phpMyAdmin 4.7.0

http://prdownloads.so...s.zip?download (4.3 Mb)

http://prdownloads.so...es.7z?download (2.3 Mb)

http://surfnet.dl.sou...-languages.zip ~ 4,29 MB

http://surfnet.dl.sou...nguages.tar.gz ~ 4.11 MB

http://dfn.dl.sourcef...-languages.zip ~ 4.30 MB

http://kent.dl.source...nguages.tar.gz ~ 4.12 MB

_http://prdownloads.so...-languages.zip
_http://prdownloads.so...-utf-8-only.7z?

Fixes for 2.11.9.x:
- bug #2031221 [auth] Links to version number on login screen
- bug #2032707 [core] PMA does not start if ini_set() is disabled
- bug #2004915 [bookmarks] Saved queries greater than 1000 chars
not displayed
- bug #2037381 [export] Export type "replace" does not work
- bug #2037375 [export] DROP PROCEDURE needs IF EXISTS
- bug #2045512 [export] Numbers in Excel export
+ [lang] Norwegian UTF-8 original file remerged
- bug #2074250 [parser] Undefined variable seen_from

Release Name: 3.2.0.1
Notes:
Welcome to the first security release for phpMyAdmin 3.2.0. 

Changes:
3.2.0.1 (2009-06-30)
- [security] XSS: Insufficient output sanitizing in bookmarks

Изменения данного выпуска включают в себя:
исправление отображения панели связей Дизайнера;
исправление отображения количества строк таблицы;
исправление неверного определения ключевых слов;
исправление экранирования имени сервера.

_http://sourceforge.ne...s.zip/download

3.3.8.0 (2010-10-25)
- bug #3059311 [import] BIGINT field type added to table analysis
- [core] Update library PHPExcel to version 1.7.4
- bug #3062455 [core] copy procedures and routines before tables
- bug #3062455 [export] with SQL, export procedures and routines before tables
- bug #3056023 [import] USE query not working
- bug #3038193 [display] Error when editing row with GEOMETRY column
- bug #3062454 [interface] Display routines/events also when no tables are defined
- support ARIA storage engine as well as its previous name MARIA

_http://sourceforge.ne...s.zip/download

3.3.8.1 (2010-11-29):
- bug #3115519 (private) [security] XSS on db search, see PMASA-2010-8

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

_http://sourceforge.ne...s.zip/download

4.4.9.0 (2015-06-04)
- bug #4920 relation view doesn't list fields of table in other database
- bug #4905 Sorting by an alias
- bug #4931 False error before entering reCAPTCHA
- bug #4909 central column with multiple server
- bug #4937 Custom export with backquotes off is not working
- bug #4908 Reverse proxy: infinite internal redirect (added warning in doc)
- bug #4942 Export to gzip saves plain text under Chrome

_http://sourceforge.ne...s.zip/download

4.4.12.0 (2015-07-20)
- bug Saved chart image does not have a proper name or an extension
- bug #4976 Timepicker CSS issues in Original theme
- bug #4975 Move/Copy/Rename operations on Table/Db fail on Drizzle server
- bug #4826 Two inline edit windows
- bug #4979 Problem when import *.ods file
- bug Add missing head tag
- bug #4985 Column headers move when scrolling

4.4.11.0 (2015-07-06)
- bug Missing selected/entered values when editing active options in visual query builder
- bug #4969 Autoload from prefs_storage not behaving properly
- bug #4972 Incorrect length computed for binary data
- bug Remove character set from create_tables_drizzle.sql
- bug #4973 Users overview needs clarification
- bug #4974 Creating a database from console doesn't update navigation panel
- bug #4844 FAQ 1.17 needs an update

4.4.10.0 (2015-06-17)
- bug #4950 Issues in database selection for replication
- bug #4951 Trying to save chart as image crashes the browser
- bug #4953 cant drag sql.gz file onto import input
- bug #4960 Table creation results in GET request with missing server parameter that invalidates the session
- bug #4961 Javascript error when Designer is opened
- bug #4962 Insert by foreign key scrolls page to top
- bug #4955 Clicking on the navi logo does not always work
- bug External URL for $cfg['NavigationLogoLink'] causes JavaScript error when clicked

_https://files.phpmyadm...-languages.zip

4.4.13.0 (2015-08-07)
- issue #1808 "Improve table structure" generates invalid SQL
- issue Once checked "Show only active" checkbox is always checked
- issue #1813 Delete rows using "Check All" is broken
- issue Fix PHP 7 possible binding ambiguity
- issue #11326 Exported schema includes all the tables of the database
- issue #11339 Results not displayed if query ends in delimiter and comment
- issue #11320 Live edit of data fields is not working always
- issue Table list in navigation collapses when entering into a table in another page

