merge Loic's version

db_create.php3

@@ -2,13 +2,23 @@
 /* $Id$ */
 
 
-require("./grab_globals.inc.php3");
- 
-require("./header.inc.php3");
+/**
+ * Gets some core libraries
+ */
+require('./grab_globals.inc.php3');
+require('./header.inc.php3');
 
-$result = mysql_query("CREATE DATABASE " . db_name($db)) or mysql_die();
 
-$message = "$strDatabase " . db_name($db) . " $strHasBeenCreated";
-require("./db_details.php3");
+/**
+ * Executes the db creation sql query
+ */
+$result = mysql_query('CREATE DATABASE ' . backquote($db)) or mysql_die();
+
+
+/**
+ * Displays the result and moves back to the calling page
+ */
+$message = $strDatabase . ' ' . htmlspecialchars($db) . ' ' . $strHasBeenCreated;
+require('./db_details.php3');
 
 ?>