1 ----------------------
6 $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyAdmin/ChangeLog $
8 3.2.0.0 (not yet released)
9 - [core] better support for vendor customisation (based on what Debian needs)
10 + rfe #2127987 warn when session.gc_maxlifetime is less than cookie validity
11 + rfe #2100910 configurable default charset for import
12 + rfe #1913541 link to InnoDB status when error 1005 occurs
13 + rfe #1927189 strip ` from column names on import
14 + rfe #1821619 LeftFrameDBSeparator can be an array
15 + patch #1821619 [privileges] Extra back reference when editing table-specific
16 privileges, thanks to Herman van Rink - helmo
17 + patch #2356575 [display] Sortable database columns,
18 thanks to Bryce Thornton - brycethornton
19 - patch #2486825 [lang] Wrong string in setup script hints,
20 thanks to Isaac Bennetch - ibennetch
21 - patch #2498350 [cleanup] XHTML cleanup, thanks to Virsacer - virsacer
22 + patch #2494192 [display] Possibility of disabling the sliders,
23 thanks to Virsacer - virsacer
24 + patch #2506831 [privileges] Create user for existing database,
25 thanks to Herman van Rink and Virsacer
26 + patch #2505255 [privileges] Cleanup, thanks to Virsacer - virsacer
27 - bug #2414056 [auth] AllowNoPasswordRoot error message is too vague
28 - patch #2596230 [XHTML] View table headers/footers completely,
29 thanks to Virsacer - virsacer
30 - patch #2602633 [core] support column name having square brackets,
31 thanks to Herman van Rink - helmo
33 3.1.3.0 (not yet released)
34 + [lang] Turkish update, thanks to Burak Yavuz
35 - patch #2496403 [display] Multi-row change with "]",
36 thanks to Virsacer - virsacer
37 - bug #2027720 [parser] Missing space after BINARY used as cast
38 - patch #2520747 [core] E_DEPRECATED compatibility for PHP 5.3,
39 thanks to Giovanni Giacobbi - themnemonic
40 - bug [display] Message "Bookmark created" is not displaying
41 + [display] Show AUTO_INCREMENT instead of A_I when in vertical mode
42 - patch #2538358 [display] Conditions for relational display field,
43 thanks to Virsacer - virsacer
44 + [lang] Mongolian update, thanks to Bayarsaikhan Enkhtaivan - bayaraa
45 - patch #2553372 [display] DB comment tooltips not shown on navi,
46 thanks to Erdem - ahard
47 - patch #2561433 [structure] Display true number of rows in a view
48 if it contains less than MaxExactCountViews,
49 thanks to Virsacer - virsacer
50 + [lang] Polish update, thanks to Fixer - fixeron
51 - bug #2568722 [designer] Compound key not shown
52 - patch #2550323 [XHTML] in server_databases.php, thanks to Virsacer - virsacer
53 - patch #2358861 [navi] Row count tooltip wrong for information_schema,
54 thanks to Herman van Rink - helmo
55 - bug #2565948 [core] Changing the connection collation changed the client
57 + [lang] Romanian update, thanks to Sergiu Bivol - sbivol
58 - patch #1760205 [data] Insert as new row: BLOB is lost,
59 thanks to Herman van Rink - helmo
62 - bug #1253252 [display] Can't NULL a column with relation defined
63 - bug #2009500 [SQL] Small improvements in generated SQL (partial fix)
64 - bug #1963184 [export] YAML export improvement,
65 thanks to Bryce Thornton - brycethornton
66 + [lang] Dutch update, thanks to Herman van Rink - helmo
67 - patch #2407785 [cleanup] ereg*() deprecated in PHP 5.3,
68 thanks to Alex Frase - atfrase
69 - bug #2417058 [properties] Edit fields: losing auto-increment setting
70 - patch #2444082 [changelog] changelog.php linkifies one link wrong,
71 thanks to Robert Xiao - nneonneo
72 - bug #2363653 [properties] Various problems with table structure
73 - bug [display] BIT field contents disappear when edited
74 + [lang] Czech update, thanks to Ondřej Vadinský.
