From ede23967967ac4e715b2df392a1388c2fb69942b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Maur=C3=ADcio=20Meneghini=20Fauth?= <mauricio@fauth.dev>
Date: Mon, 10 Jan 2022 12:34:12 -0300
Subject: [PATCH] Change URLQueryEncryption default to `false`
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
---
 config.sample.inc.php        | 7 +++++++
 doc/config.rst               | 4 ++--
 libraries/config.default.php | 2 +-
 3 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/config.sample.inc.php b/config.sample.inc.php
index 5eede6dd90..48dfdfdefe 100644
--- a/config.sample.inc.php
+++ b/config.sample.inc.php
@@ -148,6 +148,13 @@ $cfg['SaveDir'] = '';
  */
 //$cfg['SendErrorReports'] = 'always';
 
+/**
+ * 'URLQueryEncryption' defines whether phpMyAdmin will encrypt sensitive data from the URL query string.
+ * 'URLQueryEncryptionSecretKey' is a 32 bytes long secret key used to encrypt/decrypt the URL query string.
+ */
+//$cfg['URLQueryEncryption'] = true;
+//$cfg['URLQueryEncryptionSecretKey'] = '';
+
 /**
  * You can find more configuration options in the documentation
  * in the doc/ folder or at <https://docs.phpmyadmin.net/>.
diff --git a/doc/config.rst b/doc/config.rst
index e2e7eefb01..968145bc2f 100644
--- a/doc/config.rst
+++ b/doc/config.rst
@@ -1739,12 +1739,12 @@ Generic settings
 .. config:option:: $cfg['URLQueryEncryption']
 
     :type: boolean
-    :default: true
+    :default: false
 
     .. versionadded:: 4.9.8
 
     Define whether phpMyAdmin will encrypt sensitive data (like database name
-    and table name) from the URL query string. Default is to encrypt the URL
+    and table name) from the URL query string. Default is to not encrypt the URL
     query string.
 
 .. config:option:: $cfg['URLQueryEncryptionSecretKey']
diff --git a/libraries/config.default.php b/libraries/config.default.php
index b81981ba45..649c2d73c6 100644
--- a/libraries/config.default.php
+++ b/libraries/config.default.php
@@ -822,7 +822,7 @@ $cfg['IgnoreMultiSubmitErrors'] = false;
  *
  * @global bool $cfg['URLQueryEncryption']
  */
-$cfg['URLQueryEncryption'] = true;
+$cfg['URLQueryEncryption'] = false;
 
 /**
  * A secret key used to encrypt/decrypt the URL query string. Should be 32 bytes long.