Developers October 2005

developers@phpmyadmin.net

8 participants
38 discussions

[Phpmyadmin-devel] phpMyAdmin 2.6.4-pl2 and security alert
by Marc Delisle 11 Oct '05

11 Oct '05

Hi, phpMyAdmin 2.6.4-pl2 was released today, to fix a security problem. Security alert: http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-4 Download details: http://www.phpmyadmin.net Marc Delisle, for the team

1 0

[Phpmyadmin-devel] use of session_name()
by Marc Delisle 11 Oct '05

11 Oct '05

Hi, we have a problem on our (new) demo on sf.net, because of the call to session_name('phpMyAdmin') in libraries/session.inc.php. This is not supported on sf.net. Do we really need this in the code? Or can we detect in advance this problem? Marc

2 2

[Phpmyadmin-devel] Unused messages
by Michal Čihař 08 Oct '05

08 Oct '05

Hi all it's time to cleanup translations ;-). Following messages seems not to be used anywhere in our code. Any objections to remove them? strBinaryLogCache strBookmarkOptions strCarriage strEngineDisabled strIfYouWish strInsertBookmarkTitle strInsertTextfiles strInstructions strLineFeed strLoadExplanation strLoadMethod strMoreStatusVars strMustSelectFile strNeedPrimaryKey strNoQuery strOftenQuotation strOptionalControls strOptionally strPHP strPos strPrivDescAlterDb strReplace strRoutines strSearchOption strSearchOption strSearchOption strSearchOption strTheContents strTheContent strTheTerminator -- Michal Čihař | http://cihar.com

2 3

[Phpmyadmin-devel] MySQL 5.0.13 'view' becomes 'VIEW'
by Sebastian Mendel 05 Oct '05

05 Oct '05

SHOW FULL TABLES now returns 'VIEW' instead of 'view' should phpMyAdmin recognice both? or cause 'view' was only used in BETA drop support for 'view' and now only support 'VIEW' (beside this that at the moment PMA only supports 'view' and reports an error on MySQL 5.0.13) -- Sebastian Mendel www.sebastianmendel.de www.warzonez.de www.tekkno4u.de www.nofetish.com www.sf.net/projects/phpdatetime www.sf.net/projects/phptimesheet

3 6

Re: [Phpmyadmin-devel] XHTML compliance patch, PLS TEST!
by Sebastian Mendel 04 Oct '05

04 Oct '05

Garvin Hicking wrote: > Hi! > >>> https://sourceforge.net/tracker/index.php?func=detail&aid=1312571&group_id=… >>> 067&atid=377410 >>> >> i would like to commit this into CVS, if no one is against. >> >> Marc? Michal? > > I think this portion: > > +foreach( $_GET as $key => $val ) { > + if ( ! in_array( $key, $drops ) ) { > + $url_querys[] = $key . '=' . $val; > + } > > allows for XSS attacks to index.php which outputs remote input HTML/JS code. uuh, sorry fixed this with $url_querys[] = urlencode( $key ) . '=' . urlencode( $val ); > Added to that, it seems your patch kills the $cfg['LeftFrameTableSeparator'] > functionality of nested table groups in non-light mode. It seems you removed all > the PMA_nestedSet() functionality without proper replacement of its content? did you tried? or took you just a look at the code? $cfg['LeftFrameTableSeparator'] is respected and should be properly displayed - if not pls give me an example of your settings, what you expect and what you got thnx -- Sebastian Mendel www.sebastianmendel.de www.sf.net/projects/phpdatetime | www.sf.net/projects/phptimesheet

3 8

[Phpmyadmin-devel] Re: PMA server_privileges.php
by Sebastian Mendel 03 Oct '05

03 Oct '05

Marc Delisle schrieb: > Hi guys, > > I am currently working on adding MySQL 5 privileges to > server_privileges.php, > so please do not commit anything on this script for a few days. > > Thanks, did you finished? what about `mysql`.`db`.`Execute_priv`? `mysql`.`user`.`ssl_*` and `x509_*` and `max_user_connections` -- Sebastian Mendel www.sebastianmendel.de www.warzonez.de www.tekkno4u.de www.nofetish.com www.sf.net/projects/phpdatetime www.sf.net/projects/phptimesheet

2 2

[Phpmyadmin-devel] Translators list
by Michal Čihař 03 Oct '05

03 Oct '05

Hi as I'm constantly being spammed by those messages "I'm idiot and don't read anything" from translators.html, I'd like to see some better solution for this. First problem comes from people not understanding English, so they just write bellow our message Czech request for translation. This could be solved either by translating message for each language in html file or converting to php and using similar translation system as in rest of phpMyAdmin. However the majority of messages are just plain copies of our one. I have no idea why people are so stupid and I actually do not see way how to make sending feedback possible, but more restrictively saying that there should really written something. Anyway I thing we need to localise these messages, this should lower a bit this spam rate. Comments? -- Michal Čihař | http://cihar.com

2 2

[Phpmyadmin-devel] MySQL 5.0.13 'view' becomes 'VIEW'
by Sebastian Mendel 02 Oct '05

02 Oct '05

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

Developers October 2005