From 120b795f6688208a7c5720390381c1a86f0ab13b Mon Sep 17 00:00:00 2001
From: "Alexander M. Turek" <me@derrabus.de>
Date: Wed, 4 Dec 2002 18:00:16 +0000
Subject: [PATCH] Back to previous version

---
 ChangeLog | 3 +++
 sql.php3  | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 4ebce3f97..9ae93cd67 100755
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,9 @@ phpMyAdmin - Changelog
 $Id$
 $Source$
 
+2002-12-04 Alexander M. Turek  <rabus@users.sourceforge.net>
+    * sql.php3: Back to previous version.
+
 2002-12-03 Alexander M. Turek  <rabus@users.sourceforge.net>
     * sql.php3: Fixed bug #641652, thanks to "bumperbox".
     * lang/latvian-windows-1257.inc.php3, lang/norwegian-iso-8859-1.inc.php3,
diff --git a/sql.php3 b/sql.php3
index b0c66ed8b..fc649d16c 100755
--- a/sql.php3
+++ b/sql.php3
@@ -187,7 +187,7 @@ if ($do_confirm) {
     <input type="hidden" name="server" value="<?php echo $server; ?>" />
     <input type="hidden" name="db" value="<?php echo htmlspecialchars($db); ?>" />
     <input type="hidden" name="table" value="<?php echo isset($table) ? htmlspecialchars($table) : ''; ?>" />
-    <input type="hidden" name="sql_query" value="<?php echo urlencode($sql_query); ?>" />
+    <input type="hidden" name="sql_query" value="<?php echo urlencode(addslashes($sql_query)); ?>" />
     <input type="hidden" name="zero_rows" value="<?php echo isset($zero_rows) ? $zero_rows : ''; ?>" />
     <input type="hidden" name="goto" value="<?php echo $goto; ?>" />
     <input type="hidden" name="back" value="<?php echo isset($back) ? $back : ''; ?>" />