Changeset 13961 for branches/2.3/admin/plugins_new.php

Timestamp:

Apr 7, 2012, 11:12:25 PM (12 years ago)

Author:

plg

Message:

bug 2612 fixed: sanitize $_GETinstallstatus before display for
themes/languages/plugins installation

File:

• branches/2.3/admin/plugins_new.php (modified) (1 diff)

branches/2.3/admin/plugins_new.php

@@ -77 +77 @@
     default:
       array_push($page['errors'],
-        sprintf(l10n('An error occured during extraction (%s).'), $_GET['installstatus']),
+        sprintf(l10n('An error occured during extraction (%s).'), htmlspecialchars($_GET['installstatus'])),
         l10n('Please check "plugins" folder and sub-folders permissions (CHMOD).'));
   }