vrana 993dce398d PostgreSQL: Export DROP SEQUENCE if dropping table 2018-01-22 14:33:21 +01:00
Jakub Vrana 923c0ffc87 Fix whitespace 2018-01-22 13:51:47 +01:00
Jakub Vrana 48ed20323f CSP: Allow any CSS 2018-01-22 12:22:25 +01:00
Jakub Vrana 3b4ce4a0b4 Fix single driver non-MySQL compiled versions (regression from 150301ed) 2018-01-22 11:42:17 +01:00
Peter Knut fef1808288 Encapsulate fulltext part in search box into <div> 2018-01-22 10:53:50 +01:00
Jakub Vrana bc14e8432f Select numeric database name in DB list (bug #580) 2018-01-19 17:39:27 +01:00
Jakub Vrana 329b7de9cc CSP: Allow any images, media and fonts, disallow base-uri 2018-01-19 11:05:26 +01:00
Jakub Vrana 1b98a10100 Adminer: Fix Search data in tables 2018-01-19 10:46:35 +01:00
Jakub Vrana 187dd56b1c Release 4.4.0 2018-01-17 12:41:38 +01:00
Jakub Vrana ba9099f084 Allow sending multiple CSP headers 2018-01-17 11:05:59 +01:00
Jakub Vrana 756e304c92 Set session cache limiter only without session.auto_start (bug #586) 2018-01-16 16:56:14 +01:00
Jakub Vrana e762a6aa95 Add missing newline 2018-01-16 16:44:49 +01:00
Jakub Vrana 0268aba85a Avoid count(null) 2018-01-16 16:22:24 +01:00
Jakub Vrana 0fae40fb61 Disallow connecting to privileged ports (thanks to hyp3rlinx) 2018-01-16 11:18:32 +01:00
Jakub Vrana 0e5df34ea8 Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx) 2018-01-16 11:17:25 +01:00
Jakub Vrana f3938c1a66 Use HTTPS 2018-01-14 11:03:54 +01:00
Jakub Vrana 07aa80048a Use HTTPS in doc_link() 2018-01-14 10:38:01 +01:00
Jakub Vrana 6d14b47d02 Fix select function onchange 2018-01-14 10:18:38 +01:00
Jakub Vrana cc268428b8 Fix SQL command toggle 2018-01-14 00:10:42 +01:00
Jakub Vrana 80d030f51a Disallow scripts without nonce 2018-01-13 22:19:16 +01:00
Jakub Vrana e23da5da0e Fix wrapping in Create table 2018-01-13 17:40:21 +01:00
Jakub Vrana 9d532fc0a1 Use script_src for <script src> 2018-01-13 16:25:11 +01:00
Jakub Vrana 144c7de27f Fix typo in script() 2018-01-13 15:23:47 +01:00
Jakub Vrana b7fcebfba8 Do not send empty CSP 2018-01-13 14:21:54 +01:00
Jakub Vrana 3fe0d88f98 Editor: Fix Search data in tables 2018-01-12 23:59:04 +01:00
Jakub Vrana 001c37e240 Use <script> instead of inline event handler for skipping original 2018-01-12 23:27:14 +01:00
Jakub Vrana b6cc584f48 Move inline event handlers to <script> 2018-01-12 22:46:16 +01:00
Jakub Vrana af1ad47a64 Return false from editingMoveRow() 2018-01-12 22:35:05 +01:00
Jakub Vrana 2eaac2e94e Move inline event handlers to <script> 2018-01-12 22:25:38 +01:00
Jakub Vrana 40abffe8de Use oninput instead of onchange 2018-01-12 22:18:54 +01:00
