From 8000fa8754b886a8186cd697cc9974ee984813f0 Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Fri, 19 Sep 2008 21:10:35 +0000
Subject: [PATCH] Improved register_globals

---
 pages/index/6.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pages/index/6.php b/pages/index/6.php
index 7f8b833..d9b8e43 100644
--- a/pages/index/6.php
+++ b/pages/index/6.php
@@ -76,8 +76,8 @@
 ?>
   <tr>
     <td class="DataTD"><?=$_SESSION['lostpw']['user'][$q]?></td>
-    <td class="DataTD"><input type="text" name="<?=$a?>" value="<?=$_SESSION['lostpw'][$a]?>">
-	<input type="hidden" name="<?=$q?>" value="<?=$_SESSION['lostpw']['user'][$q]?>"></td>
+    <td class="DataTD"><input type="text" name="<?=$a?>" value="<?=sanitizeHTML(array_key_exists($a,$_SESSION['lostpw'])?$_SESSION['lostpw'][$a]:"")?>">
+	<input type="hidden" name="<?=$q?>" value="<?=sanitizeHTML($_SESSION['lostpw']['user'][$q])?>"></td>
   </tr>
 <? } ?>
   <tr>