From 81fe5fe9bf279f8374a957ec568160dbcdfe7c21 Mon Sep 17 00:00:00 2001 From: Deven Bansod Date: Fri, 11 Nov 2016 19:20:57 +0530 Subject: [PATCH] Fix incorrect calls to escapeString Signed-off-by: Deven Bansod --- libraries/server_privileges.lib.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libraries/server_privileges.lib.php b/libraries/server_privileges.lib.php index d7ec50848c..17a88edf3a 100644 --- a/libraries/server_privileges.lib.php +++ b/libraries/server_privileges.lib.php @@ -3284,12 +3284,12 @@ function PMA_getUserSpecificRights($username, $hostname, $type, $dbname = '') $dbOrTableName = 'Db'; } elseif ($type == 'table') { $user_host_condition .= " AND `Db` LIKE '" - . $GLOBALS['dbi']->escapeString($dbname, true) . "'"; + . $GLOBALS['dbi']->escapeString($dbname) . "'"; $tables_to_search_for_users = array('columns_priv',); $dbOrTableName = 'Table_name'; } else { // routine $user_host_condition .= " AND `Db` LIKE '" - . $GLOBALS['dbi']->escapeString($dbname, true) . "'"; + . $GLOBALS['dbi']->escapeString($dbname) . "'"; $tables_to_search_for_users = array('procs_priv',); $dbOrTableName = 'Routine_name'; }