gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sanitize $after_field

Browse Source
This commit is contained in:
Marc Delisle 2008-04-30 16:27:46 +00:00
parent 4f54b2b73b
commit 5dffdab32c
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog
View File

@ -10,6 +10,8 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
- [dbi] Incorrect interpretation for some mysqli field flags
- bug #1910621 [display] part 1: do not display a TEXT utf8_bin as BLOB
(fixed for mysqli extension only)
- [interface] sanitize the after_field parameter,
thanks to Norman Hippert
2.11.6.0 (2008-04-29)
- bug #1903724 [interface] Displaying of very large queries in error message

4
libraries/tbl_properties.inc.php
View File

@ -68,7 +68,7 @@ if ($action == 'tbl_create.php') {
} elseif ($action == 'tbl_addfield.php') {
?>
<input type="hidden" name="field_where" value="<?php echo $field_where; ?>" />
<input type="hidden" name="after_field" value="<?php echo $after_field; ?>" />
<input type="hidden" name="after_field" value="<?php echo PMA_sanitize($after_field); ?>" />
<?php
}
@ -86,7 +86,7 @@ if (isset($field_where)) {
if (isset($after_field)) {
?>
<input type="hidden" name="orig_after_field" value="<?php echo $after_field; ?>" />
<input type="hidden" name="orig_after_field" value="<?php echo PMA_sanitize($after_field); ?>" />
<?php
}