Changeset 185 for tags/2.0.2/bin/module_maker/list_template.cli.php

Timestamp:

Jun 24, 2006 11:02:54 PM (18 years ago)

Author:

scdev

Message:

Q - added oTxt() around all printed PHP_SELFs to avoid XSS attack. See: ​http://blog.phpdoc.info/archives/13-XSS-Woes.html

File:

• tags/2.0.2/bin/module_maker/list_template.cli.php (modified) (2 diffs)

tags/2.0.2/bin/module_maker/list_template.cli.php

@@ -109 +109 @@
 
 <div id="commandbox">
-<form action="<\x3fphp echo \$_SERVER['PHP_SELF']; \x3f>" method="get">
+<form action="<\x3fphp echo oTxt(\$_SERVER['PHP_SELF']); \x3f>" method="get">
 <\x3fphp App::printHiddenSession(false); \x3f>
     <span class="nowrap commandtext"><a href="<\x3fphp echo App::oHREF(\$_SERVER['PHP_SELF'] . '?op=add'); \x3f>"><\x3fphp echo _("Add <##>"); \x3f></a></span>
@@ -124 +124 @@
 <?php include 'list_info.ihtml'; \x3f>
 
-<form action="<\x3fphp echo \$_SERVER['PHP_SELF']; \x3f>" method="post">
+<form action="<\x3fphp echo oTxt(\$_SERVER['PHP_SELF']); \x3f>" method="post">
 <table class="list">
     <tr>