1 ----------------------
6 $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyAdmin/ChangeLog $
8 3.2.0.0 (not yet released)
9 - [core] better support for vendor customisation (based on what Debian needs)
10 + rfe #2127987 warn when session.gc_maxlifetime is less than cookie validity
11 + rfe #2100910 configurable default charset for import
12 + rfe #1913541 link to InnoDB status when error 1005 occurs
13 + rfe #1927189 strip ` from column names on import
14 + rfe #1821619 LeftFrameDBSeparator can be an array
15 + patch #1821619 [privileges] Extra back reference when editing table-specific
16 privileges, thanks to Herman van Rink - helmo
17 + patch #2356575 [display] Sortable database columns,
18 thanks to Bryce Thornton - brycethornton
19 - patch #2486825 [lang] Wrong string in setup script hints,
20 thanks to Isaac Bennetch - ibennetch
21 - patch #2498350 [cleanup] XHTML cleanup, thanks to Virsacer - virsacer
22 + patch #2494192 [display] Possibility of disabling the sliders,
23 thanks to Virsacer - virsacer
24 + patch #2506831 [privileges] Create user for existing database,
25 thanks to Herman van Rink and Virsacer
26 + patch #2505255 [privileges] Cleanup, thanks to Virsacer - virsacer
27 - bug #2414056 [auth] AllowNoPasswordRoot error message is too vague
28 - patch #2596230 [XHTML] View table headers/footers completely,
29 thanks to Virsacer - virsacer
30 - patch #2602633 [core] support column name having square brackets,
31 thanks to Herman van Rink - helmo
33 3.1.3.0 (not yet released)
34 + [lang] Turkish update, thanks to Burak Yavuz
35 - patch #2496403 [display] Multi-row change with "]",
36 thanks to Virsacer - virsacer
37 - bug #2027720 [parser] Missing space after BINARY used as cast
38 - patch #2520747 [core] E_DEPRECATED compatibility for PHP 5.3,
39 thanks to Giovanni Giacobbi - themnemonic
40 - bug [display] Message "Bookmark created" is not displaying
41 + [display] Show AUTO_INCREMENT instead of A_I when in vertical mode
42 - patch #2538358 [display] Conditions for relational display field,
43 thanks to Virsacer - virsacer
44 + [lang] Mongolian update, thanks to Bayarsaikhan Enkhtaivan - bayaraa
45 - patch #2553372 [display] DB comment tooltips not shown on navi,
46 thanks to Erdem - ahard
47 - patch #2561433 [structure] Display true number of rows in a view
48 if it contains less than MaxExactCountViews,
49 thanks to Virsacer - virsacer
50 + [lang] Polish update, thanks to Fixer - fixeron
51 - bug #2568722 [designer] Compound key not shown
52 - patch #2550323 [XHTML] in server_databases.php, thanks to Virsacer - virsacer
53 - patch #2358861 [navi] Row count tooltip wrong for information_schema,
54 thanks to Herman van Rink - helmo
55 - bug #2565948 [core] Changing the connection collation changed the client
57 + [lang] Romanian update, thanks to Sergiu Bivol - sbivol
60 - bug #1253252 [display] Can't NULL a column with relation defined
61 - bug #2009500 [SQL] Small improvements in generated SQL (partial fix)
62 - bug #1963184 [export] YAML export improvement,
63 thanks to Bryce Thornton - brycethornton
64 + [lang] Dutch update, thanks to Herman van Rink - helmo
65 - patch #2407785 [cleanup] ereg*() deprecated in PHP 5.3,
66 thanks to Alex Frase - atfrase
67 - bug #2417058 [properties] Edit fields: losing auto-increment setting
68 - patch #2444082 [changelog] changelog.php linkifies one link wrong,
69 thanks to Robert Xiao - nneonneo
70 - bug #2363653 [properties] Various problems with table structure
71 - bug [display] BIT field contents disappear when edited
72 + [lang] Czech update, thanks to Ondřej Vadinský.
