From 833223654ae0b35d573c667756e1d0bad851e022 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Fri, 2 Jun 2017 18:04:27 +0200 Subject: [PATCH] Fixed direct login for accounts without password MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fixes #13311 Signed-off-by: Michal Čihař --- ChangeLog | 1 + libraries/plugins/auth/AuthenticationCookie.php | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index fb75c9fdba..77b97f0c9e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -3,6 +3,7 @@ phpMyAdmin - ChangeLog 4.7.2 (not yet released) - issue #13314 Make theme selection keep current server +- issue #13311 Fixed direct login for accounts without password 4.7.1 (2017-05-25) - issue #13132 Always execute tracking queries as controluser diff --git a/libraries/plugins/auth/AuthenticationCookie.php b/libraries/plugins/auth/AuthenticationCookie.php index 953f0db91b..6d1c7bd264 100644 --- a/libraries/plugins/auth/AuthenticationCookie.php +++ b/libraries/plugins/auth/AuthenticationCookie.php @@ -337,7 +337,7 @@ class AuthenticationCookie extends AuthenticationPlugin // The user just logged in $GLOBALS['PHP_AUTH_USER'] = PMA_sanitizeMySQLUser($_REQUEST['pma_username']); - $GLOBALS['PHP_AUTH_PW'] = $_REQUEST['pma_password']; + $GLOBALS['PHP_AUTH_PW'] = isset($_REQUEST['pma_password']) ? $_REQUEST['pma_password'] : ''; if ($GLOBALS['cfg']['AllowArbitraryServer'] && isset($_REQUEST['pma_servername']) ) {