cvs: phpweb / index.php

goba Sun Mar 2 13:01:37 2003 EDT Modified files: /phpweb index.php Log: Ensure validity in case there are any < > or & signs (or other HTML special chars) in the provider name or any event title... Index: phpweb/index.php diff -u phpweb/index.php:1.354 phpweb/index.php:1.355 --- phpweb/index.php:1.354 Sun Mar 2 12:33:09 2003 +++ phpweb/index.php Sun Mar 2 13:01:35 2003 @@ -109,7 +109,14 @@ $RSIDEBAR_DATA .= "<div align=\"center\"><h3>This mirror sponsored by:</h3>\n"; // Create image HTML code - $img = make_image('mirror.' . $ext, mirror_provider(), false, false, 'backend', 0); + $img = make_image( + 'mirror.' . $ext, + htmlspecialchars(mirror_provider()), + false, + false, + 'backend', + 0 + ); // Add size information depending on mirror type if (is_primary_site() || is_backup_primary()) { @@ -174,7 +181,9 @@ // There is no event with this description in this month if (!$seen[$desc]) { // Add event to sidebar - $RSIDEBAR_DATA .= "$d. <a href=\"cal.php?id=$id\">" . stripslashes($desc) . "</a><br />\n"; + $RSIDEBAR_DATA .= "$d. <a href=\"cal.php?id=$id\">" . + htmlspecialchars(stripslashes($desc)) . + "</a><br />\n"; // Set seen flag $seen[$desc] = true; }