nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[security] possible XSRF on several pages

Browse Source
This commit is contained in:
Michal Čihař
2008-12-09 13:45:32 +00:00
parent 50ea90e605
commit 01685c90aa
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ChangeLog
View File

@@ -36,6 +36,7 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
+ [lang] Catalan update, thanks to Xavier Navarro + [lang] Catalan update, thanks to Xavier Navarro
+ [lang] Finnish update, thanks to Jouni Kahkonen + [lang] Finnish update, thanks to Jouni Kahkonen
- [core] Avoid error with BLOBstreaming support requiring SUPER privilege - [core] Avoid error with BLOBstreaming support requiring SUPER privilege
- [security] possible XSRF on several pages
3.1.0.0 (2008-11-28) 3.1.0.0 (2008-11-28)
+ [auth] Support for Swekey hardware authentication, + [auth] Support for Swekey hardware authentication,

2
libraries/db_table_exists.lib.php
View File

@@ -72,7 +72,7 @@ if (empty($is_table) && !defined('PMA_SUBMIT_MULT')) {
* @todo should this check really only happen if IS_TRANSFORMATION_WRAPPER? * @todo should this check really only happen if IS_TRANSFORMATION_WRAPPER?
*/ */
$_result = PMA_DBI_try_query( $_result = PMA_DBI_try_query(
'SELECT COUNT(*) FROM `' . PMA_sqlAddslashes($table, true) . '`;', 'SELECT COUNT(*) FROM ' . PMA_backquote($table) . ';',
null, PMA_DBI_QUERY_STORE); null, PMA_DBI_QUERY_STORE);
$is_table = ($_result && @PMA_DBI_num_rows($_result)); $is_table = ($_result && @PMA_DBI_num_rows($_result));
PMA_DBI_free_result($_result); PMA_DBI_free_result($_result);