bug #3319466 [edit] Inline query edit does not escape special characters

2011-06-17 21:10:00 +01:00
parent b45de543c0
commit ada8916b98
2 changed files with 7 additions and 1 deletions
--- a/js/functions.js
+++ b/js/functions.js
@@ -1131,7 +1131,12 @@ $(document).ready(function(){
        $(".btnSave").each(function(){
            $(this).click(function(){
                sql_query = $(this).prev().val();
-                window.location.replace("import.php?db=" + db +"&table=" + table + "&sql_query=" + sql_query + "&show_query=1&token=" + token);
+                window.location.replace("import.php"
+                                      + "?db=" + encodeURIComponent(db)
+                                      + "&table=" + encodeURIComponent(table)
+                                      + "&sql_query=" + encodeURIComponent(sql_query)
+                                      + "&show_query=1"
+                                      + "&token=" + token);
            });
        });
        $(".btnDiscard").each(function(){