Fix remote security risk, pointed out by Wolfram Kriesing

1 files changed, 3 insertions, 1 deletions

diff --git a/pear/DB.php b/pear/DB.php
index 05c871f701..cd89cf75d0 100644
--- a/pear/DB.php
+++ b/pear/DB.php
@@ -534,7 +534,9 @@ class DB
                 }
                 foreach ($opts as $opt) {
                     list($key, $value) = explode('=', $opt);
-                    $parsed[$key] = urldecode($value);
+                    if (!isset($parsed[$key])) { // don't allow params overwrite
+                        $parsed[$key] = urldecode($value);
+                    }
                 }
             }
         }