Added XSS prevention

16 years ago · c5e711ba1f
parent 6f397008ee
commit c5e711ba1f
1 changed files with 3 additions and 1 deletions
--- a/pages/account/6.php
+++ b/pages/account/6.php
@ -38,7 +38,9 @@
 		{
 			header("Content-Type: application/x-x509-user-cert");
 			header("Content-Length: ".strlen($cert));
-			header('Content-Disposition: inline; filename="'.$row['CN'].'.crt"');
+			$fname=sanitizeFilename($row['CN']);
+			if($fname=="") $fname="certificate";
+			header('Content-Disposition: inline; filename="'.$fname.'.crt"');
 			echo $cert;
 			exit;
 		} else {