If magic_quotes_gpc is enabled, grab_globals calls stripslashes when extracting the arrays $_GET and $_POST.
This commit is contained in:
@@ -14,9 +14,6 @@ $url_query .= '&goto=tbl_properties_options.php3&back=tbl_properties_opt
|
||||
* Updates table comment, type and options if required
|
||||
*/
|
||||
if (isset($submitcomment)) {
|
||||
if (get_magic_quotes_gpc()) {
|
||||
$comment = stripslashes($comment);
|
||||
}
|
||||
if (empty($prev_comment) || urldecode($prev_comment) != $comment) {
|
||||
$sql_query = 'ALTER TABLE ' . PMA_backquote($table) . ' COMMENT = \'' . PMA_sqlAddslashes($comment) . '\'';
|
||||
$result = PMA_mysql_query($sql_query) or PMA_mysqlDie('', $sql_query, '', $err_url);
|
||||
@@ -39,7 +36,7 @@ if (isset($submitoptions)) {
|
||||
|
||||
// Displays a message if a query had been submitted
|
||||
if (isset($message)) {
|
||||
PMA_showMessage((get_magic_quotes_gpc()) ? addslashes($message) : $message);
|
||||
PMA_showMessage($message);
|
||||
}
|
||||
|
||||
|
||||
|
Reference in New Issue
Block a user