From 2c59d5a7839a361719db404b2ae75781f60c6955 Mon Sep 17 00:00:00 2001 From: root Date: Mon, 17 Nov 2008 21:05:54 +0000 Subject: [PATCH] Fixed a potential XSS --- includes/account.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/account.php b/includes/account.php index ff1d4a9..9f85b89 100644 --- a/includes/account.php +++ b/includes/account.php @@ -56,7 +56,7 @@ if(trim(mysql_real_escape_string(stripslashes($_REQUEST['newemail']))) == "") { showheader(_("My CAcert.org Account!")); - printf(_("Not a valid email address. Can't continue."), $_REQUEST['email']); + printf(_("Not a valid email address. Can't continue.")); showfooter(); exit; }