aboutsummaryrefslogtreecommitdiffstats
path: root/comments.php
diff options
context:
space:
mode:
authorrub <rub@piwigo.org>2007-01-03 23:28:09 +0000
committerrub <rub@piwigo.org>2007-01-03 23:28:09 +0000
commit60bcda3564dd3e2f9d74a0980b95290f373e6817 (patch)
treedb91e3861d24b74c3fd28d9ce867c825cf499105 /comments.php
parentaa5f1e3358e0123d785755d90d25a5cee340f754 (diff)
Fixed: HTML vulnerability (Cross Site Scripting)
git-svn-id: http://piwigo.org/svn/trunk@1696 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to '')
-rw-r--r--comments.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/comments.php b/comments.php
index 771d23ea7..5f043d58c 100644
--- a/comments.php
+++ b/comments.php
@@ -193,8 +193,8 @@ $template->assign_vars(
'L_COMMENT_TITLE' => $title,
'F_ACTION'=>PHPWG_ROOT_PATH.'comments.php',
- 'F_KEYWORD'=>@$_GET['keyword'],
- 'F_AUTHOR'=>@$_GET['author'],
+ 'F_KEYWORD'=>@htmlentities($_GET['keyword']),
+ 'F_AUTHOR'=>@htmlentities($_GET['author']),
'U_HOME' => make_index_url(),
)