[Phpmyadmin-devel] querywindow
Michal Čihař
michal at cihar.com
Sun Sep 25 00:21:01 CEST 2005
On Sun 25. 9. 2005 08:58, Sebastian Mendel wrote:
> so, till today no one adressed or even recognized the problem with
> window hijacking?
Probably not. Anyway I feel like this is a browser issue.
> and second: the queryframe is only introduced for the querywindow? so
> if the querywindow doesnt need this frame anymore we can get rid of
> this?
>
> my solution would be:
>
> replace ANY window names with crypted! (window hijacking)
>
> left frame gererates window object querywindow
>
> var querywindow = open(...);
>
> every access required to the qerywindow will got through this frame
>
> frames[0].querywindow...
>
> access from the querywindow will user opener
>
> opener.frame[0] ... the left frame
> opener.frame[1] ... the phpmain frame
Isn't queryframe reloaded sometimes? You'd lose querywindow reference in
this case.
--
Michal Čihař | http://cihar.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.phpmyadmin.net/pipermail/developers/attachments/20050925/16cd4290/attachment.sig>
More information about the Developers
mailing list