Check target against goto_whitelist.

ChangeLog

@@ -5,6 +5,9 @@ phpMyAdmin - Changelog
 $Id$
 $Source$
 
+2006-04-20 Michal Čihař  <michal@cihar.com>
+    * index.php: Check target against goto_whitelist.
+
 2006-04-13 Marc Delisle  <lem9@users.sourceforge.net>
     * server_databases.php: need brackets for correct calculation of page
 

index.php

@@ -88,9 +88,7 @@ if (! isset($GLOBALS['db']) || ! strlen($GLOBALS['db'])) {
 
 $url_query = PMA_generate_common_url($_GET);
 
-if (! empty( $GLOBALS['target'])
-  && preg_match( '@[a-z_]+\.php@', $GLOBALS['target'])
-  && $GLOBALS['target'] != 'index.php') {
+if (!empty($GLOBALS['target']) && in_array($GLOBALS['target'], $goto_whitelist)) {
     $main_target = $GLOBALS['target'];
 }