Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-10611

Add a check for selected tables existence for ACP database backup tool

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Minor
    • Resolution: Fixed
    • 3.0.10
    • 3.0.11-RC1
    • ACP
    • None

    Description

      In includes/acp/acp_database.php there's no check for existence of the tables selected to backup.
      This may cause unwanted use of HTML page source to handle table names list, which may cause errors or harmful queries injection into the dump.

      Attachments

        Activity

          People

            bantu Andreas Fischer
            rxu rxu
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: