[phpMyAdmin Git] [phpmyadmin/phpmyadmin] a8acd7: Use Util::backquote in getDataRowAction

Sat Mar 21 05:23:44 CET 2020

Branch: refs/heads/QA_4_9
Home: https://github.com/phpmyadmin/phpmyadmin
Commit: a8acd7a42cf743186528b0453f90aaa32bfefabe
https://github.com/phpmyadmin/phpmyadmin/commit/a8acd7a42cf743186528b0453f90aaa32bfefabe
Author: Maurício Meneghini Fauth <mauricio at fauth.dev>
Date: 2020-01-18 (Sat, 01 January 2020) -03:00

Changed paths: 
M libraries/classes/Controllers/Table/TableSearchController.php

Log Message:
-----------
Use Util::backquote in getDataRowAction

Signed-off-by: Maurício Meneghini Fauth <mauricio at fauth.dev>

Commit: 6b9b2601d8af916659cde8aefd3a6eaadd10284a
https://github.com/phpmyadmin/phpmyadmin/commit/6b9b2601d8af916659cde8aefd3a6eaadd10284a
Author: Maurício Meneghini Fauth <mauricio at fauth.dev>
Date: 2020-03-05 (Thu, 03 March 2020) -03:00

Changed paths: 
M libraries/classes/Display/Results.php
M tbl_get_field.php

Log Message:
-----------
Add where_clause check in tbl_get_field.php

Signed-off-by: Maurício Meneghini Fauth <mauricio at fauth.dev>

Commit: 46a7aa7cd4ff2be0eeb23721fbf71567bebe69a5
https://github.com/phpmyadmin/phpmyadmin/commit/46a7aa7cd4ff2be0eeb23721fbf71567bebe69a5
Author: Maurício Meneghini Fauth <mauricio at fauth.dev>
Date: 2020-03-05 (Thu, 03 March 2020) -03:00

Changed paths: 
M test/classes/Display/ResultsTest.php

Log Message:
-----------
Fix Display\ResultsTest errors

Signed-off-by: Maurício Meneghini Fauth <mauricio at fauth.dev>

Commit: 2489837213b90664aceebe4c9ac641bf167b8a97
https://github.com/phpmyadmin/phpmyadmin/commit/2489837213b90664aceebe4c9ac641bf167b8a97
Author: Maurício Meneghini Fauth <mauricio at fauth.dev>
Date: 2020-03-05 (Thu, 03 March 2020) -03:00

Changed paths: 
M tbl_get_field.php

Log Message:
-----------
Add l10n notes

Signed-off-by: William Desportes <williamdes at wdes.fr>
Signed-off-by: Maurício Meneghini Fauth <mauricio at fauth.dev>

Co-Authored-By: William Desportes <williamdes at wdes.fr>

Commit: 89fbcd7c39e6b3979cdb2f64aa4cd5f4db27eaad
https://github.com/phpmyadmin/phpmyadmin/commit/89fbcd7c39e6b3979cdb2f64aa4cd5f4db27eaad
Author: Maurício Meneghini Fauth <mauricio at fauth.dev>
Date: 2020-03-05 (Thu, 03 March 2020) -03:00

Changed paths: 
M libraries/classes/Server/Privileges.php

Log Message:
-----------
Escape user and hostname when getting auth plugin

Signed-off-by: Maurício Meneghini Fauth <mauricio at fauth.dev>

Commit: 0184c2884edfd2c93f923960516837dba75e6227
https://github.com/phpmyadmin/phpmyadmin/commit/0184c2884edfd2c93f923960516837dba75e6227
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-15 (Sun, 03 March 2020) -04:00

