gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
d03954bf9c
phpmyadmin/libraries
History
Michal Čihař d03954bf9c Enable LOAD DATA LOCAL INFILE only when needed 
There is no need to have this feature allowed for normal SQL queries, it
can lead to leaking sensitive files from the web server. It's enough to
enable it only in LDI import plugin, where we control what queries are
executed.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-23 08:59:02 +02:00
..
bfShapeFiles
config Sanitize MySQL host name before connecting 2016-07-12 15:10:59 +02:00
dbi Enable LOAD DATA LOCAL INFILE only when needed 2016-07-23 08:59:02 +02:00
engines Add rel="noopener noreferrer" to all target="_blank" links 2016-07-12 10:59:38 +02:00
gis bug #4594 [security] Path traversal in file inclusion of GIS factory 2014-11-17 11:03:55 +05:30
navigation Recursive function too deep 2015-01-07 07:52:29 -05:00
php-gettext Update PHP-gettext to 1.0.11 2013-05-13 11:32:41 +02:00
phpseclib/Crypt Fix #11891 Error with PMA 4.0.10.13 with PHP 5.2 2016-01-28 22:08:02 +11:00
plugins Backport cookie encryption from 4.6 branch 2016-07-22 14:40:02 +02:00
properties Anonymous functions are incompatible with PHP 5.2 2013-01-26 06:44:36 -05:00
rte bug #4488 [security] XSS injection due to unescaped table name (triggers) 2014-07-17 16:29:40 -04:00
schema Ensure page number is integer 2016-07-12 16:49:15 +02:00
tcpdf Avoid skipping the SSL certificate check in TCPDF 2016-02-25 10:29:26 +01:00
.gitignore
Advisor.class.php Better injection of variables into eval'd code 2013-07-23 11:20:56 +02:00
advisory_rules.txt Fix rule definition (value and check were mixed) 2013-07-23 11:34:33 +02:00
bookmark.lib.php Fix merge conflicts 2013-07-17 15:05:23 -04:00
build_html_for_db.lib.php Properly escape translated string 2016-06-17 14:48:05 +02:00
charset_conversion.lib.php
check_user_privileges.lib.php Removed unnecessary empty lines in functions 2012-09-19 00:15:15 +05:30
cleanup.lib.php
common.inc.php Allow url.php to be used without valid token 2016-05-30 09:28:35 +02:00
Config.class.php Release 4.0.10.16 2016-06-23 00:01:11 -04:00
config.default.php Remove Swekey support 2016-07-11 08:57:21 +02:00
config.values.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
core.lib.php Backport cookie encryption from 4.6 branch 2016-07-22 14:40:02 +02:00
data_dictionary_relations.lib.php
database_interface.lib.php Fallback to default collation connection 2016-01-26 15:05:42 +01:00
db_common.inc.php Don't redirect when no db is selected during ajax requests 2012-10-30 20:16:58 +00:00
db_info.inc.php bug #3975 Table grouping isn't implemented properly 2013-09-19 23:13:47 +05:30
db_table_exists.lib.php Don't use PMA_sendHeaderLocation during ajax requests 2012-11-30 19:41:54 +00:00
DBQbe.class.php Fix bug #3907 undefined variables, function parameter problems 2013-05-13 11:27:56 +02:00
DbSearch.class.php Fix XSS in DB_search.php 2016-01-19 21:01:32 +11:00
display_change_password.lib.php improve coding style 2013-01-15 20:15:50 +01:00
display_create_database.lib.php Escape suggested database name 2016-07-12 16:40:36 +02:00
display_create_table.lib.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
display_export.lib.php Fix bug #3874 [export] No preselected option when exporting table 2013-04-14 14:46:00 +02:00
display_git_revision.lib.php Add rel="noopener noreferrer" to all target="_blank" links 2016-07-12 10:59:38 +02:00
