diff --git a/ChangeLog b/ChangeLog index a4f18d06d..20ceb1a2a 100644 --- a/ChangeLog +++ b/ChangeLog @@ -5,7 +5,7 @@ phpMyAdmin - ChangeLog $Id$ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyAdmin/ChangeLog $ -2.11.7.1 () +2.11.7.1 (2008-07-15) - bug #1908719 [security] XSRF/CSRF by manipulating the db, convcharset and collation_connection parameters, thanks to YGN Ethical Hacker Group diff --git a/Documentation.html b/Documentation.html index 5a10c5d07..86d1bc353 100644 --- a/Documentation.html +++ b/Documentation.html @@ -11,7 +11,7 @@ -
Yes. Out of the box, you can use URLs like
- http://server/phpMyAdmin/index.php?db=database&table=table&target=script.
+http://server/phpMyAdmin/index.php?server=X&db=database&table=table&target=script. For server you use the server number which refers to
+the order of the server paragraph in config.inc.php.
Table and script parts are optional. If you want
http://server/phpMyAdmin/database[/table][/script] URLs, you need to do
some configuration. Following lines apply only for
diff --git a/libraries/Config.class.php b/libraries/Config.class.php
index 31a89a427..419fd425c 100644
--- a/libraries/Config.class.php
+++ b/libraries/Config.class.php
@@ -85,7 +85,7 @@ class PMA_Config
*/
function checkSystem()
{
- $this->set('PMA_VERSION', '2.11.7');
+ $this->set('PMA_VERSION', '2.11.7.1');
/**
* @deprecated
*/
diff --git a/libraries/common.inc.php b/libraries/common.inc.php
index d6cc39248..9988a4bd7 100644
--- a/libraries/common.inc.php
+++ b/libraries/common.inc.php
@@ -398,8 +398,10 @@ if (! PMA_isValid($_REQUEST['token']) || $_SESSION[' PMA_token '] != $_REQUEST['
* List of parameters which are allowed from unsafe source
*/
$allow_list = array(
- /* needed for direct access, see FAQ 1.34 */
- 'db', 'table', 'target',
+ /* needed for direct access, see FAQ 1.34
+ * also, server needed for cookie login screen (multi-server)
+ */
+ 'server', 'db', 'table', 'target',
/* Session ID */
'phpMyAdmin',
/* Cookie preferences */
diff --git a/translators.html b/translators.html
index 1937851bb..487d4d56c 100644
--- a/translators.html
+++ b/translators.html
@@ -8,7 +8,7 @@
-
Here is the list of the "official translators" of phpMyAdmin.