path disclosure

2003-07-19 15:29:53 +00:00
parent 204d9669af
commit 9439bd3780
4 changed files with 18 additions and 9 deletions
--- a/read_dump.php3
+++ b/read_dump.php3
@@ -100,9 +100,11 @@ if ($sql_file != 'none') {

            // function is_writeable() is valid on PHP3 and 4
            if (!is_writeable($tmp_subdir)) {
-                // if we cannot move the file, let PHP report the error
-                error_reporting(E_ALL);
                $sql_query = PMA_readFile($sql_file, $sql_file_compression);
+                if ($sql_query == FALSE) {
+                    echo $strFileCouldNotBeRead;
+                    exit();
+                }
            }
            else {
                $sql_file_new = $tmp_subdir . basename($sql_file);