escape single quotes in column names
Column names like `id'` must be escaped in a PHP string Signed-off-by: Sven Strickroth <email@cs-ware.de>
This commit is contained in:

committed by
Marc Delisle

parent
e43ed55b04
commit
9fc23c8824
@@ -172,7 +172,7 @@ function PMA_exportData($db, $table, $crlf, $error_url, $sql_query)
|
||||
|
||||
|
||||
for ($i = 0; $i < $columns_cnt; $i++) {
|
||||
$buffer .= "'" . $columns[$i]. "'=>" . var_export($record[$i], true) . (($i + 1 >= $columns_cnt) ? '' : ',');
|
||||
$buffer .= var_export($columns[$i], true) . "=>" . var_export($record[$i], true) . (($i + 1 >= $columns_cnt) ? '' : ',');
|
||||
}
|
||||
|
||||
$buffer .= ')';
|
||||
|
Reference in New Issue
Block a user