From 7656d8879991caf47f67a2eb948cc5902ccb7df7 Mon Sep 17 00:00:00 2001 From: Marc Delisle Date: Thu, 5 Apr 2012 10:21:56 -0400 Subject: [PATCH] bug #3515181 [users] Error in create user + underscore + create database --- ChangeLog | 1 + server_privileges.php | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 911f5077ae..a3ea1c2062 100644 --- a/ChangeLog +++ b/ChangeLog @@ -7,6 +7,7 @@ phpMyAdmin - ChangeLog - bug #3512916 [display] Right frame reloads after displaying SQL result(zero rows) - bug [interface] Fixed missing Codemirror for inline query edit when exporting a result set - bug #3514490 [auth] Multiple Navigation panels bug still present +- bug #3515181 [users] Error in create user + underscore + create database 3.5.0.0 (not yet released) + rfe #2021981 [interface] Add support for mass prefix change. diff --git a/server_privileges.php b/server_privileges.php index 5f2bfca257..bb3aaed1a2 100644 --- a/server_privileges.php +++ b/server_privileges.php @@ -1068,7 +1068,7 @@ if (isset($_REQUEST['adduser_submit']) || isset($_REQUEST['change_copy'])) { } $q = 'GRANT ALL PRIVILEGES ON ' - . PMA_backquote(PMA_sqlAddSlashes($username)) . '.* TO \'' + . PMA_backquote(PMA_escape_mysql_wildcards(PMA_sqlAddSlashes($username))) . '.* TO \'' . PMA_sqlAddSlashes($username) . '\'@\'' . PMA_sqlAddSlashes($hostname) . '\';'; $sql_query .= $q; if (! PMA_DBI_try_query($q)) {