beenull/adminerevo
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Fix remote execution in SQLite query (discovered by 庞申杰(千霄))

Browse source
This commit is contained in:
Jakub Vrana 2016-02-06 11:00:19 -08:00
parent 0bb5a52dc4
commit e5352cc5ac
4 changed files with 75 additions and 62 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
adminer/lang/cs.inc.php
View file

@ -49,6 +49,7 @@ $translations = array(
'Query executed OK, %d row(s) affected.' => array('Příkaz proběhl v pořádku, byl změněn %d záznam.', 'Příkaz proběhl v pořádku, byly změněny %d záznamy.', 'Příkaz proběhl v pořádku, bylo změněno %d záznamů.'),
'No commands to execute.' => 'Žádné příkazy k vykonání.',
'Error in query' => 'Chyba v dotazu',
'ATTACH queries are not supported.' => 'Dotazy ATTACH nejsou podporované.',
'Execute' => 'Provést',
'Stop on error' => 'Zastavit při chybě',
'Show only errors' => 'Zobrazit pouze chyby',

1
adminer/lang/xx.inc.php
View file

@ -49,6 +49,7 @@ $translations = array(
'Query executed OK, %d row(s) affected.' => array('Xx.', 'Xx.'),
'No commands to execute.' => 'Xx.',
'Error in query' => 'Xx',
'ATTACH queries are not supported.' => 'Xx.',
'Execute' => 'Xx',
'Stop on error' => 'Xx',
'Show only errors' => 'Xx',

10
adminer/sql.inc.php
View file

@ -94,6 +94,15 @@ if (!$error && $_POST) {
$q = substr($query, 0, $pos);
$commands++;
$print = "<pre id='sql-$commands'><code class='jush-$jush'>" . shorten_utf8(trim($q), 1000) . "</code></pre>\n";
if ($jush == "sqlite" && preg_match("~^$space*ATTACH\b~i", $q, $match)) {
// PHP doesn't support setting SQLITE_LIMIT_ATTACHED
echo $print;
echo "<p class='error'>" . lang('ATTACH queries are not supported.') . "\n";
$errors[] = " <a href='#sql-$commands'>$commands</a>";
if ($_POST["error_stops"]) {
break;
}
} else {
if (!$_POST["only_errors"]) {
echo $print;
ob_flush();
@ -159,6 +168,7 @@ if (!$error && $_POST) {
$start = microtime(true);
} while ($connection->next_result());
}
$query = substr($query, $offset);
$offset = 0;

1
changes.txt
View file

@ -1,4 +1,5 @@
Adminer 4.2.4-dev:
Fix remote execution in SQLite query
MySQL: Support PHP 7
Bosnian translation
Finnish translation