Changeset 335

Show
Ignore:
Timestamp:
02/28/06 18:20:27 (2 years ago)
Author:
Rickard
Message:

Fixed XSS vulnerability.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/upload/header.php

    r209 r335  
    132132 
    133133// START SUBST - <pun_page> 
    134 $tpl_main = str_replace('<pun_page>', basename($_SERVER['PHP_SELF'], '.php'), $tpl_main); 
     134$tpl_main = str_replace('<pun_page>', htmlspecialchars(basename($_SERVER['PHP_SELF'], '.php')), $tpl_main); 
    135135// END SUBST - <pun_title> 
    136136