Move mult_submits.inc.php to libraries folder as it does not require direct access.

This commit is contained in:
Michal Čihař
2005-11-24 08:22:28 +00:00
parent 05c719aba3
commit f5f7fc3740
6 changed files with 10 additions and 4 deletions

View File

@@ -8,6 +8,12 @@ $Source$
2005-11-24 Michal Čihař <michal@cihar.com>
* libraries/header_http.inc.php, libraries/header_meta_style.inc.php: Fix
XSS on some libraries (CVE-2005-3665).
* db_details_structure.php, mult_submits.inc.php (deleted),
server_databases.php,
tbl_properties_structure.phptbl_properties_structure.php,
tbl_row_action.php, libraries/mult_submits.inc.php: Move
mult_submits.inc.php to libraries folder as it does not require direct
access.
2005-11-24 Sebastian Mendel <cybot_tm@users.sourceforge.net>
* themes/original/*, css/phpmyadmin.css.php:

View File

@@ -14,7 +14,7 @@ if ( empty( $is_info ) ) {
|| isset($mult_btn)) {
$action = 'db_details_structure.php';
$err_url = 'db_details_structure.php?'. PMA_generate_common_url($db);
require('./mult_submits.inc.php');
require('./libraries/mult_submits.inc.php');
$message = $strSuccess;
}
require('./db_details_common.php');

View File

@@ -73,7 +73,7 @@ if ((!empty($drop_selected_dbs) || isset($query_type)) && ($is_superuser || $cfg
$action = 'server_databases.php';
$submit_mult = 'drop_db' ;
$err_url = 'server_databases.php?' . PMA_generate_common_url();
require('./mult_submits.inc.php');
require('./libraries/mult_submits.inc.php');
if ($mult_btn == $strYes) {
$message = sprintf($strDatabasesDropped, count($selected));
} else {

View File

@@ -28,7 +28,7 @@ if ((!empty($submit_mult) && isset($selected_fld))
|| isset($mult_btn)) {
$action = 'tbl_properties_structure.php';
$err_url = 'tbl_properties_structure.php?' . PMA_generate_common_url($db, $table);
require('./mult_submits.inc.php');
require('./libraries/mult_submits.inc.php');
}
/**

View File

@@ -104,7 +104,7 @@ if (!empty($submit_mult)) {
$original_url_query = $url_query;
$original_pos = $pos;
}
require('./mult_submits.inc.php');
require('./libraries/mult_submits.inc.php');
$url_query = PMA_generate_common_url($db, $table)
. '&amp;goto=tbl_properties.php';