Adminer 6.0.1 (released 2026-08-14)

	Run the development version from the adminer/ directory alone, copied anywhere and under any name
	Send the session cookie with SameSite=lax, the browsers not defaulting to it sent it also cross-site
	Send the cookies set by JavaScript with the same attributes as the other cookies
	Do not redirect outside Adminer after saving a row
	Do not count a request without credentials as an unsuccessful login
	Report a server accepting any password by its own message instead of the one about a missing password (bug #1318)
	Print the configuration of Adminer\Password when the database can be accessed without a password
	Print the help as a text, not HTML
	Verify the CSRF token also when logging in
	Verify the CSRF token before killing a query timed out on the client
	Send an error HTTP status on an invalid CSRF token and too large POST data
	Use the same font in <textarea> as in <input>, keep monospace in the SQL command and JSON values
	Autocomplete: Disable in the drivers not using SQL, e.g. Redis
	Autocomplete: Offer only the statements allowed in a trigger and no statement in a check constraint
	Create table: Print the success message in drivers not using SQL, e.g. Elasticsearch (regression from 6.0.0)
	Database schema: Arrange the tables in a grid by their foreign keys instead of in one column
	Database schema: Do not display the tables hidden by tableName() and the references to them
	Select: Search only the columns which can hold the searched value, convert the other types to text (bug #1216)
	Select: Modify or delete several rows in a transaction
	Edit: Keep the JSON value entered by the user after an error, it was replaced by null if it was invalid
	Edit: Print the query fetching the row, the same as in Select
	Import: Display the progress of the file upload
	MySQL: Support collation of routine parameters and return values
	MariaDB 12: Support triggers for multiple events and for UPDATE OF (bug #1306)
	PostgreSQL: Edit and delete rows identified by a column of a composite type (bug #1217)
	MS SQL: Display all result sets of a procedure, a message from the server stopped the iteration (bug #1180)
	MS SQL: Display the messages printed by the server as warnings, e.g. by PRINT
	MS SQL: Fix importing a CSV file to a table with an identity column through PDO, it silently did nothing
	Elasticsearch: Rename the database from elastic to data
	Elasticsearch: Redirect to the only database
	Elasticsearch: Print the executed commands in the messages
	Elasticsearch: Highlight the printed queries
	OpenSearch: Add support via Elasticsearch driver
	Redis: Redirect to the only table
	Editor: Do not access a database without a password, the same as Adminer

Plugins

	Method error() to modify the printed database error messages (bug #1249)
	Method dumpPrint() to print HTML code in the export form
	Method editRowPrint() receives the query which got the edited row and the time it took
	Plugin config: Save the settings by POST so that the CSRF token can be verified
	Plugin file-upload: Do not let the column name escape the upload directory
	Plugin login-otp: Do not create a permanent login without a valid OTP
	Plugin login-password-less: Moved to Adminer as the Adminer\Password class, the plugin only extends it
	Plugin login-reverse-proxy: Group the invalid logins also by the address of the proxy
	Plugin login-servers: Allow server description with special characters (bug #1320)
	Plugin login-ssl: Use also in the pdo_sqlsrv extension (bug #1324)
	Plugin login-table: Verify the password from column password_hash
	Plugin slugify: Print only a numeric maxlength
	Plugin sql-log: Write the log to the temp directory by default
	Driver plugins: Driver::select() assigns the executed query to $this->query
	Driver plugins: Bundle the syntax highlighter in the plugin file, adminer-plugins/jush-<driver>.js is not loaded anymore
	Driver plugins: Method jushAutocomplete() to disable or replace the autocomplete of the query <textarea>

Internal

	Move the submodules from externals/ to where they are used: adminer/static/jush, conf/JsShrink and conf/PhpShrink
	Tests: Cover the CSV import and export, pagination, modifying a value by Ctrl+click, the bulk table operations and the SQL file import in every driver
	Tests: Cover the bundled plugins by plugins.spec.js, which loads them from a fixed set in tests/plugins.php
	Tests: Move the entry points to tests/, they are fixtures and not examples to deploy
	Check the code style also by Slevomat Coding Standard and the compiled files by PHPCompatibility (composer compat)
	Enable the PHPStan strict rules which report no error
	Install PHPCS and PHPStan by composer install, like ESLint
	Skip all the linters in composer install --no-dev, it only initializes the submodules

