bug 439565

2001-07-10 00:58:44 +00:00
parent 8cec3e4885
commit 3b53e68c7b
3 changed files with 4 additions and 2 deletions
--- a/db_readdump.php3
+++ b/db_readdump.php3
@@ -59,7 +59,7 @@ if($sql_query != "") {

 // sql.php3 will stripslash the query if get_magic_quotes_gpc
    if (get_magic_quotes_gpc() == 1) $sql_query = addslashes($sql_query);
-
+    $sql_query=htmlspecialchars($sql_query);
    include("./sql.php3");
    exit;
  }