bug 439565

ChangeLog

@@ -19,6 +19,8 @@ $Source$
 	  to try to get rid of a warning (cause: too many tables?)
 	* bug 439709, tbl_properties.php3: show table maintenance options
 	  based on table type
+	* bug 439565, lib.inc.php3, db_readdump.php3, could not do:
+	  DELETE FROM inscrit WHERE pseudo='test'ap'; 
 
 2001-07-08  Lo<4C>c Chapeaux  <lolo@phpheaven.net>
 	* lib.inc.php3, line 742: Documentation is now loaded in its own window.

db_readdump.php3

@@ -59,7 +59,7 @@ if($sql_query != "") {
 
 // sql.php3 will stripslash the query if get_magic_quotes_gpc
     if (get_magic_quotes_gpc() == 1) $sql_query = addslashes($sql_query);
-
+    $sql_query=htmlspecialchars($sql_query);
     include("./sql.php3");
     exit;
   }

lib.inc.php3

@@ -426,7 +426,7 @@ function display_table ($dt_result, $is_simple = false) {
 				}
 				else
 				{
-					$condition = " $primary->name = '".addslashes($row[$i])."' AND";
+					$condition = " $primary->name = '".addslashes(htmlspecialchars($row[$i]))."' AND";
 				}
             if($primary->numeric == 1) {
 	      if($sql_query == "SHOW PROCESSLIST")