nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security fix against $_REQUEST['cfg'] exploits

Browse Source
This commit is contained in:
Alexander M. Turek
2004-06-30 13:13:19 +00:00
parent 68226dd2a5
commit 5dd5999d7f
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@@ -5,6 +5,9 @@ phpMyAdmin - Changelog
$Id$ $Id$
$Source$ $Source$
2004-06-30 Alexander M. Turek <me@derrabus.de>
* libraries/common.lib.php: Fix against $_REQUEST['cfg'] exploits.
2004-06-29 Michal Čihař <michal@cihar.com> 2004-06-29 Michal Čihař <michal@cihar.com>
* lang/check_lang.sh: Checks for diffstat presence. * lang/check_lang.sh: Checks for diffstat presence.

6
libraries/common.lib.php
View File

@@ -65,6 +65,12 @@ if (!isset($pos)) {
$pos = 0; $pos = 0;
} }
/**
* 2004-06-30 rabus: Ensure, that $cfg variables are not set somwhere else
* before including the config file.
*/
unset($cfg);
/** /**
* Detects the config file we want to load * Detects the config file we want to load
*/ */