- Git - lists.phpmyadmin.net

[Phpmyadmin-git] [SCM] phpMyAdmin branch, master, updated. RELEASE_3_4_5-20728-g8adddca
by Dieter Adriaenssens 04 Oct '11

04 Oct '11

The branch, master has been updated via 8adddca21f5fc04e8bfe37f513b87608abd7a0a7 (commit) via e2349585451ae8641f4f20ddc9c5bd1bc7ecee98 (commit) via ca597dc423f3eebcca95ff33b088a03e39109115 (commit) from afd311a74c1a9a0cf0c2cbf75666b82398379dfc (commit) - Log ----------------------------------------------------------------- commit 8adddca21f5fc04e8bfe37f513b87608abd7a0a7 Merge: afd311a e234958 Author: Dieter Adriaenssens <ruleant(a)users.sourceforge.net> Date: Tue Oct 4 19:16:10 2011 +0200 Merge branch 'QA_3_4' ----------------------------------------------------------------------- Summary of changes: ChangeLog | 2 +- setup/frames/servers.inc.php | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index 29e256c..8ced7db 100644 --- a/ChangeLog +++ b/ChangeLog @@ -72,7 +72,7 @@ phpMyAdmin - ChangeLog - patch #3314626 [display] CharTextareaRows is not respected - bug #3417089 [synchronize] Extraneous db choices - [security] Fixed local path disclosure vulnerability, see PMASA-2011-15 -- [security] Fixed XSS in setup (verbose parameter) +- [security] Fixed XSS in setup (host/verbose parameter), see PMASA-2011-16 3.4.5.0 (2011-09-14) - bug #3375325 [interface] Page list in navigation frame looks odd diff --git a/setup/frames/servers.inc.php b/setup/frames/servers.inc.php index 081c416..8d04966 100644 --- a/setup/frames/servers.inc.php +++ b/setup/frames/servers.inc.php @@ -26,7 +26,7 @@ $server_exists = !empty($id) && $cf->get("Servers/$id") !== null; if ($mode == 'edit' && $server_exists) { $page_title = __('Edit server') - . ' ' . $id . ' (' . $cf->getServerDSN($id) . ')'; + . ' ' . $id . ' (' . htmlspecialchars($cf->getServerDSN($id)) . ')'; } elseif ($mode == 'remove' && $server_exists) { $cf->removeServer($id); header('Location: index.php'); @@ -45,4 +45,4 @@ foreach ($forms['Servers'] as $form_name => $form) { $form_display->registerForm($form_name, $form, $id); } process_formset($form_display); -?> \ No newline at end of file +?> hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, QA_3_4, updated. RELEASE_3_4_5-45-ge234958
by Dieter Adriaenssens 04 Oct '11

04 Oct '11

The branch, QA_3_4 has been updated via e2349585451ae8641f4f20ddc9c5bd1bc7ecee98 (commit) via ca597dc423f3eebcca95ff33b088a03e39109115 (commit) from bc5aa87ae9957a2c4740009c713bcbd54a31b93c (commit) - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: ChangeLog | 2 +- setup/frames/servers.inc.php | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index 1f101fe..a285f45 100644 --- a/ChangeLog +++ b/ChangeLog @@ -23,7 +23,7 @@ phpMyAdmin - ChangeLog - patch #3314626 [display] CharTextareaRows is not respected - bug #3417089 [synchronize] Extraneous db choices - [security] Fixed local path disclosure vulnerability, see PMASA-2011-15 -- [security] Fixed XSS in setup (verbose parameter) +- [security] Fixed XSS in setup (host/verbose parameter), see PMASA-2011-16 3.4.5.0 (2011-09-14) - bug #3375325 [interface] Page list in navigation frame looks odd diff --git a/setup/frames/servers.inc.php b/setup/frames/servers.inc.php index 081c416..8d04966 100644 --- a/setup/frames/servers.inc.php +++ b/setup/frames/servers.inc.php @@ -26,7 +26,7 @@ $server_exists = !empty($id) && $cf->get("Servers/$id") !== null; if ($mode == 'edit' && $server_exists) { $page_title = __('Edit server') - . ' ' . $id . ' (' . $cf->getServerDSN($id) . ')'; + . ' ' . $id . ' (' . htmlspecialchars($cf->getServerDSN($id)) . ')'; } elseif ($mode == 'remove' && $server_exists) { $cf->removeServer($id); header('Location: index.php'); @@ -45,4 +45,4 @@ foreach ($forms['Servers'] as $form_name => $form) { $form_display->registerForm($form_name, $form, $id); } process_formset($form_display); -?> \ No newline at end of file +?> hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, MAINT_3_4_6, updated. RELEASE_3_4_5-40-gca597dc
by Dieter Adriaenssens 04 Oct '11

