Use htmlspecialchars instead of urlencode

Signed-off-by: Michal Čihař <michal@cihar.com>
This commit is contained in:
Michal Čihař 2017-05-09 11:47:38 +02:00
parent 4193d20334
commit c36d0001f9

View File

@ -405,9 +405,9 @@ class DatabaseStructureController extends DatabaseController
$overhead = '';
$table_is_view = false;
$table_encoded = urlencode($current_table['TABLE_NAME']);
// Sets parameters for links
$tbl_url_query = $this->_url_query . '&amp;table=' . $table_encoded;
$tbl_url_query = $this->_url_query
. '&amp;table=' . htmlspecialchars($current_table['TABLE_NAME']);
// do not list the previous table's size info for a view
list($current_table, $formatted_size, $unit, $formatted_overhead,