_https://files.phpmyadm...-languages.zip

4.4.13.1 (2015-08-08)
- issue #11368 SQL error when importing phpMyAdmin dump file

_https://files.phpmyadm...-languages.zip

4.5.0.0 (2015-09-23)
+ rfe Pagination for GIS visualization
+ issue #6207 Usability improvements for console
+ issue #6310 Access to Add columns text-box and Go button when creating table
+ issue #6007 Add lock tables, disable keys options
+ issue #6306 Additional page locking
+ issue #6314 Support MySQL 5.7 syntax for password change
+ issue #6319 Display/edit index name
+ issue #6318 Toggle autocomplete of table and column names
+ issue #5633 Manage multiple variable in bookmarked query
+ issue #5642 Show edit/delete also when there is calculated column
+ issue #6313 Show databases as list instead of as dropdown when no database is selected
+ rfe Optional dark theme for the console
+ issue #5053 PDF schema sort options
+ issue #5543 Structure in PDF export
+ issue #6327 Have ZeroConf create phpmyadmin DB if possible
+ issue #5462 Warning before silent data conversion/truncation
+ issue #6338 Support a default page in designer
+ issue #6339 Allow copying mutiple rows
+ issue #6334 No SQL query for loading data
+ issue #6341 New data validation feature and datetime type
+ issue #6324 Importing and exporting pMA meta-data
+ issue #6330 Add grouping to stored procedures in the navigation tree
+ issue #6275 Support IPv6 browser transformation
+ rfe Option groups for 'With selected' dropdown in database structure page
+ issue #6347 Support CHECKSUM TABLE operation
+ issue #6088 Support for Paramaters with raw SQL
+ issue #5844 Show original size of truncated columns
+ issue #6114 Explain analyzer
+ issue #6186 Add "Drop partition" option to partition tools
+ issue #6354 Procedures window shift-click should select multiple rows
+ issue #6355 Designer: "Sticky" menu option
+ issue #6357 Directly show table comments in structure view
+ issue #6259 Page-related settings
+ issue #5356 Alter privileges when renaming or copying a database
- issue #11256 Slowness due to large number of routines
- issue #11258 GROUP_CONCAT shown as GROUPBY_CONCAT in CodeMirror autocomplete
+ issue #5946 Work with --skip-grant-tables
- issue #11266 "Sort by key" drop-down value is lost
+ issue #6287 Browse: improve display of right-aligned data
- issue #11265 Textarea rows settings ignored Features > Text fields
+ issue #6358 MIME types should be lower case
- issue #11226 Drop table doesn't remove the table name from navigation bar
+ issue #6360 MySQL and MariaDB functions INET6_ATON and INET6_NTOA
- bug Link to get real row counts of all the views in a db, at once
- issue #11275 Drizzle version numbers
+ issue #5400 Rewrite print view using CSS; fixes print view failures on multi-query statements
+ issue #6362 Support spatial indexes in table create form
+ issue #6068 Use CTRL or ALT plus arrow keys for navigation in grid editor
+ rfe Remove support for Shift + Click on function name to apply to all rows in insert/edit page
+ issue #6326 Don't group tables in tree if the result has only one group
- issue #11287 When hide table structure actions is false, action should be in a row
+ issue #5425 Batch changing the collation of each column in a table
- issue #10918 QBE generates wrong query
+ issue #6292 Use plain English descriptors instead of script names for icon link destinations
+ issue #6239 Disable foreign key checks for some operations
- issue #11296 "With selected" links doesn't work in table browse
- issue #11166 Query builder: missing joint for the intermediary table
+ issue #6251 Integrate SQL debugging into console
- issue #11061 Improve/restore non-unique index row editing
- issue #11301 MySQL errors are not shown when DebugSQL is enabled
+ issue #5037 One file per table and one file per database export option
+ issue #5759 Designer settings should be part of saved state
+ issue #6257 Option to remove functions, procedures, etc., from navigation tree
+ issue #5388 Column privileges and update
+ issue #6231 Cant use external config file
+ issue #6252 CSV import: Allow "Columns escaped with" to be optional
+ issue #6262 Being able to use multiple servers at the same time when using cookie auth
+ issue #6301 select structure or data for each table when exporting
- issue #11261 Autocomplete completes the original table name when joining multiple aliased tables
+ rfe Remove configuration storage data related to a user upon deleting the user
+ issue #6298 Improved processlist for mariadb
+ issue #6300 Warn about "Any user" potential problem
+ issue #6368 Hide/disable edit links for read-only variables
+ issue #6365 Human readable/writable URLs (html5 api)
+ rfe Support virtual columns in MySQL 5.7.5+
+ issue #6215 Support for virtual/persistent columns in MariaDB
- issue #11314 Undefined work upon upgrade to new version
- issue #1817 Creating configuration storage tables fail in MySQL 5.7
- issue #6118 Parser does not handle nested selects
- issue #5437 Support SELECT ... FROM DUAL
- issue #4962 Support UNION
- issue #11322 Missing null checkbox when grid editing a null cell
+Upgrade TCPDF to version 6.2.9
+ issue #6102 Add SHA256 security password support
- issue #10250 Displayed git revision info is not set
+Improved schema SVG export
- issue #10726 Do not try to set port 80 for https requests
+ issue #11394 Export/import Designer view
+Partition support in table Structure
+ issue #11414 Unclear export options / organization / hierarchy
Set minimum required PHP version to 5.5 (older versions are EOL)
- issue #11407 ALTER TABLE failing on import when table exists
- issue Do not export `sys` database when exporting server
- issue #11436 CREATE DATABASE should be enabled by default on server exports
- issue #11442 MySQL 5.7 and SHOW VARIABLES
- issue #11445 MySQL 5.7 and Status page for an unprivileged user
- issue #11448 Clarify doc about the MemoryLimit directive
- issue #11489 Cannot copy a database under certain conditions
4.4.15.0 (2015-09-20)
- issue #11411 Undefined "replace" function on numeric scalar
- issue #11421 Stored-proc / routine - broken parameter parsing
- issue Missing name for configuration read_as_multibytes
- issue #11431 Incorrect "No row selected" message
- issue #11447 MySQL 5.5 and the language system variable
- issue #11452 Semantics of export and import icons are mixed up
- issue #11451 Designer-Bug in move.js on multiple server configuration
- issue #11458 Invalid UTF-8 sequence in argument
- issue #11457 Request URI too large
- issue Invalid argument supplied for foreach()
- issue #11461 Foreign key constraints for InnoDB tables with upper-case letters disabled
- issue #11487 Warning when entering Query page
4.4.14.1 (2015-09-08)
- issue [security] reCaptcha bypass
4.4.14.0 (2015-08-20)
- issue #11367 Export after search, missing WHERE clause
- issue #11380 Incomplete message after import
- issue Incorrect scalar type declaration (reported under PHP 7)
- issue #11389 ReCaptcha produces deprecated messages under PHP 7
- issue #11387 phpseclib < 2.0 produces deprecated messages on PHP 7
- issue #11404 "Switch to copied table" doesn't work
- issue #11406 Missing quotes after calling "distinct values"
- issue #11386 Cannot import database with long data in one column
- issue #11410 SPATIAL index option is not clickable