04 Oct '11

The branch, MAINT_3_4_6 has been updated via ca597dc423f3eebcca95ff33b088a03e39109115 (commit) from 1af420e22367ae72ff4091adb1620e59ddad5ba6 (commit) - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: ChangeLog | 2 +- setup/frames/servers.inc.php | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index 020aef3..c9fc16d 100644 --- a/ChangeLog +++ b/ChangeLog @@ -21,7 +21,7 @@ phpMyAdmin - ChangeLog - patch #3314626 [display] CharTextareaRows is not respected - bug #3417089 [synchronize] Extraneous db choices - [security] Fixed local path disclosure vulnerability, see PMASA-2011-15 -- [security] Fixed XSS in setup (verbose parameter) +- [security] Fixed XSS in setup (host/verbose parameter), see PMASA-2011-16 3.4.5.0 (2011-09-14) - bug #3375325 [interface] Page list in navigation frame looks odd diff --git a/setup/frames/servers.inc.php b/setup/frames/servers.inc.php index 081c416..8d04966 100644 --- a/setup/frames/servers.inc.php +++ b/setup/frames/servers.inc.php @@ -26,7 +26,7 @@ $server_exists = !empty($id) && $cf->get("Servers/$id") !== null; if ($mode == 'edit' && $server_exists) { $page_title = __('Edit server') - . ' ' . $id . ' (' . $cf->getServerDSN($id) . ')'; + . ' ' . $id . ' (' . htmlspecialchars($cf->getServerDSN($id)) . ')'; } elseif ($mode == 'remove' && $server_exists) { $cf->removeServer($id); header('Location: index.php'); @@ -45,4 +45,4 @@ foreach ($forms['Servers'] as $form_name => $form) { $form_display->registerForm($form_name, $form, $id); } process_formset($form_display); -?> \ No newline at end of file +?> hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, master, updated. RELEASE_3_4_5-20725-gafd311a
by Michal Čihař 04 Oct '11

