diff --git a/libraries/mysql_charsets.lib.php b/libraries/mysql_charsets.lib.php index 64b580aec..812bfe22b 100644 --- a/libraries/mysql_charsets.lib.php +++ b/libraries/mysql_charsets.lib.php @@ -284,7 +284,7 @@ if (PMA_MYSQL_INT_VERSION >= 40100){ } if (PMA_MYSQL_INT_VERSION >= 50006) { // Since MySQL 5.0.6, we don't have to parse SHOW CREATE DATABASE anymore. - $res = PMA_DBI_query('SELECT DEFAULT_COLLATION_NAME FROM information_schema.SCHEMATA WHERE SCHEMA_NAME = ' . $db . ' LIMIT 1;'); + $res = PMA_DBI_query('SELECT DEFAULT_COLLATION_NAME FROM information_schema.SCHEMATA WHERE SCHEMA_NAME = \'' . PMA_sqlAddSlashes($db) . '\' LIMIT 1;'); if ($res) { list($db_collation) = PMA_DBI_fetch_row($res); PMA_DBI_free_result($res);