From 8e4fe7c57a976f2ce9a6931687f4697d519111ec Mon Sep 17 00:00:00 2001 From: Marc Delisle Date: Fri, 12 Jul 2013 08:50:25 -0400 Subject: [PATCH] [security] Avoid full path disclosure from libraries/common.inc.php, see PMASA-2013-12 --- libraries/common.inc.php | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/libraries/common.inc.php b/libraries/common.inc.php index 030bd223f3..866c368cfe 100644 --- a/libraries/common.inc.php +++ b/libraries/common.inc.php @@ -51,6 +51,13 @@ if (!defined('E_DEPRECATED')) { */ define('PHPMYADMIN', true); +/** + * block attempts to directly run this script + */ +if (getcwd() == dirname(__FILE__)) { + die('Attack stopped'); +} + /** * the error handler */