[security] XSS and SQL injection

2009-10-12 21:47:40 +00:00
parent 7c4dfc3ed7
commit 18fd6b9049
5 changed files with 24 additions and 16 deletions
--- a/db_operations.php
+++ b/db_operations.php
@@ -613,7 +613,7 @@ if ($cfgRelation['pdfwork'] && $num_tables > 0) { ?>
        <?php
        while ($pages = @PMA_DBI_fetch_assoc($test_rs)) {
            echo '                <option value="' . $pages['page_nr'] . '">'
-                . $pages['page_nr'] . ': ' . $pages['page_descr'] . '</option>' . "\n";
+                . $pages['page_nr'] . ': ' . htmlspecialchars($pages['page_descr']) . '</option>' . "\n";
        } // end while
        PMA_DBI_free_result($test_rs);
        unset($test_rs);