beenull/adminerevo
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Disallow connecting to ports > 65535 (bug #730)

Browse source
This commit is contained in:
Jakub Vrana 2020-01-30 17:12:23 +01:00
parent fe9ea18d2e
commit 0293613c21
2 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
adminer/include/auth.inc.php
View file

@ -162,7 +162,7 @@ stop_session(true);
if (isset($_GET["username"]) && is_string(get_password())) { if (isset($_GET["username"]) && is_string(get_password())) {
list($host, $port) = explode(":", SERVER, 2); list($host, $port) = explode(":", SERVER, 2);
if (is_numeric($port) && $port < 1024) { if (is_numeric($port) && ($port < 1024 || $port > 65535)) {
auth_error(lang('Connecting to privileged ports is not allowed.')); auth_error(lang('Connecting to privileged ports is not allowed.'));
} }
check_invalid_login(); check_invalid_login();

1
changes.txt
View file

@ -2,6 +2,7 @@ Adminer 4.7.6-dev:
Speed up alter table form (regression from 4.4.0) Speed up alter table form (regression from 4.4.0)
Fix clicking on non-input fields in alter table (regression from 4.6.2) Fix clicking on non-input fields in alter table (regression from 4.6.2)
Display time of procedure execution Display time of procedure execution
Disallow connecting to ports > 65535 (bug #730)
MySQL: Always set foreign_key_checks in export MySQL: Always set foreign_key_checks in export
Editor: Fix focusing foreign key search in select Editor: Fix focusing foreign key search in select