04 Oct '11

The branch, master has been updated via afd311a74c1a9a0cf0c2cbf75666b82398379dfc (commit) via 6bd5553b40d4c877e438842485640388881555d5 (commit) via 41018d1ba0904b001bbbbfa994861d9eb0886609 (commit) via 1a9d34c26fc1887f154544237d44ffe78dc7655a (commit) via 4866f0ced63398edfffe7a2e53b8a147c7972a17 (commit) from c25b7c896658bba418cc185ba2ff58a4c3bd0bc1 (commit) - Log ----------------------------------------------------------------- commit afd311a74c1a9a0cf0c2cbf75666b82398379dfc Merge: 6bd5553 c25b7c8 Author: Pootle server <pootle(a)cihar.com> Date: Tue Oct 4 12:40:18 2011 +0200 Merge remote-tracking branch 'origin/master' commit 6bd5553b40d4c877e438842485640388881555d5 Merge: 41018d1 f06ab07 Author: Pootle server <pootle(a)cihar.com> Date: Mon Oct 3 22:40:08 2011 +0200 Merge remote-tracking branch 'origin/master' commit 41018d1ba0904b001bbbbfa994861d9eb0886609 Merge: 1a9d34c 2ff7b4c Author: Pootle server <pootle(a)cihar.com> Date: Mon Oct 3 20:40:10 2011 +0200 Merge remote-tracking branch 'origin/master' commit 1a9d34c26fc1887f154544237d44ffe78dc7655a Author: Matías Bellone <matiasbellone(a)gmail.com> Date: Mon Oct 3 15:56:25 2011 +0200 Translation update done using Pootle. commit 4866f0ced63398edfffe7a2e53b8a147c7972a17 Author: Matías Bellone <matiasbellone(a)gmail.com> Date: Mon Oct 3 15:50:22 2011 +0200 Translation update done using Pootle. ----------------------------------------------------------------------- Summary of changes: po/es.po | 14 ++++++-------- 1 files changed, 6 insertions(+), 8 deletions(-) diff --git a/po/es.po b/po/es.po index f7fdf18..dcc9faa 100644 --- a/po/es.po +++ b/po/es.po @@ -4,7 +4,7 @@ msgstr "" "Project-Id-Version: phpMyAdmin 3.5.0-dev\n" "Report-Msgid-Bugs-To: phpmyadmin-devel(a)lists.sourceforge.net\n" "POT-Creation-Date: 2011-09-27 09:13+0200\n" -"PO-Revision-Date: 2011-09-21 15:24+0200\n" +"PO-Revision-Date: 2011-10-03 15:56+0200\n" "Last-Translator: Matías Bellone <matiasbellone(a)gmail.com>\n" "Language-Team: spanish <es(a)li.org>\n" "Language: es\n" @@ -12541,7 +12541,6 @@ msgid "There are lots of rows being sorted." msgstr "Hay demasiadas filas siendo ordenadas." #: po/advisory_rules.php:122 -#, fuzzy #| msgid "" #| "While there is nothing wrong with a high amount of row sorting, you might " #| "want to make sure that the queries which require a lot of sorting use " @@ -12553,9 +12552,9 @@ msgid "" "indexed columns in the ORDER BY clause, as this will result in much faster " "sorting" msgstr "" -"Si bien no hay nada de malo en ordenar una gran cantidad de filas, podría " -"llegar a desea asegurarse que las consultas que requieren gran cantidad de " -"ordenación utilicen campos indexados en la cláusula «ORDER BY», lo que " +"Si bien no hay nada de malo en ordenar una gran cantidad de filas, es " +"probable que desee asegurarse que las consultas que requieren gran cantidad " +"de ordenación utilicen campos indexados en la cláusula «ORDER BY», lo que " "resultará en una ordenación más rápida" #: po/advisory_rules.php:123 @@ -12572,7 +12571,6 @@ msgid "There are too many joins without indexes." msgstr "Hay demasiadas uniones («JOIN») sin índices." #: po/advisory_rules.php:127 -#, fuzzy #| msgid "" #| "This means that joins are doing full table scans. Adding indexes for the " #| "fields being used in the join conditions will greatly speed up table joins" @@ -12581,8 +12579,8 @@ msgid "" "columns being used in the join conditions will greatly speed up table joins" msgstr "" "Esto significa que las uniones («JOIN») están realizando escrutinios " -"completos sobre tablas. Agregar índices a los campos siendo utilizandos en " -"las condiciones de la unión las acelerarán en gran medida" +"completos sobre tablas. Agregar índices a los campos utilizados en las " +"condiciones de la unión las acelerarán en gran medida" #: po/advisory_rules.php:128 #, php-format hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, master, updated. RELEASE_3_4_5-20720-gc25b7c8
by Marc Delisle 04 Oct '11

04 Oct '11

The branch, master has been updated via c25b7c896658bba418cc185ba2ff58a4c3bd0bc1 (commit) via bc5aa87ae9957a2c4740009c713bcbd54a31b93c (commit) via 1af420e22367ae72ff4091adb1620e59ddad5ba6 (commit) from 73913f135e51cbc3eba559ffd8af70a2938f0ac3 (commit) - Log ----------------------------------------------------------------- commit c25b7c896658bba418cc185ba2ff58a4c3bd0bc1 Merge: 73913f1 bc5aa87 Author: Marc Delisle <marc(a)infomarc.info> Date: Tue Oct 4 06:20:48 2011 -0400 Merge branch 'QA_3_4' ----------------------------------------------------------------------- Summary of changes: ChangeLog | 1 + libraries/config/ConfigFile.class.php | 2 +- 2 files changed, 2 insertions(+), 1 deletions(-) diff --git a/ChangeLog b/ChangeLog index 270b514..29e256c 100644 --- a/ChangeLog +++ b/ChangeLog @@ -72,6 +72,7 @@ phpMyAdmin - ChangeLog - patch #3314626 [display] CharTextareaRows is not respected - bug #3417089 [synchronize] Extraneous db choices - [security] Fixed local path disclosure vulnerability, see PMASA-2011-15 +- [security] Fixed XSS in setup (verbose parameter) 3.4.5.0 (2011-09-14) - bug #3375325 [interface] Page list in navigation frame looks odd diff --git a/libraries/config/ConfigFile.class.php b/libraries/config/ConfigFile.class.php index 87c10b3..c1b01ec 100644 --- a/libraries/config/ConfigFile.class.php +++ b/libraries/config/ConfigFile.class.php @@ -414,7 +414,7 @@ class ConfigFile } $verbose = $this->get("Servers/$id/verbose"); if (!empty($verbose)) { - return $verbose; + return htmlspecialchars($verbose); } $host = $this->get("Servers/$id/host"); return empty($host) ? 'localhost' : $host; hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, QA_3_4, updated. RELEASE_3_4_5-43-gbc5aa87
by Marc Delisle 04 Oct '11

