gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
f2add98bd9
phpmyadmin/libraries
History
Michal Čihař f2add98bd9 Strip path even if openbasedir restrictions apply 
This really should not be the case here as what we get here is code
executed by PHP, so it should have already passed openbasedir
restrictions.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-08-18 10:14:01 +02:00
..
bfShapeFiles
config Remove option to show phpinfo() ($cfg['ShowPhpInfo']) 2016-07-26 11:03:53 +02:00
dbi Enable LOAD DATA LOCAL INFILE only when needed 2016-07-23 08:59:02 +02:00
engines Add rel="noopener noreferrer" to all target="_blank" links 2016-07-12 10:59:38 +02:00
gis Ensure GIS point coordinates are numeric 2016-07-23 10:24:35 +02:00
navigation Recursive function too deep 2015-01-07 07:52:29 -05:00
php-gettext Update PHP-gettext to 1.0.11 2013-05-13 11:32:41 +02:00
phpseclib/Crypt Fix #11891 Error with PMA 4.0.10.13 with PHP 5.2 2016-01-28 22:08:02 +11:00
plugins Use hash_equals for checking username 2016-08-18 09:39:22 +02:00
properties Anonymous functions are incompatible with PHP 5.2 2013-01-26 06:44:36 -05:00
rte bug #4488 [security] XSS injection due to unescaped table name (triggers) 2014-07-17 16:29:40 -04:00
schema Ensure page number is integer 2016-07-12 16:49:15 +02:00
tcpdf Avoid skipping the SSL certificate check in TCPDF 2016-02-25 10:29:26 +01:00
.gitignore
Advisor.class.php Better injection of variables into eval'd code 2013-07-23 11:20:56 +02:00
advisory_rules.txt Fix rule definition (value and check were mixed) 2013-07-23 11:34:33 +02:00
bookmark.lib.php Fix merge conflicts 2013-07-17 15:05:23 -04:00
build_html_for_db.lib.php Properly escape translated string 2016-06-17 14:48:05 +02:00
charset_conversion.lib.php
check_user_privileges.lib.php Removed unnecessary empty lines in functions 2012-09-19 00:15:15 +05:30
cleanup.lib.php
common.inc.php Remove option to show phpinfo() ($cfg['ShowPhpInfo']) 2016-07-26 11:03:53 +02:00
Config.class.php Release 4.0.10.17 2016-08-16 16:33:47 -04:00
config.default.php Remove option to show phpinfo() ($cfg['ShowPhpInfo']) 2016-07-26 11:03:53 +02:00
config.values.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
core.lib.php Strip null bytes from MySQL username 2016-08-18 09:10:55 +02:00
data_dictionary_relations.lib.php
database_interface.lib.php Fallback to default collation connection 2016-01-26 15:05:42 +01:00
db_common.inc.php Don't redirect when no db is selected during ajax requests 2012-10-30 20:16:58 +00:00
db_info.inc.php bug #3975 Table grouping isn't implemented properly 2013-09-19 23:13:47 +05:30
db_table_exists.lib.php Don't use PMA_sendHeaderLocation during ajax requests 2012-11-30 19:41:54 +00:00
DBQbe.class.php Fix bug #3907 undefined variables, function parameter problems 2013-05-13 11:27:56 +02:00
DbSearch.class.php Escape string when showing confirmation message 2016-07-28 10:31:30 +02:00
display_change_password.lib.php improve coding style 2013-01-15 20:15:50 +01:00
display_create_database.lib.php Escape suggested database name 2016-07-12 16:40:36 +02:00
display_create_table.lib.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
display_export.lib.php Fix bug #3874 [export] No preselected option when exporting table 2013-04-14 14:46:00 +02:00
display_git_revision.lib.php Add rel="noopener noreferrer" to all target="_blank" links 2016-07-12 10:59:38 +02:00
display_import_ajax.lib.php bug #3964 Import using https does not work 2013-06-10 08:02:00 -04:00