75 - bug #2461735 [operations] Table operations adds "row_format"
76 - bug #2445213 [export] Commas for CSV Excel 2008 for Mac
77 - bug #2397877 [core] ForceSSL and http auth_type
78 - bug #2473127 [display] Deleting rows displays tbl structure, not contents
79 - patch #2478940 [core] PHP 5.2+ warning does not work,
80 thanks to Jürgen Wind - windkiel
81 - bug #2416418 [privileges] Escaping special characters
84 - patch #2242765 [core] Navi panel server links wrong,
85 thanks to Martin Stricker - martinstricker
86 - bug #2186823 [core] bad session.save_path not detected
87 - bug #2202709 [core] Re-login causes PMA to forget current table name
88 - bug #2280904 [export] do not include view name in export
89 - rfe #1688975 [display] enable copying of auto increment by default
90 - bug #2355753 [core] do not bail out creating session on any PHP warning
91 - bug #2355925 [display] properly update tooltips in navigation frame
92 - bug #2355923 [core] do not use ctype if it is not available
93 - bug #2356433 [display] HeaderFlipType "fake" problems,
94 thanks to Michal Biniek
95 - bug #2363919 [display] Incorrect size for view
96 - bug #2121287 [display] Drop-down menu blinking in FF
97 + [lang] Catalan update, thanks to Xavier Navarro
98 + [lang] Finnish update, thanks to Jouni Kahkonen
99 - [core] Avoid error with BLOBstreaming support requiring SUPER privilege
100 - [security] possible XSRF on several pages
103 + [auth] Support for Swekey hardware authentication,
104 see http://phpmyadmin.net/auth_key
105 - bug #2046883 [core] Notices about deprecated dl() (so stop using it)
106 + BLOBstreaming support, thanks to Raj Kissu Rajandran and
107 Google Summer of Code 2008
108 + patch #2067462 [lang] link FAQ references in messages,
109 thanks to Thijs Kinkhorst - kink
110 + new setup script, thanks to Piotr Przybylski (work in progress)
111 - rfe #1892243 [export] more links to documentation
112 + [auth] cookie auth now autogenerates blowfish_secret, but it has some
113 limitations and you still should set it in config file
114 + [auth] cookie authentication is now the default
115 + [auth] do not allow root user without password unless explicitly enabled by
117 + rfe #1778908 [auth] arbitrary server auth can now also accept port
118 - patch #2089240 [export] handle correctly switching SQL modes
119 + rfe #1612724 [export] add option to export without comments
120 - bug #2090002 [display] Cannot edit row in VIEW
121 - patch #2099962 [js] fix js error without frameset, thanks to Xuefer
122 - patch #2099972 [structure] Display None when there is no default value,
123 thanks to Xuefer - xuefer
124 - patch #2122883 [PDF schema] Option to display just the keys,
125 thanks to Samuel Sol Villar dos Santos - yohanleafheart
126 + rfe #1276463 [search] Search empty/not empty values
127 + rfe #823652 [structure] ENUM values: field size too small
128 - [lang] Persian update, thanks to Goolex - goolex
129 - [lang] Czech update, thanks to Ondřej Vadinský.
