mirror/php-adminer
1
0
Fork 0
mirror of https://github.com/vrana/adminer.git synced 2025-08-25 15:31:15 +02:00
Code Issues Releases Wiki Activity

Fix XSS in indexes (non-MySQL only)

Browse Source
This commit is contained in:
Jakub Vrana
2015-11-08 11:41:44 -08:00
parent 6c6bb45d3d
commit 4be0b6655e
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
adminer/indexes.inc.php
View File

@@ -117,7 +117,7 @@ foreach ($row["indexes"] as $index) {
$i = 1; $i = 1;
foreach ($index["columns"] as $key => $column) { foreach ($index["columns"] as $key => $column) {
echo "<span>" . select_input( echo "<span>" . select_input(
" name='indexes[$j][columns][$i]' onchange=\"" . ($i == count($index["columns"]) ? "indexesAddColumn" : "indexesChangeColumn") . "(this, '" . js_escape($jush == "sql" ? "" : $_GET["indexes"] . "_") . "');\"", " name='indexes[$j][columns][$i]' onchange=\"" . ($i == count($index["columns"]) ? "indexesAddColumn" : "indexesChangeColumn") . "(this, '" . h(js_escape($jush == "sql" ? "" : $_GET["indexes"] . "_")) . "');\"",
($fields ? array_combine($fields, $fields) : $fields), ($fields ? array_combine($fields, $fields) : $fields),
$column $column
); );

1
changes.txt
View File

@@ -1,4 +1,5 @@
Adminer 4.2.3-dev: Adminer 4.2.3-dev:
Fix XSS in indexes (non-MySQL only)
Support PHP 7 Support PHP 7
Greek translation Greek translation
Galician translation Galician translation