display_import_ajax.lib.php bug #3964 Import using https does not work 2013-06-10 08:02:00 -04:00
display_import.lib.php Fix import status being called with HTML-escaped GET params in JS section 2013-04-27 21:27:32 +02:00
display_select_lang.lib.php wrap long line 2013-01-24 17:31:07 +01:00
DisplayResults.class.php Fix variable name 2013-09-17 11:25:15 +02:00
Error_Handler.class.php [security] Avoid full path disclosure from some libraries script, see 2013-07-17 14:56:50 -04:00
Error.class.php [security] Avoid full path disclosure from some libraries script, see 2013-07-17 14:56:50 -04:00
error.inc.php Disable response wrapper in fatal error path 2013-06-11 08:57:49 +02:00
file_listing.lib.php Do not allow symlinks in UploadDir 2016-07-12 12:47:35 +02:00
File.class.php Do not allow symlinks in UploadDir 2016-07-12 12:47:35 +02:00
Footer.class.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
gis_visualization.lib.php
Header.class.php Update referrer <meta> to match current standards 2016-06-20 10:46:51 +02:00
iconv_wrapper.lib.php
import.lib.php Use https for wiki links 2016-07-09 09:10:57 +02:00
Index.class.php Bug fix 3898-Structure/page not refreshed. Updating Table stats 2013-05-12 21:37:32 +05:30
index.lib.php moved the method PMA_getHtmlForDisplayIndexes to the index.lib.php file 2013-03-21 14:35:22 +02:00
information_schema_relations.lib.php Add missing relations 2013-09-14 12:30:04 +05:30
insert_edit.lib.php bug #4091 Insert ignore option does not work 2013-09-13 12:50:25 -04:00
ip_allow_deny.lib.php Fix syntax error in older PHP versions 2016-07-11 09:36:56 +02:00
js_escape.lib.php remove unused variables 2013-01-24 17:31:07 +01:00
kanji-encoding.lib.php
List_Database.class.php Fix merge conflicts 2013-07-17 15:05:23 -04:00
List.class.php
logging.lib.php Various docblocks improvements 2012-09-19 15:05:26 +02:00
Menu.class.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
Message.class.php Fixed coding style 2013-03-08 22:50:33 +05:30
mime.lib.php
mult_submits.inc.php bug #4598 [security] XSS in multi submit 2014-11-17 12:13:09 +05:30
mysql_charsets.lib.php Resolved conflicts 2012-09-19 00:46:28 +05:30
opendocument.lib.php Include missing number namespace from our ODS export 2013-07-01 13:24:00 +02:00
operations.lib.php bug #4007 Analyze option not shown for InnoDB tables 2013-07-10 08:29:09 -04:00
OutputBuffering.class.php Send standard set of HTTP headers on redirect 2016-07-22 12:22:53 +02:00
parse_analyze.lib.php improve docblock : add file description 2013-01-19 13:55:18 +01:00
Partition.class.php remove unused variables : key is not used 2013-01-24 17:31:06 +01:00
PDF.class.php fix compat with tcpdf >= 6.0 (tested with 6.0.012) 2013-05-09 14:49:29 -04:00
plugin_interface.lib.php Do not try to create non existing classes 2016-07-13 09:48:21 +02:00
PMA.php Fix merge conflicts 2013-07-17 15:05:23 -04:00
pmd_common.php [security] Avoid full path disclosure from some libraries scripts, see PMASA-2013-12 2013-07-17 15:24:24 -04:00
RecentTable.class.php Correctly escape MySQL username in queries 2016-07-12 17:35:56 +02:00
relation_cleanup.lib.php Various docblocks improvements 2012-09-19 15:05:26 +02:00
relation.lib.php bug #3998 Non-permanent SQL history not working 2013-07-26 08:59:04 -04:00
replication_gui.lib.php Fix XSS in server_replication.php 2016-07-12 12:05:07 +10:00
