From 61b4e28faf0012eaa6dea0f7fbdd43bd06357b84 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Fri, 17 Jun 2016 14:21:53 +0200 Subject: [PATCH] Sanitize page and formset before using MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Čihař --- setup/lib/form_processing.lib.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/setup/lib/form_processing.lib.php b/setup/lib/form_processing.lib.php index 421ec56d01..9a6b9fff2b 100644 --- a/setup/lib/form_processing.lib.php +++ b/setup/lib/form_processing.lib.php @@ -36,8 +36,8 @@ function PMA_Process_formset(FormDisplay $form_display) // form has errors, show warning $separator = PMA_URL_getArgSeparator('html'); - $page = isset($_GET['page']) ? $_GET['page'] : null; - $formset = isset($_GET['formset']) ? $_GET['formset'] : null; + $page = isset($_GET['page']) ? htmlspecialchars($_GET['page']) : null; + $formset = isset($_GET['formset']) ? htmlspecialchars($_GET['formset']) : null; $formset = $formset ? "{$separator}formset=$formset" : ''; $formId = PMA_isValid($_GET['id'], 'numeric') ? $_GET['id'] : null; if ($formId === null && $page == 'servers') {