cacert/cacert-webdb
9
0
Fork 0
Code Issues Pull requests 2 Projects Releases 4 Wiki Activity

Fixed XSS

Browse source
This commit is contained in:
root 2007-07-03 19:53:34 +00:00
parent e9bddc7c28
commit 1ce6bd6439
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
pages/account/54.php
View file

@ -70,11 +70,11 @@
</tr> </tr>
<tr> <tr>
<td class="DataTD"><?=_("Longitude")?>:</td> <td class="DataTD"><?=_("Longitude")?>:</td>
<td class="DataTD"><input type="text" name="longitude" value="<?=$_REQUEST['longitude']?>"></td> <td class="DataTD"><input type="text" name="longitude" value="<?=sanitizeHTML($_REQUEST['longitude'])?>"></td>
</tr> </tr>
<tr> <tr>
<td class="DataTD"><?=_("Latitude")?>:</td> <td class="DataTD"><?=_("Latitude")?>:</td>
<td class="DataTD"><input type="text" name="latitude" value="<?=$_REQUEST['latitude']?>"></td> <td class="DataTD"><input type="text" name="latitude" value="<?=sanitizeHTML($_REQUEST['latitude'])?>"></td>
</tr> </tr>
<tr> <tr>
<td class="DataTD" colspan="2"><input type="submit" name="process" value="<?=_("Add")?>"></td> <td class="DataTD" colspan="2"><input type="submit" name="process" value="<?=_("Add")?>"></td>
@ -106,11 +106,11 @@
</tr> </tr>
<tr> <tr>
<td class="DataTD"><?=_("Longitude")?>:</td> <td class="DataTD"><?=_("Longitude")?>:</td>
<td class="DataTD"><input type="text" name="longitude" value="<?=$_REQUEST['longitude']?>"></td> <td class="DataTD"><input type="text" name="longitude" value="<?=sanitizeHTML($_REQUEST['longitude'])?>"></td>
</tr> </tr>
<tr> <tr>
<td class="DataTD"><?=_("Latitude")?>:</td> <td class="DataTD"><?=_("Latitude")?>:</td>
<td class="DataTD"><input type="text" name="latitude" value="<?=$_REQUEST['latitude']?>"></td> <td class="DataTD"><input type="text" name="latitude" value="<?=sanitizeHTML($_REQUEST['latitude'])?>"></td>
</tr> </tr>
<tr> <tr>
<td class="DataTD" colspan="2"><input type="submit" name="process" value="<?=_("Update")?>"></td> <td class="DataTD" colspan="2"><input type="submit" name="process" value="<?=_("Update")?>"></td>