From c6cfb58834267c36169d045bc42ebbcacfa7f1c2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <michal@cihar.com>
Date: Thu, 30 Jun 2016 10:04:46 +0200
Subject: [PATCH] Avoid possible path traversal using MySQL username
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Michal Čihař <michal@cihar.com>
---
 libraries/Util.class.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libraries/Util.class.php b/libraries/Util.class.php
index b3885f06d3..0088c30bd2 100644
--- a/libraries/Util.class.php
+++ b/libraries/Util.class.php
@@ -2659,7 +2659,7 @@ class PMA_Util
             $dir .= '/';
         }
 
-        return str_replace('%u', $GLOBALS['cfg']['Server']['user'], $dir);
+        return str_replace('%u', PMA_securePath($GLOBALS['cfg']['Server']['user']), $dir);
     }
 
     /**