File phpMyAdmin-4.4.15.10-truncate-only-long-passwor... of Package phpMyAdmin.openSUSE_Leap_42.1_Update

Overview Repositories Revisions Requests Users Attributes Meta

File phpMyAdmin-4.4.15.10-truncate-only-long-passwords.patch of Package phpMyAdmin.openSUSE_Leap_42.1_Update

From 7232271a379396ca1d4b083af051262057003c41 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <michal@cihar.com>
Date: Mon, 27 Mar 2017 15:55:35 +0200
Subject: [PATCH] Truncate only long passwords
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This avoids problems with certain PHP versions returning false when
first parameter to substr is ''.

Signed-off-by: Michal Čihař <michal@cihar.com>
---
 libraries/common.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Index: phpMyAdmin-4.4.15.10-all-languages/libraries/common.inc.php
===================================================================
--- phpMyAdmin-4.4.15.10-all-languages.orig/libraries/common.inc.php
+++ phpMyAdmin-4.4.15.10-all-languages/libraries/common.inc.php
@@ -858,7 +858,7 @@ if (! defined('PMA_MINIMUM_COMMON')) {
                 . ' ' . $cfg['Server']['auth_type']
             );
         }
-        if (isset($_REQUEST['pma_password'])) {
+        if (isset($_REQUEST['pma_password']) && strlen($_REQUEST['pma_password']) > 256) {
             $_REQUEST['pma_password'] = substr($_REQUEST['pma_password'], 0, 256);
         }
         include_once  './libraries/plugins/auth/' . $auth_class . '.class.php';

Places

File phpMyAdmin-4.4.15.10-truncate-only-long-passwords.patch of Package phpMyAdmin.openSUSE_Leap_42.1_Update

Places