display_import.lib.php Fix import status being called with HTML-escaped GET params in JS section 2013-04-27 21:27:32 +02:00
display_select_lang.lib.php wrap long line 2013-01-24 17:31:07 +01:00
DisplayResults.class.php Fix variable name 2013-09-17 11:25:15 +02:00
Error_Handler.class.php [security] Avoid full path disclosure from some libraries script, see 2013-07-17 14:56:50 -04:00
Error.class.php Strip path even if openbasedir restrictions apply 2016-08-18 10:14:01 +02:00
error.inc.php Disable response wrapper in fatal error path 2013-06-11 08:57:49 +02:00
file_listing.lib.php Do not allow symlinks in UploadDir 2016-07-12 12:47:35 +02:00
File.class.php Do not allow symlinks in UploadDir 2016-07-12 12:47:35 +02:00
Footer.class.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
gis_visualization.lib.php Typos 2012-06-21 06:26:59 -04:00
Header.class.php Update referrer <meta> to match current standards 2016-06-20 10:46:51 +02:00
iconv_wrapper.lib.php
import.lib.php Use https for wiki links 2016-07-09 09:10:57 +02:00
Index.class.php Bug fix 3898-Structure/page not refreshed. Updating Table stats 2013-05-12 21:37:32 +05:30
index.lib.php moved the method PMA_getHtmlForDisplayIndexes to the index.lib.php file 2013-03-21 14:35:22 +02:00
information_schema_relations.lib.php Add missing relations 2013-09-14 12:30:04 +05:30
insert_edit.lib.php bug #4091 Insert ignore option does not work 2013-09-13 12:50:25 -04:00
ip_allow_deny.lib.php Use hash_equals for comparing username in allow/deny rules 2016-08-18 09:15:34 +02:00
js_escape.lib.php remove unused variables 2013-01-24 17:31:07 +01:00
kanji-encoding.lib.php
List_Database.class.php Fix merge conflicts 2013-07-17 15:05:23 -04:00
List.class.php
logging.lib.php Various docblocks improvements 2012-09-19 15:05:26 +02:00
Menu.class.php Bug #3960 NavigationBarIconic config not honored 2013-06-21 10:00:41 -04:00
Message.class.php Fixed coding style 2013-03-08 22:50:33 +05:30
mime.lib.php
mult_submits.inc.php bug #4598 [security] XSS in multi submit 2014-11-17 12:13:09 +05:30
mysql_charsets.lib.php Resolved conflicts 2012-09-19 00:46:28 +05:30
opendocument.lib.php Include missing number namespace from our ODS export 2013-07-01 13:24:00 +02:00
operations.lib.php bug #4007 Analyze option not shown for InnoDB tables 2013-07-10 08:29:09 -04:00
OutputBuffering.class.php Send standard set of HTTP headers on redirect 2016-07-22 12:22:53 +02:00
parse_analyze.lib.php improve docblock : add file description 2013-01-19 13:55:18 +01:00
Partition.class.php remove unused variables : key is not used 2013-01-24 17:31:06 +01:00
PDF.class.php fix compat with tcpdf >= 6.0 (tested with 6.0.012) 2013-05-09 14:49:29 -04:00
plugin_interface.lib.php Do not try to create non existing classes 2016-07-13 09:48:21 +02:00
PMA.php Fix merge conflicts 2013-07-17 15:05:23 -04:00
pmd_common.php [security] Avoid full path disclosure from some libraries scripts, see PMASA-2013-12 2013-07-17 15:24:24 -04:00
RecentTable.class.php Correctly escape MySQL username in queries 2016-07-12 17:35:56 +02:00
relation_cleanup.lib.php Various docblocks improvements 2012-09-19 15:05:26 +02:00
relation.lib.php bug #3998 Non-permanent SQL history not working 2013-07-26 08:59:04 -04:00
replication_gui.lib.php Fix XSS in server_replication.php 2016-07-12 12:05:07 +10:00
replication.inc.php Move hostname sanitization to correct place 2016-07-29 14:10:07 +02:00
