Escape server info

diff --git a/adminer/include/connect.inc.php b/adminer/include/connect.inc.php
index d50dc8fa51f0e1f8bbdfcfdc747286fbf777b106..5bfe947e40cc8daac5197b735e91ffa05e0142c3 100644 (file)
--- a/adminer/include/connect.inc.php
+++ b/adminer/include/connect.inc.php
@@ -23,7 +23,7 @@ function connect_error() {
                                echo "<a href='" . h(ME) . "$key='>$val</a>\n";
                        }
                }
-               echo "<p>" . lang('%s version: %s through PHP extension %s', $drivers[DRIVER], "<b>$connection->server_info</b>", "<b>$connection->extension</b>") . "\n";
+               echo "<p>" . lang('%s version: %s through PHP extension %s', $drivers[DRIVER], "<b>" . h($connection->server_info) . "</b>", "<b>$connection->extension</b>") . "\n";
                echo "<p>" . lang('Logged as: %s', "<b>" . h(logged_user()) . "</b>") . "\n";
                $databases = $adminer->databases();
                if ($databases) {