»» Нажмите, для закрытия спойлера | Press to close the spoiler ««

_https://files.phpmyadm...-languages.zip

4.5.0.1 (2015-09-24)
- issue #11492 AUTO_INCREMENT statements are partly missing from exports

_https://files.phpmyadm...-languages.zip

4.5.0.2 (2015-09-25)
- issue #11497 Incorrect indexes when exporting

_https://files.phpmyadm...-languages.zip

4.5.1.0 (2015-10-23)
- issue Invalid argument supplied for foreach()
- issue array_key_exists() expects parameter 2 to be array
- issue #11480 Notice Undefined index: drop_database
- issue #11486 Server variable edition in ANSI_QUOTES sql_mode: losing current value
- issue #11491 Propose table structure broken
- issue #11464 phpMyAdmin suggests upgrading to newer version not usable on that system
- issue #11495 'PMA_Microhistory' is undefined
- issue #11496 Incorrect definition for getTablesWhenOpen()
- issue #11500 Error when creating new user on MariaDB 10.0.21
- issue #11505 Notice on htmlspecialchars()
- issue Notice in Structure page of views
- issue #11510 AUTO_INCREMENT always exported when IF NOT EXISTS is on
- issue #11516 Some partitions are missing in copied table
- issue #11521 Notice of undefined variable when performing SHOW CREATE
- issue #11509 Error exporting sql query results with table alias
- issue #11512 SQL editing window does not recognise 'OUTER' keyword in 'LEFT OUTER JOIN'
- issue #11518 "NOT IN" clause not recognized (MySQL 5.6 and 5.7)
- issue #11524 Yellow star does not change in database Structure after add/remove from favorites
- issue #11531 Invalid SQL in table definition when exporting table
- issue #11526 Foreign key to other database's tables fails
- issue #11519 Bug while exporting results when a joined table field name is in SELECT query
- issue #11522 Strange behavior on table rename
- issue #11539 Rename table does not result in refresh in left panel
- issue #11541 Missing arguments for PMA_Table::generateAlter()
- issue #11544 Notices about undefined indexes on structure pages of information_schema tables
- issue Change minimum PHP version for Composer
- issue #11542 Import parser and backslash
- issue #11546 "Visualize GIS data" seems to be broken
- issue #11548 Confirm box on "Reset slave" option
- issue Fix cookies clearing on version change
- issue #11558 Cannot execute SQL with subquery
- issue #11520 Incorrect syntax creating a user using mysql_native_password with MariaDB
- issue #11561 Cannot use third party auth plugins

