cvs: pearweb /public_html source.php
| From: | Richard Heyes | Date: | Sat, 23 Nov 2002 21:29:10 +0000 |
| Subject: | cvs: pearweb /public_html source.php | ||
| Groups: | php.pear.cvs | ||
| Request: | Send a blank email to pear-cvs+get-7547@lists.php.net to get a copy of this message | ||
richard Sat Nov 23 16:29:10 2002 EDT
Modified files:
/pearweb/public_html source.php
Log:
XSS fix
Index: pearweb/public_html/source.php
diff -u pearweb/public_html/source.php:1.5 pearweb/public_html/source.php:1.6
--- pearweb/public_html/source.php:1.5 Sun Jun 9 18:49:03 2002
+++ pearweb/public_html/source.php Sat Nov 23 16:29:10 2002
@@ -15,7 +15,7 @@
+----------------------------------------------------------------------+
| Authors: |
+----------------------------------------------------------------------+
- $Id: source.php,v 1.5 2002/06/09 22:49:03 richard Exp $
+ $Id: source.php,v 1.6 2002/11/23 21:29:10 richard Exp $
*/
$SIDEBAR_DATA='
@@ -35,7 +35,7 @@
exit;
}
?>
-<p>Source of: <?php echo $url; ?></p>
+<p>Source of: <?=strip_tags($url)?></p>
<?php