nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

version number of the release; we need the server parameter; document server parameter

Browse Source
This commit is contained in:
Marc Delisle
2008-07-15 14:40:42 +00:00
parent 13fbcf4107
commit 084fd3ed16
6 changed files with 14 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog
View File

@@ -5,7 +5,7 @@ phpMyAdmin - ChangeLog
$Id$
$HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyAdmin/ChangeLog $
2.11.7.1 ()
2.11.7.1 (2008-07-15)
- bug #1908719 [security] XSRF/CSRF by manipulating the db,
convcharset and collation_connection parameters,
thanks to YGN Ethical Hacker Group

7
Documentation.html
View File

@@ -11,7 +11,7 @@
<link rel="icon" href="./favicon.ico" type="image/x-icon" />
<link rel="shortcut icon" href="./favicon.ico" type="image/x-icon" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>phpMyAdmin 2.11.7 - Documentation</title>
<title>phpMyAdmin 2.11.7.1 - Documentation</title>
<link rel="stylesheet" type="text/css" href="docs.css" />
</head>
@@ -33,7 +33,7 @@
<li><a href="#glossary">Glossary</a></li>
</ul>
<h1>phpMyAdmin 2.11.7 Documentation</h1>
<h1>phpMyAdmin 2.11.7.1 Documentation</h1>
<ul><li><a href="http://www.phpmyadmin.net/">
phpMyAdmin homepage</a></li>
@@ -2749,7 +2749,8 @@ SetInputFilter PHP
<a href="#faq1_34">1.34 Can I access directly to database or table pages?</a></h4>
<p> Yes. Out of the box, you can use <abbr title="Uniform Resource Locator">URL</abbr>s like
http://server/phpMyAdmin/index.php?db=database&amp;table=table&amp;target=script.
http://server/phpMyAdmin/index.php?server=X&amp;db=database&amp;table=table&amp;target=script. For <tt>server</tt> you use the server number which refers to
the order of the server paragraph in <tt>config.inc.php</tt>.
Table and script parts are optional. If you want
http://server/phpMyAdmin/database[/table][/script] <abbr title="Uniform Resource Locator">URL</abbr>s, you need to do
some configuration. Following lines apply only for <a

4
README
View File

@@ -5,8 +5,8 @@ phpMyAdmin - Readme
A set of PHP-scripts to manage MySQL over the web.
Version 2.11.7
--------------
Version 2.11.7.1
----------------
http://www.phpmyadmin.net/
Copyright (C) 1998-2000 Tobias Ratschiller <tobias_at_ratschiller.com>

2
libraries/Config.class.php
View File

@@ -85,7 +85,7 @@ class PMA_Config
*/
function checkSystem()
{
$this->set('PMA_VERSION', '2.11.7');
$this->set('PMA_VERSION', '2.11.7.1');
/**
* @deprecated
*/

6
libraries/common.inc.php
View File

@@ -398,8 +398,10 @@ if (! PMA_isValid($_REQUEST['token']) || $_SESSION[' PMA_token '] != $_REQUEST['
* List of parameters which are allowed from unsafe source
*/
$allow_list = array(
/* needed for direct access, see FAQ 1.34 */
'db', 'table', 'target',
/* needed for direct access, see FAQ 1.34
* also, server needed for cookie login screen (multi-server)
*/
'server', 'db', 'table', 'target',
/* Session ID */
'phpMyAdmin',
/* Cookie preferences */

4
translators.html
View File

@@ -8,7 +8,7 @@
<link rel="icon" href="./favicon.ico" type="image/x-icon" />
<link rel="shortcut icon" href="./favicon.ico" type="image/x-icon" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>phpMyAdmin 2.11.7 - Official translators</title>
<title>phpMyAdmin 2.11.7.1 - Official translators</title>
<link rel="stylesheet" type="text/css" href="docs.css" />
</head>
@@ -31,7 +31,7 @@
<li><a href="Documentation.html#glossary">Glossary</a></li>
</ul>
<h1>phpMyAdmin 2.11.7 official translators list</h1>
<h1>phpMyAdmin 2.11.7.1 official translators list</h1>
<p> Here is the list of the &quot;official translators&quot; of
phpMyAdmin.</p>