Added XSS prevention

16 years ago · 31c57ef051
parent 16d7b35bae
commit 31c57ef051
1 changed files with 1 additions and 1 deletions
--- a/www/ac.php
+++ b/www/ac.php
@ -23,7 +23,7 @@
 	$s = mysql_real_escape_string($_REQUEST['s']);

 	$id = mysql_real_escape_string(strip_tags($_REQUEST['id']));
-	echo "parent._ac_rpc('$id',";
+	echo "parent._ac_rpc('".sanitizeHTML($id)."',";

 	$bits = explode(",", $s);