Escape verbose server name (bug #1362671).

This commit is contained in:
Michal Čihař
2005-11-21 12:03:12 +00:00
parent d7b1759c54
commit bee36e92a8
4 changed files with 9 additions and 6 deletions

View File

@@ -88,7 +88,7 @@ if ( $server > 0 ) {
unset($res, $row);
$full_string = str_replace('%pma_s1%', '<bdo dir="ltr" xml:lang="en">' . PMA_MYSQL_STR_VERSION . '</bdo>', $strMySQLServerProcess);
$full_string = str_replace('%pma_s2%', $server_info, $full_string);
$full_string = str_replace('%pma_s2%', htmlspecialchars($server_info), $full_string);
$full_string = str_replace('%pma_s3%', htmlspecialchars($mysql_cur_user_and_host), $full_string);
echo ' <p><strong>' . $full_string . '</strong></p>' . "\n";