initial commit

html/phpmyad/file_echo.php

@@ -0,0 +1,68 @@
+<?php
+/* vim: set expandtab sw=4 ts=4 sts=4: */
+/**
+ * "Echo" service to allow force downloading of exported charts (png or svg)
+ * and server status monitor settings
+ *
+ * @package PhpMyAdmin
+ */
+
+require_once './libraries/common.inc.php';
+
+/* For chart exporting */
+if (isset($_REQUEST['filename']) && isset($_REQUEST['image'])) {
+    $allowed = array(
+        'image/png'     => 'png',
+        'image/svg+xml' => 'svg',
+    );
+
+    /* Check whether MIME type is allowed */
+    if (! isset($allowed[$_REQUEST['type']])) {
+        die(__('Invalid export type'));
+    }
+
+    /*
+     * Check file name to match mime type and not contain new lines
+     * to prevent response splitting.
+     */
+    $extension = $allowed[$_REQUEST['type']];
+    $valid_match = '/^[^\n\r]*\.' . $extension . '$/';
+    if (! preg_match($valid_match, $_REQUEST['filename'])) {
+        if (! preg_match('/^[^\n\r]*$/', $_REQUEST['filename'])) {
+            /* Filename is unsafe, discard it */
+            $filename = 'download.' . $extension;
+        } else {
+            /* Add extension */
+            $filename = $_REQUEST['filename'] . '.' . $extension;
+        }
+    } else {
+        /* Filename from request should be safe here */
+        $filename = $_REQUEST['filename'];
+    }
+
+    /* Decode data */
+    if ($extension != 'svg') {
+        $data = substr($_REQUEST['image'], strpos($_REQUEST['image'], ',') + 1);
+        $data = base64_decode($data);
+    } else {
+        $data = $_REQUEST['image'];
+    }
+
+    /* Send download header */
+    PMA_download_header($filename, $_REQUEST['type'], strlen($data));
+
+    /* Send data */
+    echo $data;
+
+/* For monitor chart config export */
+} else if (isset($_REQUEST['monitorconfig'])) {
+    PMA_download_header('monitor.cfg', 'application/force-download');
+    echo urldecode($_REQUEST['monitorconfig']);
+
+/* For monitor chart config import */
+} else if (isset($_REQUEST['import'])) {
+    header('Content-type: text/plain');
+    if(!file_exists($_FILES['file']['tmp_name'])) exit();
+    echo file_get_contents($_FILES['file']['tmp_name']);
+}
+?>