Prevent null-byte injection in preg_replace()

phpmyadmin · Apr 24, 2013 · ffa720d · ffa720d
1 parent dedd542
commit ffa720d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/libraries/Tracker.class.php b/libraries/Tracker.class.php
@@ -877,6 +877,9 @@ static public function handleQuery($query)
         if (empty($dbname)) {
             return;
         }
+        // Remove null bytes (preg_replace() is vulnerable in some
+        // PHP versions)
+        $dbname = str_replace("\0", "", $dbname);
 
         // If we found a valid statement
         if (isset($result['identifier'])) {