bug 807047

This commit is contained in:
Marc Delisle
2003-10-02 18:08:33 +00:00
parent 80f86576f9
commit 5157f55862
2 changed files with 8 additions and 0 deletions

View File

@@ -5,6 +5,10 @@ phpMyAdmin - Changelog
$Id$ $Id$
$Source$ $Source$
2003-10-02 Marc Delisle <lem9@users.sourceforge.net>
* libraries/grab_globals.lib.php3: bug 807047, protect POST variables
against cookies of the same name
2003-10-01 Marc Delisle <lem9@users.sourceforge.net> 2003-10-01 Marc Delisle <lem9@users.sourceforge.net>
* lang/slovenian update, thanks to Kositer Uros * lang/slovenian update, thanks to Kositer Uros
* lang/norwegian: Updated, thanks to Sven-Erik Andersen (sven-erik). * lang/norwegian: Updated, thanks to Sven-Erik Andersen (sven-erik).

View File

@@ -21,6 +21,10 @@ if (!defined('PMA_GRAB_GLOBALS_INCLUDED')) {
reset($array); reset($array);
while (list($key, $value) = each($array)) { while (list($key, $value) = each($array)) {
if (is_array($value)) { if (is_array($value)) {
// there could be a variable coming from a cookie of
// another application, with the same name as this array
unset($GLOBALS[$key]);
PMA_gpc_extract($value, $target[$key]); PMA_gpc_extract($value, $target[$key]);
} else if ($is_magic_quotes) { } else if ($is_magic_quotes) {
$target[$key] = stripslashes($value); $target[$key] = stripslashes($value);