gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

check also single quotes

Browse Source
This commit is contained in:
Marc Delisle 2006-06-30 13:13:19 +00:00
parent 6d6f47bdb2
commit 183441507c
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@ -5,6 +5,9 @@ phpMyAdmin - ChangeLog
$Id$
$Source$
2006-06-30 Marc Delisle <lem9@users.sourceforge.net>
* libraries/common.lib.php: escape also single quotes
2006-06-28 Marc Delisle <lem9@users.sourceforge.net>
* libraries/Config.class.php: remove debug code
* libraries/common.lib.php: escape allowed parameters from non-token

2
libraries/common.lib.php
View File

@ -2810,7 +2810,7 @@ if (!isset($_REQUEST['token']) || $_SESSION['PMA_token'] != $_REQUEST['token'])
unset($GLOBALS[$key]);
} else {
// allowed stuff could be compromised so escape it
$_REQUEST[$key] = htmlspecialchars($_REQUEST[$key]);
$_REQUEST[$key] = htmlspecialchars($_REQUEST[$key], ENT_QUOTES);
}
}
}