alias can contain a ' - as in email.o'connor - need to therefore escape this...

git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1639 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago · b3074644ff
parent e7fe6e16ef
commit b3074644ff
1 changed files with 2 additions and 0 deletions
--- a/functions.inc.php
+++ b/functions.inc.php
@ -1668,6 +1668,8 @@ function gen_show_status ($show_alias) {
    $table_alias = table_by_key('alias');
    $stat_string = "";

+    $show_alias = escape_string($show_alias);
+
    $stat_goto = "";
    $stat_result = db_query ("SELECT goto FROM $table_alias WHERE address='$show_alias'");
    if ($stat_result['rows'] > 0) {