1 files changed, 26 insertions, 0 deletions
diff --git a/php-udan11-sql-parser-pma.patch b/php-udan11-sql-parser-pma.patch
new file mode 100644
index 0000000..41e2926
--- /dev/null
+++ b/php-udan11-sql-parser-pma.patch
@@ -0,0 +1,26 @@
+From 3a6a9a807d99371ee126635e1a505fc1fe0df32c Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <michal@cihar.com>
+Date: Thu, 25 Feb 2016 09:06:52 +0100
+Subject: [PATCH] Escape query when displaying
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Signed-off-by: Michal Čihař <michal@cihar.com>
+---
+ libraries/sql-parser/src/Utils/Error.php | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/libraries/sql-parser/src/Utils/Error.php b/libraries/sql-parser/src/Utils/Error.php
+index a9c0814..f0ad5af 100644
+--- a/libraries/sql-parser/src/Utils/Error.php
++++ b/libraries/sql-parser/src/Utils/Error.php
+@@ -90,7 +90,7 @@ public static function format(
+                 ++$i,
+                 $err[0],
+                 $err[1],
+-                $err[2],
++                htmlspecialchars($err[2]),
+                 $err[3]
+             );
+         }