alias can contain a ' - as in email.o'connor - need to therefore escape this...

git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1639 a1433add-5e2c-0410-b055-b7f2511e0802

functions.inc.php

@@ -1668,6 +1668,8 @@ function gen_show_status ($show_alias) {
     $table_alias = table_by_key('alias');
     $stat_string = "";
 
+    $show_alias = escape_string($show_alias);
+
     $stat_goto = "";
     $stat_result = db_query ("SELECT goto FROM $table_alias WHERE address='$show_alias'");
     if ($stat_result['rows'] > 0) {