www/horde/patches/patch-ab


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

$NetBSD: patch-ab,v 1.3 2006/06/16 09:23:21 adrianp Exp $

--- test.php.orig	2006-06-14 09:30:57.000000000 +0100
+++ test.php
@@ -250,12 +250,12 @@ if (!empty($_GET['mode'])) {
         exit;
 
     case 'phpinfo':
-        echo '<a href="' . $url . '?mode=test">&lt;&lt; Back to test.php</a>';
+        echo '<a href="' . htmlspecialchars($url) . '?mode=test">&lt;&lt; Back to test.php</a>';
         phpinfo();
         exit;
 
     case 'filetest':
-        echo '<a href="' . $url . '?mode=test">&lt;&lt; Back to test.php</a>';
+        echo '<a href="' . htmlspecialchars($url) . '?mode=test">&lt;&lt; Back to test.php</a>';
         ?>
         <html>
         <body bgcolor="white" text="black">