nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

backported bug #2879909 to QA_3_2

Browse Source
This commit is contained in:
Herman van Rink
2009-10-16 07:34:51 +00:00
parent 164c605a64
commit 0e56d08502
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ChangeLog
View File

@@ -15,6 +15,7 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
- bug #2852370 [operations] Renaming database deletes triggers - bug #2852370 [operations] Renaming database deletes triggers
- bug #2872247 [interface] Failed opening required 'mysql_charsets.lib.php', thanks to CyberLeo Kitsana - cyberleo - bug #2872247 [interface] Failed opening required 'mysql_charsets.lib.php', thanks to CyberLeo Kitsana - cyberleo
- bug [structure] "In use" table incorrectly reported as "view" - bug [structure] "In use" table incorrectly reported as "view"
- bug #2879909 [interface] Removed double htmlspecialchars when editing enum column
3.2.2.1 (2009-10-12) 3.2.2.1 (2009-10-12)
- [security] XSS and SQL injection, thanks to Herman van Rink - [security] XSS and SQL injection, thanks to Herman van Rink

3
libraries/tbl_properties.inc.php
View File

@@ -349,13 +349,12 @@ for ($i = 0; $i < $num_fields; $i++) {
$binary = 0; $binary = 0;
$unsigned = 0; $unsigned = 0;
$zerofill = 0; $zerofill = 0;
$length_to_display = htmlspecialchars($length);
} else { } else {
$length_to_display = $length;
$binary = false; $binary = false;
$unsigned = stristr($row['Type'], 'unsigned'); $unsigned = stristr($row['Type'], 'unsigned');
$zerofill = stristr($row['Type'], 'zerofill'); $zerofill = stristr($row['Type'], 'zerofill');
} }
$length_to_display = $length;
$content_cells[$i][$ci] = '<input id="field_' . $i . '_' . ($ci - $ci_offset) . '"' $content_cells[$i][$ci] = '<input id="field_' . $i . '_' . ($ci - $ci_offset) . '"'
. ' type="text" name="field_length[' . $i . ']" size="' . $length_values_input_size . '"' . ' type="text" name="field_length[' . $i . ']" size="' . $length_values_input_size . '"'