cvs: php-master-web /manage user-notes.php
| From: | Philip Olson | Date: | Sat, 29 Nov 2008 17:25:42 +0000 |
| Subject: | cvs: php-master-web /manage user-notes.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-3165@lists.php.net to get a copy of this message | ||
philip Sat Nov 29 17:25:42 2008 UTC
Modified files:
/php-master-web/manage user-notes.php
Log:
Use clean() in a few places, closes bug #46667
http://cvs.php.net/viewvc.cgi/php-master-web/manage/user-notes.php?r1=1.69&r2=1.70&diff_format=u
Index: php-master-web/manage/user-notes.php
diff -u php-master-web/manage/user-notes.php:1.69 php-master-web/manage/user-notes.php:1.70
--- php-master-web/manage/user-notes.php:1.69 Fri Nov 28 20:22:54 2008
+++ php-master-web/manage/user-notes.php Sat Nov 29 17:25:42 2008
@@ -1,5 +1,5 @@
<?php
-// $Id: user-notes.php,v 1.69 2008/11/28 20:22:54 bjori Exp $
+// $Id: user-notes.php,v 1.70 2008/11/29 17:25:42 philip Exp $
// Force login before action can be taken
include_once 'login.inc';
@@ -329,14 +329,14 @@
<table>
<tr>
<th align="right">Section:</th>
- <td><input type="text" name="sect" value="<?php echo
stripslashes($sect);?>" size="30" maxlength="80" /></td>
+ <td><input type="text" name="sect" value="<?php echo
clean($sect);?>" size="30" maxlength="80" /></td>
</tr>
<tr>
<th align="right">email:</th>
- <td><input type="text" name="email" value="<?php echo
stripslashes($email);?>" size="30" maxlength="80" /></td>
+ <td><input type="text" name="email" value="<?php echo
clean($email);?>" size="30" maxlength="80" /></td>
</tr>
<tr>
- <td colspan="2"><textarea name="note" cols="70"
rows="15"><?php echo stripslashes($note);?></textarea></td>
+ <td colspan="2"><textarea name="note" cols="70"
rows="15"><?php echo clean($note);?></textarea></td>
</tr>
<tr>
<td align="center" colspan="2">