Fix 2 cross site scripting problems.

2004-12-19 17:54:09 +00:00
parent 8d8c98bc46
commit ddbd9ed0cc
2 changed files with 2 additions and 2 deletions
--- a/account.php
+++ b/account.php
@@ -169,7 +169,7 @@ function cmd_send_passwd()
    }
    else
    {
-        addmsg("Sorry, that username (".$_POST['ext_username'].") does not exist.", "red");
+        addmsg("Sorry, that username (". urlencode($_POST['ext_username']) .") does not exist.", "red");
    }
    
    redirect(apidb_fullurl("account.php?cmd=login"));