73 - bug #2461735 [operations] Table operations adds "row_format"
74 - bug #2445213 [export] Commas for CSV Excel 2008 for Mac
75 - bug #2397877 [core] ForceSSL and http auth_type
76 - bug #2473127 [display] Deleting rows displays tbl structure, not contents
77 - patch #2478940 [core] PHP 5.2+ warning does not work,
78 thanks to Jürgen Wind - windkiel
79 - bug #2416418 [privileges] Escaping special characters
82 - patch #2242765 [core] Navi panel server links wrong,
83 thanks to Martin Stricker - martinstricker
84 - bug #2186823 [core] bad session.save_path not detected
85 - bug #2202709 [core] Re-login causes PMA to forget current table name
86 - bug #2280904 [export] do not include view name in export
87 - rfe #1688975 [display] enable copying of auto increment by default
88 - bug #2355753 [core] do not bail out creating session on any PHP warning
89 - bug #2355925 [display] properly update tooltips in navigation frame
90 - bug #2355923 [core] do not use ctype if it is not available
91 - bug #2356433 [display] HeaderFlipType "fake" problems,
92 thanks to Michal Biniek
93 - bug #2363919 [display] Incorrect size for view
94 - bug #2121287 [display] Drop-down menu blinking in FF
95 + [lang] Catalan update, thanks to Xavier Navarro
96 + [lang] Finnish update, thanks to Jouni Kahkonen
97 - [core] Avoid error with BLOBstreaming support requiring SUPER privilege
98 - [security] possible XSRF on several pages
101 + [auth] Support for Swekey hardware authentication,
102 see http://phpmyadmin.net/auth_key
103 - bug #2046883 [core] Notices about deprecated dl() (so stop using it)
104 + BLOBstreaming support, thanks to Raj Kissu Rajandran and
105 Google Summer of Code 2008
106 + patch #2067462 [lang] link FAQ references in messages,
107 thanks to Thijs Kinkhorst - kink
108 + new setup script, thanks to Piotr Przybylski (work in progress)
109 - rfe #1892243 [export] more links to documentation
110 + [auth] cookie auth now autogenerates blowfish_secret, but it has some
111 limitations and you still should set it in config file
112 + [auth] cookie authentication is now the default
113 + [auth] do not allow root user without password unless explicitly enabled by
115 + rfe #1778908 [auth] arbitrary server auth can now also accept port
116 - patch #2089240 [export] handle correctly switching SQL modes
117 + rfe #1612724 [export] add option to export without comments
118 - bug #2090002 [display] Cannot edit row in VIEW
119 - patch #2099962 [js] fix js error without frameset, thanks to Xuefer
120 - patch #2099972 [structure] Display None when there is no default value,
121 thanks to Xuefer - xuefer
122 - patch #2122883 [PDF schema] Option to display just the keys,
123 thanks to Samuel Sol Villar dos Santos - yohanleafheart
124 + rfe #1276463 [search] Search empty/not empty values
125 + rfe #823652 [structure] ENUM values: field size too small
126 - [lang] Persian update, thanks to Goolex - goolex
127 - [lang] Czech update, thanks to Ondřej Vadinský.
128 - patch #2255890 [lang] English-language cleanup,
129 thanks to Isaac Bennetch - ibennetch
130 + [lang] Norwegian update, thanks to Sven-Erik Andersen
131 + [lang] Hungarian update, thanks to Jozsef Tamas Herczeg - dodika
132 + [lang] French update by Marc Delisle - lem9
133 - bug #2222344 [display] Query involving a function shown as binary
134 + [lang] Italian update, thanks to fantu - fantu
135 + [lang] Swedish update, thanks to Björn T. Hallberg
136 - bug #2315549 [import] fclose() error with "Create PHP code"
137 + [lang] Polish update, thanks to Jakub Wilk
139 3.0.2.0 (not released)
140 - [lang] Italian update, thanks to Luca and fantu
141 - bug #2107583 [GUI] Leading newline truncated, thanks to Isart Montane
142 - bug #2222230 [import] Assigning a value in import.php, thanks to
146 - [security] XSS in a Designer component
149 - bug #2134126 [GUI] SQL error after sorting a subset
150 + [lang] Catalan update, thanks to Xavier Navarro
151 + [lang] Russian update, thanks to Victor Volkov
152 - patch #2143882 [import] Temporary uploaded file not deleted,
153 thanks to David Misc - dmisc
154 - bug #2136986 [auth] Cannot create database after session timeout
155 - bug #1914066 [core] ForceSSL generates incorrectly escaped redirections,
156 this time with the correct fix
