From 388c21a0f94ffdcfb5ac2cbd9f688cb735897f76 Mon Sep 17 00:00:00 2001 From: Jakub Vrana Date: Thu, 4 Aug 2011 13:54:08 +0200 Subject: [PATCH] Database name is LIKE pattern --- adminer/user.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/adminer/user.inc.php b/adminer/user.inc.php index 4cabe8f7..78e5674b 100644 --- a/adminer/user.inc.php +++ b/adminer/user.inc.php @@ -111,7 +111,7 @@ if ($_POST) { if ($old_pass != "") { $row["hashed"] = true; } - $grants[DB != "" && !isset($_GET["host"]) ? idf_escape($_GET["db"]) . ".*" : ""] = array(); + $grants[DB != "" && !isset($_GET["host"]) ? idf_escape(addcslashes(DB, "%_")) . ".*" : ""] = array(); } ?>