bug fix: phpmyadmin login

usmannasir · Nov 11, 2024 · f0cf648 · f0cf648
1 parent e73890f
commit f0cf648
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/plogical/phpmyadminsignin.php b/plogical/phpmyadminsignin.php
@@ -11,8 +11,8 @@
 
         ### Get credentials using the token
 
-        $token = $_POST['token'];
-        $username = $_POST['username'];
+        $token = htmlspecialchars($_POST['token'], ENT_QUOTES, 'UTF-8');
+        $username = htmlspecialchars($_POST['username'], ENT_QUOTES, 'UTF-8');
 
         //$url = "/dataBases/fetchDetailsPHPMYAdmin?token=" . $token . '&username=' . $username;
         $url = "/dataBases/fetchDetailsPHPMYAdmin";
@@ -38,7 +38,7 @@
         session_name(PMA_SIGNON_SESSIONNAME);
         @session_start();
 
-        $username = $_POST['username'];
+        $username = htmlspecialchars($_POST['username'], ENT_QUOTES, 'UTF-8');
         $password = $_POST['password'];
 
         $_SESSION['PMA_single_signon_user'] = $username;