gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix for trigger page vulnerability, see PMASA-2012-4

Browse Source
This commit is contained in:
Rouslan Placella 2012-08-09 13:08:31 -04:00 committed by Marc Delisle
parent 4b133e277f
commit 50d1a48843
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libraries/rte/rte_triggers.lib.php
View File

@ -317,7 +317,9 @@ function PMA_TRI_getEditorForm($mode, $item)
} else if ($mode == 'edit' && $value == $item['item_table']) {
$selected = " selected='selected'";
}
$retval .= " <option$selected>$value</option>\n";
$retval .= "<option$selected>";
$retval .= htmlspecialchars($value);
$retval .= "</option>\n";
}
$retval .= " </select>\n";
$retval .= " </td>\n";