Database name is LIKE pattern

diff --git a/adminer/user.inc.php b/adminer/user.inc.php
index 4cabe8f7ff75e3d6156b9160d36c7081c5b2aee4..78e5674b0dd5d02a553384a99230f3a2cd764309 100644 (file)
--- a/adminer/user.inc.php
+++ b/adminer/user.inc.php
@@ -111,7 +111,7 @@ if ($_POST) {
        if ($old_pass != "") {
                $row["hashed"] = true;
        }
-       $grants[DB != "" && !isset($_GET["host"]) ? idf_escape($_GET["db"]) . ".*" : ""] = array();
+       $grants[DB != "" && !isset($_GET["host"]) ? idf_escape(addcslashes(DB, "%_")) . ".*" : ""] = array();
 }
 
 ?>