Revert "Revert "More of missing escaping""

This reverts commit 414363d38d. Okay, it needs to be escaped here, but not escaped above.
2011-08-19 12:07:32 +02:00
parent 414363d38d
commit 8cec4ac91c
1 changed files with 2 additions and 2 deletions
--- a/db_datadict.php
+++ b/db_datadict.php
@@ -249,9 +249,9 @@ while ($row = PMA_DBI_fetch_assoc($rowset)) {
    <td nowrap="nowrap">
        <?php
        if (isset($pk_array[$row['Field']])) {
-            echo '<u>' . $field_name . '</u>';
+            echo '<u>' . htmlspecialchars($field_name) . '</u>';
        } else {
-            echo $field_name;
+            echo htmlspecialchars($field_name);
        }
        ?>
    </td>