Changed paths: 
M libraries/classes/Server/Privileges.php

Log Message:
-----------
Merge pull request #308 from phpmyadmin/security/303

Fix SQL Injection in getCurrentUserAndHost

Commit: 13e6a018382e069820dec03e9af46ba118d62c00
https://github.com/phpmyadmin/phpmyadmin/commit/13e6a018382e069820dec03e9af46ba118d62c00
Author: Maurício Meneghini Fauth <mauricio at fauth.dev>
Date: 2020-03-17 (Tue, 03 March 2020) -03:00

Changed paths: 
M libraries/classes/Error.php
M libraries/classes/ErrorHandler.php

Log Message:
-----------
Add support for E_USER_DEPRECATED in the error handler

Signed-off-by: Maurício Meneghini Fauth <mauricio at fauth.dev>

Commit: 799ce5e3a6802acc4a8c892cd1fdee62233d0569
https://github.com/phpmyadmin/phpmyadmin/commit/799ce5e3a6802acc4a8c892cd1fdee62233d0569
Author: Maurício Meneghini Fauth <mauricio at fauth.dev>
Date: 2020-03-17 (Tue, 03 March 2020) -03:00

Changed paths: 
M libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php

Log Message:
-----------
Add warning for external transformations option usage

Signed-off-by: Maurício Meneghini Fauth <mauricio at fauth.dev>

Commit: 3258978c38bee8cb4b99f249dffac9c8aaea2d80
https://github.com/phpmyadmin/phpmyadmin/commit/3258978c38bee8cb4b99f249dffac9c8aaea2d80
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-18 (Wed, 03 March 2020) -04:00

Changed paths: 
M libraries/classes/Server/Privileges.php
M libraries/classes/UserPassword.php

Log Message:
-----------
More escaping of username and password.

Improves upon 89fbcd7c39e6b3979cdb2f64aa4cd5f4db27eaad

Signed-off-by: Isaac Bennetch <bennetch at gmail.com>

Commit: 51d54d62bb0ed61bdf3bce52e06a9968701b067e
https://github.com/phpmyadmin/phpmyadmin/commit/51d54d62bb0ed61bdf3bce52e06a9968701b067e
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-19 (Thu, 03 March 2020) -04:00

Changed paths: 
M libraries/classes/Server/Privileges.php
M libraries/classes/UserPassword.php

Log Message:
-----------
Merge pull request #310 from phpmyadmin/298

Another instance to escape username and password when changing password

Commit: 1a1f00bad4221b333bd73b8e59c2ec68b16ce10f
https://github.com/phpmyadmin/phpmyadmin/commit/1a1f00bad4221b333bd73b8e59c2ec68b16ce10f
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-19 (Thu, 03 March 2020) -04:00

Changed paths: 
M libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php

Log Message:
-----------
Corrected documentation for External Transformation

Signed-off-by: Isaac Bennetch <bennetch at gmail.com>

Commit: 9ce61ea0e59a98147c156dd170cc0f8b95a7daaa
https://github.com/phpmyadmin/phpmyadmin/commit/9ce61ea0e59a98147c156dd170cc0f8b95a7daaa
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-19 (Thu, 03 March 2020) -04:00

Changed paths: 
M libraries/classes/Display/Results.php
M tbl_get_field.php
M test/classes/Display/ResultsTest.php

Log Message:
-----------
Merge pull request #306 from phpmyadmin/security/295

Fix SQL Injection and Data Extraction with XS-Search

Commit: 155f3b2b4117b08df9dc4fc8eae9f1054c9d9c1e
https://github.com/phpmyadmin/phpmyadmin/commit/155f3b2b4117b08df9dc4fc8eae9f1054c9d9c1e
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-20 (Fri, 03 March 2020) -04:00

Changed paths: 
M libraries/classes/Controllers/Table/TableSearchController.php

Log Message:
-----------
Merge pull request #297 from phpmyadmin/security/296

SQL Injection in SearchController

Commit: 163f05cac106b603ae272fed9baddbff22b2cdc8
https://github.com/phpmyadmin/phpmyadmin/commit/163f05cac106b603ae272fed9baddbff22b2cdc8
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-20 (Fri, 03 March 2020) -04:00

