Changeset 4304 for trunk/include/menubar.inc.php

Timestamp:

Nov 18, 2009, 9:07:20 PM (14 years ago)

Author:

Eric

Message:

Escape all login and username characters in database
Display correctly usernames

(I hope not to have made mistakes)

File:

• trunk/include/menubar.inc.php (modified) (1 diff)

trunk/include/menubar.inc.php

@@ -282 +282 @@
   else
   {
-    $template->assign('USERNAME', $user['username']);
+    $template->assign('USERNAME', stripslashes($user['username']));
     if (is_autorize_status(ACCESS_CLASSIC))
     {