Ignore:
Timestamp:
Jun 24, 2006 11:02:54 PM (18 years ago)
Author:
scdev
Message:

Q - added oTxt() around all printed PHP_SELFs to avoid XSS attack. See: ​http://blog.phpdoc.info/archives/13-XSS-Woes.html

File:
1 edited

Legend:

Unmodified
Added
Removed

  • trunk/services/templates/admin_list.ihtml

    r136 r185  
    11
    22<?php $fv->printErrorMessages(); ?>
    3 <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
     3<form action="<?php echo oTxt($_SERVER['PHP_SELF']); ?>" method="post">
    44<?php $app->printHiddenSession(false); ?>
    55<div id="commandbox">
Note: See TracChangeset for help on using the changeset viewer.