webapp/phpmyadmin
1
0
Fork 0
mirror of https://github.com/phpmyadmin/phpmyadmin.git synced 2026-10-31 10:54:46 +03:00
Code Activity
Files
b69311e460bd52eebc4402a165c012e63121ef03
phpmyadmin/libraries
History
Deven Bansod b69311e460 Fix self-injection in Table specific privileges 
Don't manually add backticks (`) rather use the Util function,
since escaping of backticks inside the column_name has to be handled too.

Fix #12361

Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
2016-11-16 11:11:41 +05:30
..
bfShapeFiles
There is no need to reset() before foreach()
2016-01-05 11:26:34 +01:00
config
Fix order of testing DBConnection with different parameters in Config method
2016-10-12 14:03:50 +05:30
controllers
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
dbi
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
di
Merge branch 'master' into useNamespaces_master
2015-09-27 20:50:19 +02:00
engines
Merge branch 'QA_4_6' into QA_4_6-security
2016-07-27 16:26:57 +02:00
gis
Ensure GIS point coordinates are numeric
2016-07-23 10:22:56 +02:00
navigation
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
php-gettext
Fix check for not set domain
2016-04-06 08:47:50 +02:00
phpseclib
Move security check behind namespace
2016-01-27 11:10:13 +01:00
plugins
Remove old sqlAddslashes call
2016-11-14 10:45:10 +05:30
properties
Allow to specify name and text directly in OptionsPropertyItem contructor
2016-01-05 15:04:02 +01:00
rte
Remove old sqlAddslashes call
2016-11-14 10:45:10 +05:30
sql-parser
Update SQL parser to 3.4.13
2016-11-15 17:05:28 +01:00
tcpdf
Remove potentionally license problematic sRGB profile
2016-08-17 09:04:26 +02:00
.gitignore
…
advisor.lib.php
Remove logic code in declaration files.
2015-10-27 18:56:39 +01:00
Advisor.php
Correctly localize message
2016-10-18 13:40:25 +02:00
advisory_rules.txt
Fix advisory rule 'Slow launch time'
2016-08-01 12:27:53 +01:00
autoloader.php
Autoloading for phpseclib
2016-02-01 21:53:53 +01:00
bookmark.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
browse_foreigners.lib.php
Properly escape configuration parameters when rendering
2016-07-26 16:47:01 +02:00
central_columns.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
charset_conversion.lib.php
Check whether iconv works before using it
2015-12-28 11:28:03 +01:00
check_user_privileges.lib.php
Use https for links to dev.mysql.com
2016-05-17 10:16:44 +02:00
cleanup.lib.php
Do not remove globals on parameters cleanup
2016-05-23 13:36:49 +02:00
common.inc.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
config.default.php
Use example.com as example domain
2016-09-26 09:20:08 +02:00
Config.php
Fix OmniWeb version match (issue #12615)
2016-10-04 12:02:02 +02:00
config.values.php
Make PHPCS happy.
2015-10-24 13:30:22 +02:00
Console.php
Simplify and improve message about listing bookmarks
2016-02-17 11:53:17 +01:00
core.lib.php
Always use UTC time in HTTP headers
2016-08-18 17:07:00 +02:00
create_addfield.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
database_interface.inc.php
Avoid confusing warning when mysql extension is missing
2016-05-23 10:53:13 +02:00
DatabaseInterface.php
Remove debugging calls
2016-11-16 09:23:06 +05:30
db_common.inc.php
Remove PmaAbsoluteUri from redirects
2016-02-03 14:32:14 +01:00
db_designer.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
db_table_exists.lib.php
Fix Navigation tests and Export tests
2016-11-04 11:55:46 +05:30
DbList.php
Use https when linking to php.net
2016-05-17 10:10:13 +02:00
DbQbe.php
Escape saved search name
2016-06-22 11:00:14 +02:00
DbSearch.php
Fix markup and tests
2016-11-15 17:41:38 +01:00
display_change_password.lib.php
Fix merge conflicts
2015-11-29 07:29:32 -05:00
display_create_table.lib.php
…
display_export.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
display_git_revision.lib.php
Add rel="noopener noreferrer" to all target="_blank" links
2016-07-12 11:02:53 +02:00
display_import_ajax.lib.php
Remove checks for PHP versions we no longer support
2016-01-28 16:08:47 +01:00
display_import.lib.php
Ensure we have integer as offset
2016-06-17 13:01:56 +02:00
display_select_lang.lib.php
