From 0e56d08502d6093ba5fe73d42f5d5486814b30dc Mon Sep 17 00:00:00 2001 From: Herman van Rink Date: Fri, 16 Oct 2009 07:34:51 +0000 Subject: [PATCH] backported bug #2879909 to QA_3_2 --- ChangeLog | 1 + libraries/tbl_properties.inc.php | 3 +-- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index f5f2e8144..55e38ce39 100644 --- a/ChangeLog +++ b/ChangeLog @@ -15,6 +15,7 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA - bug #2852370 [operations] Renaming database deletes triggers - bug #2872247 [interface] Failed opening required 'mysql_charsets.lib.php', thanks to CyberLeo Kitsana - cyberleo - bug [structure] "In use" table incorrectly reported as "view" +- bug #2879909 [interface] Removed double htmlspecialchars when editing enum column 3.2.2.1 (2009-10-12) - [security] XSS and SQL injection, thanks to Herman van Rink diff --git a/libraries/tbl_properties.inc.php b/libraries/tbl_properties.inc.php index 90fc8b68a..7e4296e81 100644 --- a/libraries/tbl_properties.inc.php +++ b/libraries/tbl_properties.inc.php @@ -349,13 +349,12 @@ for ($i = 0; $i < $num_fields; $i++) { $binary = 0; $unsigned = 0; $zerofill = 0; - $length_to_display = htmlspecialchars($length); } else { - $length_to_display = $length; $binary = false; $unsigned = stristr($row['Type'], 'unsigned'); $zerofill = stristr($row['Type'], 'zerofill'); } + $length_to_display = $length; $content_cells[$i][$ci] = '