Fixed a slashes bug if the query is displayed on screen to be confirmed
This commit is contained in:
3
sql.php3
3
sql.php3
@@ -67,7 +67,8 @@ if ($do_confirm) {
|
||||
$stripped_sql_query = $sql_query;
|
||||
}
|
||||
include('./header.inc.php3');
|
||||
echo $strDoYouReally . htmlspecialchars($sql_query) . ' ?<br/>';
|
||||
echo $strDoYouReally . ' :<br />' . "\n";
|
||||
echo '<tt>' . htmlspecialchars($stripped_sql_query) . '</tt> ?<br/>';
|
||||
?>
|
||||
<form action="sql.php3" method="post" enctype="application/x-www-form-urlencoded">
|
||||
<input type="hidden" name="sql_query" value="<?php echo urlencode($sql_query); ?>" />
|
||||
|
Reference in New Issue
Block a user