Adminer 6.0.0 (released 2026-08-07)

	Escape index type, algorithm and length in table structure (XSS)
	Escape event schedule and non-numeric table status values (XSS)
	Fix translations containing an apostrophe in single language versions
	Escape < in strings printed to JavaScript, a name containing <!--<script> broke the page
	Login: Disallow accessing servers which accept any password (e.g. PostgreSQL with trust authentication)
	Login: Suggest the login-reverse-proxy plugin when throttling logins of a proxied request
	Select: Disallow modifying data by the SQL operator (CSRF)
	Check for a new version even without JavaScript
	Fix JavaScript in Safari < 11 and Firefox < 52 (regression from 5.5.0)
	Fix showing and hiding elements in Chrome < 61 and Edge < 17 (regression from 5.1.0)
	Send the JSON responses of AJAX requests as application/json instead of text/javascript
	Sort languages by their translated name
	Fix the copy to clipboard icon not displayed on Apple systems
	Close the menu on small screens by Esc
	Drop compatibility with IIS 5 and with IIS 7.0 before its 2008 FastCGI update
	Shorten URLs by escaping only the necessary characters, e.g. where[0][col] instead of where%5B0%5D%5Bcol%5D
	Send GET forms by JavaScript to shorten their URLs too
	Tables overview: speed up, show totals in SQLite, real size in MS SQL, Oracle
	Table structure: Shorten long checks and generated columns
	SQL command: Show column type in result table header
	SQL command: Show number of rows in all drivers
	SQL command: Export result to CSV by JavaScript without re-running the query (bug #1108, SF-760)
	SQL command: Rollback an unfinished transaction so that it doesn't break the following queries
	Alter table: Add next column without page reload
	Alter table: Do not highlight other move handles while dragging a column
	Alter table: Move columns on touch screens
	Alter table: Edit multiline column comments in a textarea
	Alter table, Privileges: Do not print a success message if nothing was changed
	Alter table, Select: Warn if the number of fields can exceed max_input_vars
	Alter view, routine and type: Use a transaction instead of a temporary object in PostgreSQL, SQLite, MS SQL
	Alter routine: Fix altering a routine with a name longer than 42 characters
	Select: Remove asking for the page number after clicking the Page legend
	Select: Highlight the current page in the pagination
	Select: Fix the number of selected rows after going back in history
	Select: Keep sorting by an aggregation function in the Sort fieldset
	Select: Show the edit link before the row checkbox and align the column to the right
	Select: Move the Modify link to the Modify fieldset, disable Save until a value is modified
	Select: Disable inline edit of binary values
	Select: Clear the search field and its column by Esc in Firefox
	Select: Import CSV in all drivers, not only in those with their own way to insert or update a row
	Select: Fix Load more data in drivers paginating by a cursor (Redis, SimpleDB)
	Select: Prefill New item with the values of all columns searched by equality, not only foreign keys
	Edit: Keep values of columns with special characters in name after error
	Edit: Fix switching function to SQL with the edit-foreign plugin (bug #1254)
	Edit: Hide the value field for functions without arguments (e.g. now, uuid)
	Edit: Fix editing rows with binary columns in tables without a unique key
	Edit: Disable Save and continue edit after changing a value identifying the row
	Select, Edit: Highlight JSON by a dedicated highlighter instead of the JavaScript one
	Export: Fix the TAR archive of multiple tables in CSV, it contained SQL of views and foreign keys
	Export: Export data in all drivers, not only in those able to run the generated SELECT
	Export: Fix importing a dump with data only, the tables were truncated one by one and their foreign keys were re-created
	MySQL: Do not use SSL if the login-ssl plugin is configured only for other drivers
	MySQL: Cache the list of databases only if getting it is slow
	MySQL: Link performance_schema and sys tables to their documentation
	MySQL: Fix length of routine parameters with unsigned or zerofill, support MySQL < 8 again (bug #1312, regression from 5.4.4)
	MySQL: Fix a warning on the Create table page with the PDO extension
	PostgreSQL: Support operator classes in indexes