_https://files.phpmyadm...-languages.zip

4.5.2.0 (2015-11-23)
- issue #11589 Incorrect parameter in mysqli_fetch_fields()
- issue #11592 Missing headers in zipped export
- issue #11590 Parser: Array to string conversion
- issue #11597 Huge binary log growth on 4.5.x
- issue #11594 'only_db' config option bug when db names contain underscore and are grouped
- issue #11607 Unable to change password from Login information tab
- issue #11610 Undefined variable: res_rel
- issue #11611 Warning while exporting schema to PDF
- issue #11612 Undefined index: new_row_format
- issue #11605 Changing hostname kills password
- issue #11614 Undefined variable: db
- issue #11627 CREATE TABLE/INSERT INTO executed twice (ctrl+enter)
- issue #11630 Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given
- issue #11632 Exporting GIS visualization ignores start and row count
- issue #11476 Errors instead of git info when PHP has no gzip support
- issue #11633 CodeMirror tooltip shows below modal window
- issue #11639 Bug with the MainBackground Color
- issue Profiling checkbox is missing
- issue #11642 Properly handle session expiry after POST requests
- issue #11648 Notice in ./export.php#214 Undefined index: quick_or_custom
- issue #11646 Unrecognized keywords
- issue #11635 Sql not executed properly
- issue #11631 Linter warnings when creating new user
- issue #11626 wrong row count for query results
- issue #11608 Analyzer doesn't recognize GRANT statements
- issue #11602 Parser warnings (subqueries)
- issue #11658 Collation column is empty in table Structure
- issue #11661 Error changing table's column encoding

_https://files.phpmyadm...-languages.zip

4.5.4.1 (2016-01-28)
- issue #11892 Error with PMA 4.4.15.3
- issue #11896 Remove hard dependency on phpseclib

4.5.4 (2016-01-28)
- issue #11724 live data edit of big sets is not working
- issue Table list not saved in db QBE bookmarked search
- issue #11777 While 'changing a column', query fails with a syntax error after the 'CHARSET=' keyword
- issue #11783 Avoid syntax error in javascript messages on invalid PHP setting for max_input_vars
- issue #11784 Properly handle errors in upacking zip archive
- issue #11785 Set PHP's internal encoding to UTF-8
- issue #11786 Fixed Kanji encoding in some specific cases
- issue #11787 Check whether iconv works before using it
- issue #11788 Avoid conversion of MySQL error messages
- issue #11792 Undefined index: parameters
- issue #11802 Undefined index: field_name_orig
- issue Undefined index: host
- issue #11810 'Add to central columns' (per column button) does nothing
- issue #11727 SQL duplicate entry error trying to INSERT in designer_settings table
- issue #11798 Fix handling of databases with dot in a name
- issue #11820 Fix hiding of page content behind menu
- issue #11780 FROM clause not generated after loading search bookmark
- issue #11826 Fix creating/editing VIEW with DEFINER containing special chars
- issue #11828 Do not invoke FLUSH PRIVILEGES when server in --skip-grant-tables
- issue #11804 Misleading message for configuration storage
- issue #11772 Table pagination does nothing when session expired
- issue #11840 Index comments not working properly
- issue #11791 Better handle local storage errors
- issue #11752 Improve detection of privileges for privilege adjusting
- issue #11854 Undefined property: stdClass::$releases at version check when disabled in config
- issue #11814 SQL comment and variable stripped from bookmark on save
- issue Gracefully handle errors in regex based javascript search
- issue [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1
- issue [Security] Unsafe generation of CSRF token, see PMASA-2016-2
- issue [Security] Multiple XSS vulnerabilities, see PMASA-2016-3
- issue [Security] Insecure password generation in JavaScript, see PMASA-2016-4
- issue [Security] Unsafe comparison of CSRF token, see PMASA-2016-5
- issue [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-6
- issue [Security] XSS vulnerability in normalization page, see PMASA-2016-7
- issue [Security] Full path disclosure vulnerability in SQL parser, see PMASA-2016-8
- issue [Security] XSS vulnerability in SQL editor, see PMASA-2016-9

