nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move mult_submits.inc.php to libraries folder as it does not require direct access.

Browse Source
This commit is contained in:
Michal Čihař
2005-11-24 08:22:28 +00:00
parent 05c719aba3
commit f5f7fc3740
6 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog
View File

@@ -8,6 +8,12 @@ $Source$
2005-11-24 Michal Čihař <michal@cihar.com> 2005-11-24 Michal Čihař <michal@cihar.com>
* libraries/header_http.inc.php, libraries/header_meta_style.inc.php: Fix * libraries/header_http.inc.php, libraries/header_meta_style.inc.php: Fix
XSS on some libraries (CVE-2005-3665). XSS on some libraries (CVE-2005-3665).
* db_details_structure.php, mult_submits.inc.php (deleted),
server_databases.php,
tbl_properties_structure.phptbl_properties_structure.php,
tbl_row_action.php, libraries/mult_submits.inc.php: Move
mult_submits.inc.php to libraries folder as it does not require direct
access.
2005-11-24 Sebastian Mendel <cybot_tm@users.sourceforge.net> 2005-11-24 Sebastian Mendel <cybot_tm@users.sourceforge.net>
* themes/original/*, css/phpmyadmin.css.php: * themes/original/*, css/phpmyadmin.css.php:

2
db_details_structure.php
View File

@@ -14,7 +14,7 @@ if ( empty( $is_info ) ) {
|| isset($mult_btn)) { || isset($mult_btn)) {
$action = 'db_details_structure.php'; $action = 'db_details_structure.php';
$err_url = 'db_details_structure.php?'. PMA_generate_common_url($db); $err_url = 'db_details_structure.php?'. PMA_generate_common_url($db);
require('./mult_submits.inc.php'); require('./libraries/mult_submits.inc.php');
$message = $strSuccess; $message = $strSuccess;
} }
require('./db_details_common.php'); require('./db_details_common.php');

0
mult_submits.inc.php → libraries/mult_submits.inc.php
View File

2
server_databases.php
View File

@@ -73,7 +73,7 @@ if ((!empty($drop_selected_dbs) || isset($query_type)) && ($is_superuser || $cfg
$action = 'server_databases.php'; $action = 'server_databases.php';
$submit_mult = 'drop_db' ; $submit_mult = 'drop_db' ;
$err_url = 'server_databases.php?' . PMA_generate_common_url(); $err_url = 'server_databases.php?' . PMA_generate_common_url();
require('./mult_submits.inc.php'); require('./libraries/mult_submits.inc.php');
if ($mult_btn == $strYes) { if ($mult_btn == $strYes) {
$message = sprintf($strDatabasesDropped, count($selected)); $message = sprintf($strDatabasesDropped, count($selected));
} else { } else {

2
tbl_properties_structure.php
View File

@@ -28,7 +28,7 @@ if ((!empty($submit_mult) && isset($selected_fld))
|| isset($mult_btn)) { || isset($mult_btn)) {
$action = 'tbl_properties_structure.php'; $action = 'tbl_properties_structure.php';
$err_url = 'tbl_properties_structure.php?' . PMA_generate_common_url($db, $table); $err_url = 'tbl_properties_structure.php?' . PMA_generate_common_url($db, $table);
require('./mult_submits.inc.php'); require('./libraries/mult_submits.inc.php');
} }
/** /**

2
tbl_row_action.php
View File

@@ -104,7 +104,7 @@ if (!empty($submit_mult)) {
$original_url_query = $url_query; $original_url_query = $url_query;
$original_pos = $pos; $original_pos = $pos;
} }
require('./mult_submits.inc.php'); require('./libraries/mult_submits.inc.php');
$url_query = PMA_generate_common_url($db, $table) $url_query = PMA_generate_common_url($db, $table)
. '&amp;goto=tbl_properties.php'; . '&amp;goto=tbl_properties.php';