mirror/php-adminer
1
0
Fork 0
mirror of https://github.com/vrana/adminer.git synced 2025-08-12 01:24:17 +02:00
Code Issues Releases Wiki Activity

Fix XSS in alter table (found by HP Fortify)

Browse Source
This commit is contained in:
Jakub Vrana
2015-08-05 18:12:36 -07:00
parent ea0c9d9b5e
commit 596f8df373
3 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
adminer/include/editing.inc.php
View File

@@ -234,6 +234,7 @@ function type_class($type) {
*/
function edit_fields($fields, $collations, $type = "TABLE", $foreign_keys = array(), $comments = false) {
global $connection, $inout;
$fields = array_values($fields);
?>
<thead><tr class="wrap">
<?php if ($type == "PROCEDURE") { ?><td>&nbsp;<?php } ?>