[security] Avoid full path disclosure from libraries/common.inc.php, see PMASA-2013-12

2013-07-12 08:50:25 -04:00 · 2013-07-12 08:50:25 -04:00 · 8e4fe7c57a
commit 8e4fe7c57a
parent 45d3f4326c
1 changed files with 7 additions and 0 deletions
--- a/libraries/common.inc.php
+++ b/libraries/common.inc.php
@ -51,6 +51,13 @@ if (!defined('E_DEPRECATED')) {
 */
 define('PHPMYADMIN', true);

+/**
+ * block attempts to directly run this script 
+ */
+if (getcwd() == dirname(__FILE__)) {
+    die('Attack stopped');
+}
+
 /**
 * the error handler
 */