Jakub Vrana 259a465125 Move inline event handlers to <script> 2018-01-12 21:57:54 +01:00
Jakub Vrana 6353a89816 Use oninput instead of onkeyup 2018-01-12 18:46:44 +01:00
Jakub Vrana 38aac7ada2 Move inline event handlers to <script> 2018-01-12 18:34:19 +01:00
Jakub Vrana 24245867d7 Use <script> instead of inline event handler in on_help() 2018-01-12 18:11:00 +01:00
Jakub Vrana 1459df56bc Move inline event handlers to <script> 2018-01-12 17:59:46 +01:00
Jakub Vrana 0411495d20 Move inline event handlers to <script> 2018-01-12 17:19:47 +01:00
Jakub Vrana 5e9df49fd1 Move inline event handlers to <script> 2018-01-12 17:11:29 +01:00
Jakub Vrana 068ee71bf7 Return false from editingRemoveRow 2018-01-12 17:11:29 +01:00
Jakub Vrana e645693147 Use script() for <script> 2018-01-12 17:10:33 +01:00
Jakub Vrana 12fbfc9847 Move inline event handlers to <script> 2018-01-12 17:09:41 +01:00
Jakub Vrana 6b2ba65084 Use <script> instead of inline event handler in print_fieldset() 2018-01-12 17:09:41 +01:00
Jakub Vrana a5ee3451ac Use <script> instead of inline event handler in confirm() 2018-01-12 17:09:41 +01:00
Jakub Vrana da671df728 Move inline event handlers to <script> 2018-01-12 17:09:41 +01:00
Jakub Vrana 650221357d Return false from ajaxSetHtml() 2018-01-12 17:09:41 +01:00
Jakub Vrana d996b48cfa Move inline event handlers to <script> 2018-01-12 17:09:41 +01:00
Jakub Vrana 36edd445a6 Move inline event handlers to <script> 2018-01-12 17:09:41 +01:00
Jakub Vrana 7305783c21 Return false from toggle() 2018-01-12 17:09:41 +01:00
Jakub Vrana ee3a88d574 onchange='selectFieldChange 2018-01-12 17:09:41 +01:00
Jakub Vrana e5c52589ec Use @this in selectFieldChange 2018-01-12 17:09:41 +01:00
Jakub Vrana 3b0e1cf289 Move inline event handlers to <script> 2018-01-12 17:09:41 +01:00
Jakub Vrana 813ada6661 Revert using @this in formChecked 2018-01-11 18:58:00 +01:00
Jakub Vrana 4be72a2a0d Allow customizing CSP 2018-01-11 18:39:49 +01:00
Jakub Vrana 541c3c1fed Allow img-src data: common in skins 2018-01-11 18:39:49 +01:00
Jakub Vrana 3408d4ad78 Use JSON.parse if available 2018-01-11 18:39:49 +01:00
Jakub Vrana e614ae08c4 Add Content Security Policy 2018-01-11 18:39:49 +01:00
Jakub Vrana 552d2a6be4 Always send security headers in customization 2018-01-11 18:39:49 +01:00
Jakub Vrana 415253b1b1 Add nosniff header 2018-01-11 18:39:22 +01:00
Jakub Vrana d07b7e3773 Use Referrer-Policy instead of <meta name="referrer">
To make securityheaders.io happy.

Also fix a typo in the value (https://lists.w3.org/Archives/Public/public-webappsec/2015May/0059.html).
