[Phpmyadmin-devel] querywindow

Michal Čihař michal at cihar.com
Sun Sep 25 00:21:01 CEST 2005


On Sun 25. 9. 2005 08:58, Sebastian Mendel wrote:
> so, till today no one adressed or even recognized the problem with
> window hijacking?

Probably not. Anyway I feel like this is a browser issue.

> and second: the queryframe is only introduced for the querywindow? so
> if the querywindow doesnt need this frame anymore we can get rid of
> this?
>
> my solution would be:
>
> replace ANY window names with crypted! (window hijacking)
>
> left frame gererates window object querywindow
>
>   var querywindow = open(...);
>
> every access required to the qerywindow will got through this frame
>
>   frames[0].querywindow...
>
> access from the querywindow will user opener
>
>   opener.frame[0] ... the left frame
>   opener.frame[1] ... the phpmain frame

Isn't queryframe reloaded sometimes? You'd lose querywindow reference in 
this case.

-- 
    Michal Čihař | http://cihar.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.phpmyadmin.net/pipermail/developers/attachments/20050925/16cd4290/attachment.sig>


More information about the Developers mailing list