	PostgreSQL: Do not show functions and types created by extensions
	PostgreSQL: Create routines with a dollar quoted body so that it is not escaped
	PostgreSQL: Fix altering functions with parameters of array or user-defined types
	PostgreSQL: Hide table actions and row editing in pg_catalog and pg_toast
	PostgreSQL: Support range types (bug #1308)
	PostgreSQL: Show composite, domain and range types next to enums
	PostgreSQL: Alter and rename user defined types
	PostgreSQL: Add values to an enum type without re-creating it
	PostgreSQL: Export all user defined types, fix exporting enum values containing an apostrophe
	PostgreSQL: Drop all tables at once in export so that foreign keys, views and types don't prevent the drop
	PostgreSQL: Drop the selected tables at once so that foreign keys don't prevent the drop
	PostgreSQL: Export materialized views with their indexes, they were exported as plain views
	PostgreSQL: Import CSV by INSERT ... ON CONFLICT instead of two queries for each row
	PostgreSQL: Show, alter and export Auto Increment, only sequences with an unusual name were exported
	PostgreSQL PDO: Fix the number of affected rows in COPY ... FROM stdin
	PostgreSQL, MS SQL: Show two columns in select COUNT(*), COUNT(DISTINCT id)
	PostgreSQL, MS SQL: Highlight primary keys in the database schema (regression from 5.1.0)
	CockroachDB: Do not offer deferrable foreign keys, they are not supported
	SQLite: Fix working with binary data through PDO
	MS SQL: Treat binary fields as blob (bug SF-369)
	MS SQL: Hide table actions and row editing in the sys schema
	MS SQL: Fix cloning and inserting a row with an identity column, the form offered the original value
	MS SQL: Fix error on the databases overview if a database has no collation
	Elasticsearch, ClickHouse: Use default port
	Elasticsearch: The driver is no longer beta, it works with Elasticsearch 7, 8 and 9
	ClickHouse: Fix nullable columns, fix default values, show server version
	ClickHouse: Support schema management, introspection and administration
	MongoDB: Authenticate against the database used in login
	MongoDB: Do not treat the string NULL as the NULL value
	MongoDB: Show the primary key column when altering indexes (regression from 5.4.0)
	Redis: SQL command in the redis-cli syntax, print executed commands
	Redis: Print binary keys and values in the redis-cli syntax
	Redis: Display the type of keys
	SimpleDB: Use default server
	CSS: Improve contrast of query time and dark mode
	CSS: Display the repeated links and row checkboxes outside the table, designs/adminer-border keeps them inside
	Editor: Display all images recognized by PHP, set their size, load them lazily
	Editor: Fix a fatal error in select with an empty foreign key value (regression from 5.1.1)
	Editor: Don't offer an empty option in a select of a not null foreign key, saving it failed in the database
	Designs: Show version of Adminer next to a used design not matching this version
	Plugins: dumpData() gets the parts of the select instead of a query, it selects the rows by Driver::select()
	Plugins: Methods importPrint() and importProcess()
	Plugins: Method verifyVersion()
	Plugins: Methods commentValue() and commentInput() (bug #1233)
	Plugins: Show driver plugins in the list of loaded plugins
	Plugins: Show version of Adminer next to plugins not matching this version
	Plugins: Remove edit-calendar, tinymce, json-column, pretty-json-column, translation, email-table, dump-php, master-slave
	Plugins: Do not fail with a fatal error when a plugin is not an object (bug TimWolla/docker-adminer#211)
	Plugins: Fix missing translations in the compiled version
	Driver plugins: Do not bundle the syntax highlighter of igdb and simpledb, load it from adminer-plugins/jush-<driver>.js
	Plugin login-ip: Allow localhost by default, require the request to not be proxied if X-Forwarded-For prefixes are not specified
	Plugin login-password-less: Allow the plugin password to be also the password of some server
	Plugin menu-links: Add option to show the select link and other repeated links only on hover
	New plugin: Create a table from an imported CSV file
	New plugin: Display images in select, same as in Adminer Editor
	New plugin: Log in only by a passkey holding the passwords
	New plugin: Warn by a red strip if Adminer or the database doesn't run on the local machine

