- Developers - lists.phpmyadmin.net

[Phpmyadmin-devel] phpMyAdmin 2.6.4-pl2 and security alert
by Marc Delisle 11 Oct '05

11 Oct '05

Hi, phpMyAdmin 2.6.4-pl2 was released today, to fix a security problem. Security alert: http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-4 Download details: http://www.phpmyadmin.net Marc Delisle, for the team

1 0

[Phpmyadmin-devel] use of session_name()
by Marc Delisle 11 Oct '05

11 Oct '05

Hi, we have a problem on our (new) demo on sf.net, because of the call to session_name('phpMyAdmin') in libraries/session.inc.php. This is not supported on sf.net. Do we really need this in the code? Or can we detect in advance this problem? Marc

2 2

[Phpmyadmin-devel] Unused messages
by Michal Čihař 08 Oct '05

08 Oct '05

Hi all it's time to cleanup translations ;-). Following messages seems not to be used anywhere in our code. Any objections to remove them? strBinaryLogCache strBookmarkOptions strCarriage strEngineDisabled strIfYouWish strInsertBookmarkTitle strInsertTextfiles strInstructions strLineFeed strLoadExplanation strLoadMethod strMoreStatusVars strMustSelectFile strNeedPrimaryKey strNoQuery strOftenQuotation strOptionalControls strOptionally strPHP strPos strPrivDescAlterDb strReplace strRoutines strSearchOption strSearchOption strSearchOption strSearchOption strTheContents strTheContent strTheTerminator -- Michal Čihař | http://cihar.com

2 3

[Phpmyadmin-devel] MySQL 5.0.13 'view' becomes 'VIEW'
by Sebastian Mendel 05 Oct '05

05 Oct '05

SHOW FULL TABLES now returns 'VIEW' instead of 'view' should phpMyAdmin recognice both? or cause 'view' was only used in BETA drop support for 'view' and now only support 'VIEW' (beside this that at the moment PMA only supports 'view' and reports an error on MySQL 5.0.13) -- Sebastian Mendel www.sebastianmendel.de www.warzonez.de www.tekkno4u.de www.nofetish.com www.sf.net/projects/phpdatetime www.sf.net/projects/phptimesheet

3 6

Re: [Phpmyadmin-devel] XHTML compliance patch, PLS TEST!
by Sebastian Mendel 04 Oct '05

04 Oct '05

Garvin Hicking wrote: > Hi! > >>> https://sourceforge.net/tracker/index.php?func=detail&aid=1312571&group_id=… >>> 067&atid=377410 >>> >> i would like to commit this into CVS, if no one is against. >> >> Marc? Michal? > > I think this portion: > > +foreach( $_GET as $key => $val ) { > + if ( ! in_array( $key, $drops ) ) { > + $url_querys[] = $key . '=' . $val; > + } > > allows for XSS attacks to index.php which outputs remote input HTML/JS code. uuh, sorry fixed this with $url_querys[] = urlencode( $key ) . '=' . urlencode( $val ); > Added to that, it seems your patch kills the $cfg['LeftFrameTableSeparator'] > functionality of nested table groups in non-light mode. It seems you removed all > the PMA_nestedSet() functionality without proper replacement of its content? did you tried? or took you just a look at the code? $cfg['LeftFrameTableSeparator'] is respected and should be properly displayed - if not pls give me an example of your settings, what you expect and what you got thnx -- Sebastian Mendel www.sebastianmendel.de www.sf.net/projects/phpdatetime | www.sf.net/projects/phptimesheet

3 8

[Phpmyadmin-devel] Re: PMA server_privileges.php
by Sebastian Mendel 03 Oct '05

03 Oct '05

Marc Delisle schrieb: > Hi guys, > > I am currently working on adding MySQL 5 privileges to > server_privileges.php, > so please do not commit anything on this script for a few days. > > Thanks, did you finished? what about `mysql`.`db`.`Execute_priv`? `mysql`.`user`.`ssl_*` and `x509_*` and `max_user_connections` -- Sebastian Mendel www.sebastianmendel.de www.warzonez.de www.tekkno4u.de www.nofetish.com www.sf.net/projects/phpdatetime www.sf.net/projects/phptimesheet

2 2

[Phpmyadmin-devel] Translators list
by Michal Čihař 03 Oct '05

03 Oct '05

Hi as I'm constantly being spammed by those messages "I'm idiot and don't read anything" from translators.html, I'd like to see some better solution for this. First problem comes from people not understanding English, so they just write bellow our message Czech request for translation. This could be solved either by translating message for each language in html file or converting to php and using similar translation system as in rest of phpMyAdmin. However the majority of messages are just plain copies of our one. I have no idea why people are so stupid and I actually do not see way how to make sending feedback possible, but more restrictively saying that there should really written something. Anyway I thing we need to localise these messages, this should lower a bit this spam rate. Comments? -- Michal Čihař | http://cihar.com

2 2

[Phpmyadmin-devel] MySQL 5.0.13 'view' becomes 'VIEW'
by Sebastian Mendel 02 Oct '05

02 Oct '05

SHOW FULL TABLES now returns 'VIEW' instead of 'view' should phpMyAdmin recognice both? or cause 'view' was only used in BETA drop support for 'view' and now only support 'VIEW' (beside this that at the moment PMA only supports 'view' and reports an error on MySQL 5.0.13) -- Sebastian Mendel www.sebastianmendel.de www.warzonez.de www.tekkno4u.de www.nofetish.com www.sf.net/projects/phpdatetime www.sf.net/projects/phptimesheet

1 0

[Phpmyadmin-devel] detecting lack of privileges for Create new table
by Marc Delisle 30 Sep '05

30 Sep '05

Hi, I just merged some code to take care of bug #1307208. It should handle the case of global CREATE and db-specific CREATE (wildcard or not). TODO: escaped wildcards. If you have comments on the code, or an idea to handle escaped wildcards ( see libraries/display_create_table.lib.php), I would be glad to hear you! Logic is also in place to display a dropdown of possible databases to create (instead of just one). For now, I don't think necessary to handle table-specific CREATE... Marc

1 0

[Phpmyadmin-devel] Fwd: [ alexandria-Feature Requests-834575 ] phpMyAdmin as a public SF.net service
by Michal Čihař 29 Sep '05

29 Sep '05

Hi all JFYI: ---------- Forwarded Message ---------- >Comment By: David Burley (burley) Date: 2005-09-29 12:08 Message: Logged In: YES user_id=597273 Greetings, MySQL 4.1.10a was rolled out today and made live on production, along with a centralized phpMyAdmin install. Projects can now have more than one database and have 3 different database users with different permissions. Site Documentation on MySQL: https://www.sf.net/docs/E07#mysql An email will follow in the coming week to outline the details of this change along with migration details. Thank you, David Burley Senior Second Level Support Technician, SourceForge.net ------------------------------------------------------- -- Michal Čihař | http://cihar.com

2 2