nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

adjust table comments protection to the updated advisory (db print view and db data dictionary)

Browse Source
This commit is contained in:
Marc Delisle
2008-06-21 13:16:05 +00:00
parent 62c8797bb5
commit d75cf94f5b
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog
View File

@@ -24,7 +24,7 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
- [structure] do not remove the BINARY attribute in drop-down - [structure] do not remove the BINARY attribute in drop-down
- bug #1955386 [session] Overriding session.hash_bits_per_character - bug #1955386 [session] Overriding session.hash_bits_per_character
- [interface] sanitize the table comments in table print view, - [interface] sanitize the table comments in table print view,
thanks to Norman Hippert db print view and db data dictionary, thanks to Norman Hippert
- bug #1939031 Auto_Increment selected for TimeStamp by Default - bug #1939031 Auto_Increment selected for TimeStamp by Default
- patch #1957998 [display] No tilde for InnoDB row counter when we know - patch #1957998 [display] No tilde for InnoDB row counter when we know
it for sure, thanks to Vladyslav Bakayev - dandy76 it for sure, thanks to Vladyslav Bakayev - dandy76

2
db_datadict.php
View File

@@ -165,7 +165,7 @@ while ($row = PMA_DBI_fetch_assoc($rowset)) {
* Displays the comments of the table if MySQL >= 3.23 * Displays the comments of the table if MySQL >= 3.23
*/ */
if (!empty($show_comment)) { if (!empty($show_comment)) {
echo $strTableComments . ': ' . $show_comment . '<br /><br />'; echo $strTableComments . ': ' . htmlspecialchars($show_comment) . '<br /><br />';
} }
/** /**

2
db_printview.php
View File

@@ -166,7 +166,7 @@ else {
<td> <td>
<?php <?php
if (! empty($sts_data['Comment'])) { if (! empty($sts_data['Comment'])) {
echo $sts_data['Comment']; echo htmlspecialchars($sts_data['Comment']);
$needs_break = '<br />'; $needs_break = '<br />';
} else { } else {
$needs_break = ''; $needs_break = '';