nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security fix

Browse Source
This commit is contained in:
Marc Delisle
2005-10-21 01:41:31 +00:00
parent 0a3c8dc40b
commit 429b629125
2 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@@ -5,6 +5,9 @@ phpMyAdmin - Changelog
$Id$ $Id$
$Source$ $Source$
2005-10-20 Marc Delisle <lem9@users.sourceforge.net>
* server_databases.php: security fix
2005-10-20 Alexander M. Turek <me@derrabus.de> 2005-10-20 Alexander M. Turek <me@derrabus.de>
* libraries/mysql_charsets.lib.php: * libraries/mysql_charsets.lib.php:
- On MySQL 5.0.6, we don't have to parse SHOW CREATE DATABASE anymore, - On MySQL 5.0.6, we don't have to parse SHOW CREATE DATABASE anymore,

4
server_databases.php
View File

@@ -134,6 +134,8 @@ foreach ($dblist AS $current_db) {
// avoids 'undefined index' errors // avoids 'undefined index' errors
if (empty($sort_by)) { if (empty($sort_by)) {
$sort_by = 'db_name'; $sort_by = 'db_name';
} else {
$sort_by = PMA_sanitize($sort_by);
} }
if (empty($sort_order)) { if (empty($sort_order)) {
if ($sort_by == 'db_name') { if ($sort_by == 'db_name') {
@@ -141,6 +143,8 @@ if (empty($sort_order)) {
} else { } else {
$sort_order = 'desc'; $sort_order = 'desc';
} }
} else {
$sort_order = PMA_sanitize($sort_order);
} }
// sorts the array // sorts the array