[security] Self-XSS on invalid query (table overview), see PMASA-2011-18
This commit is contained in:
@@ -1059,13 +1059,10 @@ function PMA_showMessage($message, $sql_query = null, $type = 'notice', $is_view
|
||||
} else {
|
||||
// Parse SQL if needed
|
||||
$parsed_sql = PMA_SQP_parse($query_base);
|
||||
if (PMA_SQP_isError()) {
|
||||
unset($parsed_sql);
|
||||
}
|
||||
}
|
||||
|
||||
// Analyze it
|
||||
if (isset($parsed_sql)) {
|
||||
if (isset($parsed_sql) && ! PMA_SQP_isError()) {
|
||||
$analyzed_display_query = PMA_SQP_analyze($parsed_sql);
|
||||
// Here we append the LIMIT added for navigation, to
|
||||
// enable its display. Adding it higher in the code
|
||||
|
Reference in New Issue
Block a user