mirror/php-adminer
1
0
Fork 0
mirror of https://github.com/vrana/adminer.git synced 2025-08-17 20:01:25 +02:00
Code Issues Releases Wiki Activity

Avoid double escaping

Browse Source
This commit is contained in:
Jakub Vrana
2011-03-24 02:19:21 +01:00
parent 07e4476e78
commit 5ee14079b8
4 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
adminer/edit.inc.php
View File

@@ -43,7 +43,7 @@ page_header(
($update ? lang('Edit') : lang('Insert')),
$error,
array("select" => array($TABLE, $table_name)),
$table_name
$table_name //! two calls of h()
);
$row = null;

4
adminer/include/adminer.inc.php
View File

@@ -80,7 +80,7 @@ username.form['driver'].onchange();
/** Table caption used in navigation and headings
* @param array result of SHOW TABLE STATUS
* @return string
* @return string HTML code, "" to ignore table
*/
function tableName($tableStatus) {
return h($tableStatus["Name"]);
@@ -89,7 +89,7 @@ username.form['driver'].onchange();
/** Field caption used in select and edit
* @param array single field returned from fields()
* @param int order of column in select
* @return string
* @return string HTML code, "" to ignore field
*/
function fieldName($field, $order = 0) {
return '<span title="' . h($field["full_type"]) . '">' . h($field["field"]) . '</span>';

2
adminer/include/functions.inc.php
View File

@@ -757,7 +757,7 @@ function search_tables() {
echo "<ul>\n";
$found = true;
}
echo "<li><a href='" . h(ME . "select=" . urlencode($table) . "&where[0][op]=" . urlencode($_GET["where"][0]["op"]) . "&where[0][val]=" . urlencode($_GET["where"][0]["val"])) . "'>" . h($name) . "</a>\n";
echo "<li><a href='" . h(ME . "select=" . urlencode($table) . "&where[0][op]=" . urlencode($_GET["where"][0]["op"]) . "&where[0][val]=" . urlencode($_GET["where"][0]["val"])) . "'>$name</a>\n";
}
}
}