From 46eaa53ddd5b6f8810410e1713a1fce70a2c6187 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <michal@cihar.com>
Date: Tue, 15 Nov 2016 15:22:32 +0100
Subject: [PATCH] Check parameter type before processing
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixes #12443

Signed-off-by: Michal Čihař <michal@cihar.com>
---
 ChangeLog     | 1 +
 db_export.php | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 895b64ec42..025650e463 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -88,6 +88,7 @@ phpMyAdmin - ChangeLog
 - issue #12453 Fixed escaping of SQL parts in some corner cases
 - issue #12542 Missing table name in account privileges editor
 - issue #12691 Remove ksort call on empty array in PMA_getPlugins function
+- issue #12443 Check parameter type before processing
 
 4.6.4 (2016-08-16)
 - issue        [security] Weaknesses with cookie encryption, see PMASA-2016-29
diff --git a/db_export.php b/db_export.php
index abd4b4c3d7..2ff84170d2 100644
--- a/db_export.php
+++ b/db_export.php
@@ -109,7 +109,7 @@ foreach ($tables as $each_table) {
     } else {
         $structure_checked = $is_checked;
     }
-    if (isset($_GET['table_data'])) {
+    if (isset($_GET['table_data']) && is_array($_GET['table_data'])) {
         $data_checked = PMA_getCheckedClause(
             $each_table['Name'], $_GET['table_data']
         );