[Phpmyadmin-devel] token mismatch with server variables

[Isaac Bennetch]

Hi, I just took a bug report/suggested fix from "an anonymous IRC user" 
who doesn't have a SourceForge or github account. The thing is, I can't 
reproduce it. Does anyone have any comment on this?

I 'm running latest 4.0.4.1 and wanted to change a server variable, but 
every time I clicked on one I got a token mismatch. Turns out, line 128 
of server_variables.php does:

$url = htmlspecialchars('server_variables.php?' . 
PMA_generate_common_url());

The html special chars converts an '&' to & where it shouldn't. This 
effectively makes it impossible to change any server variables via 
phpMyAdmin. Changing it to:

$url = ('server_variables.php?' . PMA_generate_common_url());

(kill the htmlspecialchars())

works. But I'm not certain this would be the correct fix.