The branch, master has been updated via 75eed8e9aa2d2dfc80c0d23997a908e3eba4f3ea (commit) from d4049610ee2bfe1909705b9983df3b9e290ff4dc (commit) - Log ----------------------------------------------------------------- commit 75eed8e9aa2d2dfc80c0d23997a908e3eba4f3ea Author: Michal Čihař <michal@cihar.com> Date: Mon Aug 15 17:47:46 2011 +0200 Escape html tags ----------------------------------------------------------------------- Summary of changes: server_status.php | 10 +++++----- 1 files changed, 5 insertions(+), 5 deletions(-) diff --git a/server_status.php b/server_status.php index fdc2abd..51d08e0 100644 --- a/server_status.php +++ b/server_status.php @@ -1383,15 +1383,15 @@ function printVariablesTable() } } if ('%' === substr($name, -1, 1)) { - echo PMA_formatNumber($value, 0, 2) . ' %'; + echo htmlspecialchars(PMA_formatNumber($value, 0, 2)) . ' %'; } elseif (strpos($name, 'Uptime')!==FALSE) { - echo PMA_timespanFormat($value); + echo htmlspecialchars(PMA_timespanFormat($value)); } elseif (is_numeric($value) && $value == (int) $value && $value > 1000) { - echo PMA_formatNumber($value, 3, 1); + echo htmlspecialchars(PMA_formatNumber($value, 3, 1)); } elseif (is_numeric($value) && $value == (int) $value) { - echo PMA_formatNumber($value, 3, 0); + echo htmlspecialchars(PMA_formatNumber($value, 3, 0)); } elseif (is_numeric($value)) { - echo PMA_formatNumber($value, 3, 1); + echo htmlspecialchars(PMA_formatNumber($value, 3, 1)); } else { echo htmlspecialchars($value); } hooks/post-receive -- phpMyAdmin