Michal Cihar wrote:
Hi
I've made fix for this bug, but I have one question: Why was in libraries/auth/config.auth.lib.php3 called PMA_mysqldie with sql parameter containing how was mysql_connect called? Then it made problems to SQL parser (only when IP address was used as host) and it reported error, where the password from config was shown.
Michal
Michal,
I can't see a good reason for the previous code. But without your last fix, I tried to reproduce the bug, stopping a MySQL server, and I was not able to make phpMyAdmin display confidential info.
Marc