com web/master: escape the $action parameter: manage/event.php
| From: | Ferenc Kovacs | Date: | Wed, 11 Jun 2014 12:39:57 +0000 |
| Subject: | com web/master: escape the $action parameter: manage/event.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-19247@lists.php.net to get a copy of this message | ||
Commit: f1ba778df22b8e54a3e71d728ad7cf06be3c502d
Author: kovacs.ferenc <kovacs.ferenc@ustream.tv> Wed, 11 Jun 2014 14:39:57 +0200
Parents: b75fa9c0ebdcf7da01c2d68500c2de13a5ea2d83
Branches: master
Link: http://git.php.net/?p=web/master.git;a=commitdiff;h=f1ba778df22b8e54a3e71d728ad7cf06be3c502d
Log:
escape the $action parameter
Changed paths:
M manage/event.php
Diff:
diff --git a/manage/event.php b/manage/event.php
index c1caacc..d45a59f 100644
--- a/manage/event.php
+++ b/manage/event.php
@@ -62,7 +62,7 @@ if ($id && $action) {
}
break;
default:
- warn("that action ('$action') is not understood.");
+ warn("that action ('".html_entity_decode($action,ENT_QUOTES)."') is
not understood.");
}
}