From 4dea3693a09a2e9b88afe114ff2629773f4104c6 Mon Sep 17 00:00:00 2001
From: "Alexander M. Turek" <me@derrabus.de>
Date: Tue, 3 Dec 2002 08:32:21 +0000
Subject: [PATCH] bug #641652

---
 ChangeLog | 3 +++
 sql.php3  | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 012730965..dc8717e3a 100755
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,9 @@ phpMyAdmin - Changelog
 $Id$
 $Source$
 
+2002-12-03 Alexander M. Turek  <rabus@users.sourceforge.net>
+    * sql.php3: Fixed bug #641652, thanks to "bumperbox".
+
 2002-12-02 Marc Delisle  <lem9@users.sourceforge.net>
     * db_search.php3: automatic wildcard
     * lang/japanese-*.inc.php3: remove control Ms
diff --git a/sql.php3 b/sql.php3
index fc649d16c..b0c66ed8b 100755
--- a/sql.php3
+++ b/sql.php3
@@ -187,7 +187,7 @@ if ($do_confirm) {
     <input type="hidden" name="server" value="<?php echo $server; ?>" />
     <input type="hidden" name="db" value="<?php echo htmlspecialchars($db); ?>" />
     <input type="hidden" name="table" value="<?php echo isset($table) ? htmlspecialchars($table) : ''; ?>" />
-    <input type="hidden" name="sql_query" value="<?php echo urlencode(addslashes($sql_query)); ?>" />
+    <input type="hidden" name="sql_query" value="<?php echo urlencode($sql_query); ?>" />
     <input type="hidden" name="zero_rows" value="<?php echo isset($zero_rows) ? $zero_rows : ''; ?>" />
     <input type="hidden" name="goto" value="<?php echo $goto; ?>" />
     <input type="hidden" name="back" value="<?php echo isset($back) ? $back : ''; ?>" />