From 8cec4ac91ce0da8e73d8b8313cdb5c34d03bdb4b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Fri, 19 Aug 2011 12:07:32 +0200 Subject: [PATCH] Revert "Revert "More of missing escaping"" This reverts commit 414363d38d788c1c126d0aafc4eda69c0a8157c8. Okay, it needs to be escaped here, but not escaped above. --- db_datadict.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/db_datadict.php b/db_datadict.php index 938ebf7a1..698146297 100644 --- a/db_datadict.php +++ b/db_datadict.php @@ -249,9 +249,9 @@ while ($row = PMA_DBI_fetch_assoc($rowset)) { ' . $field_name . ''; + echo '' . htmlspecialchars($field_name) . ''; } else { - echo $field_name; + echo htmlspecialchars($field_name); } ?>