4.5.3.0 (2015-12-23)
- issue #11744 Incomplete results of UNION ALL
- issue #11742 MATCH AGAINST keywords not recognized
- issue #11723 syntax verifier is not knowing "STRAIGHT_JOIN"
- issue #11699 REPLACE() function confused with REPLACE statement
- issue #11690 FLUSH word not recognized by parser
- issue #11664 Online syntax verifier bug - "IF" on SELECT statement
- issue #11665 Format breaks query with COUNT()
- issue Undefinex index: SendErrorReports
- issue Incorrect script name in include
- issue #11685 Warning: Invalid argument supplied for foreach()
- issue #11687 Delimiter missing while exporting multiple db routines
- issue #11684 mysql_native_password with MariaDB bug
- issue #11693 Flush privileges overusage - related to #11597
- issue #11691 Query was empty on creating User in 4.5.2
- issue #11695 PMA_getDataForDeleteUsers() warning
- issue #11698 Cannot create user on Percona Server
- issue Properly report error on connecting
- issue #11706 Database export template not saving compression option
- issue #11721 Fix single quote export for servers in ANSI_QUOTES mode
- issue #11714 Avoid duplicite fetching of table information
- issue #11724 Temporary fix for live data edit of big sets is not working
- issue IE 8 compatibility in console
- issue #11732 Exporting feature does not work with union table
- issue #11728 CSV import skip row count after
- issue #11679 Cannot export results of some queries
- issue #11720 Message "An account already exists..." incorrectly displayed
- issue #11758 Missing quoting of table in ALTER CONVERT query
- issue #11752 PMA 4.5.2 breaks MySQL Master-Master Cluster
- issue #11757 Export and preview show different SQL for character set
- issue #11749 Fix possible undefined variables in table operations

_https://files.phpmyadm...-languages.zip

This release fixes multiple XSS vulnerabilities, please see PMASA-2016-10, PMASA-2016-11, and PMASA-2016-12 for details;
additionally it fixes a vulnerability allowing man-in-the-middle attack on an API call to GitHub, see PMASA-2016-13 for details.
It also inclues fixes for the following bugs:
- issue #11971 CREATE UNIQUE INDEX index type is not recognized by parser.
- issue #11982 Row count wrong when grouping joined tables.
- issue #12012 Column definition with default value and comment in CREATE TABLE exported faulty.
- issue #12020 New statement but no delimiter and unexpected token with REPLACE.
- issue #12029 Fixed incorrect usage of SQL parser context in SQL export
- issue #12048 Fixed inclusion of gettext library from SQL parser

_https://files.phpmyadm...-languages.zip

4.6.2 (2016-05-25)
- issue [security] User SQL queries can be revealed through URL GET parameters, see PMASA-2016-14
- issue [security] Self XSS vulneratbility, see PMASA-2016-16
- issue #12225 Use https for documentation links
- issue #12234 Fix schema export with too many tables
- issue #12240 Avoid parsing non JSON responses as JSON
- issue #12244 Avoid using too log URLs when getting javascripts
- issue #12118 Fixed setting mixed case languages
- issue #12229 Avoid storing objects in session when debugging SQL
- issue #12249 Fix cookie path on IIS
- issue #11705 Fix occassional 200 errors on Windows
- issue #12219 Fix locking issues when importing SQL
- issue #12231 Avoid confusing warning when mysql extension is missing
- issue Improve handling of logout
- issue Safer handling of sessions during authentication
- issue #12209 Fix server selection on main page
- issue #12192 Avoid storing full error data in session
- issue #12082 Fixed export of ARCHIVE tables with keys
- issue #11565 Add session reload for config authentication
- issue #12229 Do not fail on errors stored in session
- issue #12248 Fix loading of APC based upload progress bar

