iarv/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-05-06 05:22:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

bug 2612 fixed: sanitize $_GET['installstatus'] before display for

Browse Source 
themes/languages/plugins installation


git-svn-id: http://piwigo.org/svn/branches/2.3@13961 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
plegall
2012-04-07 21:12:25 +00:00
parent e40bcacc3e
commit 237ce065b9
3 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
admin/languages_new.php
View File

@@ -97,8 +97,9 @@ if (isset($_GET['installstatus']))
break;
default:
array_push($page['errors'],
sprintf(l10n('An error occured during extraction (%s).'), $_GET['installstatus'])
array_push(
$page['errors'],
sprintf(l10n('An error occured during extraction (%s).'), htmlspecialchars($_GET['installstatus']))
);
}
}

2
admin/plugins_new.php
View File

@@ -76,7 +76,7 @@ if (isset($_GET['installstatus']))
default:
array_push($page['errors'],
sprintf(l10n('An error occured during extraction (%s).'), $_GET['installstatus']),
sprintf(l10n('An error occured during extraction (%s).'), htmlspecialchars($_GET['installstatus'])),
l10n('Please check "plugins" folder and sub-folders permissions (CHMOD).'));
}
}

2
admin/themes_new.php
View File

@@ -102,7 +102,7 @@ if (isset($_GET['installstatus']))
default:
array_push(
$page['errors'],
sprintf(l10n('An error occured during extraction (%s).'), $_GET['installstatus'])
sprintf(l10n('An error occured during extraction (%s).'), htmlspecialchars($_GET['installstatus']))
);
}
}