cvs: php-bugs-web / search.php
| From: | Rasmus Lerdorf | Date: | Sun, 08 May 2005 15:58:04 +0000 |
| Subject: | cvs: php-bugs-web / search.php | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-28116@lists.php.net to get a copy of this message | ||
rasmus Sun May 8 11:58:04 2005 EDT
Modified files:
/php-bugs-web search.php
Log:
Fix XSS in bug search
http://cvs.php.net/diff.php/php-bugs-web/search.php?r1=1.60&r2=1.61&ty=u
Index: php-bugs-web/search.php
diff -u php-bugs-web/search.php:1.60 php-bugs-web/search.php:1.61
--- php-bugs-web/search.php:1.60 Mon Dec 20 10:28:04 2004
+++ php-bugs-web/search.php Sun May 8 11:58:02 2005
@@ -155,7 +155,7 @@
}
}
- $link = "$PHP_SELF?cmd=display" .
+ $link = $_SERVER['SCRIPT_NAME'] . '?cmd=display' .
$bug_type_string .
$bug_ntype_string .
"&status=" . urlencode(stripslashes($status)) .
@@ -214,7 +214,7 @@
if ($errors) display_errors($errors);
if ($warnings) display_warnings($warnings);
?>
-<form id="asearch" method="get" action="<?php echo
$PHP_SELF?>">
+<form id="asearch" method="get" action="<?php echo
$_SERVER['SCRIPT_NAME'];?>">
<table id="primary" width="95%">
<tr>
<th>Find bugs</th>