Escape generated query

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
This commit is contained in:
Madhura Jayaratne 2016-06-18 09:13:02 +10:00
parent 1a558a4190
commit e7003792d9

View File

@ -655,8 +655,8 @@ function PMA_exportDatabase(
// This obtains the current table's size
$query = 'SELECT data_length + index_length
from information_schema.TABLES
WHERE table_schema = "' . $db . '"
AND table_name = "' . $table . '"';
WHERE table_schema = "' . PMA\libraries\Util::sqlAddSlashes($db) . '"
AND table_name = "' . PMA\libraries\Util::sqlAddSlashes($table) . '"';
$size = $GLOBALS['dbi']->fetchValue($query);
//Converting the size to MB