opless / phpliteadmin

Automatically exported from code.google.com/p/phpliteadmin
0 stars 0 forks source link

No Session Var Prefix on Some Variables #29

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
> What steps will reproduce the problem?

1. Put phpliteadmin in a subdir of a website.
2. Refresh the phpliteadmin.php page on a given table.
3. On any other page of the website, do "print_r($_SESSION);die();"

> What is the expected output? 

Only my own session variables I use in my web app.

> What do you see instead?

Session variables for like currentDB or numRows, which might collide with my 
own app's use of session variables. This is because the $cookie_name prefix is 
not used on all the use of $_SESSION, when it probably should be in order to 
prevent collision with some other app's use of session variables -- for those 
cases only when the phpliteadmin.php page is in a subdir of another web project.

> What version of the product are you using? 

1.8.5

> On what operating system?

Ubuntu Linux 10.04 LTS

> Please provide any additional information below.

N/A

Original issue reported on code.google.com by volom...@gmail.com on 30 May 2011 at 7:36

GoogleCodeExporter commented 9 years ago
Good catch. This has been implemented in v1.8.6. It is in SVN.

Original comment by daneirac...@gmail.com on 31 May 2011 at 7:48