Bug #5340 [Opn]: User details are overescaped

From: Date: Thu, 08 Sep 2005 23:37:09 +0000
Subject: Bug #5340 [Opn]: User details are overescaped
References: 1  Groups: php.pear.webmaster 
Request: Send a blank email to pear-webmaster+get-4395@lists.php.net to get a copy of this message
Edit report at http://pear.php.net/bugs/bug.php?id=5340&edit=1 ID: 5340 Updated by: pierre.php@gmail.com Reported By: techtonik at php dot net Status: Open Id: 5340 Type: Bug Package: Web Site PHP Version: Irrelevant -Assigned To: +Assigned To: pajoye New Comment: Will do that in the next early "morning" Previous Comments: ------------------------------------------------------------------------ [2005-09-08 12:52:09] techtonik at php dot net Description: ------------ Recent patch to http://cvs.php.net/pearweb/public_html/account-edit.php invokes htmlspecialchars on entered text, but this script http://cvs.php.net/pearweb/public_html/account-info.php also uses htmlspecialchars to output user info. The patch is trivial, but it requires somebody with DB and pearweb access to find and convert all non-htmlspecialcharsed descriptions first. ------------------------------------------------------------------------ -- Edit this bug report at http://pear.php.net/bugs/bug.php?id=5340&edit=1

« previous php.pear.webmaster (#4395) next »