From cbd67842bad63bdcc51635cf3591f00918aa2e00 Mon Sep 17 00:00:00 2001 From: jakubvrana Date: Wed, 22 Jul 2009 13:36:39 +0000 Subject: [PATCH] Process only enabled columns git-svn-id: https://adminer.svn.sourceforge.net/svnroot/adminer/trunk@877 7c3ca157-0c34-0410-bff1-cbf682f78f5c --- adminer/select.inc.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/adminer/select.inc.php b/adminer/select.inc.php index 9a029b21..98ef9e81 100644 --- a/adminer/select.inc.php +++ b/adminer/select.inc.php @@ -119,8 +119,8 @@ if ($_POST && !$error) { $command = ($_POST["delete"] ? ($_POST["all"] && !$where ? "TRUNCATE " : "DELETE FROM ") : ($_POST["clone"] ? "INSERT INTO " : "UPDATE ")) . idf_escape($_GET["select"]); if (!$_POST["delete"]) { $set = array(); - foreach ($fields as $name => $field) { - $val = process_input($name, $field); + foreach ($columns as $name => $val) { //! should check also for edit or insert privileges + $val = process_input($name, $fields[$name]); if ($_POST["clone"]) { $set[] = ($val !== false ? $val : idf_escape($name)); } elseif ($val !== false) {