From 1ce6bd643922c2abc6f4636406374c6d5a9d5c54 Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Tue, 3 Jul 2007 19:53:34 +0000
Subject: [PATCH] Fixed XSS

---
 pages/account/54.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pages/account/54.php b/pages/account/54.php
index ac2bd5a..8ec3394 100644
--- a/pages/account/54.php
+++ b/pages/account/54.php
@@ -70,11 +70,11 @@
   </tr>
   <tr>
     <td class="DataTD"><?=_("Longitude")?>:</td>
-    <td class="DataTD"><input type="text" name="longitude" value="<?=$_REQUEST['longitude']?>"></td>
+    <td class="DataTD"><input type="text" name="longitude" value="<?=sanitizeHTML($_REQUEST['longitude'])?>"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Latitude")?>:</td>
-    <td class="DataTD"><input type="text" name="latitude" value="<?=$_REQUEST['latitude']?>"></td>
+    <td class="DataTD"><input type="text" name="latitude" value="<?=sanitizeHTML($_REQUEST['latitude'])?>"></td>
   </tr>
   <tr>
     <td class="DataTD" colspan="2"><input type="submit" name="process" value="<?=_("Add")?>"></td>
@@ -106,11 +106,11 @@
   </tr>
   <tr>
     <td class="DataTD"><?=_("Longitude")?>:</td>
-    <td class="DataTD"><input type="text" name="longitude" value="<?=$_REQUEST['longitude']?>"></td>
+    <td class="DataTD"><input type="text" name="longitude" value="<?=sanitizeHTML($_REQUEST['longitude'])?>"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Latitude")?>:</td>
-    <td class="DataTD"><input type="text" name="latitude" value="<?=$_REQUEST['latitude']?>"></td>
+    <td class="DataTD"><input type="text" name="latitude" value="<?=sanitizeHTML($_REQUEST['latitude'])?>"></td>
   </tr>
   <tr>
     <td class="DataTD" colspan="2"><input type="submit" name="process" value="<?=_("Update")?>"></td>