Yes. Out of the box, you can use URLs like
- http://server/phpMyAdmin/index.php?db=database&table=table&target=script.
+http://server/phpMyAdmin/index.php?server=X&db=database&table=table&target=script. For server you use the server number which refers to
+the order of the server paragraph in config.inc.php.
Table and script parts are optional. If you want
http://server/phpMyAdmin/database[/table][/script] URLs, you need to do
some configuration. Following lines apply only for addParam($db);
+ $message->addParam($new_db);
+ $GLOBALS['db'] = $new_db;
require_once './libraries/header.inc.php';
require_once './' . $cfg['DefaultTabDatabase'];
diff --git a/index.php b/index.php
index 007fb5296..4ea0a4f36 100644
--- a/index.php
+++ b/index.php
@@ -124,6 +124,7 @@ header('Content-Type: text/html; charset=' . $GLOBALS['charset']);
var server = '';
var table = '';
var db = '';
+ var token = '';
var text_dir = '';
var pma_absolute_uri = '';
diff --git a/js/common.js b/js/common.js
index 99c43fb92..a8c4115c6 100644
--- a/js/common.js
+++ b/js/common.js
@@ -147,6 +147,7 @@ function setTable(new_table) {
*
* @uses goTo()
* @uses opendb_url
+ * @uses token
* @uses db
* @uses server
* @uses table
@@ -165,6 +166,7 @@ function refreshMain(url) {
}
//alert(db);
goTo(url + '?server=' + encodeURIComponent(server) +
+ '&token=' + encodeURIComponent(token) +
'&db=' + encodeURIComponent(db) +
'&table=' + encodeURIComponent(table) +
'&lang=' + encodeURIComponent(lang) +
@@ -176,6 +178,7 @@ function refreshMain(url) {
* reloads navigation frame
*
* @uses goTo()
+ * @uses token
* @uses db
* @uses server
* @uses table
@@ -185,6 +188,7 @@ function refreshMain(url) {
*/
function refreshNavigation() {
goTo('navigation.php?server=' + encodeURIComponent(server) +
+ '&token=' + encodeURIComponent(token) +
'&db=' + encodeURIComponent(db) +
'&table=' + encodeURIComponent(table) +
'&lang=' + encodeURIComponent(lang) +
@@ -258,8 +262,8 @@ function markDbTable(db, table)
/**
* sets current selected server, table and db (called from libraries/footer.inc.php)
*/
-function setAll( new_lang, new_collation_connection, new_server, new_db, new_table ) {
- //alert('setAll( ' + new_lang + ', ' + new_collation_connection + ', ' + new_server + ', ' + new_db + ', ' + new_table + ' )');
+function setAll( new_lang, new_collation_connection, new_server, new_db, new_table, new_token ) {
+ //alert('setAll( ' + new_lang + ', ' + new_collation_connection + ', ' + new_server + ', ' + new_db + ', ' + new_table + ', ' + new_token + ' )');
if (new_server != server || new_lang != lang
|| new_collation_connection != collation_connection) {
// something important has changed
@@ -268,6 +272,7 @@ function setAll( new_lang, new_collation_connection, new_server, new_db, new_tab
table = new_table;
collation_connection = new_collation_connection;
lang = new_lang;
+ token = new_token;
refreshNavigation();
} else if (new_db != db || new_table != table) {
// save new db and table
diff --git a/libraries/common.inc.php b/libraries/common.inc.php
index 0e15240ed..91cbcf131 100644
--- a/libraries/common.inc.php
+++ b/libraries/common.inc.php
@@ -399,7 +399,10 @@ if (! PMA_isValid($_REQUEST['token']) || $_SESSION[' PMA_token '] != $_REQUEST['
* List of parameters which are allowed from unsafe source
*/
$allow_list = array(
- 'db', 'table', 'lang', 'server', 'convcharset', 'collation_connection', 'target',
+ /* needed for direct access, see FAQ 1.34
+ * also, server needed for cookie login screen (multi-server)
+ */
+ 'server', 'db', 'table', 'target',
/* Session ID */
'phpMyAdmin',
/* Cookie preferences */
diff --git a/libraries/display_create_database.lib.php b/libraries/display_create_database.lib.php
index 2b4e9520e..7bf4e613b 100644
--- a/libraries/display_create_database.lib.php
+++ b/libraries/display_create_database.lib.php
@@ -21,7 +21,7 @@ if ($is_create_db_priv) {
' . $strCreateNewDatabase . ' ' . PMA_showMySQLDocu('SQL-Syntax', 'CREATE_DATABASE'); ?>
-
+
');
+ echo PMA_escapeJsString(PMA_ifSetOr($GLOBALS['table'], '')) . "', '";
+ echo PMA_escapeJsString($_SESSION[' PMA_token ']);?>');
}