_https://files.phpmyadm...-languages.zip

- issue #12249 Fixed cookie path on Windows
- issue #12279 Fixed error reporting on connect problems
- issue #12290 Fixed export of tables without explicitly set engine
- issue #12285 Designer JavaScript error: Show/Hide tables list
- issue #12293 Fix MySQL SSL connection with some PHP versions
- issue #12279 Fix MySQL connection error on version mismatch
- issue #12281 Keep user attributes (privileges, authentication mode, etc) when copying a user
- issue #12308 Fix division by zero in case of misconfigured MySQL server
- issue #12317 Fix editing server variables
- issue #12303 Fix table size calculation in some circumstances
- issue #12310 Fix listing routines for non privileged user
- issue Escape generated query in exporting a database
- issue Setup script did not properly use input type password for some input types

_https://files.phpmyadm...-languages.zip

4.6.4 (2016-08-16)
- issue [security] Weaknesses with cookie encryption, see PMASA-2016-29
- issue [security] Improve session cookie code for openid.php and signon.php example files
- issue [security] Full path disclosure in openid.php and signon.php example files
- issue [security] Multiple XSS vulnerabilities, see PMASA-2016-30
- issue [security] Multiple XSS vulnerabilities, see PMASA-2016-31
- issue [security] Unsafe generation of BlowfishSecret (when not supplied by the user)
- issue [security] Referrer leak when phpinfo is enabled
- issue [security] PHP code injection, see PMASA-2016-32
- issue [security] Full path disclosure, see PMASA-2016-33
- issue [security] SQL injection attack, see PMASA-2016-34
- issue [security] Local file exposure through LOAD DATA LOCAL INFILE, see PMASA-2016-35
- issue [security] Local file exposure through symlinks with UploadDir, see PMASA-2016-36
- issue [security] Path traversal with SaveDir and UploadDir, see PMASA-2016-37
- issue [security] Multiple XSS vulnerabilities, see PMASA-2016-38
- issue [security] SQL injection vulnerability as control user, see PMASA-2016-39
- issue [security] SQL injection vulnerability, see PMASA-2016-40
- issue [security] Denial-of-service attack through transformation feature, see PMASA-2016-41
- issue [security] SQL injection vulnerability as control user, see PMASA-2016-42
- issue [security] Verify data before unserializing, see PMASA-2016-43
- issue [security] Use HTTPS for wiki links
- issue Remove Swekey support
- issue [security] SSRF in setup script, see PMASA-2016-44
- issue [security] Denial-of-service attack with $cfg['AllowArbitraryServer'] = true and persistent connections, see PMASA-2016-45
- issue [security] Improve SSL certificate handling
- issue [security] Fix full path disclosure in debugging code
- issue [security] Possible circumvention of IP-based allow/deny rules with IPv6 and proxy server, see PMASA-2016-47
- issue [security] Detect if user is logged in, see PMASA-2016-48
- issue [security] Bypass URL redirection protection, see PMASA-2016-49
- issue [security] Referrer leak, see PMASA-2016-50
- issue [security] Reflected File Download, see PMASA-2016-51
- issue [security] ArbitraryServerRegexp bypass, see PMASA-2016-52
- issue [security] Denial-of-service attack by entering long password, see PMASA-2016-53
- issue [security] Remote code execution vulnerability when running as CGI, see PMASA-2016-054
- issue [security] Administrators could trigger SQL injection attack against users
- issue [security] Denial-of-service attack when PHP uses dbase extension, see PMASA-2016-55
- issue [security] Remove tode execution vulnerability when PHP uses dbase extension, see PMASA-2016-56
- issue [security] Denial-of-service attack by using for loops, see PMASA-2016-46
- issue Include X-Robots-Tag header in responses
- issue Enforce numeric field length when creating table
- issue Fixed invalid Content-Length in some HTTP responses
- issue #12394 Create view should require a view name
- issue #12391 Message with 'Change password successfully' displayed, but does not take effect
- issue Tighten control on PHP sessions and session cookies
- issue #12409 Re-enable overhead on server databases view
- issue #12414 Fixed rendering of Original theme
- issue #12413 Fixed deleting users in non English locales
- issue #12416 Fixed replication status output in Databases listing
- issue #12303 Avoid typecasting to float when not needed
- issue #12425 Duplicate message variable names in messages.inc.php
- issue #12399 Adding index to table shows wrong top navigation
- issue #12424 Fixed password change on MariaDB without auth plugin
- issue #12339 Do not error on unset server port
- issue #12422 Improvements to the original theme
- issue #12395 Do not try to load old transformation plugins
- issue #12423 Fixed replication status in database listing
- issue #12433 Copy table with prefix does not copy the indexes
- issue #12375 Search in database: Window content is not scrolling down when clicking first time on Browse link
- issue #12346 SQL Editor textareas can have their size increased from the top, distorting the page view

