You've already forked phpmyadmin
mirror of
https://github.com/phpmyadmin/phpmyadmin.git
synced 2026-10-25 06:39:48 +03:00
Fix #16906 - Escape the table name that is checked with backquotes on canAccessStorageTable function
Signed-off-by: William Desportes <williamdes@wdes.fr>
This commit is contained in:
@@ -729,7 +729,7 @@ class Relation
|
||||
public function canAccessStorageTable(string $tableDbName): bool
|
||||
{
|
||||
$result = $this->queryAsControlUser(
|
||||
'SELECT NULL FROM ' . $tableDbName . ' LIMIT 0',
|
||||
'SELECT NULL FROM ' . Util::backquote($tableDbName) . ' LIMIT 0',
|
||||
false,
|
||||
DatabaseInterface::QUERY_STORE
|
||||
);
|
||||
|
||||
Reference in New Issue
Block a user