News April 2018

news@phpmyadmin.net

1 participants
2 discussions

phpMyAdmin security update: version 4.8.0.1 is released
by Isaac Bennetch 19 Apr '18

19 Apr '18

Welcome to phpMyAdmin 4.8.0.1, which fixes a security flaw found in phpMyAdmin. This version fixes a security flaw found in version 4.8.0 where an attacker can manipulate a user in to following a specially-crafted link, allowing the attacker to execute arbitrary SQL commands on the server. For more information, please see <https://www.phpmyadmin.net/security/PMASA-2018-2/> We recommend that all users upgrade. Downloads are available at https://www.phpmyadmin.net/downloads The phpMyAdmin Team

1 0

phpMyAdmin 4.8.0 is released
by Isaac Bennetch 07 Apr '18

07 Apr '18

Welcome to phpMyAdmin version 4.8.0. We are excited to bring you this updated version with many new features and bug fixes. There are no changes to system requirements. A complete list of new features and bugs that have been fixed is available in the ChangeLog file or changelog.php included with this release. Major changes include security enhancements such as removing the PHP eval() function and authentication logging, a mobile interface to improve the interface when used with tablets or mobile phones, and two-factor authentication options. A few highlights of the changes include: * Allow the removal of individual segments from pie charts * Improved database search to allow matching the exact phrase * phpMyAdmin no longer requires using the PHP eval() function * The mbstring dependency is now optional * Authentication logging using $cfg['AuthLog'] <https://docs.phpmyadmin.net/en/latest/config.html#cfg_AuthLog> * Add support for Google's Invisible Captcha * Improved handling of reCAPTCHA * Fixes to the JavaScript editor for TIME values * Improved the editor for the JSON data type * Add "Format" button to the edit view form * Implement mobile interface * There are now configuration directives to set defaults for Transformation options <https://docs.phpmyadmin.net/en/latest/config.html#default-options-for-trans…> * Allow Designer to show tables from other databases * Add support for authentication using U2F and 2FA * Designer: fix broken "Add tables from other database" * Fix double escaping of ENUM dropdown * Restore SQL query after session expires * Query builder: Fix for new column not being added * Fix for blank login page * Changes to the handling of arg_separator for AJAX requests; see issue #13940 * Structure tab: fix silent failure to create new indexes * Fix improperly escaped HTML code on the database structure page * Fix JavaScript errors when using Internet Explorer (in particular when editing rows) * Fix for broken error report * Fix failed import * Fix for "Cannot read property sql_query of undefined" errors Much of this work is thanks to the hard work of our Google Summer of Code 2017 students. Additionally, there have been continuous improvements to many of the translations. If you don't see your language or find a problem, you can contribute too; see <https://www.phpmyadmin.net/translate/> for details. As always, downloads are available at https://www.phpmyadmin.net Thanks to our sponsors for helping to make this work possible! The phpMyAdmin Team

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

News April 2018