From c36d0001f93e2883faecbeaf07c25c2140f4500a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Tue, 9 May 2017 11:47:38 +0200 Subject: [PATCH] Use htmlspecialchars instead of urlencode MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Čihař --- .../controllers/database/DatabaseStructureController.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libraries/controllers/database/DatabaseStructureController.php b/libraries/controllers/database/DatabaseStructureController.php index 542815f09c..7184742412 100644 --- a/libraries/controllers/database/DatabaseStructureController.php +++ b/libraries/controllers/database/DatabaseStructureController.php @@ -405,9 +405,9 @@ class DatabaseStructureController extends DatabaseController $overhead = ''; $table_is_view = false; - $table_encoded = urlencode($current_table['TABLE_NAME']); // Sets parameters for links - $tbl_url_query = $this->_url_query . '&table=' . $table_encoded; + $tbl_url_query = $this->_url_query + . '&table=' . htmlspecialchars($current_table['TABLE_NAME']); // do not list the previous table's size info for a view list($current_table, $formatted_size, $unit, $formatted_overhead,