Changeset 1696 for trunk/admin/user_list.php

Timestamp:

Jan 4, 2007, 12:28:09 AM (17 years ago)

Author:

rub

Message:

Fixed: HTML vulnerability (Cross Site Scripting)

File:

• trunk/admin/user_list.php (modified) (1 diff)

trunk/admin/user_list.php

@@ -478 +478 @@
 
     'F_ADD_ACTION' => $base_url,
-    'F_USERNAME' => @$_GET['username'],
+    'F_USERNAME' => @htmlentities($_GET['username']),
     'F_FILTER_ACTION' => PHPWG_ROOT_PATH.'admin.php'
     ));