From 0293613c212fd8a72a03d9c439d36480cf8795df Mon Sep 17 00:00:00 2001 From: Jakub Vrana Date: Thu, 30 Jan 2020 17:12:23 +0100 Subject: [PATCH] Disallow connecting to ports > 65535 (bug #730) --- adminer/include/auth.inc.php | 2 +- changes.txt | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/adminer/include/auth.inc.php b/adminer/include/auth.inc.php index f8a5a399..1051186f 100644 --- a/adminer/include/auth.inc.php +++ b/adminer/include/auth.inc.php @@ -162,7 +162,7 @@ stop_session(true); if (isset($_GET["username"]) && is_string(get_password())) { list($host, $port) = explode(":", SERVER, 2); - if (is_numeric($port) && $port < 1024) { + if (is_numeric($port) && ($port < 1024 || $port > 65535)) { auth_error(lang('Connecting to privileged ports is not allowed.')); } check_invalid_login(); diff --git a/changes.txt b/changes.txt index 1930155b..2c80c913 100644 --- a/changes.txt +++ b/changes.txt @@ -2,6 +2,7 @@ Adminer 4.7.6-dev: Speed up alter table form (regression from 4.4.0) Fix clicking on non-input fields in alter table (regression from 4.6.2) Display time of procedure execution +Disallow connecting to ports > 65535 (bug #730) MySQL: Always set foreign_key_checks in export Editor: Fix focusing foreign key search in select