Changeset 763 for trunk/lib/HTML.inc.php

Timestamp:

Feb 24, 2022 10:05:48 PM (2 years ago)

Author:

anonymous

Message:

Include boomerang in hidden input on login form so the user will be redirected if the revisit the login form after session is garbage collected. Add escape values used in html attributes.

File:

• trunk/lib/HTML.inc.php (modified) (4 diffs)

trunk/lib/HTML.inc.php

@@ -78 +78 @@
                 echo '<li><a';
                 foreach (array_diff_key($b, array('value' => null)) as $key => $value) {
-                    printf(' %s="%s"', $key, oTxt($value));
+                    printf(' %s="%s"', oTxt($key), oTxt($value));
                 }
                 echo '>' . oTxt($b['value']) . '</a></li>';
@@ -88 +88 @@
                 echo '<li><input';
                 foreach ($b as $key => $value) {
-                    printf(' %s="%s"', $key, oTxt($value));
+                    printf(' %s="%s"', oTxt($key), oTxt($value));
                 }
                 echo ' /></li>';
@@ -247 +247 @@
             printf('<option value="%s"%s%s%s>%s</option>',
                 oTxt($o['value']),
-                (isset($o['class']) && sprintf(' class="%s"', $o['class']) ? : ''),
-                (isset($o['selected']) && $o['selected'] ? ' selected="selected"' : ''),
-                (isset($o['disabled']) && $o['disabled'] ? ' disabled="disabled"' : ''),
+                (isset($o['class']) && sprintf(' class="%s"', oTxt($o['class'])) ? : ''),
+                (isset($o['selected']) && oTxt($o['selected']) ? ' selected="selected"' : ''),
+                (isset($o['disabled']) && oTxt($o['disabled']) ? ' disabled="disabled"' : ''),
                 oTxt($o['text'])
             );
@@ -280 +280 @@
         foreach ($options as $value => $text) {
             printf('<option value="%s"%s>%s</option>',
-                $value,
+                oTxt($value),
                 $preselected == $value ? ' selected="selected"' : '',
-                $text
+                oTxt($text)
             );
         }