157 + [lang] Hungarian update, thanks to Jozsef Tamas Herczeg - dodika
158 - bug #2153970 [core] Properly truncate SQL to avoid half of html tags
159 + [lang] Romanian update, thanks to Sergiu Bivol - sbivol
160 - bug #2161443 [structure] Incorrect index choice shown when modifying an
162 - bug #2127094 [interface] Misleading message after cancelling an action
163 + [lang] Croatian update, thanks to Renato Pavicic
164 + [lang] Finnish update, thanks to Jouni Kahkonen
165 + [lang] Polish update, thanks to Jakub Wilk
166 + [lang] Japanese update, thanks to Ishigaki Kenichi
167 - patch #2176438 [privileges] Wrong message when changing password,
168 thanks to incognito - zytisin
169 - bug #2163437 [core] Cannot disable PMA tables
170 - bug #2184240 [lang] Problems with Italian language file, thanks to Luca
172 - bug #2187193 [interface] ShowChgPassword setting not respected
175 + [export] properly handle line breaks for YAML, thanks to Dan Barry -
177 + [navi] new parameter $cfg['LeftDefaultTabTable']
178 + [table] support MySQL 5.1 PARTITION: CREATE TABLE / Table structure,
179 partition maintenance
180 + [privileges] support for EVENT and TRIGGER
181 + [error handler] NEW handle errors to prevent path disclosure and display/collect errors
182 + [mysqlnd] do not display $strMysqlLibDiffersServerVersion if the client
184 + [webapp] experimental Mozilla Prism support
185 + [export] new plugin "codegen" for NHibernate, thanks to caocao; I'm
186 looking for a name more descriptive than codegen, taking into account
187 that it might later support other formats like JSON in the same plugin
188 + [export] new export to Texy! markup
189 + [lang] Finnish update, thanks to Jouni Kahkonen
190 + [config] new parameter $cfg['CheckConfigurationPermissions']
191 + [config] new parameter $cfg['Servers'][$i]['ShowDatabasesCommand']
192 + [config] new parameter $cfg['Servers'][$i]['CountTables']
193 + rfe #1775288 [transformation] proper display if IP-address stored as INT
194 + rfe #1758177 [core] Add the Geometry DataTypes
195 + rfe #1741101, patch #1798184 UUID default for CHAR(36) PRIMARY KEY,
196 thanks to Gert Palok - gert_p
197 - bug #1664240 [GUI] css height makes cfg TextareaRows useless
198 - bug #1724217 [Create PHP Code] doesn't include newlines for text fields
199 - bug #1845605 [i18n] translators.html still uses iso-8859-1
200 - bug #1823018 [charset] Edit(Delete) img-links pointing to wrong row
201 - bug #1826205 [export] Problems with yaml text export
202 - bug #1344768 [database] create/alter table new field can not have empty string
204 + rfe #1840165 [interface] Enlarge column name field in vertical mode
205 + patch #1847534 [interface] New "Inside field" in db search,
207 + [GUI] Mootools js library (http://mootools.net) and new parameter
208 $cfg['InitialSlidersState']
209 * [core] cache some MySQL stats (do not query them with every page request)
210 + [view] clearer dialog WITH (CASCADED | LOCAL) CHECK OPTION
211 + [lang] Norwegian update, thanks to Sven-Erik Andersen
212 + [lang] Japanese update, thanks to Ishigaki Kenichi
213 + [lang] Italian update, thanks to Luca Rebellato
215 * minimal support on db structure page
217 + [pdf] Merged tcpdf 2.2.002 (PHP5 version), thanks to Nicola Asuni
218 + [engines] Maria support
219 + [engines] MyISAM and InnoDB: support ROW_FORMAT table option
220 + prevent search indexes from indexing phpMyAdmin installations
221 + [engines] PBXT: table options, foreign key (relation view, designer)
222 + [lang] New Bangla, thanks to Raquibul Islam and Joy Kumar Nag
223 + [interface] Display options; thanks to Dave Grijalva
224 for the idea about showing the display field while browsing
225 - bug #1910621 [display] part 2: do not display a BINARY content as text
226 + rfe #1962383 [designer] Option to create a PDF page
227 - patch #2007196, Typos in comments, thanks to knittl - knittl
228 - bug #1982315 [GUI] Comma and quote in ENUM, thanks to Joshua Hogendorn
230 - bug #1970836 [parser] SQL parser is slow, thanks to Christian Schmidt
231 + rfe #1692928 [transformation] Option to disable browser transformations
232 + [import] Speed optimization to be able to import the sakila database
233 + [doc] Documentation for distributing phpMyAdmin in README.VENDOR.
