mirror of
https://github.com/vrana/adminer.git
synced 2025-08-12 01:24:17 +02:00
Access without login - accept ?username=
git-svn-id: https://adminer.svn.sourceforge.net/svnroot/adminer/trunk@459 7c3ca157-0c34-0410-bff1-cbf682f78f5c
This commit is contained in:
@@ -70,8 +70,12 @@ function auth_error() {
|
||||
page_footer("auth");
|
||||
}
|
||||
|
||||
$username = $_SESSION["usernames"][$_GET["server"]];
|
||||
$username = &$_SESSION["usernames"][$_GET["server"]];
|
||||
if (!isset($username)) {
|
||||
$username = $_GET["username"];
|
||||
}
|
||||
if (!isset($username) || !$mysql->connect($_GET["server"], $username, $_SESSION["passwords"][$_GET["server"]])) {
|
||||
auth_error();
|
||||
exit;
|
||||
}
|
||||
unset($username);
|
||||
|
1
todo.txt
1
todo.txt
@@ -9,7 +9,6 @@ Bulk update - leave original, set to value, set to NULL
|
||||
Save uploaded files after error to session variable instead of hidden field
|
||||
Transactions in export
|
||||
Compress export and import
|
||||
Access without login - accept $_GET
|
||||
? Query print
|
||||
? Execution time in sql.inc.php
|
||||
? Save token also to cookie - for session expiration and login in other window
|
||||
|
Reference in New Issue
Block a user