04 Oct '11

The branch, QA_3_4 has been updated via bc5aa87ae9957a2c4740009c713bcbd54a31b93c (commit) via 1af420e22367ae72ff4091adb1620e59ddad5ba6 (commit) from 7d586b458dbbaf4002ead84ef7edea60833c528c (commit) - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: ChangeLog | 1 + libraries/config/ConfigFile.class.php | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index f36cc67..1f101fe 100644 --- a/ChangeLog +++ b/ChangeLog @@ -23,6 +23,7 @@ phpMyAdmin - ChangeLog - patch #3314626 [display] CharTextareaRows is not respected - bug #3417089 [synchronize] Extraneous db choices - [security] Fixed local path disclosure vulnerability, see PMASA-2011-15 +- [security] Fixed XSS in setup (verbose parameter) 3.4.5.0 (2011-09-14) - bug #3375325 [interface] Page list in navigation frame looks odd diff --git a/libraries/config/ConfigFile.class.php b/libraries/config/ConfigFile.class.php index 20369f1..9e1690c 100644 --- a/libraries/config/ConfigFile.class.php +++ b/libraries/config/ConfigFile.class.php @@ -422,7 +422,7 @@ class ConfigFile } $verbose = $this->get("Servers/$id/verbose"); if (!empty($verbose)) { - return $verbose; + return htmlspecialchars($verbose); } $host = $this->get("Servers/$id/host"); return empty($host) ? 'localhost' : $host; @@ -508,4 +508,4 @@ class ConfigFile return $c; } } -?> \ No newline at end of file +?> hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, MAINT_3_4_6, updated. RELEASE_3_4_5-39-g1af420e
by Marc Delisle 04 Oct '11

04 Oct '11

The branch, MAINT_3_4_6 has been updated via 1af420e22367ae72ff4091adb1620e59ddad5ba6 (commit) from e05b37d3c9e5b99e8a779fe55780d92df17b4a55 (commit) - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: ChangeLog | 1 + libraries/config/ConfigFile.class.php | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index b8c33cb..020aef3 100644 --- a/ChangeLog +++ b/ChangeLog @@ -21,6 +21,7 @@ phpMyAdmin - ChangeLog - patch #3314626 [display] CharTextareaRows is not respected - bug #3417089 [synchronize] Extraneous db choices - [security] Fixed local path disclosure vulnerability, see PMASA-2011-15 +- [security] Fixed XSS in setup (verbose parameter) 3.4.5.0 (2011-09-14) - bug #3375325 [interface] Page list in navigation frame looks odd diff --git a/libraries/config/ConfigFile.class.php b/libraries/config/ConfigFile.class.php index 20369f1..9e1690c 100644 --- a/libraries/config/ConfigFile.class.php +++ b/libraries/config/ConfigFile.class.php @@ -422,7 +422,7 @@ class ConfigFile } $verbose = $this->get("Servers/$id/verbose"); if (!empty($verbose)) { - return $verbose; + return htmlspecialchars($verbose); } $host = $this->get("Servers/$id/host"); return empty($host) ? 'localhost' : $host; @@ -508,4 +508,4 @@ class ConfigFile return $c; } } -?> \ No newline at end of file +?> hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, master, updated. RELEASE_3_4_5-20717-g73913f1
by Marc Delisle 04 Oct '11

