Urlencode hostname

This can come from the HTTP header, so we need to be sure to sanitize it. Signed-off-by: Michal Čihař <michal@cihar.com>
phpmyadmin · Feb 25, 2016 · 38fa119 · 38fa119
1 parent 983faa9
commit 38fa119
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libraries/Config.class.php b/libraries/Config.class.php
@@ -1370,7 +1370,7 @@ public function checkPmaAbsoluteUri()
                 $pma_absolute_uri .= '@';
             }
             // Add hostname
-            $pma_absolute_uri .= $url['host'];
+            $pma_absolute_uri .= urlencode($url['host']);
             // Add port, if it not the default one
             // (or 80 for https which is most likely a bug)
             if (! empty($url['port'])