removed non alphabetic characters from the beginning of the sql query submitted
This commit is contained in:
@@ -12,6 +12,8 @@ $Source$
|
||||
Renato Lins <TheBest at Information4u.com>.
|
||||
* lib.inc.php3: fixed bug #458009 - Database list with advanced auth.,
|
||||
thanks to an anonymous contributor.
|
||||
* db_readdump.php3, lines 101-104: removed non alphabetic characters from
|
||||
the beginning of the sql query submitted.
|
||||
|
||||
2001-09-03 Marc Delisle <lem9@users.sourceforge.net>
|
||||
* lang/swedish.inc.php3 updates, thanks to Bj<42>rn T. Hallberg
|
||||
|
@@ -98,7 +98,10 @@ if ($sql_query != '') {
|
||||
|
||||
// Only one query to run
|
||||
if ($pieces_count == 1 && !empty($pieces[0]) && $view_bookmark == 0) {
|
||||
$sql_query = trim($pieces[0]);
|
||||
// loic1: remove non alphabetic characters from the beginning of the
|
||||
// query
|
||||
// $sql_query = trim($pieces[0]);
|
||||
$sql_query = eregi_replace('^[^a-aA-Z]', '', $pieces[0]);
|
||||
// sql.php3 will stripslash the query if get_magic_quotes_gpc
|
||||
if (get_magic_quotes_gpc() == 1) {
|
||||
$sql_query = addslashes($sql_query);
|
||||
|
Reference in New Issue
Block a user