Fix adding user with single quote in password

Signed-off-by: Maximilian Krög <maximilian.kroeg@geocept.com>
2026-03-18 15:11:24 +01:00 · 2026-03-18 15:11:24 +01:00 · ebac48183b
commit ebac48183b
parent 9d67a225f9
1 changed files with 1 additions and 1 deletions
--- a/libraries/classes/Server/Privileges.php
+++ b/libraries/classes/Server/Privileges.php
@ -3554,7 +3554,7 @@ class Privileges
                    $hashedPassword = $_POST['pma_pw'];
                }

-                $createUserReal = sprintf($createUserStmt, $hashedPassword);
+                $createUserReal = sprintf($createUserStmt, $this->dbi->escapeString($hashedPassword));
                $createUserShow = sprintf($createUserStmt, '***');
            }
        } else {