Merge branch 'QA_4_6'

phpmyadmin · Sep 2, 2016 · bfd6a76 · bfd6a76
2 parents 761281f + 829d51c
commit bfd6a76
Show file tree

Hide file tree

Showing 4 changed files with 42 additions and 15 deletions.
diff --git a/libraries/DatabaseInterface.php b/libraries/DatabaseInterface.php
@@ -2328,21 +2328,12 @@ public function connect($mode, $server = null)
             return false;
         }
 
-        $error_count = $GLOBALS['error_handler']->countErrors();
+        // Do not show location and backtrace for connection errors
+        $error_count = $GLOBALS['error_handler']->setHideLocation(true);
         $result = $this->_extension->connect(
             $user, $password, $server
         );
-
-        /* Any errors from connection? */
-        if ($GLOBALS['error_handler']->countErrors() > $error_count) {
-            $errors = $GLOBALS['error_handler']->sliceErrors($error_count);
-            foreach ($errors as $error) {
-                trigger_error(
-                    $error->getMessage(),
-                    E_USER_ERROR
-                );
-            }
-        }
+        $error_count = $GLOBALS['error_handler']->setHideLocation(false);
 
         if ($result) {
             /* Run post connect for user connections */

diff --git a/libraries/Error.php b/libraries/Error.php
@@ -83,6 +83,11 @@ class Error extends Message
      */
     protected $backtrace = array();
 
+    /**
+     * Hide location of errors
+     */
+    protected $hide_location = false;
+
     /**
      * Constructor
      *
@@ -146,6 +151,18 @@ public static function processBacktrace($backtrace)
         return $result;
     }
 
+    /**
+     * Toggles location hiding
+     *
+     * @param boolean $hide Whether to hide
+     *
+     * @return void
+     */
+    public function setHideLocation($hide)
+    {
+        $this->hide_location = $hide;
+    }
+
     /**
      * sets PMA\libraries\Error::$_backtrace
      *
@@ -441,7 +458,8 @@ public function getDisplay()
      */
     public function isUserError()
     {
-        return $this->getNumber() & (E_USER_WARNING | E_USER_ERROR | E_USER_NOTICE);
+        return $this->hide_location ||
+            ($this->getNumber() & (E_USER_WARNING | E_USER_ERROR | E_USER_NOTICE));
     }
 
     /**

diff --git a/libraries/ErrorHandler.php b/libraries/ErrorHandler.php
@@ -23,6 +23,11 @@ class ErrorHandler
      */
     protected $errors = array();
 
+    /**
+     * Hide location of errors
+     */
+    protected $hide_location = false;
+
     /**
      * Constructor - set PHP error handler
      *
@@ -77,6 +82,18 @@ public function __destruct()
         }
     }
 
+    /**
+     * Toggles location hiding
+     *
+     * @param boolean $hide Whether to hide
+     *
+     * @return void
+     */
+    public function setHideLocation($hide)
+    {
+        $this->hide_location = $hide;
+    }
+
     /**
      * returns array with all errors
      *
@@ -170,6 +187,7 @@ public function addError($errstr, $errno, $errfile, $errline, $escape = true)
             $errfile,
             $errline
         );
+        $error->setHideLocation($this->hide_location);
 
         // do not repeat errors
         $this->errors[$error->getHash()] = $error;

diff --git a/libraries/session.inc.php b/libraries/session.inc.php
@@ -88,9 +88,9 @@ function PMA_sessionFailed($errors)
          * will not change in future.
          */
         $messages[] = preg_replace(
-            '/open(.*, O_RDWR)/',
+            '/open\(.*, O_RDWR\)/',
             'open(SESSION_FILE, O_RDWR)',
-            $error->getMessage()
+            htmlspecialchars($error->getMessage())
         );
     }