nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bug #1252124, XSS on table creation page

Browse Source
This commit is contained in:
Marc Delisle
2005-08-04 19:25:14 +00:00
parent 6744dfb276
commit 053d90b601
2 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ChangeLog
View File

@@ -25,6 +25,7 @@ $Source$
thanks to Edward Rudd - urkle thanks to Edward Rudd - urkle
* db_details.php, tbl_query_box.php: patch #1250935, interface * db_details.php, tbl_query_box.php: patch #1250935, interface
improvements, thanks to Sebastian Mendel improvements, thanks to Sebastian Mendel
* tbl_create.php: bug #1252124, XSS on table creation page
2005-08-02 Marc Delisle <lem9@users.sourceforge.net> 2005-08-02 Marc Delisle <lem9@users.sourceforge.net>
* server_privileges.php: patch #1249363, remove unneeded wordwrap(), * server_privileges.php: patch #1249363, remove unneeded wordwrap(),

10
tbl_create.php
View File

@@ -7,12 +7,16 @@
*/ */
require_once('./libraries/grab_globals.lib.php'); require_once('./libraries/grab_globals.lib.php');
$js_to_run = 'functions.js'; $js_to_run = 'functions.js';
require_once('./header.inc.php');
// Check parameters
require_once('./libraries/common.lib.php'); require_once('./libraries/common.lib.php');
if (isset($table)) {
$table = PMA_sanitize($table);
}
require_once('./header.inc.php');
// Check parameters
PMA_checkParameters(array('db', 'table')); PMA_checkParameters(array('db', 'table'));
/** /**