mirror of
https://github.com/php/php-src.git
synced 2025-08-19 17:04:47 +02:00
Fix remote security risk, pointed out by Wolfram Kriesing
This commit is contained in:
parent
1cb07caf63
commit
22aee18f0b
1 changed files with 3 additions and 1 deletions
|
@ -534,10 +534,12 @@ class DB
|
||||||
}
|
}
|
||||||
foreach ($opts as $opt) {
|
foreach ($opts as $opt) {
|
||||||
list($key, $value) = explode('=', $opt);
|
list($key, $value) = explode('=', $opt);
|
||||||
|
if (!isset($parsed[$key])) { // don't allow params overwrite
|
||||||
$parsed[$key] = urldecode($value);
|
$parsed[$key] = urldecode($value);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
}
|
||||||
|
|
||||||
return $parsed;
|
return $parsed;
|
||||||
}
|
}
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue