Replace htmlentities with htmlspecialchars (bug #1008002).

This commit is contained in:
Michal Čihař
2004-08-12 15:22:06 +00:00
parent ca5b16f654
commit 4b65ca1693
3 changed files with 6 additions and 4 deletions

View File

@@ -13,6 +13,8 @@ $Source$
* many files: I again did some XHTML validation, so removed few of most * many files: I again did some XHTML validation, so removed few of most
obvious errors, but there are still many, mostly missing alt attributtes obvious errors, but there are still many, mostly missing alt attributtes
for images and wrongly nested tags. for images and wrongly nested tags.
* left.php, queryframe.php: Replace htmlentities with htmlspecialchars
(bug #1008002).
2004-08-11 Michal Čihař <michal@cihar.com> 2004-08-11 Michal Čihař <michal@cihar.com>
* tbl_replace.php: Do not empty protected values (bug #1006812). * tbl_replace.php: Do not empty protected values (bug #1006812).

View File

@@ -613,10 +613,10 @@ if ($num_dbs > 1) {
while (list($table) = PMA_DBI_fetch_row($tables)) { while (list($table) = PMA_DBI_fetch_row($tables)) {
$table_array[$table] = ''; $table_array[$table] = '';
$url_title = (!empty($tooltip) && isset($tooltip[$table])) $url_title = (!empty($tooltip) && isset($tooltip[$table]))
? htmlentities($tooltip[$table]) ? htmlspecialchars($tooltip[$table])
: ''; : '';
$alias = (!empty($tooltip_name) && isset($tooltip_name[$table])) $alias = (!empty($tooltip_name) && isset($tooltip_name[$table]))
? htmlentities($tooltip_name[$table]) ? htmlspecialchars($tooltip_name[$table])
: ''; : '';
$book_sql_query = PMA_queryBookmarks($db, $cfg['Bookmark'], '\'' . PMA_sqlAddslashes($table) . '\'', 'label'); $book_sql_query = PMA_queryBookmarks($db, $cfg['Bookmark'], '\'' . PMA_sqlAddslashes($table) . '\'', 'label');

View File

@@ -340,10 +340,10 @@ if ($num_dbs > 1) {
while (list($table) = PMA_DBI_fetch_row($tables)) { while (list($table) = PMA_DBI_fetch_row($tables)) {
$table_array[$table] = ''; $table_array[$table] = '';
$url_title = (!empty($tooltip) && isset($tooltip[$table])) $url_title = (!empty($tooltip) && isset($tooltip[$table]))
? htmlentities($tooltip[$table]) ? htmlspecialchars($tooltip[$table])
: ''; : '';
$alias = (!empty($tooltip_name) && isset($tooltip_name[$table])) $alias = (!empty($tooltip_name) && isset($tooltip_name[$table]))
? htmlentities($tooltip_name[$table]) ? htmlspecialchars($tooltip_name[$table])
: ''; : '';
$book_sql_query = PMA_queryBookmarks($db, $cfg['Bookmark'], '\'' . PMA_sqlAddslashes($table) . '\'', 'label'); $book_sql_query = PMA_queryBookmarks($db, $cfg['Bookmark'], '\'' . PMA_sqlAddslashes($table) . '\'', 'label');
} // end while (tables list) } // end while (tables list)