Escape html

This commit is contained in:
Michal Čihař
2011-03-03 07:13:49 +01:00
parent 85ca9c02c3
commit 7d5efb58dc

View File

@@ -256,7 +256,7 @@ if (isset($_REQUEST['submit_search'])) {
$this_url_params['sql_query'] = $newsearchsqls['delete']; $this_url_params['sql_query'] = $newsearchsqls['delete'];
$delete_result_path = 'sql.php' . PMA_generate_common_url($this_url_params); $delete_result_path = 'sql.php' . PMA_generate_common_url($this_url_params);
?> ?>
<td> <a name="delete_search" href="<?php echo $delete_result_path; ?>" onclick="deleteResult('<?php echo $delete_result_path ?>' , ' <?php printf(__('Delete the matches for the %s table?'), . $each_table ); ?>','<?php echo ($GLOBALS['cfg']['AjaxEnable']); ?>');return false;" ><?php echo __('Delete') ?></a> </td> <td> <a name="delete_search" href="<?php echo $delete_result_path; ?>" onclick="deleteResult('<?php echo $delete_result_path ?>' , ' <?php printf(__('Delete the matches for the %s table?'), htmlspecialchars($each_table)); ?>','<?php echo ($GLOBALS['cfg']['AjaxEnable']); ?>');return false;" ><?php echo __('Delete') ?></a> </td>
<?php <?php
} else { } else {
echo '<td>&nbsp;</td>' . "\n" echo '<td>&nbsp;</td>' . "\n"