Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

mysql.user and mysql.db show code instead of usernames #12483

Closed
khoschi opened this issue Aug 18, 2016 · 1 comment
Closed

mysql.user and mysql.db show code instead of usernames #12483

khoschi opened this issue Aug 18, 2016 · 1 comment
Assignees
@nijel
Labels
Bug A problem or regression with an existing feature
Milestone
4.6.5

Comments

@khoschi
Copy link

khoschi commented Aug 18, 2016 •
edited

Steps to reproduce

  1. Open DB mysql, check tables db and user
  2. Row user shows "server_privileges.php?username=usernamehere&hostname=localhost&token=tokenhere" for every user, other rows are correct.
  3. Usermanagement shows usernames correct.

Server configuration

Server version: 5.5.50-0+deb8u1 - (Debian)
Protocol version: 10
Server charset: UTF-8 Unicode (utf8)
Apache/2.4.10 (Debian)
Database client version: libmysql - 5.5.50
PHP extension: mysqli curl mbstring
PHP version: 5.6.24-0+deb8u1

Phpmyadmin 4.6.4, manual install, fcgi and suexec in use, previous version 4.3.x did work, server is a mainly stock jessie. Reinstall and new pmadb did not help.

Edit: downgrade to 4.6.3 fixed the issue.
@devenbansod devenbansod added the Bug A problem or regression with an existing feature label Aug 23, 2016
@devenbansod
Copy link
Member

git bisect tells that 0bf21eb is the first bad commit.

devenbansod referenced this issue Aug 23, 2016
@nijel
Use whitelist rather than blacklist for URL filtering
0bf21eb 
Signed-off-by: Michal Čihař <michal@cihar.com>
@nijel nijel self-assigned this Aug 24, 2016
@nijel nijel added this to the 4.6.5 milestone Aug 24, 2016
nijel added a commit that referenced this issue Aug 24, 2016
@nijel
Force relative paths in links
38cf234 
This way we avoid potential problem if script name resolves to a domain.

Issue #12483

Signed-off-by: Michal Čihař <michal@cihar.com>
nijel added a commit that referenced this issue Aug 24, 2016
@nijel
Avoid double escaping of built in transformation URLs
cbd6137 
We do already escape them in the tranformation, so avoid doing that
before.

Issue #12483

Signed-off-by: Michal Čihař <michal@cihar.com>
@nijel nijel closed this as completed in ed6188d Aug 24, 2016
@devenbansod devenbansod mentioned this issue Aug 27, 2016
Closed
@nijel nijel mentioned this issue Sep 20, 2016
Closed
@devenbansod devenbansod mentioned this issue Nov 3, 2016
Closed
This was referenced Nov 14, 2016
Closed
Closed
@devenbansod devenbansod mentioned this issue Dec 20, 2016
Closed
@devenbansod devenbansod mentioned this issue May 2, 2017
Closed
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jun 23, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@nijel nijel

Labels
Bug A problem or regression with an existing feature
Projects
None yet
Milestone
4.6.5
Development

No branches or pull requests
3 participants
@nijel @devenbansod @khoschi