fix(Reports) decode HTML entities

tsolucio · Feb 1, 2019 · d9a7bfa · d9a7bfa
1 parent 8140022
commit d9a7bfa
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/Reports/ReportUtils.php b/modules/Reports/ReportUtils.php
@@ -176,7 +176,7 @@ function getReportFieldValue($report, $picklistArray, $dbField, $valueArray, $fi
 }
 
 function report_getMoreInfoFromRequest($cbreporttype, $pmodule, $smodule, $pivotcolumns) {
-	global $adb;
+	global $adb, $default_charset;
 	if (isset($_REQUEST['cbreporttype']) && $_REQUEST['cbreporttype']=='external') {
 		if (isset($_REQUEST['adduserinfo']) && ($_REQUEST['adduserinfo'] == 'on' || $_REQUEST['adduserinfo'] == 1)) {
 			$aui = 1;
@@ -189,7 +189,7 @@ function report_getMoreInfoFromRequest($cbreporttype, $pmodule, $smodule, $pivot
 		));
 		$cbreporttype = 'external';
 	} elseif (isset($_REQUEST['cbreporttype']) && $_REQUEST['cbreporttype']=='directsql') {
-		$minfo = vtlib_purify($_REQUEST['directsqlcommand']);
+		$minfo = html_entity_decode(vtlib_purify($_REQUEST['directsqlcommand']), ENT_QUOTES, $default_charset);
 		$cbreporttype = 'directsql';
 	} elseif (isset($_REQUEST['cbreporttype']) && $_REQUEST['cbreporttype']=='crosstabsql') {
 		require_once 'include/adodb/pivottable.inc.php';