[security] Fixed local path disclosure vulnerability, see PMASA-2012-2

linaspasv · Mar 28, 2012 · c51817d · c51817d
1 parent 5ac9f50
commit c51817d
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/ChangeLog b/ChangeLog
@@ -1,6 +1,9 @@
 phpMyAdmin - ChangeLog
 ======================
 
+3.4.10.2 (2012-03-28)
+- [security] Fixed local path disclosure vulnerability, see PMASA-2012-2
+
 3.4.10.1 (2012-02-18)
 - [security] XSS in replication setup, see PMASA-2012-1
 

diff --git a/show_config_errors.php b/show_config_errors.php
@@ -14,6 +14,8 @@
 /**
  * Read config file.
  */
-require CONFIG_FILE;
+if (is_readable(CONFIG_FILE)) {
+    require CONFIG_FILE;
+}
 
 ?>