From: jakubvrana <jakubvrana@7c3ca157-0c34-0410-bff1-cbf682f78f5c>
Date: Thu, 28 Aug 2008 12:24:59 +0000 (+0000)
Subject: Sanitize column sorting
X-Git-Tag: v3.0.0~1055
X-Git-Url: https://git.joonet.de/?a=commitdiff_plain;h=3de325606087dfdec84e47a7b431b6d504e74531;p=adminer.git

Sanitize column sorting

git-svn-id: https://adminer.svn.sourceforge.net/svnroot/adminer/trunk@462 7c3ca157-0c34-0410-bff1-cbf682f78f5c
---

diff --git a/select.inc.php b/select.inc.php
index ff89274c..ab7afcd0 100644
--- a/select.inc.php
+++ b/select.inc.php
@@ -233,7 +233,7 @@ for (var i=0; <?php echo $i; ?> > i; i++) {
 				if (!$j) {
 					echo '<thead><tr>' . (count($select) == count($group) ? '<td><label><input type="checkbox" name="delete_selected" value="1" onclick="var elems = this.form.elements; for (var i=0; i < elems.length; i++) if (elems[i].name == \'delete[]\') elems[i].checked = this.checked;" />' . lang('all') . '</label></td>' : '');
 					foreach ($row as $key => $val) {
-						echo '<th><a href="' . remove_from_uri('(order|desc)[^=]*') . '&amp;order%5B0%5D=' . htmlspecialchars($key) . ($_GET["order"][0] === $key && !$_GET["desc"][0] ? '&amp;desc%5B0%5D=1' : '') . '">' . htmlspecialchars($key) . "</a></th>";
+						echo '<th><a href="' . htmlspecialchars(remove_from_uri('(order|desc)[^=]*')) . '&amp;order%5B0%5D=' . htmlspecialchars($key) . ($_GET["order"][0] === $key && !$_GET["desc"][0] ? '&amp;desc%5B0%5D=1' : '') . '">' . htmlspecialchars($key) . "</a></th>";
 					}
 					echo "</tr></thead>\n";
 				}