mirror of
https://github.com/vrana/adminer.git
synced 2025-08-10 16:44:17 +02:00
Preventively escape name
This commit is contained in:
@@ -151,7 +151,7 @@ function set_adminer_settings($settings) {
|
|||||||
*/
|
*/
|
||||||
function textarea($name, $value, $rows = 10, $cols = 80) {
|
function textarea($name, $value, $rows = 10, $cols = 80) {
|
||||||
global $jush;
|
global $jush;
|
||||||
echo "<textarea name='$name' rows='$rows' cols='$cols' class='sqlarea jush-$jush' spellcheck='false' wrap='off'>";
|
echo "<textarea name='" . h($name) . "' rows='$rows' cols='$cols' class='sqlarea jush-$jush' spellcheck='false' wrap='off'>";
|
||||||
if (is_array($value)) {
|
if (is_array($value)) {
|
||||||
foreach ($value as $val) { // not implode() to save memory
|
foreach ($value as $val) { // not implode() to save memory
|
||||||
echo h($val[0]) . "\n\n\n"; // $val == array($query, $time, $elapsed)
|
echo h($val[0]) . "\n\n\n"; // $val == array($query, $time, $elapsed)
|
||||||
|
Reference in New Issue
Block a user