phpmyadmin/libraries
Deven Bansod f14cffdbe7 Properly escape strings in MySQL statement values
Use *_real_escape string functions provided by connectors to escape strings while exporting

Fix #12453

Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>

Conflicts:
	libraries/server_privileges.lib.php
2016-10-29 10:45:12 +05:30
..
bfShapeFiles There is no need to reset() before foreach() 2016-01-05 11:26:34 +01:00
config Fix order of testing DBConnection with different parameters in Config method 2016-10-12 14:03:50 +05:30
controllers Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
dbi Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
di Merge branch 'master' into useNamespaces_master 2015-09-27 20:50:19 +02:00
engines Merge branch 'QA_4_6' into QA_4_6-security 2016-07-27 16:26:57 +02:00
gis Ensure GIS point coordinates are numeric 2016-07-23 10:22:56 +02:00
navigation Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
php-gettext Fix check for not set domain 2016-04-06 08:47:50 +02:00
phpseclib Move security check behind namespace 2016-01-27 11:10:13 +01:00
plugins Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
properties Allow to specify name and text directly in OptionsPropertyItem contructor 2016-01-05 15:04:02 +01:00
rte Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
sql-parser Update SQL parser to 3.4.11 2016-10-25 10:02:48 +02:00
tcpdf Remove potentionally license problematic sRGB profile 2016-08-17 09:04:26 +02:00
.gitignore
advisor.lib.php Remove logic code in declaration files. 2015-10-27 18:56:39 +01:00
Advisor.php Correctly localize message 2016-10-18 13:40:25 +02:00
advisory_rules.txt Fix advisory rule 'Slow launch time' 2016-08-01 12:27:53 +01:00
autoloader.php Autoloading for phpseclib 2016-02-01 21:53:53 +01:00
bookmark.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
browse_foreigners.lib.php Properly escape configuration parameters when rendering 2016-07-26 16:47:01 +02:00
central_columns.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
charset_conversion.lib.php Check whether iconv works before using it 2015-12-28 11:28:03 +01:00
check_user_privileges.lib.php Use https for links to dev.mysql.com 2016-05-17 10:16:44 +02:00
cleanup.lib.php Do not remove globals on parameters cleanup 2016-05-23 13:36:49 +02:00
common.inc.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
config.default.php Use example.com as example domain 2016-09-26 09:20:08 +02:00
Config.php Fix OmniWeb version match (issue #12615) 2016-10-04 12:02:02 +02:00
config.values.php Make PHPCS happy. 2015-10-24 13:30:22 +02:00
Console.php Simplify and improve message about listing bookmarks 2016-02-17 11:53:17 +01:00
core.lib.php Always use UTC time in HTTP headers 2016-08-18 17:07:00 +02:00
create_addfield.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
database_interface.inc.php Avoid confusing warning when mysql extension is missing 2016-05-23 10:53:13 +02:00
DatabaseInterface.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
db_common.inc.php Remove PmaAbsoluteUri from redirects 2016-02-03 14:32:14 +01:00
db_designer.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
db_table_exists.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
DbList.php Use https when linking to php.net 2016-05-17 10:10:13 +02:00
DbQbe.php Escape saved search name 2016-06-22 11:00:14 +02:00
DbSearch.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
display_change_password.lib.php Fix merge conflicts 2015-11-29 07:29:32 -05:00
display_create_table.lib.php Remove classes require_once. 2015-09-01 21:30:22 +02:00
display_export.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
display_git_revision.lib.php Add rel="noopener noreferrer" to all target="_blank" links 2016-07-12 11:02:53 +02:00
display_import_ajax.lib.php Remove checks for PHP versions we no longer support 2016-01-28 16:08:47 +01:00
display_import.lib.php Ensure we have integer as offset 2016-06-17 13:01:56 +02:00
display_select_lang.lib.php Fixed activation of some languages 2016-03-24 23:30:24 +01:00
DisplayResults.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
error_report.lib.php Merge remote-tracking branch 'security/QA_4_6-security' into QA_4_6 2016-08-16 16:34:37 -04:00