Changed paths: 
M libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php

Log Message:
-----------
Improve warning message for external transformation

Signed-off-by: Isaac Bennetch <bennetch at gmail.com>

Commit: 1aee403733dcf2ae7050d851480afb39c2f47bf0
https://github.com/phpmyadmin/phpmyadmin/commit/1aee403733dcf2ae7050d851480afb39c2f47bf0
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-20 (Fri, 03 March 2020) -04:00

Changed paths: 
M libraries/classes/Error.php
M libraries/classes/ErrorHandler.php
M libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php

Log Message:
-----------
Merge pull request #307 from phpmyadmin/security/302

Fix External Transformation RCE

Commit: d193fdc31b5afc27f3642e33f121bdc7fb357ca6
https://github.com/phpmyadmin/phpmyadmin/commit/d193fdc31b5afc27f3642e33f121bdc7fb357ca6
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-20 (Fri, 03 March 2020) -04:00

Changed paths: 
M ChangeLog

Log Message:
-----------
ChangeLog for 4.9.5

Signed-off-by: Isaac Bennetch <bennetch at gmail.com>

Commit: 10c9709f7dccd55b38341b3c06b90fe0a01d30b0
https://github.com/phpmyadmin/phpmyadmin/commit/10c9709f7dccd55b38341b3c06b90fe0a01d30b0
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-20 (Fri, 03 March 2020) -04:00

Changed paths: 
M ChangeLog
M libraries/classes/Controllers/Table/TableSearchController.php
M libraries/classes/Display/Results.php
M libraries/classes/Error.php
M libraries/classes/ErrorHandler.php
M libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php
M libraries/classes/Server/Privileges.php
M libraries/classes/UserPassword.php
M tbl_get_field.php
M test/classes/Display/ResultsTest.php

Log Message:
-----------
Merge branch 'QA_4_9-security' into QA_4_9

Commit: 28a79c9d09fc87c489f13a611c9f9bf2ece8f4b9
https://github.com/phpmyadmin/phpmyadmin/commit/28a79c9d09fc87c489f13a611c9f9bf2ece8f4b9
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-20 (Fri, 03 March 2020) -04:00

Changed paths: 
M README
M doc/conf.py
M libraries/classes/Config.php
M package.json

Log Message:
-----------
Prepare for version 4.9.5

Signed-off-by: Isaac Bennetch <bennetch at gmail.com>

Commit: 2ee7e9840fa733c17304399bb0dd7361c970ca97
https://github.com/phpmyadmin/phpmyadmin/commit/2ee7e9840fa733c17304399bb0dd7361c970ca97
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-20 (Fri, 03 March 2020) -04:00

Changed paths: 
M test/classes/Plugins/Transformations/TransformationPluginsTest.php

Log Message:
-----------
Fix transformation test

Signed-off-by: Isaac Bennetch <bennetch at gmail.com>

Commit: 1651d674d65bdd032071733f57cfff9b496e7d85
https://github.com/phpmyadmin/phpmyadmin/commit/1651d674d65bdd032071733f57cfff9b496e7d85
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-21 (Sat, 03 March 2020) -04:00

Changed paths: 
A composer.lock

Log Message:
-----------
Adding composer lock for 4.9.5

Signed-off-by: Isaac Bennetch <bennetch at gmail.com>

Commit: b2fc6760f72404673a226b0c7dcd0c7d9c72ffb0
https://github.com/phpmyadmin/phpmyadmin/commit/b2fc6760f72404673a226b0c7dcd0c7d9c72ffb0
Author: Isaac Bennetch <bennetch at gmail.com>
Date: 2020-03-21 (Sat, 03 March 2020) -04:00

Changed paths: 
D composer.lock

Log Message:
-----------
Removing composer.lock

Signed-off-by: Isaac Bennetch <bennetch at gmail.com>