From f0cf648c7851c96c36bb0c390d13e60931f45900 Mon Sep 17 00:00:00 2001 From: usmannasir Date: Mon, 11 Nov 2024 13:07:55 +0500 Subject: [PATCH] bug fix: phpmyadmin login --- plogical/phpmyadminsignin.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/plogical/phpmyadminsignin.php b/plogical/phpmyadminsignin.php index 7e386ec3d..3b2f92d44 100644 --- a/plogical/phpmyadminsignin.php +++ b/plogical/phpmyadminsignin.php @@ -11,8 +11,8 @@ ### Get credentials using the token - $token = $_POST['token']; - $username = $_POST['username']; + $token = htmlspecialchars($_POST['token'], ENT_QUOTES, 'UTF-8'); + $username = htmlspecialchars($_POST['username'], ENT_QUOTES, 'UTF-8'); //$url = "/dataBases/fetchDetailsPHPMYAdmin?token=" . $token . '&username=' . $username; $url = "/dataBases/fetchDetailsPHPMYAdmin"; @@ -38,7 +38,7 @@ session_name(PMA_SIGNON_SESSIONNAME); @session_start(); - $username = $_POST['username']; + $username = htmlspecialchars($_POST['username'], ENT_QUOTES, 'UTF-8'); $password = $_POST['password']; $_SESSION['PMA_single_signon_user'] = $username;