admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Protect againt crossed scripting

Browse source
This commit is contained in:
Dany De Bontridder 2008-12-19 23:06:14 +00:00
parent 6abd5c6e9e
commit aa110fac08
4 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

6
include/class_widget.php
View file

@ -162,7 +162,7 @@ class widget {
{
$checked=($this->selected==$this->value[$i]['value'])?"SELECTED":"";
$r.='<OPTION VALUE="'.$this->value[$i]['value'].'" '.$checked.'>';
$r.=$this->value[$i]['label'];
$r.=h($this->value[$i]['label']);
}
$r.="</SELECT>";
}
@ -175,7 +175,7 @@ class widget {
echo_debug('class_widget.php',__LINE__,"check for ".$this->value[$i]['value']);
if ($this->selected==$this->value[$i]['value'] )
{
$r=$this->value[$i]['label'];
$r=h($this->value[$i]['label']);
}
}
@ -252,7 +252,7 @@ class widget {
$r.="</TEXTAREA>";
} else {
$r='<p>';
$r.=$this->value;
$r.=h($this->value);
$r.=sprintf('<input type="hidden" name="%s" value="%s">',
$this->name,urlencode($this->value));
$r.='</p>';