path disclosure

tbl_alter.php3

@@ -10,6 +10,8 @@ require('./libraries/grab_globals.lib.php3');
 $js_to_run = 'functions.js';
 include('./header.inc.php3');
 
+// Check parameters
+PMA_checkParameters(array('db', 'table'));
 
 /**
  * Defines the url to return to in case of error in a sql statement
@@ -168,6 +170,7 @@ if (isset($submit)) {
  */
 if ($abort == FALSE) {
     if (!isset($selected)) {
+        PMA_checkParameters(array('field'));
         $selected[]   = $field;
         $selected_cnt = 1;
     } else { // from a multiple submit

tbl_create.php3

@@ -10,6 +10,13 @@ require('./libraries/grab_globals.lib.php3');
 $js_to_run = 'functions.js';
 require('./header.inc.php3');
 
+// Check parameters
+
+if (!defined('PMA_COMMON_LIB_INCLUDED')) {
+    include('./libraries/common.lib.php3');
+}
+
+PMA_checkParameters(array('db', 'table'));
 
 /**
  * Defines the url to return to in case of error in a sql statement

tbl_move_copy.php3

@@ -2,6 +2,14 @@
 /* $Id$ */
 // vim: expandtab sw=4 ts=4 sts=4:
 
+// Check parameters
+
+if (!defined('PMA_COMMON_LIB_INCLUDED')) {
+    include('./libraries/common.lib.php3');
+}
+
+PMA_checkParameters(array('db', 'table'));
+
 /**
  * Insert data from one table to another one
  *