Fix 2 cross site scripting problems.
This commit is contained in:
@@ -169,7 +169,7 @@ function cmd_send_passwd()
|
||||
}
|
||||
else
|
||||
{
|
||||
addmsg("Sorry, that username (".$_POST['ext_username'].") does not exist.", "red");
|
||||
addmsg("Sorry, that username (". urlencode($_POST['ext_username']) .") does not exist.", "red");
|
||||
}
|
||||
|
||||
redirect(apidb_fullurl("account.php?cmd=login"));
|
||||
|
||||
@@ -16,7 +16,7 @@ if(mysql_num_rows($result) == 0)
|
||||
{
|
||||
// do something
|
||||
echo html_frame_start("","98%");
|
||||
echo "No matches found for ".$_REQUEST['q']."\n";
|
||||
echo "No matches found for ". urlencode($_REQUEST['q']) . "\n";
|
||||
echo html_frame_end();
|
||||
}
|
||||
else
|
||||
|
||||
Reference in New Issue
Block a user