path disclosure

tbl_query_box.php3

@@ -2,6 +2,16 @@
 /* $Id$ */
 // vim: expandtab sw=4 ts=4 sts=4:
 
+// Check parameters
+
+if (!defined('PMA_COMMON_LIB_INCLUDED')) {
+    include('./libraries/common.lib.php3');
+}
+if (!defined('PMA_BOOKMARK_LIB_INCLUDED')) {
+    include('./libraries/bookmark.lib.php3');
+}
+
+PMA_checkParameters(array('db','table','url_query'));
 
 /**
  * Defines the query to be displayed in the query textarea

tbl_rename.php3

@@ -10,6 +10,7 @@ require('./libraries/grab_globals.lib.php3');
 $js_to_run = 'functions.js';
 require('./libraries/common.lib.php3');
 
+PMA_checkParameters(array('db','table'));
 
 /**
  * Defines the url to return to in case of error in a sql statement