gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #1245 from ashutoshdhundhara/bug_security

Browse Source 
Bug: Escape table name.
This commit is contained in:
Marc Delisle 2014-06-22 07:26:11 -04:00
commit 270eb32ee6
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
libraries/structure.lib.php
View File

@ -719,7 +719,7 @@ function PMA_getHtmlForNotNullEngineViewTable($table_is_view, $current_table,
. '" class="ajax real_row_count">' . $row_count . '</a>'
: $row_count;
$html_output .= '<td class="value tbl_rows" data-table="'
. $current_table['TABLE_NAME'] . '">'
. htmlspecialchars($current_table['TABLE_NAME']) . '">'
. $cell_text
. $show_superscript
. '</td>';