Fix 2 cross site scripting problems.
This commit is contained in:
@@ -169,7 +169,7 @@ function cmd_send_passwd()
|
|||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
addmsg("Sorry, that username (".$_POST['ext_username'].") does not exist.", "red");
|
addmsg("Sorry, that username (". urlencode($_POST['ext_username']) .") does not exist.", "red");
|
||||||
}
|
}
|
||||||
|
|
||||||
redirect(apidb_fullurl("account.php?cmd=login"));
|
redirect(apidb_fullurl("account.php?cmd=login"));
|
||||||
|
|||||||
@@ -16,7 +16,7 @@ if(mysql_num_rows($result) == 0)
|
|||||||
{
|
{
|
||||||
// do something
|
// do something
|
||||||
echo html_frame_start("","98%");
|
echo html_frame_start("","98%");
|
||||||
echo "No matches found for ".$_REQUEST['q']."\n";
|
echo "No matches found for ". urlencode($_REQUEST['q']) . "\n";
|
||||||
echo html_frame_end();
|
echo html_frame_end();
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
|
|||||||
Reference in New Issue
Block a user