From: Jakub Vrana <jakub@vrana.cz>
Date: Thu, 4 Aug 2011 11:54:08 +0000 (+0200)
Subject: Database name is LIKE pattern
X-Git-Tag: v3.3.2~5
X-Git-Url: https://git.joonet.de/?a=commitdiff_plain;h=388c21a0f94ffdcfb5ac2cbd9f688cb735897f76;p=adminer.git

Database name is LIKE pattern
---

diff --git a/adminer/user.inc.php b/adminer/user.inc.php
index 4cabe8f7..78e5674b 100644
--- a/adminer/user.inc.php
+++ b/adminer/user.inc.php
@@ -111,7 +111,7 @@ if ($_POST) {
 	if ($old_pass != "") {
 		$row["hashed"] = true;
 	}
-	$grants[DB != "" && !isset($_GET["host"]) ? idf_escape($_GET["db"]) . ".*" : ""] = array();
+	$grants[DB != "" && !isset($_GET["host"]) ? idf_escape(addcslashes(DB, "%_")) . ".*" : ""] = array();
 }
 
 ?>