phpMyAdmin updates patch critical holes

[J65nko]

From http://www.h-online.com/security/new...s-1273593.html

The phpMyAdmin developers have released versions 3.3.10.2 and 3.4.3.1 of their database administration tool; these are security updates that fix a total of four security holes. Rated as "highly critical" by Secunia, the vulnerabilities include a session manipulation bug in Swekey authentication that could be exploited to overwrite session variables, a possible code injection hole in the setup script and a regular expression quoting problem in Synchronize code.

[Carpetsmoker]

As a sidenote, phpmyadmin is one of the most "scanned" web applications according to my access_log 404 errors.
I *highly* recommend installing phpmyadmin in a directory not named phpmyadmin (or phpmyadmin-3.3.1 etc.).

In any case, Adminer does a lot better job. In particular, the UI isn't as cluttered as phpmyadmin (phpmyadmin looks like someone vomited buttons and icons, and then stirred them a bit because they looked to organized).