234 + [display] headwords for sorted column
235 - bug #2033962 [import] Cannot import zip file
236 + [lang] Swedish update, thanks to Björn T. Hallberg
237 - bug #2050068 [gui] "Check tables having overhead" selects wrong tables
238 + [lang] Belarusian update, thanks to Jaska Zedlik
239 + [lang] Norwegian update, thanks to Sven-Erik Andersen
240 + [lang] Italian update, thanks to Luca Rebellato
241 - [core] safer handling of temporary files with open_basedir (thanks to Thijs
243 - [core] do not automatically set and create TempDir, it might lead to security
244 issue (thanks to Thijs Kinkhorst)
245 + [lang] Czech update
246 - bug #2066923 [display] Navi browse icon does not go to page 1
247 - patch #2075263 [auth] Single sign-on and cookie clearing,
248 thanks to Charles Suh - cws125
249 - [doc] better documentation of $cfg['TempDir']
250 - bug #2080963 [charset] Clarify doc and improved code, thanks to
251 Victor Volkov - hanut
252 - bug [charset] Cannot sort twice on a column when the table name
254 + [lang] Spanish update, thanks to Daniel Hinostroza
255 + [lang] Hungarian update, thanks to Jozsef Tamas Herczeg - dodika
256 - bug #2113848 [navi] Page number after database switching
257 - patch #2115966 [GUI] Checkboxes and IE 7, thanks to Martin - maschg
258 - bug #1914066 [core] ForceSSL generates incorrectly escaped redirections
260 2.11.9.4 (2008-12-09)
261 - [security] possible XSRF on several pages
263 2.11.9.3 (2008-10-30)
264 - [security] XSS in a Designer component
266 2.11.9.2 (2008-09-22)
267 - [security] XSS in MSIE using NUL byte, thanks to JPCERT.
269 2.11.9.1 (2008-09-15)
270 - [security] Code execution vulnerability, thanks to Norman Hippert
272 2.11.9.0 (2008-08-28)
273 - bug #2031221 [auth] Links to version number on login screen
274 - bug #2032707 [core] PMA does not start if ini_set() is disabled
275 - bug #2004915 [bookmarks] Saved queries greater than 1000 chars not
276 displayed, thanks to Maik Wiege - mswiege
277 - bug #2037381 [export] Export type "replace" does not work
278 - bug #2037375 [export] DROP PROCEDURE needs IF EXISTS
279 - bug #2045512 [export] Numbers in Excel export
280 - bug #2074250 [parser] Undefined variable seen_from
282 2.11.8.0 (2008-07-28)
283 - patch #1987593 [interface] Table list pagination in navi,
284 thanks to Jason Day - jday29
285 - bug #1989081 [profiling] Profiling causes query to be executed again
286 (really causes a problem in case of INSERT/UPDATE)
287 - bug #1990342 [import] SQL file import very slow on Windows,
288 thanks to Richard Heaton - wotnot
289 - bug [XHTML] problem with tabindex and radio fields
290 - bug #1971221 [interface] tabindex not set correctly
291 - bug [views] VIEW name created via the GUI was not protected with backquotes
292 - bug #1989813 [interface] Deleting multiple views (space in name)
293 - bug #1992628 [parser] SQL parser removes essential space
294 - bug #1989281 [export] Export fails if one table is marked as crashed
295 - bug #2001005 [GUI] ARCHIVE cannot have indexes
296 - bug #1989281 [export] CSV for MS Excel incorrect escaping of double quotes
297 - bug #1959855 [interface] Font size option problem when no config file
298 (todo (trunk): navi frame size does not change for theme original)
299 - bug #1982489 [relation] Relationship view should check for changes
300 - bug [history] Do not save too big queries in history
301 - [security] Do not show version info on login screen
302 - bug #2018595 [import] Potential data loss on import resubmit
303 - patch #2020630 [export] Safari and timedate, thanks to Sebastian Mendel,
304 Isaac Bennetch and Jürgen Wind
305 - bug #2022182 [import, export] Import/Export fails because of Mac files
306 - [security] protection against cross-frame scripting and
307 new directive AllowThirdPartyFraming, thanks to YGN Ethical Hacker Group
308 - [security] possible XSS during setup, thanks to YGN Ethical Hacker Group
