From 5bcd95a42c8ba924d389eafee4d7be80bd4039a3 Mon Sep 17 00:00:00 2001 From: Marc Delisle Date: Tue, 17 Aug 2010 16:21:37 +0200 Subject: [PATCH] Fix XSS on delimiter in db_sql.php. --- db_sql.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/db_sql.php b/db_sql.php index 2ac198bda..420561e81 100644 --- a/db_sql.php +++ b/db_sql.php @@ -37,7 +37,7 @@ if ($num_tables == 0 && empty($db_query_force)) { /** * Query box, bookmark, insert data from textfile */ -PMA_sqlQueryForm(true, false, isset($_REQUEST['delimiter']) ? $_REQUEST['delimiter'] : ';'); +PMA_sqlQueryForm(true, false, isset($_REQUEST['delimiter']) ? htmlspecialchars($_REQUEST['delimiter']) : ';'); /** * Displays the footer