bug #1534475, arbitrary server not taken into account

This commit is contained in:
Marc Delisle
2006-08-10 16:50:18 +00:00
parent 59a25bf54e
commit 7bcf140588
2 changed files with 2 additions and 1 deletions

View File

@@ -11,6 +11,7 @@ $Source$
* lang/galician: Update, thanks to Xosé Calvo - xosecalvo.
* lang/estonian: Update, thanks to Marko Ellermaa - uhuu
* lang/russian: update, thanks to Gosha Sakovich - gt2
* libraries/common.lib.php: bug #1534475, arbitrary server
2006-08-09 Marc Delisle <lem9@users.sourceforge.net>
* libraries/mysql_charsets.lib.php: bug #1530574:

View File

@@ -2859,7 +2859,7 @@ if (!isset($_REQUEST['token']) || $_SESSION['PMA_token'] != $_REQUEST['token'])
/* Cookie preferences */
'pma_lang', 'pma_charset', 'pma_collation_connection', 'pma_convcharset',
/* Possible login form */
'pma_username', 'pma_password',
'pma_servername', 'pma_username', 'pma_password',
);
$keys = array_keys($_REQUEST);
/* Remove any non allowed stuff from requests */