File: 035_CVE-2008-5621.patch

package info (click to toggle)
phpmyadmin 4%3A2.9.1.1-13
  • links: PTS
  • area: main
  • in suites: etch
  • size: 13,324 kB
  • ctags: 119,177
  • sloc: php: 148,860; sh: 645; sql: 224; perl: 142
file content (12 lines) | stat: -rw-r--r-- 805 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
diff -Nur phpmyadmin-2.9.1.1.orig/libraries/db_table_exists.lib.php phpmyadmin-2.9.1.1/libraries/db_table_exists.lib.php
--- phpmyadmin-2.9.1.1.orig/libraries/db_table_exists.lib.php	2006-11-19 01:28:45.000000000 +0100
+++ phpmyadmin-2.9.1.1/libraries/db_table_exists.lib.php	2009-02-11 22:16:31.000000000 +0100
@@ -49,7 +49,7 @@
 
                 // @todo should this check really only happen if IS_TRANSFORMATION_WRAPPER?
                 $_result = PMA_DBI_try_query(
-                    'SELECT COUNT(*) FROM `' . PMA_sqlAddslashes($table, true) . '`;',
+                    'SELECT COUNT(*) FROM ' . PMA_backquote($table) . ';',
                     null, PMA_DBI_QUERY_STORE);
                 $is_table = ($_result && @PMA_DBI_num_rows($_result));
                 PMA_DBI_free_result($_result);