04 Oct '11

The branch, master has been updated via 73913f135e51cbc3eba559ffd8af70a2938f0ac3 (commit) from f06ab07979c5ca084955759a62092d51d90e1489 (commit) - Log ----------------------------------------------------------------- commit 73913f135e51cbc3eba559ffd8af70a2938f0ac3 Author: Marc Delisle <marc(a)infomarc.info> Date: Tue Oct 4 05:49:20 2011 -0400 Use standard SQL terminology in format string ----------------------------------------------------------------------- Summary of changes: Documentation.html | 4 ++-- libraries/common.lib.php | 23 ++++++++++++++--------- 2 files changed, 16 insertions(+), 11 deletions(-) diff --git a/Documentation.html b/Documentation.html index af27b89..1c47508 100644 --- a/Documentation.html +++ b/Documentation.html @@ -4341,8 +4341,8 @@ INSERT INTO REL_towns VALUES ('M', 'Montréal'); <dd>Currently opened database</dd> <dt><code>@TABLE@</code></dt> <dd>Currently opened table</dd> - <dt><code>@FIELDS@</code></dt> - <dd>Fields of currently opened table</dd> + <dt><code>@COLUMNS@</code></dt> + <dd>Columns of the currently opened table</dd> <dt><code>@PHPMYADMIN@</code></dt> <dd>phpMyAdmin with version</dd> </dl> diff --git a/libraries/common.lib.php b/libraries/common.lib.php index 2cc2278..5dcf21e 100644 --- a/libraries/common.lib.php +++ b/libraries/common.lib.php @@ -3097,7 +3097,7 @@ function PMA_getTitleForTarget($target) } /** - * Formats user string, expading @VARIABLES@, accepting strftime format string. + * Formats user string, expanding @VARIABLES@, accepting strftime format string. * * @param string $string Text where to do expansion. * @param function $escape Function to call for escaping variable values. @@ -3149,20 +3149,25 @@ function PMA_expandUserString($string, $escape = null, $updates = array()) } } - /* Fetch fields list if required */ + /* Backward compatibility in 3.5.x */ if (strpos($string, '@FIELDS@') !== false) { - $fields_list = PMA_DBI_get_columns($GLOBALS['db'], $GLOBALS['table']); + $string = strtr($string, array('@FIELDS@' => '@COLUMNS@')); + } + + /* Fetch columns list if required */ + if (strpos($string, '@COLUMNS@') !== false) { + $columns_list = PMA_DBI_get_columns($GLOBALS['db'], $GLOBALS['table']); - $field_names = array(); - foreach ($fields_list as $field) { - if (!is_null($escape)) { - $field_names[] = $escape($field['Field']); + $column_names = array(); + foreach ($columns_list as $column) { + if (! is_null($escape)) { + $column_names[] = $escape($column['Field']); } else { - $field_names[] = $field['Field']; + $column_names[] = $field['Field']; } } - $replace['@FIELDS@'] = implode(',', $field_names); + $replace['@COLUMNS@'] = implode(',', $column_names); } /* Do the replacement */ hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, master, updated. RELEASE_3_4_5-20716-gf06ab07
by Marc Delisle 03 Oct '11

03 Oct '11

The branch, master has been updated via f06ab07979c5ca084955759a62092d51d90e1489 (commit) via 7d586b458dbbaf4002ead84ef7edea60833c528c (commit) via fbaa5cc1a1cd4fbbb8588cda958c803b186eb064 (commit) via e05b37d3c9e5b99e8a779fe55780d92df17b4a55 (commit) via 46a1afb372782533d8b04d72ae4b9b13a1248c0a (commit) from d35cba980893aa6e6455fd6e6f14f3e3f1204c52 (commit) - Log ----------------------------------------------------------------- commit f06ab07979c5ca084955759a62092d51d90e1489 Merge: d35cba9 7d586b4 Author: Marc Delisle <marc(a)infomarc.info> Date: Mon Oct 3 15:12:44 2011 -0400 Merge branch 'QA_3_4' ----------------------------------------------------------------------- Summary of changes: hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, QA_3_4, updated. RELEASE_3_4_5-41-g7d586b4
by Marc Delisle 03 Oct '11

03 Oct '11

The branch, QA_3_4 has been updated via 7d586b458dbbaf4002ead84ef7edea60833c528c (commit) via e05b37d3c9e5b99e8a779fe55780d92df17b4a55 (commit) via 46a1afb372782533d8b04d72ae4b9b13a1248c0a (commit) from fbaa5cc1a1cd4fbbb8588cda958c803b186eb064 (commit) - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: hooks/post-receive -- phpMyAdmin

1 0