Changeset 1602

Timestamp:

11/06/2006 11:51:29 PM (2 years ago)

Author:

robertb

Message:

XSS-Luecke geschlossen

Files:

• trunk/error404.php (modified) (1 diff)

trunk/error404.php

@@ -6 +6 @@
  $c['main'] = "<h2>".$l['err404_topic']."</h2>\n<p>".$l['err404_message']."</p>";
  $c['main'] .= '     <form id="searchform" action="'.JLOG_PATH.'/search.php">
-      <p><input class="userdata" type="text" name="q" size="30" value="'.$_GET['url'].'" />
+      <p><input class="userdata" type="text" name="q" size="30" value="'.htmlspecialchars($_GET['url']).'" />
          <input class="send" type="submit" value="'.$l['content_search'].'" /></p>
      </form>';