[Phpmyadmin-devel] phpMyAdmin 2.9.0.1 is released

J?rgen Wind jwind at ngi.de
Tue Oct 3 14:53:33 CEST 2006




Marc Delisle wrote:
> 
> Sebastian Mendel a ?crit :
>> =?ANSI_X3.4-1968?Q?J=3Frgen_Wind?= schrieb:
>>>
>>> Michal ?iha? wrote:
>>>> On Sun, 01 Oct 2006 08:29:09 -0400
>>>> Marc Delisle <Marc.Delisle at cegepsherbrooke.qc.ca> wrote:
>>>>
>>>>> Welcome to phpMyAdmin 2.9.0.1 which contains security fixes. Details 
>>>>> will follow on the security page of phpmyadmin.net.
>>>>>
>>>>> The release candidate for this version was called 2.9.1-rc1, but 2.9.1 
>>>>> is not ready to be released.
>>>> It seems to break setup script somehow...
>>> it's in common.lib.php line 2879:
>>> if (empty($_REQUEST['token']) || $_SESSION[' PMA_token '] !=
>>> $_REQUEST['token']) {
>>> should be 'PMA_token' instedd
>> 
>> no, this is intentionally
>> 
> 
> I forgot to change $_SESSION['PMA_token'] to $_SESSION[' PMA_token ']
> in scripts/setup.php.
> 
> Can someone confirm this fix, I am busy right now.
> Then I'll release 2.9.0.2 later today.
> 
> Marc
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share
> your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Phpmyadmin-devel mailing list
> Phpmyadmin-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/phpmyadmin-devel
> 
> 
maybe it has to be changed in 
auth/signon... too ( line 108 )
-- 
View this message in context: http://www.nabble.com/phpMyAdmin-2.9.0.1-is-released-tf2364809.html#a6619486
Sent from the phpmyadmin-devel mailing list archive at Nabble.com.





More information about the Developers mailing list