path disclosure

ldi_check.php3

@@ -21,6 +21,9 @@
 require('./libraries/grab_globals.lib.php3');
 require('./libraries/common.lib.php3');
 
+// Check parameters
+
+PMA_checkParameters(array('db', 'table'));
 
 /**
  * If a file from UploadDir was submitted, use this file

ldi_table.php3

@@ -7,6 +7,12 @@
  * This file defines the forms used to insert a textfile into a table
  */
 
+// Check parameters
+if (!defined('PMA_COMMON_LIB_INCLUDED')) {
+    include('./libraries/common.lib.php3');
+}
+PMA_checkParameters(array('db', 'table'));
+
 
 /**
  * Gets some core libraries and displays links
@@ -16,7 +22,6 @@ $err_url   = 'ldi_table.php3' . $err_url;
 $url_query .= '&goto=ldi_table.php3&back=ldi_table.php3';
 require('./tbl_properties_table_info.php3');
 
-
 /**
  * Displays the form
  */

left.php3

@@ -31,6 +31,8 @@ if ($cfg['OBGzip']) {
     }
 }
 
+PMA_checkParameters(array('hash'));
+
 include('./libraries/bookmark.lib.php3');
 require('./libraries/relation.lib.php3');
 $cfgRelation = PMA_getRelationsParam();

tbl_printview.php3

@@ -10,6 +10,16 @@ if (!isset($selected_tbl)) {
     include('./header.inc.php3');
 }
 
+// Check parameters
+
+if (!defined('PMA_COMMON_LIB_INCLUDED')) {
+    include('./libraries/common.lib.php3');
+}
+
+PMA_checkParameters(array('the_tables'));
+if (!is_array($the_tables)) {
+    exit();
+}
 
 /**
  * Gets the relations settings
@@ -635,7 +645,7 @@ function printPage()
 //-->
 </script>
 <?php
-echo '<br /><br />&nbsp;<input type="button" style="visibility: ; width: 100px; height: 25px" id="print" value="Print" onclick="printPage()">' . "\n";
+echo '<br /><br />&nbsp;<input type="button" style="visibility: ; width: 100px; height: 25px" id="print" value="' . $strPrint . '" onclick="printPage()">' . "\n";
 
 require('./footer.inc.php3');
 ?>