diff --git a/ChangeLog b/ChangeLog index 4e7006921..9084f52b3 100755 --- a/ChangeLog +++ b/ChangeLog @@ -5,6 +5,9 @@ phpMyAdmin - Changelog $Id$ $Source$ +2001-07-02 Marc Delisle + * bug 436108, quotes into manual requests: db_readdump.php3 + 2001-07-01 Marc Delisle * user_details.php3, lang/*: privileges in MySQL-speak * new script lang/remove_message.sh diff --git a/db_readdump.php3 b/db_readdump.php3 index fbdb94d09..b1b94d66a 100755 --- a/db_readdump.php3 +++ b/db_readdump.php3 @@ -34,7 +34,6 @@ if(!empty($id_bookmark)) { } - if($sql_file != "none") { // do file upload if(ereg("^php[0-9A-Za-z_.-]+$", basename($sql_file))) { @@ -57,6 +56,10 @@ if($sql_query != "") { if (count($pieces) == 1 && !empty($pieces[0]) && $view_bookmark == 0) { $sql_query = trim($pieces[0]); if (eregi('^CREATE TABLE (.+)', $sql_query)) $reload = "true"; + +// sql.php3 will stripslash the query if get_magic_quotes_gpc + if (get_magic_quotes_gpc() == 1) $sql_query = addslashes($sql_query); + include("./sql.php3"); exit; }