From b9c814ed6d59733c54965e01e90ffd5d3348fd2c Mon Sep 17 00:00:00 2001 From: Dieter Adriaenssens Date: Sun, 28 Jul 2013 01:50:46 +0200 Subject: [PATCH] [security] Fix unencoded json object, see PMASA-2013-11 --- ChangeLog | 1 + version_check.php | 4 +++- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 951e7900c5..d72aa06952 100644 --- a/ChangeLog +++ b/ChangeLog @@ -9,6 +9,7 @@ phpMyAdmin - ChangeLog - [security] Fix control user SQL injection in pmd_pdf.php, see PMASA-2013-15 - [security] Fix control user SQL injection in schema_export.php, see PMASA-2013-15 - [security] Fix self-XSS in schema export, see PMASA-2013-14 +- [security] Fix unencoded json object, see PMASA-2013-11 4.0.4.1 (2013-06-30) - [security] Global variables scope injection vulnerability (see PMASA-2013-7) diff --git a/version_check.php b/version_check.php index 522e423daf..e27d8db9b3 100644 --- a/version_check.php +++ b/version_check.php @@ -41,7 +41,9 @@ if (is_object($data) && strlen($data->version) && strlen($data->date)) { 'timestamp' => time() ); } - echo $response; + echo json_encode( + array('version' => $data->version, 'date' => $data->date) + ); } ?>