bug #178988 [display] space before SHOW COLUMNS
This commit is contained in:
@@ -34,6 +34,7 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
|
|||||||
- bug #1823045 [import] Error importing file with lowercase "delimiter"
|
- bug #1823045 [import] Error importing file with lowercase "delimiter"
|
||||||
- bug #1828913 [structure] Can't set FULLTEXT index on CHAR column
|
- bug #1828913 [structure] Can't set FULLTEXT index on CHAR column
|
||||||
- bug #1804081 [export] export on server doesn't obey AllowAnyWhereRecoding
|
- bug #1804081 [export] export on server doesn't obey AllowAnyWhereRecoding
|
||||||
|
- bug #178988 [display] space before SHOW COLUMNS
|
||||||
|
|
||||||
2.11.2.1 (2007-11-11)
|
2.11.2.1 (2007-11-11)
|
||||||
- fixed possible SQL injection using database name
|
- fixed possible SQL injection using database name
|
||||||
|
2
sql.php
2
sql.php
@@ -245,7 +245,7 @@ if ($is_select) { // see line 141
|
|||||||
}
|
}
|
||||||
} elseif (preg_match('@^UPDATE[[:space:]]+@i', $sql_query)) {
|
} elseif (preg_match('@^UPDATE[[:space:]]+@i', $sql_query)) {
|
||||||
$is_affected = true;
|
$is_affected = true;
|
||||||
} elseif (preg_match('@^SHOW[[:space:]]+@i', $sql_query)) {
|
} elseif (preg_match('@^[[:space:]]*SHOW[[:space:]]+@i', $sql_query)) {
|
||||||
$is_show = true;
|
$is_show = true;
|
||||||
} elseif (preg_match('@^(CHECK|ANALYZE|REPAIR|OPTIMIZE)[[:space:]]+TABLE[[:space:]]+@i', $sql_query)) {
|
} elseif (preg_match('@^(CHECK|ANALYZE|REPAIR|OPTIMIZE)[[:space:]]+TABLE[[:space:]]+@i', $sql_query)) {
|
||||||
$is_maint = true;
|
$is_maint = true;
|
||||||
|
Reference in New Issue
Block a user