Internal

	Register JavaScript event handlers by a data attribute instead of a script element
	Register the event handlers in functions.js instead of an inline script
	Composer: Initialize submodules on install
	Remove the Makefile, Composer scripts cover compiling and cleaning
	Move documentation to docs/, linter configuration to conf/, coverage.php to tests/
	Add docs/versions.php measuring the size of all releases
	Coding style: Wrap lines to 200 characters
	Cache PHP_CodeSniffer results in the system temp directory
	PHPStan: Check the Editor, more checks which the code already passes
	Add type declarations to all drivers and the Editor
	Use named constants instead of their values
	Compile: Exit if a replacement doesn't match
	Compile: Fix compiling a driver without support for the SQL command
	Compile: Compress translations with the English translation as a dictionary, it saves 21 kB
	Require ES6 in JavaScript, remove old browser workarounds
	Use standard JSDoc @param and @return syntax
	ESLint: Install it by composer install, run it in composer check and CI
	ESLint: Check also the jush modules compiled into the single file
	Docs: Handling of values and binary data, plugin translations, CSS changes must not break skins
	Rename the Git master branch to main
	Run the command line tests by composer test and in CI
	Convert the end-to-end tests from Katalon Recorder to Playwright, run them headless by composer e2e
	Fix the code coverage reporting all files as fully covered when OPcache is enabled

Adminer 5.5.1 (released 2026-07-21)

    Ignore invalid X-Forwarded-Prefix (GHSA-fr74-9mf9-gf44)
    Login: Allow :/_ in server (bug #1305, regression from 5.5.0)
    Compile: Valid UTF-8 (bug #1113, #1213)
    Compile: Replace LZW with deflate compression
    Add missing translations
    Syntax highlighting: Update MySQL, MariaDB, SQLite, PostgreSQL
    Support disabled set_time_limit() and ini_set() (bug #1288)
    PostgreSQL: Log in with empty server (bug #1304, regression from 5.5.0)

Adminer 5.5.0 (released 2026-07-17)

    Disallow invalid port or socket (GHSA-58cq-mgw2-38m5)
    Ignore invalid X-Forwarded-Prefix (GHSA-8478-xrj3-h9c2)
    Hide copy to clipboard in insecure contexts
    Process list: Copy query to clipboard
    Wrap uneditable values in edit form
    Syntax highlighting: Speed up
    Allow connecting to socket without hostname (bug #1199, regression from 5.4.0)
    MySQL: Do not export IN in FUNCTION parameters (regression from 5.4.2)
    MySQL: Convert vector columns to text in select and edit
    MySQL: Unsupport MySQL < 5.1
    MySQL, SQLite: Draggable columns in alter table
    MariaDB: Support inet4 and inet6 types
    MariaDB: Allow setting password with password validation plugin (bug SF-814)
    MariaDB 11.7+: Support vector columns and indexes
    PostgreSQL 9.2+: Highlight queries in process list
    SQLite: Support ANY type
    SQLite: Support STRICT and WITHOUT ROWID tables
    SQLite: Do not treat INTEGER PRIMARY KEY without AUTOINCREMENT as auto increment
    SQLite: Disable editing of sqlite_schema
    MS SQL: Fix multiple result sets (bug #1180)
    New plugin: Redis driver
    New plugin: Login behind a reverse proxy

Adminer 5.4.4 (released 2026-07-11)