_https://files.phpmyadm...-languages.zip

4.7.0
- patch #12233 [Display] Improve message when renaming database to same name
- issue #6146 Log authentication attempts to syslog
- issue #11981 Remove support for Swekey authentication
- issue #11987 Remove code for no longer supported MSIE versions
+ issue #11962 Remove embedded PHP libraries, use composer to install them
+ issue #12017 Cannot easily select multiple tables when exporting
+ issue #12047 Add javascript filtering for databases
- issue #12166 More compact rendering of navigation tree
+ issue #12129 Improve performance with SkipLockedTables
- issue #12173 Do not hide indexes under a slider
- issue Improve performance of zip file import
- issue #12196 Removed $cfg['ThemePath']
- issue #6274 Add support for export user settings as config.inc.php snippet
- issue #5555 Better report query errors while generating SQL exports
- issue #12307 Produce valid JSON on export
- issue #12325 Setup script icons broken
- issue #12378 Support IPv6 proxies
- issue Removed MySQL connection retry without password
- issue #12218 Allow to specify further parameters for control connection
- issue #12162 Show charset for each table on Database structure page
- issue #12463 Incorrect link in the href of icon at Hide/Show unhide links
- issue #12330 Shortcut for closing console
- issue #12465 Improved handling of http requests
- issue #12474 Broken links in Setup forms Navigation
- issue #12494 Can't add a new User
- issue #12523 Add 'token' Parameter in all POST requests (Fix 'Token mismatch' errors)
- issue #12302 Improved usage of number_format
- issue #12656 Server selection not working
- issue #12543 NULL results in dataset are colored grey
- issue #12664 Create Bookmark broken
- issue #12688 Use unsigned int for storing bookmark ID
- issue #12352 Added password strength indicator
- issue #12713 Correctly handle HTTP status when doing requests
- issue #12247 Add option to delete settings from browser storage
- issue #12783 Remove unused PMA_addJSCode function
- issue #12069 Add table filtering to database structure
- issue #12799 Allow to configure signon session parameters
- issue #12854 Drop database is broken
- issue #12863 Can't toggle Event Scheduler on
- issue #12742 Finish removing dead code references to xls/xlsx import and export, which was removed some time ago.
- issue #12536 Rename "Relations" to "Relationships" in many places as it's the more proper term
- issue #12834 Fixed margins in central columns feature
- issue #12903 Document more export configuration options
- issue #12897 Use consistent numeric format for table overhead
- issue #12901 Use server returned table name on renaming table
- issue #12918 Always use \r\n as newline when editing fields
- issue #12923 Fixed server side search in navigation panel
- issue #12929 Undefined index warning with ssl_ca_paths
- issue #12924 Do not show errors from OpenSSL cookie encryption/decryption
- issue #12945 Fixed hint rendering on adding new user
- issue #12941 Fixed sorting of tables in relation view
- issue #12936 Fixed tables pagination in navigation panel
- issue #12904 Do not collapse add form for central columns if there are none
- issue #12955 Fixed database renaming
- issue #12954 Fixed export of tracking data
- issue #12960 Enclose exports in transaction by default
- issue #12966 After adding a column ADD INDEX option won't be displayed when enabling AI
- issue #12972 Better error message when Composer has not been run
- issue #12988 Do not show language selector without choices
- issue #12993 Fixed external links to php documentation
- issue #12990 Fixed error when loading favorite tables to console
- issue #12981 Improved rendering of new version information
- issue #12922 Fixed bookmarks ordering
- issue #12964 Fixed table search in navigation
- issue #12985 Fixed rendering of foreign key browsing
- issue #12957 Fixed manipulation with GIS data having zero coordinates
- issue #12804 Fixed various designer javascript errors
- issue #12934 Fixed possible javascript error on server status page
- issue #12927 Fixed javascript error on 3NF normalization
- issue #12996 List all databses in navigation panel database dropdown
- issue #12980 Better defaults when creating multi field foreign key
- issue #12976 Improved foreign key editor behavior
- issue #12958 Always show error reporting dialog on top
- issue #12693 Improved support for TokuDB
- issue #11231 Try harder to honor LoginCookieValidity setting
- issue #13016 andbug #13017 Slight improvements to the table layout of Relation view
- issue #12345 Correctly show affected rows for LOAD DATA queries
- issue #13010 Copy database: SQL error for copying PMADB metadata
- issue #13002 Fixed OpenDocument exports
- issue #13000 Align NULL values according to the column alignment
- issue #13021 Show phpMyAdmin errors even with error_reporting set to 0
- issue #13020 Removed warning about client and server versions mismatch
- issue Hide comments on table Structure tab when no comment is set
- issue Fixed submission of error reports
- issue #13033 Use Referrer-Policy header to specify referrer policy
- issue Fixed javascript confirmation of dangerous queries
- issue #13040 Compatibility with hhvm 3.18
- issue #13031 Fixed displaying of all rows
- issue #12967 Fixed related field selection for native relations
- issue #13045 Properly escape MIME transformatoin names
- issue #13028 Always show 100% in font selector
- issue #13047 Fix query simulating for more servers
- issue #12846 Fix new version check for sites with wrongly configured curl
- issue #12951 When exporting to Excel, the default is now to include column names in the first row
- issue #13059 Removed debugging code
- issue #13029 Fixed table tracking for nested table groups
- issue #13053 Fixed broken links in setup
- issue #12708 Removed phpMyAdmin version from User-Agent header
- issue #13084 Do not point users to setup when it is disabled
- issue #12660 Delete only phpMyAdmin cookies on upgrade
- issue #13088 Fixed editing of rows with text primary key
- issue #13092 Do not try to sync favorite tables if configuration storage is not enabled
- issue #13105 Fixed changing attribute for virtual field
- issue #12757 Fixed setting password on recent MariaDB with non working plugins
- issue #12349 Fixed undefined variable on import from some formats
- issue #13103 Do not offer default names for copying/renaming databases

