cvs: pearweb /public_html account-info.php
| From: | Daniel Convissor | Date: | Thu, 01 Jul 2004 15:09:33 +0000 |
| Subject: | cvs: pearweb /public_html account-info.php | ||
| Groups: | php.pear.cvs | ||
| Request: | Send a blank email to pear-cvs+get-21361@lists.php.net to get a copy of this message | ||
danielc Thu Jul 1 11:09:33 2004 EDT
Modified files:
/pearweb/public_html account-info.php
Log:
* nl2br() on userinfo.
* htmlspecialchars() on name.
http://cvs.php.net/diff.php/pearweb/public_html/account-info.php?r1=1.34&r2=1.35&ty=u
Index: pearweb/public_html/account-info.php
diff -u pearweb/public_html/account-info.php:1.34 pearweb/public_html/account-info.php:1.35
--- pearweb/public_html/account-info.php:1.34 Thu Jul 1 05:31:27 2004
+++ pearweb/public_html/account-info.php Thu Jul 1 11:09:32 2004
@@ -15,7 +15,7 @@
+----------------------------------------------------------------------+
| Authors: |
+----------------------------------------------------------------------+
- $Id: account-info.php,v 1.34 2004/07/01 09:31:27 mj Exp $
+ $Id: account-info.php,v 1.35 2004/07/01 15:09:32 danielc Exp $
*/
/**
@@ -46,9 +46,9 @@
$handle = htmlspecialchars($handle);
-response_header('User Information: ' . $row['name']);
+response_header('User Information: ' . htmlspecialchars($row['name']));
-echo '<h1>User Information: ' . $row['name'] . "</h1>\n";
+echo '<h1>User Information: ' . htmlspecialchars($row['name']) .
"</h1>\n";
if (isset($auth_user) && is_object($auth_user)
&& ($auth_user->handle == $handle ||
@@ -89,7 +89,7 @@
if ($row['userinfo']) {
echo ' <tr>' . "\n";
echo ' <td class="textcell" colspan="2">';
- echo htmlspecialchars($row['userinfo']) . "</td>\n";
+ echo nl2br(htmlspecialchars($row['userinfo'])) . "</td>\n";
echo ' </tr>' . "\n";
}