Fixed activation of some languages
2016-03-24 23:30:24 +01:00
DisplayResults.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
error_report.lib.php
Merge remote-tracking branch 'security/QA_4_6-security' into QA_4_6
2016-08-16 16:34:37 -04:00
error.inc.php
…
Error.php
Treat hide_location error as user ones
2016-09-02 14:38:52 +02:00
ErrorHandler.php
Simplified handling of connection errors
2016-09-02 14:35:36 +02:00
export.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
file_listing.lib.php
Do not allow symlinks in UploadDir
2016-07-12 12:50:36 +02:00
File.php
Do not allow symlinks in UploadDir
2016-07-12 12:50:36 +02:00
Font.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
Footer.php
Try adding query to history only if Database links are available
2016-10-27 16:52:40 +05:30
Header.php
Include X-Robots-Tag header in responses
2016-07-12 10:28:03 +02:00
iconv_wrapper.lib.php
Use https for outbound links where applicable
2016-07-28 09:19:13 +02:00
import.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
index.lib.php
Merge branch 'master' into psr1_master
2015-11-08 16:16:05 +01:00
Index.php
Add missing escaping
2016-06-16 16:17:36 +02:00
IndexColumn.php
No nested ternary operators
2015-12-02 09:19:33 -05:00
information_schema_relations.lib.php
…
insert_edit.lib.php
Merge remote-tracking branch 'origin/pull/12564' into QA_4_6
2016-11-10 10:59:33 +01:00
ip_allow_deny.lib.php
Merge branch 'QA_4_6' into QA_4_6-security
2016-07-28 09:43:26 +02:00
js_escape.lib.php
PMA_jsFormat accepts only strings
2016-06-17 11:43:51 +02:00
kanji-encoding.lib.php
Fixed Kanji encoding in some specific cases
2015-12-28 10:48:31 +01:00
Language.php
Add infrastructure to map language to MySQL locale
2016-01-13 08:44:24 +01:00
LanguageManager.php
Fixed setting mixed case languages
2016-05-11 13:57:22 +02:00
Linter.php
Correctly calculate string length
2016-08-30 14:48:43 +02:00
ListAbstract.php
…
ListDatabase.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
logging.lib.php
Remove logic code in declaration files.
2015-10-27 18:56:39 +01:00
Menu.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
Message.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
mime.lib.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
mult_submits.inc.php
Move common code inside the method
2016-01-14 13:09:55 +11:00
mult_submits.lib.php
Fix #12433 : Copy table with prefix does not copy the indexes
2016-08-03 16:43:24 +05:30
mysql_charsets.inc.php
Remove not needed reset()
2016-01-05 12:33:39 +01:00
mysql_charsets.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
mysql_relations.lib.php
…
normalization.lib.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
opendocument.lib.php
Move classes in new files.
2015-09-26 22:22:06 +02:00
operations.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
OutputBuffering.php
Make PHPCS happy.
2015-11-08 15:58:48 +01:00
parse_analyze.lib.php
Make PHPCS happy.
2015-10-24 12:50:30 +02:00
Partition.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
PDF.php
Fixed invalid Content-Length in some HTTP responses
2016-07-22 16:41:51 +02:00
plugin_interface.lib.php
Remove unnecessary call to ksort on empty list
2016-11-13 11:37:50 +05:30
pmd_common.php
Merge remote-tracking branch 'origin/pull/12564' into QA_4_6
2016-11-10 10:59:33 +01:00
Psr4Autoloader.php
Make PHPCS happy
2015-10-29 07:37:55 +11:00
RecentFavoriteTable.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
relation_cleanup.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
relation.lib.php
Merge remote-tracking branch 'origin/pull/12564' into QA_4_6
2016-11-10 10:59:33 +01:00
replication_gui.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
replication.inc.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
Response.php
Do not try to wrap output in case response handling is disabled
2016-07-28 10:50:35 +02:00
sanitizing.lib.php
Fixed rendering BBCode links in setup
2016-09-16 09:47:29 +02:00
SavedSearches.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
Scripts.php
Remove unsued code for generating events
2016-08-03 11:36:41 +02:00
select_server.lib.php
Remove logic code in declaration files.
