Developers

developers@phpmyadmin.net

7004 discussions

[Phpmyadmin-devel] config.inc.php - world readable
by Sebastian Mendel 16 Dec '05

16 Dec '05

Hi, what exactly is the problem with config.inc.php being world readable? issnt every file readable by the web server 'somehow' world readable? and issnt it so if /www is only user and group readable that /www/myweb/config.inc.php is secure enough? or is this just a sf.net specific problem, cause all webroots are world readable? (btw. i am a little bit annoyed by the fact that i have now set my read only flag for config.inc.php after every change on it on my developer machine (Windows)) -- Sebastian Mendel www.sebastianmendel.de www.sf.net/projects/phpdatetime | www.sf.net/projects/phptimesheet

3 2

[Phpmyadmin-devel] RTL: 'left' frame to the right?
by Sebastian Mendel 14 Dec '05

14 Dec '05

Hi, wouldn't it be consequential to move the 'left' frame to the right for RTL languages? -- Sebastian Mendel www.sebastianmendel.de www.sf.net/projects/phpdatetime | www.sf.net/projects/phptimesheet

2 3

[Phpmyadmin-devel] weird characters in common.lib.php
by Marc Delisle 12 Dec '05

12 Dec '05

Some weird characters have been merged in common.lib.php, lines 1975 and 1978. Looks like some utf-8. Marc

1 0

[Phpmyadmin-devel] cvs tags: stable, testing
by Sebastian Mendel 12 Dec '05

12 Dec '05

Hi, can we add two CVS tags? STABLE always leading to latest stable release, current 2.7.0.pl1 and TESTING leading to latest beta or RC ... making it easier to stay up to date with user versions -- Sebastian Mendel www.sebastianmendel.de www.sf.net/projects/phpdatetime | www.sf.net/projects/phptimesheet

2 3

[Phpmyadmin-devel] white space
by Marc Delisle 12 Dec '05

12 Dec '05

Hi, The latest commit to common.lib.php does not respect PEAR standards, IMO. Too much white space. Have a look at how they recommend to format "if": if ($arg1 == 'good' || $arg1 == 'fair') { $this->foo = $arg1; return 1; } elseif ($arg1 == 'poor' && $arg2 > 1) { $this->foo = 'poor'; return 2; } else { return false; } http://pear.php.net/manual/en/standards.sample.php

3 3

[Phpmyadmin-devel] deglobalizing: common.inc.php
by Sebastian Mendel 12 Dec '05

12 Dec '05

Hi, i have edited the common.inc.php to be prepared for deglobalizing should now work correctly without registered globals also i have introduced a whitelist for $goto, also used for $__redirect in subforms -- Sebastian Mendel www.sebastianmendel.de www.sf.net/projects/phpdatetime | www.sf.net/projects/phptimesheet

2 1

[Phpmyadmin-devel] deglobalization started
by Marc Delisle 11 Dec '05

11 Dec '05

Hi, please look at my commit for sql.php, revision 2.76. I have just changed $goto by $_REQUEST['goto']. Is this the way we want to take? It's a bit weird for me to use $_REQUEST['goto'] on the left side of an assignment, but anyway tell me your comments so I can continue :) Marc

3 7

[Phpmyadmin-devel] globals
by Marc Delisle 11 Dec '05

11 Dec '05

Ok, I am getting lost in all those threads. I guess it's time to vote. I'll try to summarize the issues: - remove grab_globals, moving the GLOBALS overwrite protection into common.lib.php - everywhere in the code, find the variables that were set from grab_globals and replace them by $_REQUEST['foo'] if they originated from GET, POST or COOKIE, or by a reference to $_FILES, $_ENV or $_SERVER. Possibly taking into account that $_ENV might not be readable (use of getenv() ?) - sanitize individually what can be echoed (like $message) with PMA_sanitize(), for XSS protection. Any need to sanitize something else? - (later) in an effort to clean global space, replace $str by constants Comments, please :) Marc

4 8

[Phpmyadmin-devel] last modification to PMA_DBI_get_fields()
by Marc Delisle 09 Dec '05

09 Dec '05

Causes a big bug: can no longer create a table. This is because, in tbl_create.php: // Does table exist? else if (!(PMA_DBI_get_fields($db, $table) === FALSE)) { PMA_mysqlDie(sprintf($strTableAlreadyExists, htmlspecialchars($table)), '', '', $err_url); and now, this function returns an empty array instead of returning false. Marc

2 2

[Phpmyadmin-devel] E_STRICT on PHP 5
by Michal Čihař 09 Dec '05

09 Dec '05

Hi all I already filed bug on this [1], but I thing that all of us should enable E_STRICT reporting in php.ini to catch those errors while writing code. So please set error_reporting = E_ALL | E_STRICT in your php.ini. 1. https://sourceforge.net/tracker/index.php?func=detail&aid=1377215&group_id=… -- Michal Čihař | http://cihar.com

2 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

Developers