diff options
| author | Michal Čihař <mcihar@suse.cz> | 2011-06-27 16:50:16 +0400 |
|---|---|---|
| committer | Michal Čihař <mcihar@suse.cz> | 2011-06-27 16:50:16 +0400 |
| commit | 12348ee826d45dd2ae7f1c5b055f71e888395f2a (patch) | |
| tree | e646401a39e6da4308eb859ade6eee64aea7ad4e /db_printview.php | |
| parent | c9c9fdf49dfde051ce4b94ed8b9f6acc86e25a62 (diff) | |
Fix escaping on LIKE queries
All these need special variant of PMA_sqlAddSlashes.
Diffstat (limited to 'db_printview.php')
| -rw-r--r-- | db_printview.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/db_printview.php b/db_printview.php index 3b02b86ceb..e25341128f 100644 --- a/db_printview.php +++ b/db_printview.php @@ -53,7 +53,7 @@ if ($cfg['SkipLockedTables'] == true) { if ($result != false && PMA_DBI_num_rows($result) > 0) { while ($tmp = PMA_DBI_fetch_row($result)) { if (! isset($sot_cache[$tmp[0]])) { - $sts_result = PMA_DBI_query('SHOW TABLE STATUS FROM ' . PMA_backquote($db) . ' LIKE \'' . PMA_sqlAddSlashes($tmp[0]) . '\';'); + $sts_result = PMA_DBI_query('SHOW TABLE STATUS FROM ' . PMA_backquote($db) . ' LIKE \'' . PMA_sqlAddSlashes($tmp[0], true) . '\';'); $sts_tmp = PMA_DBI_fetch_assoc($sts_result); $tables[] = $sts_tmp; } else { // table in use |