Changeset 185 for tags/2.0.2/lib/RecordLock.inc.php

Timestamp:

Jun 24, 2006 11:02:54 PM (18 years ago)

Author:

scdev

Message:

Q - added oTxt() around all printed PHP_SELFs to avoid XSS attack. See: ​http://blog.phpdoc.info/archives/13-XSS-Woes.html

File:

• tags/2.0.2/lib/RecordLock.inc.php (modified) (1 diff)

tags/2.0.2/lib/RecordLock.inc.php

@@ -334 +334 @@
     {
         ?>
-        <form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">
+        <form method="post" action="<?php echo oTxt($_SERVER['PHP_SELF']); ?>">
         <?php App::printHiddenSession() ?>
         <input type="hidden" name="lock_id" value="<?php echo $this->getID(); ?>" />