gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

A better way of escaping

Browse Source 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
This commit is contained in:
Madhura Jayaratne 2016-02-29 12:14:46 +11:00
parent cc55f44a4a
commit 4650ad7fbd
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
templates/table/search/input_box.phtml
View File

@ -20,7 +20,7 @@ if ($_foreigners
<?php if (isset($criteriaValues[$column_index])
&& is_string($criteriaValues[$column_index])
): ?>
value="<?php echo $criteriaValues[$column_index]; ?>"
value="<?php echo htmlspecialchars($criteriaValues[$column_index]); ?>"
<?php endif; ?> />
<a class="ajax browse_foreign"
href="browse_foreigners.php<?php
@ -93,13 +93,13 @@ if ($_foreigners
&& is_array($criteriaValues[$column_index])
&& in_array($value[$j], $criteriaValues[$column_index])
): ?>
<option value="<?php echo $value[$j]; ?>"
<option value="<?php echo htmlspecialchars($value[$j]); ?>"
selected>
<?php echo $value[$j]; ?>
<?php echo htmlspecialchars($value[$j]); ?>
</option>
<?php else: ?>
<option value="<?php echo $value[$j]; ?>">
<?php echo $value[$j]; ?>
<option value="<?php echo htmlspecialchars($value[$j]); ?>">
<?php echo htmlspecialchars($value[$j]); ?>
</option>
<?php endif; ?>
<?php endfor; ?>
@ -129,7 +129,7 @@ if ($_foreigners
<?php if (isset($criteriaValues[$column_index])
&& is_string($criteriaValues[$column_index])
): ?>
value="<?php echo $criteriaValues[$column_index]; ?>"
value="<?php echo htmlspecialchars($criteriaValues[$column_index]); ?>"
<?php endif; ?>/>
<?php endif; ?>

2
templates/table/search/rows_zoom.phtml
View File

@ -68,7 +68,7 @@ for ($i = 0; $i < 4; $i++): ?>
</td>
<!-- Inputbox for search criteria value -->
<td>
<?php echo (isset($value[$i]) ? htmlspecialchars($value[$i]) : ''); ?>
<?php echo (isset($value[$i]) ? $value[$i] : ''); ?>
</td>
</tr>
<!-- Displays hidden fields -->