Fixed XSS exploit #8 from ascii

This commit is contained in:
root 2007-03-28 17:16:33 +00:00
parent 543dddafa9
commit 9c98d044f1

View file

@ -70,7 +70,7 @@
</tr>
<tr>
<td class="DataTD" width="125"><?=_("Notary URL")?>: </td>
<td class="DataTD" width="125"><input type="text" name="notaryURL" value="<?=$_POST['notaryURL']?>"></td>
<td class="DataTD" width="125"><input type="text" name="notaryURL" value="<?=htmlentities($_POST['notaryURL'])?>"></td>
</tr>
<tr>
<td class="DataTD" width="125"><?=_("Photo ID")?>: </td>