130 - patch #2255890 [lang] English-language cleanup,
131 thanks to Isaac Bennetch - ibennetch
132 + [lang] Norwegian update, thanks to Sven-Erik Andersen
133 + [lang] Hungarian update, thanks to Jozsef Tamas Herczeg - dodika
134 + [lang] French update by Marc Delisle - lem9
135 - bug #2222344 [display] Query involving a function shown as binary
136 + [lang] Italian update, thanks to fantu - fantu
137 + [lang] Swedish update, thanks to Björn T. Hallberg
138 - bug #2315549 [import] fclose() error with "Create PHP code"
139 + [lang] Polish update, thanks to Jakub Wilk
141 3.0.2.0 (not released)
142 - [lang] Italian update, thanks to Luca and fantu
143 - bug #2107583 [GUI] Leading newline truncated, thanks to Isart Montane
144 - bug #2222230 [import] Assigning a value in import.php, thanks to
148 - [security] XSS in a Designer component
151 - bug #2134126 [GUI] SQL error after sorting a subset
152 + [lang] Catalan update, thanks to Xavier Navarro
153 + [lang] Russian update, thanks to Victor Volkov
154 - patch #2143882 [import] Temporary uploaded file not deleted,
155 thanks to David Misc - dmisc
156 - bug #2136986 [auth] Cannot create database after session timeout
157 - bug #1914066 [core] ForceSSL generates incorrectly escaped redirections,
158 this time with the correct fix
159 + [lang] Hungarian update, thanks to Jozsef Tamas Herczeg - dodika
160 - bug #2153970 [core] Properly truncate SQL to avoid half of html tags
161 + [lang] Romanian update, thanks to Sergiu Bivol - sbivol
162 - bug #2161443 [structure] Incorrect index choice shown when modifying an
164 - bug #2127094 [interface] Misleading message after cancelling an action
165 + [lang] Croatian update, thanks to Renato Pavicic
166 + [lang] Finnish update, thanks to Jouni Kahkonen
167 + [lang] Polish update, thanks to Jakub Wilk
168 + [lang] Japanese update, thanks to Ishigaki Kenichi
169 - patch #2176438 [privileges] Wrong message when changing password,
170 thanks to incognito - zytisin
171 - bug #2163437 [core] Cannot disable PMA tables
172 - bug #2184240 [lang] Problems with Italian language file, thanks to Luca
174 - bug #2187193 [interface] ShowChgPassword setting not respected
177 + [export] properly handle line breaks for YAML, thanks to Dan Barry -
179 + [navi] new parameter $cfg['LeftDefaultTabTable']
180 + [table] support MySQL 5.1 PARTITION: CREATE TABLE / Table structure,
181 partition maintenance
182 + [privileges] support for EVENT and TRIGGER
183 + [error handler] NEW handle errors to prevent path disclosure and display/collect errors
184 + [mysqlnd] do not display $strMysqlLibDiffersServerVersion if the client
186 + [webapp] experimental Mozilla Prism support
187 + [export] new plugin "codegen" for NHibernate, thanks to caocao; I'm
188 looking for a name more descriptive than codegen, taking into account
189 that it might later support other formats like JSON in the same plugin
190 + [export] new export to Texy! markup
191 + [lang] Finnish update, thanks to Jouni Kahkonen
192 + [config] new parameter $cfg['CheckConfigurationPermissions']
193 + [config] new parameter $cfg['Servers'][$i]['ShowDatabasesCommand']
194 + [config] new parameter $cfg['Servers'][$i]['CountTables']
195 + rfe #1775288 [transformation] proper display if IP-address stored as INT
196 + rfe #1758177 [core] Add the Geometry DataTypes
197 + rfe #1741101, patch #1798184 UUID default for CHAR(36) PRIMARY KEY,
198 thanks to Gert Palok - gert_p
199 - bug #1664240 [GUI] css height makes cfg TextareaRows useless
200 - bug #1724217 [Create PHP Code] doesn't include newlines for text fields
201 - bug #1845605 [i18n] translators.html still uses iso-8859-1
202 - bug #1823018 [charset] Edit(Delete) img-links pointing to wrong row
203 - bug #1826205 [export] Problems with yaml text export
204 - bug #1344768 [database] create/alter table new field can not have empty string
206 + rfe #1840165 [interface] Enlarge column name field in vertical mode
207 + patch #1847534 [interface] New "Inside field" in db search,
209 + [GUI] Mootools js library (http://mootools.net) and new parameter
210 $cfg['InitialSlidersState']
211 * [core] cache some MySQL stats (do not query them with every page request)
212 + [view] clearer dialog WITH (CASCADED | LOCAL) CHECK OPTION
213 + [lang] Norwegian update, thanks to Sven-Erik Andersen
214 + [lang] Japanese update, thanks to Ishigaki Kenichi
215 + [lang] Italian update, thanks to Luca Rebellato
217 * minimal support on db structure page
219 + [pdf] Merged tcpdf 2.2.002 (PHP5 version), thanks to Nicola Asuni
220 + [engines] Maria support
221 + [engines] MyISAM and InnoDB: support ROW_FORMAT table option
222 + prevent search indexes from indexing phpMyAdmin installations
223 + [engines] PBXT: table options, foreign key (relation view, designer)
224 + [lang] New Bangla, thanks to Raquibul Islam and Joy Kumar Nag
225 + [interface] Display options; thanks to Dave Grijalva
226 for the idea about showing the display field while browsing
227 - bug #1910621 [display] part 2: do not display a BINARY content as text
228 + rfe #1962383 [designer] Option to create a PDF page
229 - patch #2007196, Typos in comments, thanks to knittl - knittl
230 - bug #1982315 [GUI] Comma and quote in ENUM, thanks to Joshua Hogendorn
232 - bug #1970836 [parser] SQL parser is slow, thanks to Christian Schmidt
233 + rfe #1692928 [transformation] Option to disable browser transformations
234 + [import] Speed optimization to be able to import the sakila database
235 + [doc] Documentation for distributing phpMyAdmin in README.VENDOR.
