Permalink
Browse files

Remove search by expression

  • Loading branch information...
1 parent 0ced6d3 commit 734f0881f0118e75881a06d473cf4c8766751351 @vrana committed Aug 9, 2011
Showing with 3 additions and 2 deletions.
  1. +1 −1 adminer/drivers/mssql.inc.php
  2. +1 −1 adminer/drivers/pgsql.inc.php
  3. +1 −0 changes.txt
View
2 adminer/drivers/mssql.inc.php
@@ -605,7 +605,7 @@ function support($feature) {
$structured_types[$key] = array_keys($val);
}
$unsigned = array();
- $operators = array("=", "<", ">", "<=", ">=", "!=", "LIKE", "LIKE %%", "IN", "IS NULL", "NOT LIKE", "NOT IN", "IS NOT NULL", "");
+ $operators = array("=", "<", ">", "<=", ">=", "!=", "LIKE", "LIKE %%", "IN", "IS NULL", "NOT LIKE", "NOT IN", "IS NOT NULL");
$functions = array("len", "lower", "round", "upper");
$grouping = array("avg", "count", "count distinct", "max", "min", "sum");
$edit_functions = array(
View
2 adminer/drivers/pgsql.inc.php
@@ -595,7 +595,7 @@ function support($feature) {
$structured_types[$key] = array_keys($val);
}
$unsigned = array();
- $operators = array("=", "<", ">", "<=", ">=", "!=", "~", "!~", "LIKE", "LIKE %%", "IN", "IS NULL", "NOT LIKE", "NOT IN", "IS NOT NULL", "");
+ $operators = array("=", "<", ">", "<=", ">=", "!=", "~", "!~", "LIKE", "LIKE %%", "IN", "IS NULL", "NOT LIKE", "NOT IN", "IS NOT NULL"); // no "" to avoid SQL injection
$functions = array("char_length", "lower", "round", "to_hex", "to_timestamp", "upper");
$grouping = array("avg", "count", "count distinct", "max", "min", "sum");
$edit_functions = array(
View
1 changes.txt
@@ -1,6 +1,7 @@
Adminer 3.3.3-dev:
Fix trigger export (SQLite)
Default trigger statement (SQLite, PostgreSQL)
+Remove search by expression (PostgreSQL, MS SQL)
Adminer 3.3.2 (released 2011-08-08):
Display error with non-existent row in edit

0 comments on commit 734f088

Please sign in to comment.