From 6f471a60b8f37ae3adf6052542f092923278099d Mon Sep 17 00:00:00 2001
From: Marc Delisle <marc@infomarc.info>
Date: Thu, 31 May 2001 19:10:22 +0000
Subject: [PATCH] Bug 424771

---
 ChangeLog        | 3 +++
 tbl_change.php3  | 3 ++-
 tbl_replace.php3 | 2 +-
 3 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index d0cd0640e..88fd58232 100755
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,9 @@ phpMyAdmin - Changelog
 $Id$ 
 $Source$
 
+2001-05-31  Marc Delisle  <lem9@users.sourceforge.net>
+        * tbl_replace.php3, tbl_change.php3: bug 424771
+
 2001-05-30  Loïc Chapeaux  <lolo@phpheaven.net>
 	* left.js, left.php3 : beautify the way database list is displayed with NS4
 
diff --git a/tbl_change.php3 b/tbl_change.php3
index f15fe90ab..f36f461b4 100755
--- a/tbl_change.php3
+++ b/tbl_change.php3
@@ -28,7 +28,8 @@ else
 <input type="hidden" name="db" value="<?php echo $db;?>">
 <input type="hidden" name="table" value="<?php echo $table;?>">
 <input type="hidden" name="goto" value="<?php echo $goto;?>">
-<input type="hidden" name="sql_query" value="<?php echo isset($sql_query) ? $sql_query : "";?>">
+<input type="hidden" name="sql_query" value="
+	<?php echo isset($sql_query) ? urlencode(stripslashes($sql_query)) : "";?>">
 <input type="hidden" name="pos" value="<?php echo isset($pos) ? $pos : 0;?>">
 <?php
 
diff --git a/tbl_replace.php3 b/tbl_replace.php3
index 9b1981884..be50e34fc 100755
--- a/tbl_replace.php3
+++ b/tbl_replace.php3
@@ -6,7 +6,7 @@ require("./grab_globals.inc.php3");
  
 require("./lib.inc.php3");
 
-
+$sql_query=urldecode($sql_query);
 if($goto == "sql.php3")
 {
     $goto = "sql.php3?server=$server&lang=$lang&db=$db&table=$table&pos=$pos&sql_query=".urlencode($sql_query);