From: jakubvrana <jakubvrana@7c3ca157-0c34-0410-bff1-cbf682f78f5c>
Date: Mon, 22 Jun 2009 00:17:50 +0000 (+0000)
Subject: XSS
X-Git-Tag: v3.0.0~780
X-Git-Url: https://git.joonet.de/?a=commitdiff_plain;h=1b330d8ac8b01e2d9bd4d435ddc70563313d13b5;p=adminer.git

XSS

git-svn-id: https://adminer.svn.sourceforge.net/svnroot/adminer/trunk@745 7c3ca157-0c34-0410-bff1-cbf682f78f5c
---

diff --git a/adminer/table.inc.php b/adminer/table.inc.php
index fcd05d82..bdff1b54 100644
--- a/adminer/table.inc.php
+++ b/adminer/table.inc.php
@@ -13,7 +13,7 @@ if ($result) {
 		if (!$row["auto_increment"]) {
 			$auto_increment_only = false;
 		}
-		echo "<tr><th>" . htmlspecialchars($row["Field"]) . "</th><td>$row[Type]" . ($row["Null"] == "YES" ? " <i>NULL</i>" : "") . "</td></tr>\n";
+		echo "<tr><th>" . htmlspecialchars($row["Field"]) . "</th><td>" . htmlspecialchars($row["Type"]) . ($row["Null"] == "YES" ? " <i>NULL</i>" : "") . "</td></tr>\n";
 	}
 	echo "</table>\n";
 	$result->free();