4.6.6 (2017-01-23)
- issue #12759 Fix Notice regarding 'Undefined index: old_usergroup'
- issue #12760 Fix Notice regarding 'Undefined index: users'
- issue #12762 Fixed parsing of SQL with BINARY function
- issue #12588 ReCaptcha now works without allow_url_fopen
- issue #12699 Show no local storage warning only on settings tab
- issue #12778 Syntax Error in Adding/Changing TIMESTAMP columns with default value as NULL
- issue #12769 Edit/Export links are not clickable under Routines tab
- issue #12757 Fixed creating new user with older MariaDB
- issue #12784 Remove ctype installation suggestion
- issue #12780 Format button replaces all text with blank spaces
- issue #12786 Fixed database searching
- issue #12792 Fixed javascript error on new version link
- issue #12785 Add information about required and suggested extensions to composer.json
- issue #12801 Custom header shown twice with cookie login form
- issue #12802 Custom footer not shown with auth_type http login failure
- issue #12434 Improve documentation for servers running with Suhosin
- issue #12800 Updated embedded phpSecLib to 2.0.4
- issue #12800 Fixed various issues with PHP 7.1
- issue #11816 Fixed operation with lower_case_table_names=2
- issue #12813 Fixed stored procedure execution
- issue #12826 Honor user configured connection collation
- issue #12293 Correctly report OpenSSL errors from cookie encryption
- issue #12814 DateTime won't allow to input length in Routine editor
- issue #12840 Fix Notice regarding 'Undefined index: row_format' when altering table options
- issue #12841 Fixed moving of columns with whitespace in name
- issue #12847 Fixed editing of virtual columns
- issue #12859 Changed WHERE condition to 0 instead of 1 for SQL query window to avoid accidents
- issue #12872 Use same query for display and execution when dropping index
- issue #12868 Fix check for user groups freatures being enabled
- issue #12876 Fix notices and warning related to dbs_to_test global
- issue #12831 Fix table formatting on Insert tab, which mostly affected row highlighting
- issue #12495 Reintroduced phpinfo page with limited capabilities
- issue #12861 Fix renaming tables with lower_case_table_names=2
- issue #12876 Fix possible PHP error in navigation
- issue #12881 Fix database search with newer php-gettext
- issue #12894 Fix linter error on unterminated variable name
- issue #12732 Fixed filtering for active processes
- issue [security] Multiple vulnerabilities in setup script, see PMASA-2016-44.
- issue [security] Open redirect, see PMASA-2017-1.
- issue [security] php-gettext code execution, see PMASA-2017-2.
- issue [security] DOS vulnerabiltiy in table editing, see PMASA-2017-3.
- issue [security] CSS injection in themes, see PMASA-2017-4.
- issue [security] Cookie attribute injection attack, see PMASA-2017-5.
- issue [security] SSRF in replication, see PMASA-2017-6.
- issue [security] DOS in replication status, see PMASA-2017-7.