Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/phpmyadmin/phpmyadmin.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/themes
diff options
context:
space:
mode:
authorMarc Delisle <marc@infomarc.info>2008-01-05 17:30:41 +0300
committerMarc Delisle <marc@infomarc.info>2008-01-05 17:30:41 +0300
commit6059c4fc1f3f5de15b96dbc1d1c24a50fa3fa350 (patch)
tree7af1c3eada048fbf1bd4f3453b87ef65ca54cdce /themes
parent603e566c0d9b2471a762a5b21ab55d317a40e389 (diff)
bug #1847409 [security] Path disclosure on darkblue_orange/layout.inc.php
Diffstat (limited to 'themes')
-rw-r--r--themes/darkblue_orange/layout.inc.php5
1 files changed, 5 insertions, 0 deletions
diff --git a/themes/darkblue_orange/layout.inc.php b/themes/darkblue_orange/layout.inc.php
index c0b7a3af3f..50ed7bf1d0 100644
--- a/themes/darkblue_orange/layout.inc.php
+++ b/themes/darkblue_orange/layout.inc.php
@@ -9,6 +9,11 @@
* @subpackage Darkblue_orange
*/
+// protect against path disclosure
+if (empty($_SESSION['PMA_Theme'])) {
+ exit;
+}
+
/**
* navi frame
*/