From: Jakub Vrana <jakub@vrana.cz>
Date: Fri, 26 Nov 2010 09:59:16 +0000 (+0100)
Subject: Utilize js_escape
X-Git-Tag: v3.2.0~124
X-Git-Url: https://git.joonet.de/?a=commitdiff_plain;h=3e1fca97be883e734ab87494757edae884278176;p=adminer.git

Utilize js_escape
---

diff --git a/adminer/db.inc.php b/adminer/db.inc.php
index a519ca35..eaec1c04 100644
--- a/adminer/db.inc.php
+++ b/adminer/db.inc.php
@@ -155,6 +155,6 @@ if ($_GET["ns"] !== "") {
 	}
 	
 	if ($tables_list) {
-		echo "<script type='text/javascript'>ajaxSetHtml('" . addcslashes(ME, "\\'/") . "script=db');</script>\n";
+		echo "<script type='text/javascript'>ajaxSetHtml('" . js_escape(ME) . "script=db');</script>\n";
 	}
 }
diff --git a/adminer/include/connect.inc.php b/adminer/include/connect.inc.php
index c61b32ae..54732b20 100644
--- a/adminer/include/connect.inc.php
+++ b/adminer/include/connect.inc.php
@@ -49,7 +49,7 @@ function connect_error() {
 	}
 	page_footer("db");
 	if ($databases) {
-		echo "<script type='text/javascript'>ajaxSetHtml('" . addcslashes(ME, "\\'/") . "script=connect');</script>\n";
+		echo "<script type='text/javascript'>ajaxSetHtml('" . js_escape(ME) . "script=connect');</script>\n";
 	}
 }