replication.inc.php Sanitize MySQL host name before connecting 2016-07-12 15:10:59 +02:00
Response.class.php Don't add any extra data to failed ajax requests 2012-11-30 19:40:54 +00:00
sanitizing.lib.php Add rel="noopener noreferrer" to all target="_blank" links 2016-07-12 10:59:38 +02:00
Scripts.class.php Fix #11457 414 Request-URI Too Large 2016-06-15 18:04:16 +02:00
select_lang.lib.php bug [security] Risk of BREACH attack 2015-03-04 10:32:07 -05:00
select_server.lib.php Dropped more pointless target attributes 2012-11-05 22:30:39 +00:00
server_common.inc.php Dropped main.php 2012-10-30 20:10:20 +00:00
server_privileges.lib.php Fix XSS in User accounts page 2016-02-29 11:24:04 +11:00
server_variables_doc.php Modified some untracked files 2012-09-16 17:09:12 +05:30
ServerStatusData.class.php Fix merge conflicts 2013-02-09 07:50:16 -05:00
session.inc.php Fix #11891 Error with PMA 4.0.10.13 with PHP 5.2 2016-01-28 22:08:02 +11:00
special_schema_links.lib.php Add missing schema link 2013-09-14 17:08:30 +05:30
sql_query_form.lib.php Bug Fix #4150 2013-11-02 20:59:35 +05:30
sqlparser.data.php bug #3942 Warnings about reserved word for many non reserved words 2013-05-24 05:28:58 -04:00
sqlparser.lib.php bug #3995 Drizzle server charset notice 2013-10-06 09:32:24 -04:00
sqlvalidator.class.php Fix bug #3907 undefined variables, function parameter problems 2013-05-13 11:27:56 +02:00
sqlvalidator.lib.php Implement linking to new documentation 2012-11-12 09:48:05 +01:00
StorageEngine.class.php Fix typos 2013-02-03 08:15:31 -05:00
string_mb.lib.php
string_native.lib.php
string_type_ctype.lib.php
string_type_native.lib.php
string.lib.php
structure.lib.php Avoid notice on Drizzle 2013-09-26 06:28:21 -04:00
sysinfo.lib.php sysinfo: Support DragonFly BSD 2013-03-06 11:49:38 -08:00
Table.class.php Correctly escape MySQL username in queries 2016-07-12 17:35:56 +02:00
TableSearch.class.php HML encode embedded JSON data 2016-07-13 11:31:55 +02:00
tbl_columns_definition_form.inc.php Quote delimiter before using preg_replace 2016-06-20 12:13:24 +02:00
tbl_common.inc.php Do not show table as tracked if request for deactivation has been submitted 2013-03-28 16:05:30 +05:30
tbl_info.inc.php Renamed PMA_CommonFunctions::getInstance()-> with PMA_Util:: 2012-09-16 14:41:47 +05:30
tbl_views.lib.php Fix table name in comments 2013-01-31 10:33:41 +01:00
Theme_Manager.class.php Submit forms that reload the page via GET to avoid browser notices 2012-12-02 20:12:55 +00:00
Theme.class.php bug #4597 [security] XSS through pma_fontsize cookie 2014-11-18 10:15:34 +05:30
Tracker.class.php Prevent null-byte injection in preg_replace() 2013-04-23 11:46:53 -04:00
transformations.lib.php Simplify and cleanup transformation plugins 2016-06-17 16:19:31 +02:00
Types.class.php fix incorrect description of BLOB 2013-01-18 14:16:32 +01:00
url_generating.lib.php bug #4899 [security] CSRF vulnerability in setup 2015-05-12 19:56:53 +05:30
user_preferences.inc.php Replace "frame" with "panel" and "left" with "navi" or "navigation" 2012-11-03 07:27:17 -04:00
user_preferences.lib.php Dropped server side functionality for reloading the left frame from user preferences forms 2012-10-30 20:23:59 +00:00
Util.class.php Use https to access phpmyadmin.net 2016-07-18 16:20:34 +02:00
vendor_config.php add tcpdf path to vendor_config.php 2013-05-09 13:39:36 -04:00
zip_extension.lib.php Sanitize filename on SHP import 2016-07-22 11:49:35 +02:00
zip.lib.php