Hi,
the PMASA-2012-5 security advisory has been published on
http://www.phpmyadmin.net/home_page/security/PMASA-2012-5.php.
In short, a SourceForge.net mirror server was compromised, leading to
the distribution of a doctored phpMyAdmin kit containing a backdoor.
phpMyAdmin-3.5.2.2-all-languages.zip fetched from this mirror server is
known to be affected. To our knowledge only one mirror is affected,
which appears to be taken offline already. All other SourceForge.net
mirrors are unaffected.
phpMyAdmin security team
Welcome to the first release candidate for phpMyAdmin 3.5.3, a bugfix
release. phpMyAdmin no longer contains the Highcharts library (which
caused a licensing problem).
Details will appear on http://phpmyadmin.net. In a hurry? you can visit
http://sourceforge.net/projects/phpmyadmin to download.
Marc Delisle, for the team
Hi,
the QA_3_5 branch no longer has Highcharts. There is still work to do,
to merge the new chart code to master, but I believe that we are ready
for 3.5.3-rc1.
--
Marc Delisle
http://infomarc.info
Hi,
While there is a configuration directive ($cfg['Servers'][$i]['ssl']) to
use an SSL connection for connecting to the MySQL server[1], it doesn't
seem to work. PHP requires a number of extra variables when initiating
an SSL connection (certificate path, key file, etc). I think I've fixed
up the existing code, but I don't have an ssl-enabled mysql install.
Yeah, I'll probably eventually compile my own, but right now I don't
have time for that.
Is anyone in a position to test my branch?
https://github.com/ibennetch/phpmyadmin.git in the ssl branch or
https://github.com/ibennetch/phpmyadmin/zipball/ssl -- you'll want to
refer to Documentation.html for the appropriate configuration options.
Thanks
1 - not from the client to phpMyAdmin, that is ForceSSL and beyond the
scope of what I'm talking about)
Hi,
things are going well, but I just noticed that one part has not been
done yet.
In js/server_status_monitor.js, a call is made to
PMA_createProfilingChart(), which calls PMA_createChart(), which uses
Highcharts.
There is a similar function, PMA_createProfilingChartJqplot(), which
does it the jqplot way and is used in js/sql.js.
Any volunteer to work on this?
--
Marc Delisle
http://infomarc.info
Hi all
I've finally managed to bring testsuite to state where there are no
failures on ci.phpmyadmin.net. That means that whenever some failure
appears with your changes you should fix that (or I will hunt you
to fix that :-)).
--
Michal ÄŒihaÅ™ | http://cihar.com | http://blog.cihar.com
Hi Chanaka,
I stumbled upon this piece of code (random pick) :
PMA_CommonFunctions::getInstance()->backquote($_REQUEST['view']['name'])
and it made me wonder if using a singleton for PMA_CommonFunctions is
necessary, because basicaly PMA_Commonfunctions is a collection of
methods, not really a 'living' object.
So then I had a look at the class, and I discovered that the class has
no class variables (apart from the _instance variable) and an empty
constructor.
So basicly this should be a static class, with static methods, because
no instance is needed for it to work.
And the above piece of code will become :
PMA_CommonFunctions::backquote($_REQUEST['view']['name'])
BTW: If you convert it to a static class, don't forget to replace the
$this->method() calls by the static equivalent self::method().
BTW2 : you forgot to add the if (! defined('PHPMYADMIN')), check in
the beginning of the file, see [0].
[0] http://wiki.phpmyadmin.net/pma/File_template
--
Kind regards,
Dieter Adriaenssens