236 + [display] headwords for sorted column
237 - bug #2033962 [import] Cannot import zip file
238 + [lang] Swedish update, thanks to Björn T. Hallberg
239 - bug #2050068 [gui] "Check tables having overhead" selects wrong tables
240 + [lang] Belarusian update, thanks to Jaska Zedlik
241 + [lang] Norwegian update, thanks to Sven-Erik Andersen
242 + [lang] Italian update, thanks to Luca Rebellato
243 - [core] safer handling of temporary files with open_basedir (thanks to Thijs
245 - [core] do not automatically set and create TempDir, it might lead to security
246 issue (thanks to Thijs Kinkhorst)
247 + [lang] Czech update
248 - bug #2066923 [display] Navi browse icon does not go to page 1
249 - patch #2075263 [auth] Single sign-on and cookie clearing,
250 thanks to Charles Suh - cws125
251 - [doc] better documentation of $cfg['TempDir']
252 - bug #2080963 [charset] Clarify doc and improved code, thanks to
253 Victor Volkov - hanut
254 - bug [charset] Cannot sort twice on a column when the table name
256 + [lang] Spanish update, thanks to Daniel Hinostroza
257 + [lang] Hungarian update, thanks to Jozsef Tamas Herczeg - dodika
258 - bug #2113848 [navi] Page number after database switching
259 - patch #2115966 [GUI] Checkboxes and IE 7, thanks to Martin - maschg
260 - bug #1914066 [core] ForceSSL generates incorrectly escaped redirections
262 2.11.9.4 (2008-12-09)
263 - [security] possible XSRF on several pages
265 2.11.9.3 (2008-10-30)
266 - [security] XSS in a Designer component
268 2.11.9.2 (2008-09-22)
269 - [security] XSS in MSIE using NUL byte, thanks to JPCERT.
271 2.11.9.1 (2008-09-15)
272 - [security] Code execution vulnerability, thanks to Norman Hippert
274 2.11.9.0 (2008-08-28)
275 - bug #2031221 [auth] Links to version number on login screen
276 - bug #2032707 [core] PMA does not start if ini_set() is disabled
277 - bug #2004915 [bookmarks] Saved queries greater than 1000 chars not
278 displayed, thanks to Maik Wiege - mswiege
279 - bug #2037381 [export] Export type "replace" does not work
280 - bug #2037375 [export] DROP PROCEDURE needs IF EXISTS
281 - bug #2045512 [export] Numbers in Excel export
282 - bug #2074250 [parser] Undefined variable seen_from
284 2.11.8.0 (2008-07-28)
285 - patch #1987593 [interface] Table list pagination in navi,
286 thanks to Jason Day - jday29
287 - bug #1989081 [profiling] Profiling causes query to be executed again
288 (really causes a problem in case of INSERT/UPDATE)
289 - bug #1990342 [import] SQL file import very slow on Windows,
290 thanks to Richard Heaton - wotnot
291 - bug [XHTML] problem with tabindex and radio fields
292 - bug #1971221 [interface] tabindex not set correctly
293 - bug [views] VIEW name created via the GUI was not protected with backquotes
294 - bug #1989813 [interface] Deleting multiple views (space in name)
295 - bug #1992628 [parser] SQL parser removes essential space
296 - bug #1989281 [export] Export fails if one table is marked as crashed
297 - bug #2001005 [GUI] ARCHIVE cannot have indexes
298 - bug #1989281 [export] CSV for MS Excel incorrect escaping of double quotes
299 - bug #1959855 [interface] Font size option problem when no config file
300 (todo (trunk): navi frame size does not change for theme original)
301 - bug #1982489 [relation] Relationship view should check for changes
302 - bug [history] Do not save too big queries in history
303 - [security] Do not show version info on login screen
304 - bug #2018595 [import] Potential data loss on import resubmit
305 - patch #2020630 [export] Safari and timedate, thanks to Sebastian Mendel,
306 Isaac Bennetch and Jürgen Wind
307 - bug #2022182 [import, export] Import/Export fails because of Mac files
308 - [security] protection against cross-frame scripting and
309 new directive AllowThirdPartyFraming, thanks to YGN Ethical Hacker Group
310 - [security] possible XSS during setup, thanks to YGN Ethical Hacker Group
