beenull/adminerevo
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Don't store invalid credentials to session (bug #376)

Browse source
This commit is contained in:
Jakub Vrana 2014-01-30 10:27:30 -08:00
parent 125b519937
commit 6acf188c2f
2 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
adminer/include/auth.inc.php
View file

@ -109,7 +109,7 @@ function auth_error($exception = null) {
} }
function set_password($vendor, $server, $username, $password) { function set_password($vendor, $server, $username, $password) {
$_SESSION["pwds"][$vendor][$server][$username] = ($_COOKIE["adminer_key"] $_SESSION["pwds"][$vendor][$server][$username] = ($_COOKIE["adminer_key"] && is_string($password)
? array(encrypt_string($password, $_COOKIE["adminer_key"])) ? array(encrypt_string($password, $_COOKIE["adminer_key"]))
: $password : $password
); );

1
changes.txt
View file

@ -2,6 +2,7 @@ Adminer 4.0.3-dev:
MongoDB: insert, truncate, indexes MongoDB: insert, truncate, indexes
SimpleDB, MongoDB: insert more fields at once SimpleDB, MongoDB: insert more fields at once
SQLite: Fix creating table and altering primary key, bug since Adminer 4.0.0 SQLite: Fix creating table and altering primary key, bug since Adminer 4.0.0
Don't store invalid credentials to session, bug since Adminer 4.0.0
Norweigan translation Norweigan translation
Adminer 4.0.2 (released 2014-01-11): Adminer 4.0.2 (released 2014-01-11):