com web/master: Add the 'unmangle()' hack to permit an array of characters on particular fields. Enable this on the mirror form.:
include/functions.inc manage/mirrors.php

Commit: 9bfc7e93f3088a871645cd02df02aebdeba73c20 Author: Daniel P. Brown <danbrown@php.net> Thu, 5 Apr 2012 15:11:15 -0400 Parents: 3fbc7ef3d6a51d36b653582ead5d90caef57e9d7 Branches: master Link: http://git.php.net/?p=web/master.git;a=commitdiff;h=9bfc7e93f3088a871645cd02df02aebdeba73c20 Log: Add the 'unmangle()' hack to permit an array of characters on particular fields. Enable this on the mirror form. Changed paths: M include/functions.inc M manage/mirrors..php Diff: diff --git a/include/functions.inc b/include/functions..inc index 6f40723..5fd65f1 100644 --- a/include/functions.inc +++ b/include/functions.inc @@ -204,3 +204,7 @@ function get_ssh_keys($string) { return $results; } + +function unmangle($str) { + return str_replace(['&lt;','&gt;','&amp;','&uuml;',],['<','>','&','ü',],$str); +} diff --git a/manage/mirrors.php b/manage/mirrors.php index c725500..3f2309b 100644 --- a/manage/mirrors.php +++ b/manage/mirrors.php @@ -41,10 +41,10 @@ if (isset($id) && isset($hostname)) { // Perform a full data update on a mirror case "update": $query = "UPDATE mirrors SET hostname='$hostname', active=$active, " . - "mirrortype=$mirrortype, cname='$cname', maintainer='$maintainer', " . - "providername='$providername', providerurl='$providerurl', " . + "mirrortype=$mirrortype, cname='$cname', maintainer='".unmangle($maintainer)."', " . + "providername='".unmangle($providername)."', providerurl='$providerurl', " . "cc='$cc', lang='$lang', has_stats=$has_stats, " . - "lastedited=NOW(), acmt='$acmt' WHERE id = $id"; + "lastedited=NOW(), acmt='".unmangle($acmt)."' WHERE id = $id"; $msg = "$hostname updated"; break; @@ -60,8 +60,8 @@ if (isset($id) && isset($hostname)) { "cname, maintainer, providername, providerurl, cc, " . "lang, has_stats, created, lastedited, acmt) " . "VALUES ('$hostname', $active, $mirrortype, '$cname', " . - "'$maintainer', '$providername', '$providerurl', '$cc', " . - "'$lang', $has_stats, NOW(), NOW(), '$acmt')"; + "'".unmangle($maintainer)."', '".unmangle($providername)."', '$providerurl', '$cc', " . + "'$lang', $has_stats, NOW(), NOW(), '".unmangle($acmt)."')"; $msg = "$hostname added"; break; }