March 2008 - Developers - lists.phpmyadmin.net

[Phpmyadmin-devel] phpMyAdmin 2.11.5.1 is released
by Marc Delisle 29 Mar '08

29 Mar '08

Welcome to phpMyAdmin 2.11.5.1, a security fix version. Security announcement: http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-2 The release notes and download info are available on http://www.phpmyadmin.net. Marc Delisle, for the team.

1 0

[Phpmyadmin-devel] continuous integration for phpMyAdmin
by Sebastian Mendel 20 Mar '08

20 Mar '08

test setup: http://sebastianmendel.de:8080/buildresults/phpmyadmin -- Sebastian

1 0

[Phpmyadmin-devel] Auto Complete for sql window
by Thomas Bley 10 Mar '08

10 Mar '08

Hello, most database tools offer auto-completion for writing SQL queries (e.g. pgAdmin3, pl/sql developer). I think it would be great to have this feature in phpMyAdmin. I've written a small demo to offer sql auto completion for a normal textarea (tested with MySQL5 and Firefox2). In this first draft, auto-complete is done for databases, tables and columns. The user types some sql in the textarea and the selectbox on the right side gets filled automatically. When typing in the textarea, some keys are bound to the selectbox (cursor up, cursor down, escape and enter), so the user can directly insert values from the selectbox to the textarea. What do you think about it? Would you like to add it to one of the next releases? Best regards, Thomas Bley

3 2

Re: [Phpmyadmin-devel] MySQL 5.1.23 and information_schema
by Marc Delisle 10 Mar '08

10 Mar '08

-----Original Message----- From: Sebastian Mendel <lists(a)sebastianmendel.de> To: phpmyadmin-devel(a)lists.sf.net Date: Sun, 09 Mar 2008 09:45:15 +0100 Subject: Re: [Phpmyadmin-devel] MySQL 5.1.23 and information_schema Marc Delisle schrieb: > Here are guidelines for improved speed accessing information_schema: > > http://dev.mysql.com/doc/refman/5.1/en/information-schema-optimization.html yes, for a long time ... ;-) but none of the suggested improvements can be used when obtaining whole database list ... and we always specify as exact as possible what data we want from the I_S -- Sebastian Ok, but here is what MySQL has to say about version 6.0.4 http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html "INFORMATION_SCHEMA implementation changes were made that optimize certain types of queries for INFORMATION_SCHEMA tables so that they execute more quickly."

2 3

[Phpmyadmin-devel] MySQL 5.1.23 and information_schema
by Marc Delisle 09 Mar '08

09 Mar '08

Here are guidelines for improved speed accessing information_schema: http://dev.mysql.com/doc/refman/5.1/en/information-schema-optimization.html

2 1

[Phpmyadmin-devel] robots.txt and no-index meta tags
by Sebastian Mendel 07 Mar '08

07 Mar '08

Hi, how do you think about adding robots.txt and no-index meta tags to phpMyAdmin? - preventing exposing public accessible phpmyadmin installations - make search results more helpful -- Sebastian

3 5

[Phpmyadmin-devel] New Suhosin warning (#1863326)
by Thijs Kinkhorst 04 Mar '08

04 Mar '08

Hi all, I noticed the newly introduced warning that phpMyAdmin emits when Suhosin is enabled in PHP. I expect that Suhosin will be enabled more and more, because the demands on security of web applications are ever increasing. It provides valuable protection of PHP which doesn't have the best security history. For example Debian's next release will have Suhosin enabled by default, and other distributions are doing or have already done the same. So I doubt that adding such a warning is a viable solution to the problem. The problem seems to be that when a table doesn't have a key defined, phpMyAdmin encodes the entire row in the request URL, in order to make sure to match the right row. Suhosin trips over this when that URL gets very long. I propose to resolve this problem in a different way. Wouldn't it be an idea to take the contents of the entire row, run it through md5() or sha1(), and pass that in the URL? This value could then in the query be used when specifying something like "WHERE MD5(CONCAT(field1,field2,field3)) = url_submitted_md5"? This would, in my opinion, resolve the problem in a more elegant way that works for all configurations. Even when not having Suhosin enabled, passing an URL of many kilobytes long isn't desirable anyway. Of course you could only do this when the row length exceeds some minimum length if you want to. What do you think? Thijs

5 9

[Phpmyadmin-devel] GSoC 2008
by Michal Čihař 04 Mar '08

04 Mar '08

Hello everybody we decided to take a part in GSoC 2008 (or at least attempt to be accepted :-)). Before the application will be sent out, we'd like to have good selection of ideas for projects. So if you have some feature request which you think would be good for GSoC 2008, please let us know or write it directly to wiki: http://wiki.cihar.com/pma/SummerOfCode2008IdeasList -- Michal Čihař | http://cihar.com | http://blog.cihar.com

1 0

[Phpmyadmin-devel] phpMyAdmin 2.11.5 and security announcement
by Marc Delisle 03 Mar '08

03 Mar '08

Welcome to phpMyAdmin 2.11.5, a bugfix-only version containing a security fix. Security announcement: http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-1 The release notes and download info are available on http://www.phpmyadmin.net. Marc Delisle, for the team.

3 9