309 - [interface] revert language changing problem introduced with 2.11.7.1
311 2.11.7.1 (2008-07-15)
312 - bug [security] XSRF/CSRF by manipulating the db,
313 convcharset and collation_connection parameters,
314 thanks to YGN Ethical Hacker Group
316 2.11.7.0 (2008-06-23)
317 - bug #1908719 [interface] New field cannot be auto-increment and primary key
318 - [dbi] Incorrect interpretation for some mysqli field flags
319 - bug #1910621 [display] part 1: do not display a TEXT utf8_bin as BLOB
320 (fixed for mysqli extension only)
321 - [interface] sanitize the after_field parameter,
322 thanks to Norman Hippert
323 - [structure] do not remove the BINARY attribute in drop-down
324 - bug #1955386 [session] Overriding session.hash_bits_per_character
325 - [interface] sanitize the table comments in table print view,
326 db print view and db data dictionary, thanks to Norman Hippert
327 - bug #1939031 Auto_Increment selected for TimeStamp by Default
328 - patch #1957998 [display] No tilde for InnoDB row counter when we know
329 it for sure, thanks to Vladyslav Bakayev - dandy76
330 - bug #1955572 [display] alt text causes duplicated strings
331 - bug #1762029 [interface] Cannot upload BLOB into existing row
332 - bug #1981043 [export] HTML in exports getting corrupted,
333 thanks to Jason Judge - jasonjudge
334 - bug #1936761 [interface] BINARY not treated as BLOB: update/delete issues
335 - protection against XSS when register_globals is on and .htaccess has
336 no effect, thanks to Tim Starling
337 - bug #1996943 [export] Firefox 3 and .sql.gz (corrupted); detect Gecko 1.9,
338 thanks to Jürgen Wind - windkiel
340 2.11.6.0 (2008-04-29)
341 - bug #1903724 [interface] Displaying of very large queries in error message
342 - bug #1905711 [compatibility] Functions deprecated in PHP 5.3: is_a() and
343 get_magic_quotes_gpc(), thanks to Dmitry N. Shilnikov - yrtimd
344 - bug [lang] catalan wrong accented characters
345 - bug #1893034 [Export] SET NAMES for importing with command-line client
346 + [lang] Russian update, thanks to Victor Volkov
347 - bug #1910485 [core] Unsetting the whitelist during the loop,
348 thanks to Jeroen Vrijkorte - jv_map
349 - bug #1906980 [Export] Import of VIEWs fails if temp table exists,
350 thanks to Falk Nisius - klaf
351 - bug #1812763 [Copy] Table copy when server is in ANSI_QUOTES sql_mode
352 thanks to Tony Marston - tonymarston
353 - bug #1918531 [compatibility] Navigation isn't w3.org valid
354 thanks to Michael Keck - mkkeck
355 - bug #1926357 [data] BIT defaults displayed incorrectly
356 - patch #1930057 [auth] colon in password prevents HTTP login on CGI/IIS,
357 thanks to Jürgen Wind - windkiel
358 - patch #1929553 [lang] Don't output BOM character in Swedish language file,
359 thanks to Samuel L. B. - samuellb
360 - patch #1895796 [lang] Typo in Japanese lang files,
361 thanks to tyman - acoustype
362 - bug #1935652 [auth] Access denied (show warning about mcrypt on login page)
363 - bug #1906983 [export] Reimport of FUNCTION fails
364 - bug #1919808 [operations] Renaming a database fails to handle functions
365 - bug #1934401 [core] Cannot force a language
366 - bug #1944077 [core] Config file containing a BOM,
367 thanks to Gaetano Giunta - ggiunta
368 - bug #1947189 [scripts] Missing </head> in scripts/signon.php,
369 thanks to Dolf Schimmel
370 + [lang] Romanian update, thanks to Sergiu Bivol - sbivol
372 2.11.5.2 (2008-04-22)
373 - PMASA-2008-3 [security] File disclosure
375 2.11.5.1 (2008-03-29)
376 - bug #1909711 [security] Sensitive data in session files
378 2.11.5.0 (2008-03-01)
379 - bug #1862661 [GUI] Warn about rename deleting database
380 - bug #1866041 [interface] Incorrect sorting with AS
381 - bug #1871038 [import] Notice: undefined variable first_sql_delimiter
382 - bug #1873110 [export] Problem exporting with a LIMIT clause
383 - bug #1871164 [GUI] Empty and navigation frame synch.
