bug 439565

This commit is contained in:
Marc Delisle
2001-07-10 00:58:44 +00:00
parent 8cec3e4885
commit 3b53e68c7b
3 changed files with 4 additions and 2 deletions

View File

@@ -19,6 +19,8 @@ $Source$
to try to get rid of a warning (cause: too many tables?) to try to get rid of a warning (cause: too many tables?)
* bug 439709, tbl_properties.php3: show table maintenance options * bug 439709, tbl_properties.php3: show table maintenance options
based on table type based on table type
* bug 439565, lib.inc.php3, db_readdump.php3, could not do:
DELETE FROM inscrit WHERE pseudo='test'ap';
2001-07-08 Lo<4C>c Chapeaux <lolo@phpheaven.net> 2001-07-08 Lo<4C>c Chapeaux <lolo@phpheaven.net>
* lib.inc.php3, line 742: Documentation is now loaded in its own window. * lib.inc.php3, line 742: Documentation is now loaded in its own window.

View File

@@ -59,7 +59,7 @@ if($sql_query != "") {
// sql.php3 will stripslash the query if get_magic_quotes_gpc // sql.php3 will stripslash the query if get_magic_quotes_gpc
if (get_magic_quotes_gpc() == 1) $sql_query = addslashes($sql_query); if (get_magic_quotes_gpc() == 1) $sql_query = addslashes($sql_query);
$sql_query=htmlspecialchars($sql_query);
include("./sql.php3"); include("./sql.php3");
exit; exit;
} }

View File

@@ -426,7 +426,7 @@ function display_table ($dt_result, $is_simple = false) {
} }
else else
{ {
$condition = " $primary->name = '".addslashes($row[$i])."' AND"; $condition = " $primary->name = '".addslashes(htmlspecialchars($row[$i]))."' AND";
} }
if($primary->numeric == 1) { if($primary->numeric == 1) {
if($sql_query == "SHOW PROCESSLIST") if($sql_query == "SHOW PROCESSLIST")