error.inc.php
Error.php Treat hide_location error as user ones 2016-09-02 14:38:52 +02:00
ErrorHandler.php Simplified handling of connection errors 2016-09-02 14:35:36 +02:00
export.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
file_listing.lib.php Do not allow symlinks in UploadDir 2016-07-12 12:50:36 +02:00
File.php Do not allow symlinks in UploadDir 2016-07-12 12:50:36 +02:00
Font.php Remove /*overload*/ prefix from mb_* calls 2016-01-04 16:35:28 +01:00
Footer.php Try adding query to history only if Database links are available 2016-10-27 16:52:40 +05:30
Header.php Include X-Robots-Tag header in responses 2016-07-12 10:28:03 +02:00
iconv_wrapper.lib.php Use https for outbound links where applicable 2016-07-28 09:19:13 +02:00
import.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
index.lib.php Merge branch 'master' into psr1_master 2015-11-08 16:16:05 +01:00
Index.php Add missing escaping 2016-06-16 16:17:36 +02:00
IndexColumn.php No nested ternary operators 2015-12-02 09:19:33 -05:00
information_schema_relations.lib.php Remove unneeded closing tags. 2015-07-19 00:18:38 +03:00
insert_edit.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
ip_allow_deny.lib.php Merge branch 'QA_4_6' into QA_4_6-security 2016-07-28 09:43:26 +02:00
js_escape.lib.php PMA_jsFormat accepts only strings 2016-06-17 11:43:51 +02:00
kanji-encoding.lib.php Fixed Kanji encoding in some specific cases 2015-12-28 10:48:31 +01:00
Language.php Add infrastructure to map language to MySQL locale 2016-01-13 08:44:24 +01:00
LanguageManager.php Fixed setting mixed case languages 2016-05-11 13:57:22 +02:00
Linter.php Correctly calculate string length 2016-08-30 14:48:43 +02:00
ListAbstract.php Rename PMA_List object as PMA\libraries\ListAbstract. 2015-09-01 21:30:22 +02:00
ListDatabase.php Remove /*overload*/ prefix from mb_* calls 2016-01-04 16:35:28 +01:00
logging.lib.php Remove logic code in declaration files. 2015-10-27 18:56:39 +01:00
Menu.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
Message.php Remove /*overload*/ prefix from mb_* calls 2016-01-04 16:35:28 +01:00
mime.lib.php Remove /*overload*/ prefix from mb_* calls 2016-01-04 16:35:28 +01:00
mult_submits.inc.php Move common code inside the method 2016-01-14 13:09:55 +11:00
mult_submits.lib.php Fix #12433 : Copy table with prefix does not copy the indexes 2016-08-03 16:43:24 +05:30
mysql_charsets.inc.php Remove not needed reset() 2016-01-05 12:33:39 +01:00
mysql_charsets.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
mysql_relations.lib.php Remove unneeded closing tags. 2015-07-19 00:18:38 +03:00
normalization.lib.php Remove /*overload*/ prefix from mb_* calls 2016-01-04 16:35:28 +01:00
opendocument.lib.php Move classes in new files. 2015-09-26 22:22:06 +02:00
operations.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
OutputBuffering.php Make PHPCS happy. 2015-11-08 15:58:48 +01:00
parse_analyze.lib.php Make PHPCS happy. 2015-10-24 12:50:30 +02:00
Partition.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
PDF.php Fixed invalid Content-Length in some HTTP responses 2016-07-22 16:41:51 +02:00
plugin_interface.lib.php Do not try to create non existing classes 2016-07-13 09:47:09 +02:00
pmd_common.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
Psr4Autoloader.php Make PHPCS happy 2015-10-29 07:37:55 +11:00
RecentFavoriteTable.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
relation_cleanup.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
relation.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
replication_gui.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
replication.inc.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
Response.php Do not try to wrap output in case response handling is disabled 2016-07-28 10:50:35 +02:00
sanitizing.lib.php Fixed rendering BBCode links in setup 2016-09-16 09:47:29 +02:00
SavedSearches.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
Scripts.php Remove unsued code for generating events 2016-08-03 11:36:41 +02:00
select_server.lib.php Remove logic code in declaration files. 2015-10-27 18:56:39 +01:00
server_common.inc.php Merge branch 'master' into useNamespaces_master 2015-09-09 22:05:00 +02:00
