Index: admin/dbperformance.php =================================================================== RCS file: /cvsroot/moodle/moodle/admin/dbperformance.php,v retrieving revision 1.9.2.1 diff -u -8 -p -r1.9.2.1 dbperformance.php --- admin/dbperformance.php 2 May 2008 04:07:27 -0000 1.9.2.1 +++ admin/dbperformance.php 10 Oct 2010 02:34:12 -0000 @@ -22,16 +22,20 @@ array('name'=>$stradministration, 'link'=>'index.php', 'type'=>'misc'), array('name'=>$strdatabaseperformance, 'link'=>null, 'type'=>'misc'))); if (!empty($topframe)) { print_header("$site->shortname: $strdatabaseperformance", "$site->fullname", $navigation); exit; } if (!empty($bottomframe) or !empty($do)) { + // strips the slashes that were added in ../lib/setup.php, otherwise quotes get escaped in the SQL + if(isset($_REQUEST['sql'])) { + $_REQUEST['sql'] = stripslashes($_REQUEST['sql']); + } $perf =&NewPerfMonitor($db); $perf->UI($pollsecs=5); exit; } ?> <?php echo "$site->shortname: $strdatabaseperformance" ?>