From: Jakub Vrana <jakub@vrana.cz>
Date: Wed, 9 Feb 2011 14:31:20 +0000 (+0100)
Subject: Don't call procedures by AJAX (may create tables)
X-Git-Tag: v3.2.0~25
X-Git-Url: https://git.joonet.de/?a=commitdiff_plain;h=37ecc2932bcd6e078f419d08a2224e75adf85924;p=adminer.git

Don't call procedures by AJAX (may create tables)
---

diff --git a/adminer/static/functions.js b/adminer/static/functions.js
index aec7edfa..b494155a 100644
--- a/adminer/static/functions.js
+++ b/adminer/static/functions.js
@@ -433,7 +433,7 @@ function bodyClick(event, db, ns) {
 		var match2 = /&ns=([^&]*)/.exec(el.href);
 		return !(db == (match ? match[1] : '') && ns == (match2 ? match2[1] : '') && ajaxMain(el.href, '', event));
 	}
-	if (/^input$/i.test(el.tagName) && (el.type == 'image' || (el.type == 'submit' && !/&(database|scheme|create|view|sql|user|dump)=/.test(location.href)))) {
+	if (/^input$/i.test(el.tagName) && (el.type == 'image' || (el.type == 'submit' && !/&(database|scheme|create|view|sql|user|dump|call)=/.test(location.href)))) {
 		return !ajaxForm(el.form, (el.name ? encodeURIComponent(el.name) + (el.type == 'image' ? '.x' : '') + '=1' : ''));
 	}
 	return true;