sanitize table comments in print view

2008-05-03 11:59:52 +00:00
parent c37b5df5ec
commit 4085b80bdc
2 changed files with 3 additions and 1 deletions
--- a/tbl_printview.php
+++ b/tbl_printview.php
@@ -140,7 +140,7 @@ foreach ($the_tables as $key => $table) {
     * Displays the comments of the table if MySQL >= 3.23
     */
    if (!empty($show_comment)) {
-        echo $strTableComments . ': ' . $show_comment . '<br /><br />';
+        echo $strTableComments . ': ' . htmlspecialchars($show_comment) . '<br /><br />';
    }

    /**