Avoid information disclossure on error.

This commit is contained in:
Michal Čihař
2010-08-20 11:31:11 +02:00
parent bf60ec82e9
commit 782b8b46be

View File

@@ -76,10 +76,14 @@ header('Content-Type: text/html; charset=' . $charset);
<body> <body>
<h1>phpMyAdmin - <?php echo $type; ?></h1> <h1>phpMyAdmin - <?php echo $type; ?></h1>
<p><?php <p><?php
if (function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) { if (!empty($_REQUEST['error'])) {
echo PMA_sanitize(stripslashes($_REQUEST['error'])); if (function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) {
echo PMA_sanitize(stripslashes($_REQUEST['error']));
} else {
echo PMA_sanitize($_REQUEST['error']);
}
} else { } else {
echo PMA_sanitize($_REQUEST['error']); echo 'No error message!';
} }
?></p> ?></p>
</body> </body>