mirror of
https://github.com/vrana/adminer.git
synced 2025-08-12 09:34:10 +02:00
Access without login - accept ?username=
git-svn-id: https://adminer.svn.sourceforge.net/svnroot/adminer/trunk@459 7c3ca157-0c34-0410-bff1-cbf682f78f5c
This commit is contained in:
@@ -70,8 +70,12 @@ function auth_error() {
|
|||||||
page_footer("auth");
|
page_footer("auth");
|
||||||
}
|
}
|
||||||
|
|
||||||
$username = $_SESSION["usernames"][$_GET["server"]];
|
$username = &$_SESSION["usernames"][$_GET["server"]];
|
||||||
|
if (!isset($username)) {
|
||||||
|
$username = $_GET["username"];
|
||||||
|
}
|
||||||
if (!isset($username) || !$mysql->connect($_GET["server"], $username, $_SESSION["passwords"][$_GET["server"]])) {
|
if (!isset($username) || !$mysql->connect($_GET["server"], $username, $_SESSION["passwords"][$_GET["server"]])) {
|
||||||
auth_error();
|
auth_error();
|
||||||
exit;
|
exit;
|
||||||
}
|
}
|
||||||
|
unset($username);
|
||||||
|
1
todo.txt
1
todo.txt
@@ -9,7 +9,6 @@ Bulk update - leave original, set to value, set to NULL
|
|||||||
Save uploaded files after error to session variable instead of hidden field
|
Save uploaded files after error to session variable instead of hidden field
|
||||||
Transactions in export
|
Transactions in export
|
||||||
Compress export and import
|
Compress export and import
|
||||||
Access without login - accept $_GET
|
|
||||||
? Query print
|
? Query print
|
||||||
? Execution time in sql.inc.php
|
? Execution time in sql.inc.php
|
||||||
? Save token also to cookie - for session expiration and login in other window
|
? Save token also to cookie - for session expiration and login in other window
|
||||||
|
Reference in New Issue
Block a user