2018-01-11 18:38:15 +01:00
Jakub Vrana 14778165a8 Use @this in JavaScript (prepares for removing inline event handlers) 2018-01-11 17:01:29 +01:00
Jakub Vrana 72b199378a Prevent PHP 7.1 warning about non-numeric values 2018-01-11 16:22:29 +01:00
Jakub Vrana 329fa55af5 Unindent doc-comments 2018-01-11 15:14:05 +01:00
Jakub Vrana dc85ba2d86 Delete type="text/javascript" from <script> as it is the default in HTML5 2018-01-11 14:13:43 +01:00
Jakub Vrana 741b76fbd4 Replace getElementsByTagName by shortcut for querySelectorAll 2018-01-11 14:00:04 +01:00
Jakub Vrana 9cb281868f Replace getElementById by shortcut for querySelector (requires IE8) 2018-01-11 13:51:32 +01:00
Jakub Vrana 7bcba262df Editor: Display field comment's text inside [] only in edit form 2017-10-01 08:45:17 -07:00
Jakub Vrana b10e9e127e Add Hebrew translation 2017-09-09 12:06:14 +02:00
Jakub Vrana 70aef8a55a MySQL: Remove dedicated view for replication status 2017-05-19 11:11:44 +02:00
Jakub Vrana c0a3f30060 Add a donate link 2017-04-16 10:42:27 +02:00
Jakub Vrana 7af1ee3702 Release 4.3.1 2017-04-14 09:48:11 +02:00
Jakub Vrana fb7bd02713 Don't overwrite previous cookies (bug #539) 2017-04-09 11:04:57 +02:00
Andre Polykanine A.K.A. Menelion Elensúlë b585ee8261 Updating Russian translation 2017-04-08 19:41:36 +02:00
Jakub Vrana f556f6acb1 PostgreSQL: Fix index size computation in PostgreSQL < 9.0 (reverts 4c78976c) 2017-04-08 19:33:46 +02:00
Jakub Vrana 22d0cf4171 Release 4.3.0 2017-03-15 18:24:12 +01:00
Jakub Vrana 8fd7ff0187 Highlight JSON 2017-03-10 08:56:58 +01:00
Jakub Vrana e040b296c5 Print number of bytes in blob in italics 2017-03-10 08:19:58 +01:00
Jakub Vrana 9d7d30891e Use SameSite cookies (except session cookie) 2017-03-07 18:12:23 +01:00
Jakub Vrana 4cf73abccd Rely on noreferrer in Firefox too 2017-03-01 11:35:01 +01:00
Jakub Vrana 2d6451b99a Improve SQLite login error message 2017-03-01 11:23:20 +01:00
Jakub Vrana 46f39f3cdb Bump version 2017-02-21 12:07:13 +01:00
Jakub Vrana 346353153d Unindent 2017-02-20 19:28:16 +01:00
Jakub Vrana fa6865da6a Use 'Create database' instead of 'Create new database' 2017-02-20 16:47:03 +01:00
Jakub Vrana 63b6b99365 Support high Unicode characters in shorten_utf8 (bug #481) 2017-02-20 16:22:30 +01:00
Jakub Vrana a0a1476e5b Fix where() escaping in MS SQL (bug #496) 2017-02-20 15:23:22 +01:00
Matthew Gamble 2a534798fa Add basic support for MySQL replication 2017-02-20 12:54:40 +01:00
Adam Kuśmierz a062e9cc58 Checkbox for bool in psql 2017-02-20 12:31:36 +01:00
Jonathan Vollebregt 64a49e95e8 Add javascript move for editing 2017-02-19 13:55:50 +01:00
Peter Knut c9801e2e24 Tables list implemented as <ul>
Encapsulation of list items is necessery for advanced CSS themes.
2017-02-19 11:39:04 +01:00
Mathieu Rochette 4cfe6263d9 fix logger for SQL commands 2017-02-19 11:00:07 +01:00
Kakysha 4a69059e1b Edit json and jsonb types in textarea 2017-02-19 10:02:51 +01:00
K0n24d 1d0607177d Do not set input type as numeric if field is an array 2017-02-19 09:45:05 +01:00
nafex 47c582acb3 make bytea fields shortable 2017-02-19 09:30:39 +01:00
Matthew Gamble 76612b1e8a Move rendering of table structure and indexes list into plugin system
This allows the creation of a plugin to extend the display of either or
both of these things.
2017-02-18 19:15:23 +01:00
Janne Cederberg dedbd01f64 Tabs must also be escaped in JSON strings
If database table data contains tab characters (0x09) then those
must also be escaped along with newlines and carriage returns for
the resulting JSON file to be valid.
