path disclosure

tbl_properties_table_info.php3

@@ -11,7 +11,7 @@ if (!defined('PMA_COMMON_LIB_INCLUDED')) {
     include('./libraries/common.lib.php3');
 }
 
-PMA_checkParameters(array('db', 'table', 'err_url_0'));
+PMA_checkParameters(array('db', 'table'));
 
 /**
  * Gets table informations

tbl_replace.php3

@@ -9,6 +9,8 @@
 require('./libraries/grab_globals.lib.php3');
 require('./libraries/common.lib.php3');
 
+// Check parameters
+PMA_checkParameters(array('db','table','goto'));
 
 /**
  * Initializes some variables

tbl_replace_fields.php3

@@ -5,6 +5,15 @@
 // note: grab_globals has extracted the fields from _FILES
 //       or HTTP_POST_FILES
 
+// Check parameters
+
+if (!defined('PMA_COMMON_LIB_INCLUDED')) {
+    include('./libraries/common.lib.php3');
+}
+
+PMA_checkParameters(array('db','encoded_key'));
+
+
 // f i e l d    u p l o a d e d    f r o m    a    f i l e
 
 // garvin: original if-clause checked, whether input was stored in a possible fields_upload_XX var.