Bug #5340 [NEW]: User details are overescaped
| From: | techtonik at php dot net | Date: | Thu, 08 Sep 2005 16:52:09 +0000 |
| Subject: | Bug #5340 [NEW]: User details are overescaped | ||
| Groups: | php.pear.webmaster | ||
| Request: | Send a blank email to pear-webmaster+get-4382@lists.php.net to get a copy of this message | ||
From: techtonik at php dot net
Operating system:
PHP version: Irrelevant
Package: Web Site
Bug Type: Bug
Bug description: User details are overescaped
Description:
------------
Recent patch to http://cvs.php.net/pearweb/public_html/account-edit.php
invokes htmlspecialchars on entered text, but this script
http://cvs.php.net/pearweb/public_html/account-info.php
also uses
htmlspecialchars to output user info.
The patch is trivial, but it requires somebody with DB and pearweb access
to find and convert all non-htmlspecialcharsed descriptions first.
--
Edit bug report at http://pear.php.net/bugs/bug.php?id=5340&edit=1
--