311 - [interface] revert language changing problem introduced with 2.11.7.1
313 2.11.7.1 (2008-07-15)
314 - bug [security] XSRF/CSRF by manipulating the db,
315 convcharset and collation_connection parameters,
316 thanks to YGN Ethical Hacker Group
318 2.11.7.0 (2008-06-23)
319 - bug #1908719 [interface] New field cannot be auto-increment and primary key
320 - [dbi] Incorrect interpretation for some mysqli field flags
321 - bug #1910621 [display] part 1: do not display a TEXT utf8_bin as BLOB
322 (fixed for mysqli extension only)
323 - [interface] sanitize the after_field parameter,
324 thanks to Norman Hippert
325 - [structure] do not remove the BINARY attribute in drop-down
326 - bug #1955386 [session] Overriding session.hash_bits_per_character
327 - [interface] sanitize the table comments in table print view,
328 db print view and db data dictionary, thanks to Norman Hippert
329 - bug #1939031 Auto_Increment selected for TimeStamp by Default
330 - patch #1957998 [display] No tilde for InnoDB row counter when we know
331 it for sure, thanks to Vladyslav Bakayev - dandy76
332 - bug #1955572 [display] alt text causes duplicated strings
333 - bug #1762029 [interface] Cannot upload BLOB into existing row
334 - bug #1981043 [export] HTML in exports getting corrupted,
335 thanks to Jason Judge - jasonjudge
336 - bug #1936761 [interface] BINARY not treated as BLOB: update/delete issues
337 - protection against XSS when register_globals is on and .htaccess has
338 no effect, thanks to Tim Starling
339 - bug #1996943 [export] Firefox 3 and .sql.gz (corrupted); detect Gecko 1.9,
340 thanks to Jürgen Wind - windkiel
342 2.11.6.0 (2008-04-29)
343 - bug #1903724 [interface] Displaying of very large queries in error message
344 - bug #1905711 [compatibility] Functions deprecated in PHP 5.3: is_a() and
345 get_magic_quotes_gpc(), thanks to Dmitry N. Shilnikov - yrtimd
346 - bug [lang] catalan wrong accented characters
347 - bug #1893034 [Export] SET NAMES for importing with command-line client
348 + [lang] Russian update, thanks to Victor Volkov
349 - bug #1910485 [core] Unsetting the whitelist during the loop,
350 thanks to Jeroen Vrijkorte - jv_map
351 - bug #1906980 [Export] Import of VIEWs fails if temp table exists,
352 thanks to Falk Nisius - klaf
353 - bug #1812763 [Copy] Table copy when server is in ANSI_QUOTES sql_mode
354 thanks to Tony Marston - tonymarston
355 - bug #1918531 [compatibility] Navigation isn't w3.org valid
356 thanks to Michael Keck - mkkeck
357 - bug #1926357 [data] BIT defaults displayed incorrectly
358 - patch #1930057 [auth] colon in password prevents HTTP login on CGI/IIS,
359 thanks to Jürgen Wind - windkiel
360 - patch #1929553 [lang] Don't output BOM character in Swedish language file,
361 thanks to Samuel L. B. - samuellb
362 - patch #1895796 [lang] Typo in Japanese lang files,
363 thanks to tyman - acoustype
364 - bug #1935652 [auth] Access denied (show warning about mcrypt on login page)
365 - bug #1906983 [export] Reimport of FUNCTION fails
366 - bug #1919808 [operations] Renaming a database fails to handle functions
367 - bug #1934401 [core] Cannot force a language
368 - bug #1944077 [core] Config file containing a BOM,
369 thanks to Gaetano Giunta - ggiunta
370 - bug #1947189 [scripts] Missing </head> in scripts/signon.php,
371 thanks to Dolf Schimmel
372 + [lang] Romanian update, thanks to Sergiu Bivol - sbivol
374 2.11.5.2 (2008-04-22)
375 - PMASA-2008-3 [security] File disclosure
377 2.11.5.1 (2008-03-29)
378 - bug #1909711 [security] Sensitive data in session files
380 2.11.5.0 (2008-03-01)
381 - bug #1862661 [GUI] Warn about rename deleting database
382 - bug #1866041 [interface] Incorrect sorting with AS
383 - bug #1871038 [import] Notice: undefined variable first_sql_delimiter
384 - bug #1873110 [export] Problem exporting with a LIMIT clause
385 - bug #1871164 [GUI] Empty and navigation frame synch.
