#436 adminer username xss

[zeng zhen]

there is one xss security on "username" param
When access url like demo.adminer.org/adminer.php?username=root,one attacter can inject script codes like -> demo.adminer.org/adminer.php?username=root''><scRipt>alert('xss')</sCript>
I think it is really bad.
server is php5.6.4&mysql5.6.12

[Jakub Vrána]

This is a very serious bug, thank you for the report. I'll fix it and release a new version of Adminer this week.

Please mark security bugs as private the next time.

[zeng zhen]

thank you for response .I'll mark private bugs private next time(wish never will have next time).

[Jakub Vrána]

Fixed and released, thank you again for this report.