2017-02-18 17:51:55 +01:00
soleuu 1a6186648c postgresql error with index on hidden columns (ctid) 2017-02-18 17:41:45 +01:00
Charles Wu 73690164b7 Added pdo_dblib as a driver for MSSQL (as native MSSQL driver does not exist for PHP7) 2017-02-18 17:35:36 +01:00
shaununderwood 3a1c251065 Changed 'undefined' to 'null'
'undefined' is not a valid JSON attribute value and should been 'null'
2017-02-18 17:32:40 +01:00
soleuu 86e26846a8 postgresql : ERROR: function connection_id() does not exist 2017-02-18 17:32:40 +01:00
Jakub Vrana dc9ae77e2f Fix error found by PHPStan 2017-02-16 19:05:45 +01:00
Jakub Vrana 2cee788ad3 Add accessibility labels to Indexes 2017-01-23 14:29:00 -08:00
Jakub Vrana 9bb75e1230 Add accessibility labels to databases and tables checkboxes 2017-01-23 14:05:47 -08:00
Jakub Vrana 7099560add Escape quote in field name to make it work in Chrome (thanks to zcepenela pani) 2017-01-23 13:30:05 -08:00
Jakub Vrana 949b913d4f Change comment not supported by compile.php 2016-09-27 22:04:44 -07:00
Jakub Vrana 9872229e11 Make maxlength in edit fields a soft limit 2016-09-19 10:12:33 -07:00
Jakub Vrana 682e86d236 Add accessibility labels to Create Table fields 2016-09-19 15:33:12 +02:00
Jakub Vrana f0a5fb56a5 Update Indonesian translation (thanks to Benny) 2016-07-22 17:30:38 +02:00
Jakub Vrana 53dfafd2ea Release 4.2.5 2016-06-01 10:09:29 -07:00
Jakub Vrana 7a33661b72 SQLite: Require credentials to use (thanks to Vincent Waart) 2016-06-01 09:59:20 -07:00
Bernhard J. M. Gruen 3289eca040 improved kill command support for MySQL and initial support for PgSQL 2016-02-28 12:27:45 -08:00
Jakub Vrana 49e2ac4559 Release 4.2.4 2016-02-06 11:10:16 -08:00
Jakub Vrana 0bb5a52dc4 Add Finnish translation 2016-02-06 10:50:57 -08:00
Jakub Vrana 37b9f0ec01 Add Bosnian translation 2016-02-01 09:10:07 -08:00
Jakub Vrana b317fe156a Support PHP 7 2016-01-24 12:02:41 -08:00
Jakub Vrana f83e3f41d2 Release 4.2.3 2015-11-15 10:49:48 -08:00
Jakub Vrana aa40e803e2 Add escaping (not fixing any XSS) 2015-11-08 12:15:45 -08:00
Jakub Vrana 0a31742ee8 Add Bulgarian translation 2015-11-01 11:33:04 -08:00
David Grudl a6ebd4a3e0 uses PHP 5 constructors 2015-11-01 11:08:46 -08:00
Jakub Vrana 79d438ed80 Add Galician translation 2015-09-22 08:29:49 -07:00
Jakub Vrana 35b71f0472 Add Greek translation 2015-09-20 11:09:34 -07:00
Jakub Vrana a01b2efc22 Change links to HTTPS 2015-09-10 09:26:36 -07:00
Jakub Vrana a248f8b008 Change protocol to HTTPS 2015-09-08 11:41:29 -07:00
Jakub Vrana 596f8df373 Fix XSS in alter table (found by HP Fortify) 2015-08-05 18:12:36 -07:00
Jakub Vrana ea0c9d9b5e Release 4.2.1 2015-03-10 09:33:44 -07:00
Jakub Vrana 26dafd9320 Use utf8mb4 only if supported 2015-03-06 11:56:04 -08:00
Jakub Vrana ced05d8a44 Fix going back to search result after edit 2015-03-06 10:20:10 -08:00