386 - patch #1873188 [GUI] Making db pager work when js is disabled,
387 thanks to Jürgen Wind - windkiel
388 - bug #1875010 [auth] MySQL server and client version mismatch (mysql ext.)
389 - patch #1879031 [transform] dateformat transformation and UNIX timestamps,
390 thanks to Tim Steiner - spam38
391 - bug [import] Do not verify a missing enclosing character for CSV,
392 because files generated by Excel don't have any enclosing character
393 - bug #1799691 [export] "Propose table structure" and Export
394 - bug #1884911 [GUI] Space usage
395 - bug #1863326 [GUI] Wrong error message / no edit (Suhosin)
396 - bug #1887204 [GUI] Order columns in result list messing up query
397 - patch #1893538 [GUI] Display issues on Opera 9.50,
398 thanks to Jürgen Wind - windkiel
399 - bug [GUI] Do not display the database name used by the previous user,
400 thanks to Ronny Görner
401 - bug [security] Remove cookies from $_REQUEST for better coexistence with
402 other applications, thanks to Richard Cunningham. See PMASA-2008-1.
404 2.11.4.0 (2008-01-12)
405 - bug #1843428 [GUI] Space issue with DROP/DELETE/ALTER TABLE
406 - bug #1807816 [search] regular expression search doesn't work with
408 - bug #1843463 [GUI] DROP PROCEDURE does not show alert
409 - bug #1835904 [GUI] Back link after a SQL error forgets the query
410 - bug #1835654 [core] wrong escaping when using double quotes
411 - bug #1817612 [cookies] Wrong cookie path on IIS with PHP-CGI,
412 thanks to Carsten Wiedmann
413 - bug #1848889 [export] export trigger should use DROP TRIGGER IF EXISTS
414 - bug #1851833 [display] Sorting forgets an explicit LIMIT
415 (fix for sorting on column headers)
416 - bug #1764182 [cookies] Suhosin cookie encryption breaks phpMyAdmin
417 - bug #1798786 [import] Wrong error when a string contains semicolon
418 - bug #1813508 [login] Missing parameter: field after re-login
419 - bug #1710144 [parser] Space after COUNT breaks Export but not Query
420 - bug #1783620 [parser] Subquery results without "as" are ignored
421 - bug #1821264 [display] MaxTableList and INFORMATION_SCHEMA
422 - bug #1859460 [display] Operations and many databases
423 - bug #1814679 [display] Database selection pagination when switching servers
424 - patch #1861717 [export] CSV Escape character not exported right,
425 thanks to nicolasdigraf
426 - bug #1864468 [display] Theme does not switch to darkblue_orange
427 - bug #1847409 [security] Path disclosure on darkblue_orange/layout.inc.php,
428 thanks to Jürgen Wind - windkiel
430 --- Older ChangeLogs can be found on our project website ---
431 http://www.phpmyadmin.net/old-stuff/ChangeLogs/
433 # vim: et ts=4 sw=4 sts=4
434 # vim: ft=changelog fenc=utf-8 encoding=utf-8
435 # vim: fde=getline(v\:lnum-1)=~'^\\s*$'&&getline(v\:lnum)=~'\\S'?'>1'\:1&&v\:lnum>8&&getline(v\:lnum)!~'^#'
436 # vim: fdn=1 fdm=expr