[phpmyadmin/phpmyadmin] df29d8: Add appr. escaping for $cfg options 'hide_db' and ... - Git

25 Aug 2016

  Branch: refs/heads/QA_4_6
  Home:   https://github.com/phpmyadmin/phpmyadmin
  Commit: df29d8ae4100841ecdb59fdfdd29b76f9a28661d

https://github.com/phpmyadmin/phpmyadmin/commit/df29d8ae4100841ecdb59fdfdd2…
  Author: Deven Bansod &lt;devenbansod.bits(a)gmail.com&gt;
  Date:   2016-08-25 (Thu, 25 Aug 2016)

  Changed paths:
    M libraries/navigation/nodes/Node.php

  Log Message:
  -----------
  Add appr. escaping for $cfg options 'hide_db' and 'only_db'

These can lead to SQL injection.

Fix #12497

Signed-off-by: Deven Bansod &lt;devenbansod.bits(a)gmail.com&gt;