From e3161cfdf53774daa73d9d3f13aafee5518a93b3 Mon Sep 17 00:00:00 2001 From: Marc Delisle Date: Sat, 19 Jul 2003 11:13:12 +0000 Subject: [PATCH] path disclosure --- db_printview.php3 | 7 +++++++ export.php3 | 2 ++ 2 files changed, 9 insertions(+) diff --git a/db_printview.php3 b/db_printview.php3 index facda936e..8acca9c3c 100755 --- a/db_printview.php3 +++ b/db_printview.php3 @@ -9,6 +9,13 @@ require('./libraries/grab_globals.lib.php3'); require('./header.inc.php3'); +// Check parameters + +if (!defined('PMA_COMMON_LIB_INCLUDED')) { + include('./libraries/common.lib.php3'); +} + +PMA_checkParameters(array('db')); /** * Defines the url to return to in case of error in a sql statement diff --git a/export.php3 b/export.php3 index 87c6b7bd9..55f0302d5 100755 --- a/export.php3 +++ b/export.php3 @@ -9,6 +9,8 @@ require('./libraries/grab_globals.lib.php3'); require('./libraries/common.lib.php3'); require('./libraries/zip.lib.php3'); +PMA_checkParameters(array('what')); + // What type of export are we doing? if ($what == 'excel') { $type = 'csv';