Added XSS prevention

16 years ago · 5f25780550
parent ee75a14ac4
commit 5f25780550
1 changed files with 2 additions and 2 deletions
--- a/www/api/edu.php
+++ b/www/api/edu.php
@ -27,12 +27,12 @@
    $query= mysql_query($sql); 
    if(mysql_num_rows($query) != 1)
    {
-      echo "NOT FOUND: $sql";
+      echo "NOT FOUND: ".sanitizeHTML($sql);
    }
    else
    {
      $memid = mysql_fetch_assoc($query);
-      echo $memid['memid'];
+      echo sanitizeHTML($memid['memid']);
    }
  }
  else