From 27d3f15e2f0f0e8443ae0036381950f53c2985ee Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Tue, 3 Jul 2007 19:59:53 +0000
Subject: [PATCH] Fixed XSS

---
 pages/wot/9.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pages/wot/9.php b/pages/wot/9.php
index 2318708..3a15eaa 100644
--- a/pages/wot/9.php
+++ b/pages/wot/9.php
@@ -61,18 +61,18 @@
 <? } ?>
   <tr>
     <td class="DataTD"><?=_("Subject")?>:</td>
-    <td class="DataTD" align="left"><input type="text" name="subject" value="<?=strip_tags($_POST['subject'])?>"></td>
+    <td class="DataTD" align="left"><input type="text" name="subject" value="<?=sanitizeHTML($_POST['subject'])?>"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Message")?>:</td>
-    <td class="DataTD"><textarea name="message" cols="40" rows="5" wrap="virtual"><?=strip_tags($_POST['message'])?></textarea></td>
+    <td class="DataTD"><textarea name="message" cols="40" rows="5" wrap="virtual"><?=sanitizeHTML($_POST['message'])?></textarea></td>
   </tr>
   <tr>
     <td class="DataTD" colspan="2"><input type="submit" name="process" value="<?=_("Send")?>"></td>
   </tr>
 </table>
 <input type="hidden" name="pageid" value="<?=$_SESSION['_config']['pagehash']?>">
-<input type="hidden" name="userid" value="<?=$_REQUEST['userid']?>">
+<input type="hidden" name="userid" value="<?=intval($_REQUEST['userid'])?>">
 <input type="hidden" name="oldid" value="<?=$id?>">
 </form>
 <p>[ <a href='javascript:history.go(-1)'>Go Back</a> ]</p>