[Phpmyadmin-devel] Problem with binary data

[Steve Alberty]

Hi,

we have another new problem with binary data
inside of fields.
Older phpMyAdmin Versions without the 'htmlspecialchars'
changes works fine (pre5).

i think it's a problem with 'primary_key' building.
In lib.inc.php3 we use currently addslashes(htmlspecialchars($row[$i]))
instead of addslashes($row[$i]) ...


to retrace the problem look at the follow code.
first, create this table:

---snip---
CREATE TABLE `Universal_Cache` (
  `CID` int(10) unsigned NOT NULL default '0',
  `Type` enum('Nexus') NOT NULL default 'Nexus',
  `Num` tinyint(3) unsigned NOT NULL default '0',
  `LastModify` timestamp(14) NOT NULL,
  `Cache` blob NOT NULL
) TYPE=MyISAM COMMENT='Cache';
---snap---

in the second place try to execute this code,
to insert a column with all characters (0-255)
---snip---
for ($all="",$i=0;$i<=255;$i++,$all.=chr($i)){}
$query="insert into Universal_Cache (Cache) values('".AddSlashes($all)."')";
$result=mysql_query($query);
---snap---

this row a now unselectable with phpMyAdmin ... :-(

the current version produce the follow corrupt link:
http://serade/phpMyAdmin/tbl_change.php3?primary_key=+CID+%3D+%270%27+AND+Ty
pe+%3D+%27Nexus%27+AND+Num+%3D+%270%27+AND+LastModify+%3D+%2720010627110806%
27+AND+Cache+%3D+%27%5C0%01%02%03%04%05%06%07%08%09%0A%0B%0C%0D%0E%0F%10%11%
12%13%14%15%16%17%18%19%1A%1B%1C%1D%1E%1F+%21%26quot%3B%23%24%25%26amp%3B%5C
%27%28%29%2A%2B%2C-.%2F0123456789%3A%3B%26lt%3B%3D%26gt%3B%3F%40ABCDEFGHIJKL
MNOPQRSTUVWXYZ%5B%5C%5C%5D%5E_%60abcdefghijklmnopqrstuvwxyz%7B%7C%7D%7E%7F%8
0%81%82%83%84%85%86%87%88%89%8A%8B%8C%8D%8E%8F%90%91%92%93%94%95%96%97%98%99
%9A%9B%9C%9D%9E%9F%A0%A1%A2%A3%A4%A5%A6%A7%A8%A9%AA%AB%AC%AD%AE%AF%B0%B1%B2%
B3%B4%B5%B6%B7%B8%B9%BA%BB%BC%BD%BE%BF%C0%C1%C2%C3%C4%C5%C6%C7%C8%C9%CA%CB%C
C%CD%CE%CF%D0%D1%D2%D3%D4%D5%D6%D7%D8%D9%DA%DB%DC%DD%DE%DF%E0%E1%E2%E3%E4%E5
%E6%E7%E8%E9%EA%EB%EC%ED%EE%EF%F0%F1%F2%F3%F4%F5%F6%F7%F8%F9%FA%FB%FC%FD%FE%
FF%27+&server=1&lang=de&db=Katalogsystem_Main&table=Universal_Cache&pos=0&sq
l_query=SELECT+%2A+FROM+Universal_Cache&goto=tbl_properties.php3

old version:
http://serade/phpMyAdmin/tbl_change.php3?primary_key=+CID+%3D+%270%27+AND+Ty
pe+%3D+%27Nexus%27+AND+Num+%3D+%270%27+AND+LastModify+%3D+%2720010627110806%
27+AND+Cache+%3D+%27%5C0%01%02%03%04%05%06%07%08%09%0A%0B%0C%0D%0E%0F%10%11%
12%13%14%15%16%17%18%19%1A%1B%1C%1D%1E%1F+%21%5C%22%23%24%25%26%5C%27%28%29%
2A%2B%2C-.%2F0123456789%3A%3B%3C%3D%3E%3F%40ABCDEFGHIJKLMNOPQRSTUVWXYZ%5B%5C
%5C%5D%5E_%60abcdefghijklmnopqrstuvwxyz%7B%7C%7D%7E%7F%80%81%82%83%84%85%86%
87%88%89%8A%8B%8C%8D%8E%8F%90%91%92%93%94%95%96%97%98%99%9A%9B%9C%9D%9E%9F%A
0%A1%A2%A3%A4%A5%A6%A7%A8%A9%AA%AB%AC%AD%AE%AF%B0%B1%B2%B3%B4%B5%B6%B7%B8%B9
%BA%BB%BC%BD%BE%BF%C0%C1%C2%C3%C4%C5%C6%C7%C8%C9%CA%CB%CC%CD%CE%CF%D0%D1%D2%
D3%D4%D5%D6%D7%D8%D9%DA%DB%DC%DD%DE%DF%E0%E1%E2%E3%E4%E5%E6%E7%E8%E9%EA%EB%E
C%ED%EE%EF%F0%F1%F2%F3%F4%F5%F6%F7%F8%F9%FA%FB%FC%FD%FE%FF%27+&server=1&lang
=de&db=Katalogsystem_Main&table=Universal_Cache&pos=0&sql_query=SELECT+%2A+F
ROM+Universal_Cache&goto=tbl_properties.php3

I hope we have enough time to fix all current problems ...

Regards,

--
Steve