	Fix blob editing (bug #1251, regression from 5.4.2)
	Speed up HTML escaping (bug #1147)
	MySQL: Fix routine fields length (bug #1267, regression from 5.4.2)
	MySQL: Preserve DETERMINISTIC and DATA ACCESS in routine definition (regression from 5.4.2)
	MySQL: Export binary data as hex (bug #1123)
	MariaDB: Hash password in privileges (bug #1166, regression from 4.7.2)
	MariaDB: Speed up getting checks (bug #1245, regression from 5.4.2)
	MariaDB, PostgreSQL: Use CREATE OR REPLACE FUNCTION if possible
	PostgreSQL: Allow exporting more schemas at once (bug #1243)
	PostgreSQL: Fix editing jsonb[] columns (bug #1300, regression from 5.4.2)
	PostgreSQL: Fix displayed size of bytea
	PostgreSQL 18: Support VIRTUAL generated columns (bug #1286)
	MS SQL: Fix table status (bug #1146)
	PDO: Increase precision of double (bug #1214)
	Editor PDO: Fix foreign key value in edit (bug #1242)
	Editor PostgreSQL: Fix enums (bug #1241)
	Plugins: Method menuActions() (bug #1303)

Adminer 5.4.3 (released 2026-07-09)

	Check Sec-Fetch-Site header (GHSA-33j4-hc95-pggg)
	Escape REQUEST_URI (GHSA-c533-9qwm-8w5h, bug #1298)
	Validate server (GHSA-r4x9-5m63-3vxw)
	Validate server version (GHSA-h6jr-7pr6-grgj)
	SQLite: Disallow ATTACH commands (GHSA-q4f2-39gr-45jh)
	SQLite: Disallow VACUUM INTO commands (GHSA-gmx3-g29w-77wf)
	SQLite: Check filename before deleting (GHSA-6pg3-chwq-wgqc)
	Avoid unserialize() in brute force protection (bug #1289)
	Tables overview: allow sorting (bug #1231)
	Select: Disable Ctrl+click inline edit without UPDATE privilege
	Select: Display NULL in column title
	Export: Remember unchecked objects (regression from 5.0.6)
	Foreign key: Display new field in case of an error
	PostgreSQL: Order NULL last
	PostgreSQL: Display all SQL command warnings and only once
	PostgreSQL: Export serial as serial, not nextval()
	PostgreSQL: Fix GENERATED AS IDENTITY export (bug #1260)
	PostgreSQL: Export schema in nextval()
	PostgreSQL: Export schema in REFERENCES
	PostgreSQL: Add ~* operator (bug #1271)
	Editor: Display tinyint(1) as checkbox (bug #1246, regression from 5.4.2)
	Croatian translation

Adminer 5.4.2 (released 2026-02-08)

	Avoid denial-of-service via version check (GHSA-q4f2-39gr-45jh, regression from 4.6.2)
	Pretty print JSON in edit
	Support multiline generated values in alter table
	Link //domain.tld values
	Improve print of nested tables
	Hide sort links on unsortable columns
	Display uneditable fields in edit form
	Shorten all but numeric and date types in select
	Fix escaping spaces in cookie value (bug #1208)
	Don't quote comma in TSV export (bug #1238)
	MariaDB: Don't display checks with the same name from another table (bug #1135)
	PostgreSQL: Offer foreign keys in create table
	PostgreSQL: Add missing parentheses to CHECK export
	PostgreSQL: Allow creating NOT DEFERRABLE foreign keys
	PostgreSQL: Remove duplicate DEFERRABLE in foreign key export
	PostgreSQL: Add schema to sequence and view export
	PostgreSQL: Fix definition of complex generated columns
	PostgreSQL: Mark unique partial indexes as unique (bug #1172)
	PostgreSQL: Fix namespace in inheritance links (bug #1221)
	non-PostgreSQL: Display NOT NULL checks (bug #1237)
	ClickHouse: Fix offset (bug #1188)
	ClickHouse: Fix list of tables (bug #1176)
	Plugins: Methods showVariables() and showStatus() (bug #1157)
	Plugins: Allow to be in any namespace
	New plugin: IGDB driver