Prevent null-byte injection in preg_replace()

2013-04-18 05:53:58 -04:00 · 2013-04-18 05:53:58 -04:00 · ffa720d90a
commit ffa720d90a
parent dedd542cda
1 changed files with 3 additions and 0 deletions
--- a/libraries/Tracker.class.php
+++ b/libraries/Tracker.class.php
@ -877,6 +877,9 @@ class PMA_Tracker
        if (empty($dbname)) {
            return;
        }
+        // Remove null bytes (preg_replace() is vulnerable in some
+        // PHP versions)
+        $dbname = str_replace("\0", "", $dbname);

        // If we found a valid statement
        if (isset($result['identifier'])) {