Sorry to trouble again,  but with that last patch we made to the parser
seems to have a bug in parsing a bit of code that's in phpMyAdmin.  I
didn't see it for a while, but it is definately reproduceable on two
machines here:

There is a line in the phpMyAdmin multi-frame window which allows you to
'Browse' a table.  The URL that is passed from the tbl_properties.php3
routine gets formed by the following:

<li><a href="sql.php3?sql_query=<?php echo urlencode("SELECT * FROM
$table");?>&pos=0&<?php echo $query;?>"><?php echo $strBrowse; ?></a>


One of the GET variables sent is 'echo query'.    The    &<     sequence
is causing my newly-patched Midgard to pass this string to stdout with
out evaluating it.   I get a nicely formed  <?php echo $query;?>   in
the URL and of course, this gives phpMyAdmin fits....

If you want to struggle with this thing, I'd be happy to test any
patches...

Regards,

-paul


--
This is The Midgard Project's mailing list. For more information,
please visit the project's web site at http://www.midgard-project.org

To unsubscribe the list, send an empty email message to address
[EMAIL PROTECTED]

Reply via email to