nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

XSS fixes

Browse Source
This commit is contained in:
Herman van Rink
2011-08-05 12:01:47 +02:00
parent c78da15827
commit 9d54e57fc8
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
tbl_tracking.php
View File

@@ -480,8 +480,8 @@ if (isset($_REQUEST['report']) || isset($_REQUEST['report_export'])) {
?> ?>
<tr class="<?php echo $style; ?>"> <tr class="<?php echo $style; ?>">
<td><small><?php echo $i; ?></small></td> <td><small><?php echo $i; ?></small></td>
<td><small><?php echo $entry['date']; ?></small></td> <td><small><?php echo htmlspecialchars($entry['date']); ?></small></td>
<td><small><?php echo $entry['username']; ?></small></td> <td><small><?php echo htmlspecialchars($entry['username']); ?></small></td>
<td><?php echo $statement; ?></td> <td><?php echo $statement; ?></td>
</tr> </tr>
<?php <?php
@@ -514,10 +514,10 @@ if (isset($_REQUEST['report']) || isset($_REQUEST['report_export'])) {
?> ?>
</form> </form>
<form method="post" action="tbl_tracking.php?<?php echo $url_query; ?>&amp;report=true&amp;version=<?php echo $_REQUEST['version'];?>"> <form method="post" action="tbl_tracking.php?<?php echo $url_query; ?>&amp;report=true&amp;version=<?php echo $_REQUEST['version'];?>">
<input type="hidden" name="logtype" value="<?php echo $_REQUEST['logtype'];?>" /> <input type="hidden" name="logtype" value="<?php echo htmlspecialchars($_REQUEST['logtype']);?>" />
<input type="hidden" name="date_from" value="<?php echo $_REQUEST['date_from'];?>" /> <input type="hidden" name="date_from" value="<?php echo htmlspecialchars($_REQUEST['date_from']);?>" />
<input type="hidden" name="date_to" value="<?php echo $_REQUEST['date_to'];?>" /> <input type="hidden" name="date_to" value="<?php echo htmlspecialchars($_REQUEST['date_to']);?>" />
<input type="hidden" name="users" value="<?php echo $_REQUEST['users'];?>" /> <input type="hidden" name="users" value="<?php echo htmlspecialchars($_REQUEST['users']);?>" />
<?php <?php
echo "<br/>" . sprintf($strTrackingExportAs, $str_export1) . $str_export2 . "<br/>"; echo "<br/>" . sprintf($strTrackingExportAs, $str_export1) . $str_export2 . "<br/>";
?> ?>