2015-10-27 18:56:39 +01:00
server_common.inc.php
…
server_common.lib.php
Remove logic code in declaration files.
2015-10-27 18:56:39 +01:00
server_privileges.lib.php
Fix self-injection in Table specific privileges
2016-11-16 11:11:41 +05:30
server_status_advisor.lib.php
Remove useless empty lines at beginning of files.
2015-10-27 18:56:40 +01:00
server_status_monitor.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
server_status_processes.lib.php
Merge branch 'QA_4_5'
2016-01-27 21:45:08 +11:00
server_status_queries.lib.php
Merge branch 'master' into psr1_master
2015-11-08 16:16:05 +01:00
server_status_variables.lib.php
Properly escape MySQL status variables
2016-07-10 18:07:59 +02:00
server_status.lib.php
Remove useless empty lines at beginning of files.
2015-10-27 18:56:40 +01:00
server_user_groups.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
server_users.lib.php
Remove logic code in declaration files.
2015-10-27 18:56:39 +01:00
ServerStatusData.php
Fix division by zero in case of misconfigured MySQL server
2016-06-09 09:49:13 +02:00
session.inc.php
Fix regexp for file path cleanup
2016-09-02 14:25:04 +02:00
session.lib.php
Do not try to secure session in testsuite
2016-05-23 15:00:57 +02:00
special_schema_links.lib.php
Force relative paths in links
2016-08-24 11:45:40 +02:00
sql_query_form.lib.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
sql.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
StorageEngine.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
string.lib.php
…
stringMb.lib.php
Merge branch 'QA_4_5'
2015-12-28 10:07:23 +01:00
stringNative.lib.php
…
SubPartition.php
…
sysinfo.lib.php
Use new URL for phpsysinfo
2016-07-27 16:21:00 +02:00
SysInfo.php
Make PHPCS happy.
2015-10-18 22:51:01 +02:00
SysInfoLinux.php
Remove /*overload*/ prefix from mb_* calls
2016-01-04 16:35:28 +01:00
SysInfoSunOS.php
Make PHPCS happy.
2015-10-18 22:51:01 +02:00
SysInfoWINNT.php
There is no need to reset() before foreach()
2016-01-05 11:26:34 +01:00
SystemDatabase.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
Table.php
Merge remote-tracking branch 'origin/pull/12564' into QA_4_6
2016-11-10 10:59:33 +01:00
tbl_columns_definition_form.inc.php
Fixed parsing of field definition
2016-03-09 09:02:07 +01:00
tbl_common.inc.php
Simplify detection of current script
2015-12-24 08:12:56 -05:00
tbl_info.inc.php
Cleanup code for getting table information
2016-09-26 13:44:57 +02:00
tbl_partition_definition.inc.php
Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support.
2016-08-14 12:26:01 +01:00
Template.php
Assign helperFunctions before doing extract
2016-06-20 12:07:13 +02:00
Theme.php
Apparently, variable interpolation also suffers from an unneeded memory copy
2015-12-06 07:40:20 -05:00
ThemeManager.php
No need for unset() as we are not in global context
2015-12-09 08:37:51 +01:00
Tracker.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
tracking.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
transformations.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
Types.php
…
TypesMySQL.php
JSON data type is not supported in MariaDB
2016-03-28 22:17:48 +11:00
url_generating.lib.php
Use https for outbound links where applicable
2016-07-28 09:19:13 +02:00
user_preferences.inc.php
Make PHPCS happy.
2015-11-08 15:58:48 +01:00
user_preferences.lib.php
Properly escape strings in MySQL statement values
2016-10-29 10:45:12 +05:30
util.lib.php
…
Util.php
Merge remote-tracking branch 'origin/pull/12564' into QA_4_6
2016-11-10 10:59:33 +01:00
vendor_config.php
Initial implementation of LanguageManager
2016-01-12 14:51:07 +01:00
VersionInformation.php
Remove MySQL version caching
2016-09-07 09:28:13 +02:00
zip_extension.lib.php
Sanitize filename on SHP import
2016-07-22 11:52:49 +02:00
ZipFile.php
Change url to https
2016-07-27 16:25:48 +02:00