com web/news: article: escape attachment filenames (cherry picked from commit 75fe8ffab26ad9013282695a73f1b9b313c467a4): article.php
| From: | Johannes Schlüter | Date: | Mon, 28 Jan 2013 23:22:57 +0000 |
| Subject: | com web/news: article: escape attachment filenames (cherry picked from commit 75fe8ffab26ad9013282695a73f1b9b313c467a4): article.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-15398@lists.php.net to get a copy of this message | ||
Commit: e12e69603c000bec368742e07e7f1759c019885c
Author: Johannes Schlüter <johannes@schlueters.de> Tue, 29 Jan 2013 00:22:57 +0100
Parents: ca64213e7b68c11cc83e53d708d9dbd810278742
Branches: master
Link: http://git.php.net/?p=web/news.git;a=commitdiff;h=e12e69603c000bec368742e07e7f1759c019885c
Log:
article: escape attachment filenames
(cherry picked from commit 75fe8ffab26ad9013282695a73f1b9b313c467a4)
Conflicts:
article.php
Changed paths:
M article.php
Diff:
diff --git a/article.php b/article.php
index 41bb50d..f15dca2 100644
--- a/article.php
+++ b/article.php
@@ -94,7 +94,8 @@ while (!feof($s)) {
}
$dl_link =
"/getpart.php?group=$group&article=$article&part=$mimecount";
-
+ $link_desc = htmlspecialchars($link_desc,ENT_QUOTES,"UTF-8");
+
echo "Attachment: <a href=\"$dl_link\">${link_desc}</a><br
/>\n";
}
@@ -279,7 +280,7 @@ function navbar($group, $current) {
} else {
echo ' ';
}
-
+1
echo ' </td>' . "\n";
echo ' <td align="center" class="alisthead">' .
"$group (#$current)</td>\n";
echo ' <td align="right" class="nav">';