Changeset 185 for trunk/services/templates/password.ihtml

Timestamp:

Jun 24, 2006 11:02:54 PM (18 years ago)

Author:

scdev

Message:

Q - added oTxt() around all printed PHP_SELFs to avoid XSS attack. See: ​http://blog.phpdoc.info/archives/13-XSS-Woes.html

File:

• trunk/services/templates/password.ihtml (modified) (1 diff)

trunk/services/templates/password.ihtml

@@ -1 +1 @@
 <?php $fv->printErrorMessages(); ?>
 
-<form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">
+<form method="post" action="<?php echo oTxt($_SERVER['PHP_SELF']); ?>">
 <?php $app->printHiddenSession() ?>
 <input type="hidden" name="op" value="update_password" />