From: Jakub Vrana <jakub@vrana.cz>
Date: Sat, 1 Mar 2014 18:33:17 +0000 (-0800)
Subject: Escape server info
X-Git-Tag: v4.1.0~31
X-Git-Url: https://git.joonet.de/?a=commitdiff_plain;h=a710c28d38a18da172b797955c5672ab00d47ac6;p=adminer.git

Escape server info
---

diff --git a/adminer/include/connect.inc.php b/adminer/include/connect.inc.php
index d50dc8fa..5bfe947e 100644
--- a/adminer/include/connect.inc.php
+++ b/adminer/include/connect.inc.php
@@ -23,7 +23,7 @@ function connect_error() {
 				echo "<a href='" . h(ME) . "$key='>$val</a>\n";
 			}
 		}
-		echo "<p>" . lang('%s version: %s through PHP extension %s', $drivers[DRIVER], "<b>$connection->server_info</b>", "<b>$connection->extension</b>") . "\n";
+		echo "<p>" . lang('%s version: %s through PHP extension %s', $drivers[DRIVER], "<b>" . h($connection->server_info) . "</b>", "<b>$connection->extension</b>") . "\n";
 		echo "<p>" . lang('Logged as: %s', "<b>" . h(logged_user()) . "</b>") . "\n";
 		$databases = $adminer->databases();
 		if ($databases) {