What´s New in version 3.4.10.2:

• [security] Fixed local path disclosure vulnerability, see PMASA-2012-2

What´s New in version 3.4.10.1:

• [security] XSS in replication setup, see PMASA-2012-1

What´s New in version 3.4.10:

• bug #3460090 [interface] TextareaAutoSelect feature broken
• patch #3375984 [export] PHP Array export might generate invalid php code
• bug #3049209 [import] Import from ODS ignores cell that is the same as cell before
• bug #3463933 [display] SELECT DISTINCT displays wrong total records found
• patch #3458944 [operations] copy table data missing SET SQL_MODE='NO_AUTO_VALUE_ON_ZERO'
• bug #3469254 [edit] Setting data to NULL and drop-downs
• bug #3477063 [edit] Missing set fields and values in generated INSERT query
• bug #3460867 [libraries] license issue with TCPDF (updated to 5.9.145)

What´s New in version 3.4.9.0:

• bug #3442028 [edit] Inline editing enum fields with null shows no dropdown
• bug #3442004 [interface] DB suggestion not correct for user with underscore
• bug #3438420 [core] Magic quotes removed in PHP 5.4
• bug #3398788 [session] No feedback when result is empty (signon auth_type)
• bug #3384035 [display] Problems regarding ShowTooltipAliasTB
• bug #3306875 [edit] Can't rename a database that contains views
• bug #3452506 [edit] Unable to move tables with triggers
• bug #3449659 [navi] Fast filter broken with table tree
• bug #3448485 [GUI] Firefox favicon frameset regression
• [core] Better compatibility with mysql extension
• [security] Self-XSS on export options (export server/database/table), see PMASA-2011-20
• [security] Self-XSS in setup (host parameter), see PMASA-2011-19

What´s New in version 3.4.8.0:

• bug #3425230 [interface] enum data split at space char (more space to edit)
• bug #3426840 [interface] ENUM/SET editor can't handle commas in values
• bug #3427256 [interface] no links to browse/empty views and tables
• bug #3430377 [interface] Deleted search results remain visible
• bug #3428627 [import] ODS import ignores memory limits
• bug #3426836 [interface] Visual column separation
• bug #3428065 [parser] TRUE not recognized by parser + patch #3433770 [config] Make location of php-gettext configurable
• patch #3430291 [import] Handle conflicts in some open_basedir situations
• bug #3431427 [display] Dropdown results - setting NULL does not work
• patch #3428764 [edit] Inline edit on multi-server configuration
• patch #3437354 [core] Notice: Array to string conversion in PHP 5.4
• [interface] When ShowTooltipAliasTB is true, VIEW is wrongly shown as the view name in main panel db Structure page
• bug #3439292 [core] Fail to synchronize column with name of keyword
• bug #3425156 [interface] Add column after drop
• [interface] Avoid showing the password in phpinfo()'s output
• bug #3441572 [GUI] 'newer version of phpMyAdmin' message not shown in IE8
• bug #3407235 [interface] Entering the key through a lookup window does not reset NULL
• [security] Self-XSS on database names (Synchronize), see PMASA-2011-18
• [security] Self-XSS on database names (Operations/rename), see PMASA-2011-18
• [security] Self-XSS on column type (Create index), see PMASA-2011-18
• [security] Self-XSS on column type (table Search), see PMASA-2011-18
• [security] Self-XSS on invalid query (table overview), see PMASA-2011-18

What´s New in version 3.4.7.1:

• [security] Fixed possible local file inclusion in XML import (CVE-2011-4107).

What´s New in version 3.4.7.0:

• bug #3418610 [interface] Links in navigation when $cfg['MainPageIconic'] = false
• bug #3418849 [interface] Inline edit shows dropdowns even after closing
• bug [view] View renaming did not work
• bug [navi] Wrong icon for view (MySQL 5.5)
• bug #3420229 [doc] Missing documentation section
• bug #3423725 [pdf] Broken PDF file when exporting database to PDF
• [core] Allow to set language in URL
• bug #3425184 [doc] Fix links to PHP documentation
• bug #3426031 [export] Export to bzip2 is not working

What´s New in version 3.4.6.0:

