From f5f7fc374071c2a3f4db45867f2513f5e7d4cc83 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Thu, 24 Nov 2005 08:22:28 +0000 Subject: [PATCH] Move mult_submits.inc.php to libraries folder as it does not require direct access. --- ChangeLog | 6 ++++++ db_details_structure.php | 2 +- mult_submits.inc.php => libraries/mult_submits.inc.php | 0 server_databases.php | 2 +- tbl_properties_structure.php | 2 +- tbl_row_action.php | 2 +- 6 files changed, 10 insertions(+), 4 deletions(-) rename mult_submits.inc.php => libraries/mult_submits.inc.php (100%) diff --git a/ChangeLog b/ChangeLog index 7ceef6822..4e08075c0 100755 --- a/ChangeLog +++ b/ChangeLog @@ -8,6 +8,12 @@ $Source$ 2005-11-24 Michal Čihař * libraries/header_http.inc.php, libraries/header_meta_style.inc.php: Fix XSS on some libraries (CVE-2005-3665). + * db_details_structure.php, mult_submits.inc.php (deleted), + server_databases.php, + tbl_properties_structure.phptbl_properties_structure.php, + tbl_row_action.php, libraries/mult_submits.inc.php: Move + mult_submits.inc.php to libraries folder as it does not require direct + access. 2005-11-24 Sebastian Mendel * themes/original/*, css/phpmyadmin.css.php: diff --git a/db_details_structure.php b/db_details_structure.php index c51f6169b..1142f6150 100644 --- a/db_details_structure.php +++ b/db_details_structure.php @@ -14,7 +14,7 @@ if ( empty( $is_info ) ) { || isset($mult_btn)) { $action = 'db_details_structure.php'; $err_url = 'db_details_structure.php?'. PMA_generate_common_url($db); - require('./mult_submits.inc.php'); + require('./libraries/mult_submits.inc.php'); $message = $strSuccess; } require('./db_details_common.php'); diff --git a/mult_submits.inc.php b/libraries/mult_submits.inc.php similarity index 100% rename from mult_submits.inc.php rename to libraries/mult_submits.inc.php diff --git a/server_databases.php b/server_databases.php index 4043d2c40..07f09c5df 100644 --- a/server_databases.php +++ b/server_databases.php @@ -73,7 +73,7 @@ if ((!empty($drop_selected_dbs) || isset($query_type)) && ($is_superuser || $cfg $action = 'server_databases.php'; $submit_mult = 'drop_db' ; $err_url = 'server_databases.php?' . PMA_generate_common_url(); - require('./mult_submits.inc.php'); + require('./libraries/mult_submits.inc.php'); if ($mult_btn == $strYes) { $message = sprintf($strDatabasesDropped, count($selected)); } else { diff --git a/tbl_properties_structure.php b/tbl_properties_structure.php index 579e44f5e..fb991d004 100644 --- a/tbl_properties_structure.php +++ b/tbl_properties_structure.php @@ -28,7 +28,7 @@ if ((!empty($submit_mult) && isset($selected_fld)) || isset($mult_btn)) { $action = 'tbl_properties_structure.php'; $err_url = 'tbl_properties_structure.php?' . PMA_generate_common_url($db, $table); - require('./mult_submits.inc.php'); + require('./libraries/mult_submits.inc.php'); } /** diff --git a/tbl_row_action.php b/tbl_row_action.php index 2e63b99d0..0b1a166b3 100644 --- a/tbl_row_action.php +++ b/tbl_row_action.php @@ -104,7 +104,7 @@ if (!empty($submit_mult)) { $original_url_query = $url_query; $original_pos = $pos; } - require('./mult_submits.inc.php'); + require('./libraries/mult_submits.inc.php'); $url_query = PMA_generate_common_url($db, $table) . '&goto=tbl_properties.php';