beenull/adminerevo
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Ability to save expression in edit

Browse source
This commit is contained in:
Jakub Vrana 2011-03-15 17:34:25 +01:00
parent c708fa1c69
commit 327b56bcdf
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
adminer/include/adminer.inc.php
View file

@ -429,6 +429,9 @@ username.form['driver'].onchange();
$return .= "/$val"; $return .= "/$val";
} }
} }
if ($key) {
$return .= "/=";
}
} }
} }
return explode("/", $return); return explode("/", $return);
@ -458,6 +461,9 @@ username.form['driver'].onchange();
* @return string expression to use in a query * @return string expression to use in a query
*/ */
function processInput($field, $value, $function = "") { function processInput($field, $value, $function = "") {
if ($function == "=") {
return $value; // SQL injection
}
$name = $field["field"]; $name = $field["field"];
$return = ($field["type"] == "bit" && ereg('^[0-9]+$', $value) ? $value : q($value)); $return = ($field["type"] == "bit" && ereg('^[0-9]+$', $value) ? $value : q($value));
if (ereg('^(now|getdate|uuid)$', $function)) { if (ereg('^(now|getdate|uuid)$', $function)) {

2
changes.txt
View file

@ -1,4 +1,5 @@
Adminer 3.2.1-dev: Adminer 3.2.1-dev:
Ability to save expression in edit
Respect default database collation (bug #3191489) Respect default database collation (bug #3191489)
Don't export triggers without table (bug #3193489) Don't export triggers without table (bug #3193489)
Esc to focus next field in Tab textarea (thanks to David Grudl) Esc to focus next field in Tab textarea (thanks to David Grudl)
@ -9,6 +10,7 @@ Use DELIMITER in history
Show databases even with skip_show_database in MySQL 5 (thanks to Radoslaw Kowalewski) Show databases even with skip_show_database in MySQL 5 (thanks to Radoslaw Kowalewski)
Set MySQL time zone by PHP setting Set MySQL time zone by PHP setting
Better placement of AJAX icon Better placement of AJAX icon
Table header in CSV export (Editor)
Polish translation Polish translation
Adminer 3.2.0 (released 2011-02-24): Adminer 3.2.0 (released 2011-02-24):