Changeset 185 for branches/1.1dev/lib

Timestamp:

Jun 24, 2006 11:02:54 PM (18 years ago)

Author:

scdev

Message:

Q - added oTxt() around all printed PHP_SELFs to avoid XSS attack. See: ​http://blog.phpdoc.info/archives/13-XSS-Woes.html

File:

• branches/1.1dev/lib/PEdit.inc.php (modified) (1 diff)

branches/1.1dev/lib/PEdit.inc.php

@@ -273 +273 @@
         }
         ?>
-        <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
+        <form action="<?php echo oTxt($_SERVER['PHP_SELF']); ?>" method="post">
         <input type="hidden" name="filename" value="<?php echo $this->_filename; ?>" />
         <input type="hidden" name="file_hash" value="<?php echo md5('frog_guts' . $this->_filename); ?>" />