Fixed: HTML vulnerability (Cross Site Scripting)

git-svn-id: http://piwigo.org/svn/trunk@1696 68402e56-0260-453c-a942-63ccdbb3a9ee
2026-08-07 17:23:04 +02:00 · 2007-01-03 23:28:09 +00:00
parent aa5f1e3358
commit 60bcda3564
2 changed files with 3 additions and 3 deletions
@@ -477,7 +477,7 @@ $template->assign_vars(
    'U_HELP' => PHPWG_ROOT_PATH.'popuphelp.php?page=user_list',

    'F_ADD_ACTION' => $base_url,
-    'F_USERNAME' => @$_GET['username'],
+    'F_USERNAME' => @htmlentities($_GET['username']),
    'F_FILTER_ACTION' => PHPWG_ROOT_PATH.'admin.php'
    ));