phpMyAdmin 歷史舊版本 Page6

更新時間：2016-03-01
更新細節：

What's new in this version:

This release fixes multiple XSS vulnerabilities, please see PMASA-2016-10, PMASA-2016-11, and PMASA-2016-12 for details; additionally it fixes a vulnerability allowing man-in-the-middle attack on an API call to GitHub, see PMASA-2016-13 for details.

It also inclues fixes for the following bugs:
- issue #11971 CREATE UNIQUE INDEX index type is not recognized by parser.
- issue #11982 Row count wrong when grouping joined tables.
- issue #12012 Column definition with default value and comment in CREATE TABLE exported faulty.
- issue #12020 New statement but no delimiter and unexpected token with REPLACE.
- issue #12029 Fixed incorrect usage of SQL parser context in SQL export
- issue #12048 Fixed inclusion of gettext library from SQL parser

更新時間：2016-03-01
更新細節：

What's new in this version:

- This version fixes multiple XSS vulnerabilities, see PMASA-2016-11 for more details.

更新時間：2016-03-01
更新細節：

What's new in this version:

- This version fixes multiple XSS vulnerabilities, see PMASA-2016-11 for more details.

更新時間：2016-02-22
更新細節：

What's new in this version:

- Undefined index: is_ajax_request
- Fix password change on MariaDB 10.1 and newer
- Validate version information before further processing it
- Full processlist lost on refresh
- Adjust privileges fails if database name contains underscores
- 'Loading...' banner shows on login screen
- Fixed changing of table parameters, eg. AUTO_INCREMENT
- Call to undefined function SqlParserctype_alnum()
- 4.5.3.1 - NOW() function not recognized by parser
- Gracefully handle the DESC statement
- Fractional timestamp causes corrupted SQL export
- Static analysis error for valid WHERE condition with IF keyword
- Syntax Verifier error using REGEXP in SQL statement
- Backslashes in comments are being interpreted as escape characters
- Can't insert row into table that contains generated column
- sql-parser and php-gettext collide.
- Can't disable backquotes in export
- Inserts via tbl_change.php in VARBINARY columns does not allow using HEX() and MD5()
- Correct content type for uploaded error reports
- Silent errors from checking local documentation
- Fixed error on servers with disabled php_uname
- Correctly store and report file upload errors
- Avoid javascript errors on invalid location hash
- Fix PHP warning on configuration errors
- Silent errors on checking for writable folders
- Silent warning on invalid file upload
- Do not fail getting filename with open_basedir limitations
- unrecognized keyword interval
- Field names and aliases are being correctly parsed now.
- Fix javascript error in setup
- Undefined index: TABLE_COMMENT in database structure page
- Fix PHP error on loading invalid XML or ODS file
- Missing confirmation while dropping a view in view_operations.php
- Fix export of index comments in SQL
- DECLARE not accepted as valid SQL

更新時間：2016-01-29
更新細節：

What's new in this version:

- Error with PMA 4.4.15.3
- Remove hard dependency on phpseclib

更新時間：2016-01-29
更新細節：

What's new in this version:

- Error with PMA 4.4.15.3
- Remove hard dependency on phpseclib

更新時間：2016-01-29
更新細節：

What's new in this version:

- Error with PMA 4.0.10.13 with PHP 5.2

更新時間：2016-01-28
更新細節：

What's new in this version:

- live data edit of big sets is not working
- Table list not saved in db QBE bookmarked search
- While 'changing a column', query fails with a syntax error after the 'CHARSET=' keyword
- Avoid syntax error in javascript messages on invalid PHP setting for max_input_vars
- Properly handle errors in upacking zip archive
- Set PHP's internal encoding to UTF-8
- Fixed Kanji encoding in some specific cases
- Check whether iconv works before using it
- Avoid conversion of MySQL error messages
- Undefined index: parameters
- Undefined index: field_name_orig
- Undefined index: host
- 'Add to central columns' (per column button) does nothing
- SQL duplicate entry error trying to INSERT in designer_settings table
- Fix handling of databases with dot in a name
- Fix hiding of page content behind menu
- FROM clause not generated after loading search bookmark
- Fix creating/editing VIEW with DEFINER containing special chars
- Do not invoke FLUSH PRIVILEGES when server in --skip-grant-tables
- Misleading message for configuration storage
- Table pagination does nothing when session expired
- Index comments not working properly
- Better handle local storage errors
- Improve detection of privileges for privilege adjusting
- Undefined property: stdClass::$releases at version check when disabled in config
- SQL comment and variable stripped from bookmark on save
- Gracefully handle errors in regex based javascript search
- [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1
- [Security] Unsafe generation of CSRF token, see PMASA-2016-2
- [Security] Multiple XSS vulnerabilities, see PMASA-2016-3
- [Security] Insecure password generation in JavaScript, see PMASA-2016-4
- [Security] Unsafe comparison of CSRF token, see PMASA-2016-5
- [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-6
- [Security] XSS vulnerability in normalization page, see PMASA-2016-7
- [Security] Full path disclosure vulnerability in SQL parser, see PMASA-2016-8
- [Security] XSS vulnerability in SQL editor, see PMASA-2016-9

更新時間：2016-01-28
更新細節：

What's new in this version:

- [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1
- [Security] Unsafe generation of CSRF token, see PMASA-2016-2
- [Security] Multiple XSS vulnerabilities, see PMASA-2016-3
- [Security] Insecure password generation in JavaScript, see PMASA-2016-4
- [Security] Unsafe comparison of CSRF token, see PMASA-2016-5

更新時間：2016-01-28
更新細節：

What's new in this version:

- [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1
- [Security] Unsafe generation of CSRF token, see PMASA-2016-2
- [Security] Multiple XSS vulnerabilities, see PMASA-2016-3
- [Security] Insecure password generation in JavaScript, see PMASA-2016-4
- [Security] Unsafe comparison of CSRF token, see PMASA-2016-5