Response.class.php Do not try to wrap output in case response handling is disabled 2016-07-28 10:53:37 +02:00
sanitizing.lib.php Add rel="noopener noreferrer" to all target="_blank" links 2016-07-12 10:59:38 +02:00
Scripts.class.php Fix #11457 414 Request-URI Too Large 2016-06-15 18:04:16 +02:00
select_lang.lib.php bug [security] Risk of BREACH attack 2015-03-04 10:32:07 -05:00
select_server.lib.php Dropped more pointless target attributes 2012-11-05 22:30:39 +00:00
server_common.inc.php Dropped main.php 2012-10-30 20:10:20 +00:00
server_privileges.lib.php Fix XSS in User accounts page 2016-02-29 11:24:04 +11:00
server_variables_doc.php Modified some untracked files 2012-09-16 17:09:12 +05:30
ServerStatusData.class.php Fix merge conflicts 2013-02-09 07:50:16 -05:00
session.inc.php Fix #11891 Error with PMA 4.0.10.13 with PHP 5.2 2016-01-28 22:08:02 +11:00
special_schema_links.lib.php Add missing schema link 2013-09-14 17:08:30 +05:30
sql_query_form.lib.php Bug Fix #4150 2013-11-02 20:59:35 +05:30
sqlparser.data.php bug #3942 Warnings about reserved word for many non reserved words 2013-05-24 05:28:58 -04:00
sqlparser.lib.php bug #3995 Drizzle server charset notice 2013-10-06 09:32:24 -04:00
sqlvalidator.class.php Fix bug #3907 undefined variables, function parameter problems 2013-05-13 11:27:56 +02:00
sqlvalidator.lib.php Implement linking to new documentation 2012-11-12 09:48:05 +01:00
StorageEngine.class.php Fix typos 2013-02-03 08:15:31 -05:00
string_mb.lib.php
string_native.lib.php
string_type_ctype.lib.php
string_type_native.lib.php
string.lib.php
structure.lib.php Avoid notice on Drizzle 2013-09-26 06:28:21 -04:00
sysinfo.lib.php sysinfo: Support DragonFly BSD 2013-03-06 11:49:38 -08:00
Table.class.php Correctly escape MySQL username in queries 2016-07-12 17:35:56 +02:00
TableSearch.class.php HML encode embedded JSON data 2016-07-13 11:31:55 +02:00
tbl_columns_definition_form.inc.php Quote delimiter before using preg_replace 2016-06-20 12:13:24 +02:00
tbl_common.inc.php Do not show table as tracked if request for deactivation has been submitted 2013-03-28 16:05:30 +05:30
tbl_info.inc.php Renamed PMA_CommonFunctions::getInstance()-> with PMA_Util:: 2012-09-16 14:41:47 +05:30
tbl_views.lib.php Fix table name in comments 2013-01-31 10:33:41 +01:00
Theme_Manager.class.php Submit forms that reload the page via GET to avoid browser notices 2012-12-02 20:12:55 +00:00
Theme.class.php bug #4597 [security] XSS through pma_fontsize cookie 2014-11-18 10:15:34 +05:30
Tracker.class.php Prevent null-byte injection in preg_replace() 2013-04-23 11:46:53 -04:00
transformations.lib.php Simplify and cleanup transformation plugins 2016-06-17 16:19:31 +02:00
Types.class.php fix incorrect description of BLOB 2013-01-18 14:16:32 +01:00
url_generating.lib.php bug #4899 [security] CSRF vulnerability in setup 2015-05-12 19:56:53 +05:30
user_preferences.inc.php Replace "frame" with "panel" and "left" with "navi" or "navigation" 2012-11-03 07:27:17 -04:00
user_preferences.lib.php Dropped server side functionality for reloading the left frame from user preferences forms 2012-10-30 20:23:59 +00:00
Util.class.php Use https to access phpmyadmin.net 2016-07-18 16:20:34 +02:00
vendor_config.php add tcpdf path to vendor_config.php 2013-05-09 13:39:36 -04:00
zip_extension.lib.php Sanitize filename on SHP import 2016-07-22 11:49:35 +02:00
zip.lib.php Class names should start with capital letters 2012-06-23 22:12:51 +05:30