nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Do not use htmlspecialchars in generating SQL (bug#3287048).

Browse Source
This commit is contained in:
Michal Čihař
2011-04-15 08:55:27 +02:00
parent b1146ee73f
commit 61a87263e7
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
libraries/mult_submits.inc.php
View File

@@ -339,7 +339,7 @@ elseif ($mult_btn == __('Yes')) {
case 'empty_tbl': case 'empty_tbl':
$a_query = 'TRUNCATE '; $a_query = 'TRUNCATE ';
$a_query .= PMA_backquote(htmlspecialchars($selected[$i])); $a_query .= PMA_backquote($selected[$i]);
$run_parts = TRUE; $run_parts = TRUE;
break; break;