cvs: docweb /include init.inc.php

rasmus Sun Feb 11 07:43:33 2007 UTC Modified files: /docweb/include init.inc.php Log: Careful http://cvs.php.net/viewvc.cgi/docweb/include/init.inc.php?r1=1.13&r2=1.14&diff_format=u Index: docweb/include/init.inc.php diff -u docweb/include/init.inc.php:1.13 docweb/include/init.inc.php:1.14 --- docweb/include/init.inc.php:1.13 Sun Feb 5 19:53:54 2006 +++ docweb/include/init.inc.php Sun Feb 11 07:43:32 2007 @@ -18,7 +18,7 @@ | Gabor Hojtsy <goba@php.net> | | Sean Coates <sean@php.net> | +----------------------------------------------------------------------+ -$Id: init.inc.php,v 1.13 2006/02/05 19:53:54 nlopess Exp $ +$Id: init.inc.php,v 1.14 2007/02/11 07:43:32 rasmus Exp $ */ error_reporting(E_ALL); @@ -45,7 +45,7 @@ // set up constants (use defaults if necessary) define('SITE', isset($project) ? $project : $defaultProject); define('LANGC', isset($language) ? $language : $defaultLanguage); - define('URI', isset($uri) ? preg_replace('@^[/\.]+@', '/' ,$uri) : $_SERVER['REQUEST_URI']); + define('URI', isset($uri) ? preg_replace('@^[/\.]+@', '/' ,$uri) : htmlspecialchars($_SERVER['REQUEST_URI'], ENT_QUOTES)); define('LANGD', $LANGUAGES[LANGC]); if (isset($project)) {