384 - patch #1873188 [GUI] Making db pager work when js is disabled,
385 thanks to Jürgen Wind - windkiel
386 - bug #1875010 [auth] MySQL server and client version mismatch (mysql ext.)
387 - patch #1879031 [transform] dateformat transformation and UNIX timestamps,
388 thanks to Tim Steiner - spam38
389 - bug [import] Do not verify a missing enclosing character for CSV,
390 because files generated by Excel don't have any enclosing character
391 - bug #1799691 [export] "Propose table structure" and Export
392 - bug #1884911 [GUI] Space usage
393 - bug #1863326 [GUI] Wrong error message / no edit (Suhosin)
394 - bug #1887204 [GUI] Order columns in result list messing up query
395 - patch #1893538 [GUI] Display issues on Opera 9.50,
396 thanks to Jürgen Wind - windkiel
397 - bug [GUI] Do not display the database name used by the previous user,
398 thanks to Ronny Görner
399 - bug [security] Remove cookies from $_REQUEST for better coexistence with
400 other applications, thanks to Richard Cunningham. See PMASA-2008-1.
402 2.11.4.0 (2008-01-12)
403 - bug #1843428 [GUI] Space issue with DROP/DELETE/ALTER TABLE
404 - bug #1807816 [search] regular expression search doesn't work with
406 - bug #1843463 [GUI] DROP PROCEDURE does not show alert
407 - bug #1835904 [GUI] Back link after a SQL error forgets the query
408 - bug #1835654 [core] wrong escaping when using double quotes
409 - bug #1817612 [cookies] Wrong cookie path on IIS with PHP-CGI,
410 thanks to Carsten Wiedmann
411 - bug #1848889 [export] export trigger should use DROP TRIGGER IF EXISTS
412 - bug #1851833 [display] Sorting forgets an explicit LIMIT
413 (fix for sorting on column headers)
414 - bug #1764182 [cookies] Suhosin cookie encryption breaks phpMyAdmin
415 - bug #1798786 [import] Wrong error when a string contains semicolon
416 - bug #1813508 [login] Missing parameter: field after re-login
417 - bug #1710144 [parser] Space after COUNT breaks Export but not Query
418 - bug #1783620 [parser] Subquery results without "as" are ignored
419 - bug #1821264 [display] MaxTableList and INFORMATION_SCHEMA
420 - bug #1859460 [display] Operations and many databases
421 - bug #1814679 [display] Database selection pagination when switching servers
422 - patch #1861717 [export] CSV Escape character not exported right,
423 thanks to nicolasdigraf
424 - bug #1864468 [display] Theme does not switch to darkblue_orange
425 - bug #1847409 [security] Path disclosure on darkblue_orange/layout.inc.php,
426 thanks to Jürgen Wind - windkiel
428 --- Older ChangeLogs can be found on our project website ---
429 http://www.phpmyadmin.net/old-stuff/ChangeLogs/
431 # vim: et ts=4 sw=4 sts=4
432 # vim: ft=changelog fenc=utf-8 encoding=utf-8
433 # vim: fde=getline(v\:lnum-1)=~'^\\s*$'&&getline(v\:lnum)=~'\\S'?'>1'\:1&&v\:lnum>8&&getline(v\:lnum)!~'^#'
434 # vim: fdn=1 fdm=expr