webapp/phpmyadmin
1
0
Fork 0
mirror of https://github.com/phpmyadmin/phpmyadmin.git synced 2026-10-28 07:41:55 +03:00
Code Activity

PMA_securePath

Browse Source
This commit is contained in:
Marc Delisle
2004-06-15 16:55:53 +00:00
parent ab543c6ac5
commit 5fb6e7976d
6 changed files with 10 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
sql.php
View File

@@ -165,7 +165,7 @@ if (isset($btnDrop) && $btnDrop == $strNo) {
unset($table);
}
$active_page = $goto;
require('./' . preg_replace('@\.\.*@', '.', $goto));
require('./' . PMA_securePath($goto));
} else {
PMA_sendHeaderLocation($cfg['PmaAbsoluteUri'] . str_replace('&', '&', $goto));
}
@@ -580,7 +580,7 @@ else {
$message .= ' ' . (isset($GLOBALS['querytime']) ? '(' . sprintf($strQueryTime, $GLOBALS['querytime']) . ')' : '');
if ($is_gotofile) {
$goto = preg_replace('@\.\.*@', '.', $goto);
$goto = PMA_securePath($goto);
// Checks for a valid target script
if (isset($table) && $table == '') {
unset($table);