server_common.lib.php Remove logic code in declaration files. 2015-10-27 18:56:39 +01:00
server_privileges.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
server_status_advisor.lib.php Remove useless empty lines at beginning of files. 2015-10-27 18:56:40 +01:00
server_status_monitor.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
server_status_processes.lib.php Merge branch 'QA_4_5' 2016-01-27 21:45:08 +11:00
server_status_queries.lib.php Merge branch 'master' into psr1_master 2015-11-08 16:16:05 +01:00
server_status_variables.lib.php Properly escape MySQL status variables 2016-07-10 18:07:59 +02:00
server_status.lib.php Remove useless empty lines at beginning of files. 2015-10-27 18:56:40 +01:00
server_user_groups.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
server_users.lib.php Remove logic code in declaration files. 2015-10-27 18:56:39 +01:00
ServerStatusData.php Fix division by zero in case of misconfigured MySQL server 2016-06-09 09:49:13 +02:00
session.inc.php Fix regexp for file path cleanup 2016-09-02 14:25:04 +02:00
session.lib.php Do not try to secure session in testsuite 2016-05-23 15:00:57 +02:00
special_schema_links.lib.php Force relative paths in links 2016-08-24 11:45:40 +02:00
sql_query_form.lib.php Remove /*overload*/ prefix from mb_* calls 2016-01-04 16:35:28 +01:00
sql.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
StorageEngine.php Remove /*overload*/ prefix from mb_* calls 2016-01-04 16:35:28 +01:00
string.lib.php Set namespace on Advisor, Config, Console and Util classes. 2015-09-01 21:22:52 +02:00
stringMb.lib.php Merge branch 'QA_4_5' 2015-12-28 10:07:23 +01:00
stringNative.lib.php Set namespace on Advisor, Config, Console and Util classes. 2015-09-01 21:22:52 +02:00
SubPartition.php Set namespace on Advisor, Config, Console and Util classes. 2015-09-01 21:22:52 +02:00
sysinfo.lib.php Use new URL for phpsysinfo 2016-07-27 16:21:00 +02:00
SysInfo.php Make PHPCS happy. 2015-10-18 22:51:01 +02:00
SysInfoLinux.php Remove /*overload*/ prefix from mb_* calls 2016-01-04 16:35:28 +01:00
SysInfoSunOS.php Make PHPCS happy. 2015-10-18 22:51:01 +02:00
SysInfoWINNT.php There is no need to reset() before foreach() 2016-01-05 11:26:34 +01:00
SystemDatabase.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
Table.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
tbl_columns_definition_form.inc.php Fixed parsing of field definition 2016-03-09 09:02:07 +01:00
tbl_common.inc.php Simplify detection of current script 2015-12-24 08:12:56 -05:00
tbl_info.inc.php Cleanup code for getting table information 2016-09-26 13:44:57 +02:00
tbl_partition_definition.inc.php Partitions editor: Allow to edit partition names; Add 'COLUMNS Partitioning' support. 2016-08-14 12:26:01 +01:00
Template.php Assign helperFunctions before doing extract 2016-06-20 12:07:13 +02:00
Theme.php Apparently, variable interpolation also suffers from an unneeded memory copy 2015-12-06 07:40:20 -05:00
ThemeManager.php No need for unset() as we are not in global context 2015-12-09 08:37:51 +01:00
Tracker.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
tracking.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
transformations.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
Types.php Split Types, TypesMySQL and TypesDrizzle classes in 3 files. 2015-09-01 21:30:22 +02:00
TypesMySQL.php JSON data type is not supported in MariaDB 2016-03-28 22:17:48 +11:00
url_generating.lib.php Use https for outbound links where applicable 2016-07-28 09:19:13 +02:00
user_preferences.inc.php Make PHPCS happy. 2015-11-08 15:58:48 +01:00
user_preferences.lib.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
util.lib.php Set namespace on Advisor, Config, Console and Util classes. 2015-09-01 21:22:52 +02:00
Util.php Properly escape strings in MySQL statement values 2016-10-29 10:45:12 +05:30
vendor_config.php Initial implementation of LanguageManager 2016-01-12 14:51:07 +01:00
VersionInformation.php Remove MySQL version caching 2016-09-07 09:28:13 +02:00
zip_extension.lib.php Sanitize filename on SHP import 2016-07-22 11:52:49 +02:00
ZipFile.php Change url to https 2016-07-27 16:25:48 +02:00