• patch #3404173 InnoDB comment display with tooltips/aliases
• bug #3404886 [navi] Edit SQL statement after error
• bug #3403165 [interface] Collation not displayed for long enum fields
• bug #3399951 [export] Config for export compression not used
• bug #3400690 [privileges] DB-specific privileges won't submit
• bug #3410604 [config] Configuration storage incorrect suggested table name
• bug #3383572 [interface] Cannot execute saved query
• bug #3411535 [display] Full text button unchecks results display options
• bug #3411224 [display] Broken binary column when 'Show binary contents' is not set
• bug #3411633 [core] Call to undefined function PMA_isSuperuser()
• bug #3413743 [interface] Display options link missing after search
• bug #3324161 [core] CSP policy causing designer JS buttons to fail
• bug #3412862 [relation] Relations/constraints are dropped/created on every change
• bug #3390832 [display] Delete records from last page breaks search
• bug #3392150 [schema] PMA_User_Schema::processUserChoice() is broken
• bug #3414744 [core] External link fails in 3.4.5
• patch #3314626 [display] CharTextareaRows is not respected
• bug #3417089 [synchronize] Extraneous db choices
• [security] Fixed local path disclosure vulnerability, see PMASA-2011-15
• [security] Fixed XSS in setup (host/verbose parameter), see PMASA-2011-16

What´s New in version 3.4.5.0:

• bug #3375325 [interface] Page list in navigation frame looks odd
• bug #3313235 [interface] Error div misplaced
• bug #3374802 [interface] Comment on a column breaks inline editing
• patch #3383711 [display] Order by a column in a view doesn't work in some cases
• bug #3386434 [interface] Add missing space to server status
• [core] Remove library PHPExcel, due to license issues
• [export] Remove native Excel export modules (xls and xlsx formats)
• [import] Remove native Excel import modules (xls and xlsx formats)
• bug #3392920 [edit] BLOB emptied after editing another column
• [security] Fixed XSS in Inline Edit on save action, see PMASA-2011-14
• [security] Fixed XSS with db/table/column names, see PMASA-2011-14

What's New in version 3.4.4.0:

• bug #3323060 [parser] SQL parser breaks AJAX requests if query has unclosed quotes
• bug #3323101 [parser] Invalid escape sequence in SQL parser
• bug #3348995 [config] $cfg['Export']['asfile'] set to false does not select asText option
• bug #3340151 [export] Working SQL query exports error page
• bug #3353649 [interface] 'Create an index on X columns' form not validated
• bug #3350790 [interface] JS error in Table->Structure->Index->Edit
• bug #3353811 [interface] Info message has 'error' class
• bug #3357837 [interface] TABbing through a NULL field in the inline mode resets NULL
• remove version number in /setup
• bug #3367993 [usability] Missing 'Generate Password' button
• bug #3363221 [display] Missing Server Parameter on inline sql query
• bug #3367986 [navi] Drop field -> lost active table
• remove misleading comment on the 'Rename database' interface
• bug #3374374 [interface] Fix footnote for inexact count while browsing
• bug #3372807 [interface] Fix security warning link in setup
• bug #3374347 [display] Backquotes in normal text on import page
• bug #3358750 [core] With Suhosin, urls are too long in edit links
• [security] Missing sanitization on the table, column and index names leads to XSS vulnerabilities, see PMASA-2011-13

What's New in version 3.4.3.2:

• [security] Fixed XSS vulnerability, see PMASA-2011-9
• [security] Fixed local file inclusion vulnerability, see PMASA-2011-10
• [security] Fixed local file inclusion vulnerability and code execution, see PMASA-2011-11
• [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-12

What's New in version 3.4.3.1:

• [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-5
• [security] Fixed possible code injection incase session variables are compromised, see PMASA-2011-6
• [security] Fixed regexp quoting issue in Synchronize code, see PMASA-2011-7
• [security] Fixed filtering of a file path, which allowed for directory traversal, see PMASA-2011-8

What's New in version 3.4.3.0:

• bug #3311170 [sync] Missing helper icons in Synchronize
• patch #3304473 [setup] Redefine a lable that was wrong
• bug #3304544 [parser] master is not a reserved word
• bug #3307616 [edit] Inline edit updates multiple duplicate rows
• patch #3311539 [edit] Inline edit does not escape backslashes
• bug #3313210 [interface] Columns class sometimes changed for nothing
• patch #3313326 [interface] Some tooltips do not disappear
• bug #3315720 [search] Fix search in non unicode tables
• bug #3315741 [display] Inline query edit broken
• patch #3317206 [privileges] Generate password option missing on new accounts
• bug #3317293 [edit] Inline edit places HTML line breaks in edit area
• bug #3319466 [interface] Inline query edit does not escape special characters
• minor XSS (require a valid token