From 6d548f7d449b7d4b796949d10a503484f63eaf82 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <mcihar@novell.com>
Date: Tue, 17 Aug 2010 16:20:15 +0200
Subject: [PATCH] Fix XSS on field_str in db_search.php.

---
 db_search.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/db_search.php b/db_search.php
index 751675db5..455aa61a1 100644
--- a/db_search.php
+++ b/db_search.php
@@ -355,7 +355,7 @@ $alter_select =
     <tr><td align="right">
             <?php echo $GLOBALS['strSearchInField']; ?></td>
         <td><input type="text" name="field_str" size="60"
-                value="<?php echo ! empty($field_str) ? $field_str : ''; ?>" /></td>
+                value="<?php echo ! empty($field_str) ? htmlspecialchars($field_str) : ''; ?>" /></td>
     </tr>
     </table>
 </fieldset>