Mit diesem Release wurden einige Sicherheitslücken, wie z.B. XSS-Schwachstellen im Core-Code, von phpMyAdmin beseitigt.

Des Weiteren wurden einige Fehler (Bugs), die seit dem Release von Version 2.10.1-rc1 erkannt wurden, beseitigt.

Fixes:

• - bug #1541147 [js] '#' in database names not correctly handled by queywindow.js


• - bug #1671403 [parser] using "client" as table name


• - bug #1672379 [core] Call to undefined function PMA_removeCookie()


• - bug [core] undefined variable in libraries/tbl_replace_fields.inc.php


• - bug [gui] query window icon did not work, thanks to Juergen Wind - windkiel


• . [general] use PMA_getenv('PHP_SELF')


• - bug #1676033 [core] pow(int,int) causes overflow


• - bug #1680952 [core] undefined function PMA_getUvaCondition()


• - bug #1596328 [export] drop support for POSTGRESQL compatibility mode


• - bug #1609443 [privileges] Grant all priv. on wildcard name (fix message)


• - bug #1567317 [sqp] Syntax highlighter: extra spaces


• - bug #1239401 [sqp] table dot numeric field name


• - bug #1672789 [sqp] Undefined offset: 4 in sqlparser.lib.php #1674


• - bug #1682044 [export] Export file even if file not selected


• - bug #1664212 querywindow loses url encoded characters


• - replaced ctype_digit() with is_numeric()


• + [config] clean cookies on phpMyAdmin upgrade


• - bug #1674972 [export] no export with %afm%


• - bug #1667887 HTML maxlength


• - bug #1679055 #1050 - Table 'table name' already exists


• - patch #1681620 [interface] support reordering of cfg['ColumnTypes'], thanks to Leonard den Ottolander


• - bug #1690718 Can't edit if BLOB and no PK


• - bug #1672636 [export] PDF export too wide


• + [lang] brazilian-portuguese update, thanks to Airon Luis Pereira


• - patch #1698964 javascript typo, thanks to Corey Hollaway


• - bug #1703897 [css] undefined index 'js_frame'


• - bug #1690561 Blobs being cleared on Edit of row


• - bug #1679801 [core] XSS vulnerability in PMA_sanitize(), thanks to sp3x SecurityReason


• - bug #1704467 XSS vulnerability in browse_foreigners.php, thanks to sp3x SecurityReason

zum Download von phpMyAdmin 2.10.1

Homepage des phpMyAdmin-Projekts