- Developers - lists.phpmyadmin.net

[Phpmyadmin-devel] insecure login
by Peter Miller 26 Oct '10

26 Oct '10

hi, i've recently been ramping up security on my server and i realised that phpmyadmin sends the username and password in plaintext accross the http connection from client to server when loging in. this seems like quite a security hole, so i just thought i'd see if there are any other options to use encryption on the username and password for the login page? i've had a bit of a look though the code but i couldnt see any options to 'turn on' a higher level of security so i'm guessing there currently isnt one. that being the case i'd be keen to implement a more secure login. what are everyone's thoughts on this? cheers pete

3 2

[Phpmyadmin-devel] phpMyAdmin 3.3.8 is released
by Marc Delisle 25 Oct '10

25 Oct '10

Welcome to phpMyAdmin 3.3.8, a bugfix release. Details will appear on http://phpmyadmin.net. In a hurry? you can visit http://sourceforge.net/projects/phpmyadmin to download. Marc Delisle, for the team

1 0

[Phpmyadmin-devel] BUG ID: 3081099
by AAMIR KHAN 25 Oct '10

25 Oct '10

I was trying to solve this bug..I found out what actually is wrong.. When AJAX message is sent after creating the DB..it has success string that the database has been created..and nothing is specified inside PMA_Ajaxresponse() to reload the left frame and just it exits the script execution as soon as it reaches the "exit" of PMA_Ajaxresponse() ... so the files included after that has no meaning in case of AJAX requests... So to reload the frame javascript is needed to reload it..and the header type of AJAX headers sent is application/json so i think we should embed javascript in the success message only..but nijel suggested sending javascript through ajax is a hack not a solution... so how should i send/invoke javascript in this case... In case PMA_ReloadNavigation() .. also it uses javascript sent to browser to reload the frame..

2 1

[Phpmyadmin-devel] Drizzle compatibility and demo server
by Michal Čihař 21 Oct '10

21 Oct '10

Hi all I've just set up another database to demo server - Drizzle. At first attempt phpMyAdmin did not work at all, but after few fixes (basically disabling all charsets/collation handling we do on connect), we're at least able to connect and show the interface with some databases and tables. However there is much more things to fix (for example phpMyAdmin does not see all tables for some reason) and definitely more to test. However the question is if we want to officially support Drizzle and put some effort into it. You can try phpMyAdmin with Drizzle here: http://demo.phpmyadmin.net/master-config/?server=3 More information about Drizzle: http://drizzle.org/ -- Michal Čihař | http://cihar.com | http://blog.cihar.com

2 6

[Phpmyadmin-devel] PHP Debugger
by AAMIR KHAN 19 Oct '10

19 Oct '10

Is there any kind of Debigger available to use while understanding the code fo phpmyadmin so as to understand which line gets executed where..? or the varible used here is from which included file? Do some developer uses debuggers for their uses?

2 1

[Phpmyadmin-devel] phpMyAdmin 3.3.8-rc1 is released
by Marc Delisle 18 Oct '10

18 Oct '10

Welcome to the first release candidate of phpMyAdmin 3.3.8, a bugfix version. Details will appear on http://phpmyadmin.net. In a hurry? you can visit http://sourceforge.net/projects/phpmyadmin to download. Marc Delisle, for the team

1 0

[Phpmyadmin-devel] visual query builder
by Marc Delisle 14 Oct '10

14 Oct '10

I had a look at the latest Ankit's repo. In pmd_general.php there is a form calling "pmd_general" as an action, this should be replaced by "pmd_general.php". Any progress on this repo? Last commit is Aug 17, but the last message on this list from Ankit is Aug 30 when Ankit wrote he would integrate Michael's new icons. -- Marc Delisle http://infomarc.info

2 3

[Phpmyadmin-devel] Different versions of source code
by AAMIR KHAN 11 Oct '10

11 Oct '10

I was trying to solve a bug..that involves some misfunctionality in master (3.4-dev) and was working fine in (in QA_3_3, 3.3.8-dev)...as stated by the bug reporter... I just wanted to ask how can i get the source code of 3.3.8-dev....so as to check the discrepency why the thing is not working in this version... ___ Regards systemw0rm

2 1

[Phpmyadmin-devel] about CtrlArrowsMoving
by Marc Delisle 04 Oct '10

04 Oct '10

Hi, I suggest removing this option for 3.4 and always assume it's "true". I don't see a reason why someone would like to set this to "false". $cfg['CtrlArrowsMoving'] boolean Enable Ctrl+Arrows (Option+Arrows in Safari) moving between fields when editing. -- Marc Delisle http://infomarc.info

2 2

[Phpmyadmin-devel] LoginCookieValidity in user preferences
by Piotr Przybylski 21 Sep '10

21 Sep '10

Hi, Adding this setting in user preferences will not work correctly, as all overrides to config.inc.php's values are loaded after auth is done, when database is available. The only solution for this to work, is to try loading user overrides from session cache ($_SESSION['cache']['server_?']['userprefs']) just after config.inc.php is read. -- Piotr Przybylski

2 3