Skip to content

Commit 75a5582

Browse files
committed
Fix XSS in DB_search.php
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
1 parent dbb2673 commit 75a5582

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

Diff for: libraries/DbSearch.class.php

+2-1
Original file line numberDiff line numberDiff line change
@@ -344,7 +344,8 @@ private function _getResultsRow($each_table, $newsearchsqls, $odd_row, $res_cnt)
344344
$browse_result_path = 'sql.php' . PMA_URL_getCommon($this_url_params);
345345
$html_output .= '<td><a name="browse_search" class="ajax" href="'
346346
. $browse_result_path . '" onclick="loadResult(\''
347-
. $browse_result_path . '\',\'' . $each_table . '\',\''
347+
. $browse_result_path . '\',\''
348+
. PMA_escapeJsString(htmlspecialchars($each_table)) . '\',\''
348349
. PMA_URL_getCommon(
349350
array(
350351
'db' => $GLOBALS['db'], 'table' => $each_table

0 commit comments

Comments
 (0)