From d3fafdfba0807068196655e9b6d16c5d1d3ccf8a Mon Sep 17 00:00:00 2001
From: Marc Delisle <marc@infomarc.info>
Date: Sat, 20 Apr 2013 07:07:29 -0400
Subject: [PATCH] Security: remove dots in template to avoid a remote code
 execution vulnerability

---
 export.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/export.php b/export.php
index 7036af9277..10567d1d1a 100644
--- a/export.php
+++ b/export.php
@@ -272,6 +272,8 @@ if ($asfile) {
                 'Export/file_template_table', $filename_template);
         }
     }
+    // remove dots in template to avoid a remote code execution vulnerability
+    $filename_template = str_replace('.', '', $filename_template);
     $filename = PMA_expandUserString($filename_template);
     $filename = PMA_sanitize_filename($filename);