Avoid information disclossure on error.

2010-08-20 11:31:11 +02:00
parent bf60ec82e9
commit 782b8b46be
1 changed files with 7 additions and 3 deletions
--- a/error.php
+++ b/error.php
@@ -76,10 +76,14 @@ header('Content-Type: text/html; charset=' . $charset);
 <body>
 <h1>phpMyAdmin - <?php echo $type; ?></h1>
 <p><?php
-if (function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) {
+if (!empty($_REQUEST['error'])) {
+    if (function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) {
        echo PMA_sanitize(stripslashes($_REQUEST['error']));
-} else {
+    } else {
        echo PMA_sanitize($_REQUEST['error']);
+    }
+} else {
+    echo 'No error message!';
 }
 ?></p>
 </body>