kopia lustrzana https://github.com/friendica/friendica
Special characters should be escaped
rodzic
4948460232
commit
3f35fed35a
|
@ -10,7 +10,7 @@ function profile_init(&$a) {
|
|||
$a->page['aside'] = '';
|
||||
|
||||
if($a->argc > 1)
|
||||
$which = $a->argv[1];
|
||||
$which = htmlspecialchars($a->argv[1]);
|
||||
else {
|
||||
$r = q("select nickname from user where blocked = 0 and account_expired = 0 and account_removed = 0 and verified = 1 order by rand() limit 1");
|
||||
if(count($r)) {
|
||||
|
@ -27,7 +27,7 @@ function profile_init(&$a) {
|
|||
$profile = 0;
|
||||
if((local_user()) && ($a->argc > 2) && ($a->argv[2] === 'view')) {
|
||||
$which = $a->user['nickname'];
|
||||
$profile = $a->argv[1];
|
||||
$profile = htmlspecialchars($a->argv[1]);
|
||||
}
|
||||
else {
|
||||
auto_redir($a, $which);
|
||||
|
|
|
@ -17,7 +17,7 @@
|
|||
<html>
|
||||
<head>
|
||||
<title><?php if(x($page,'title')) echo $page['title'] ?></title>
|
||||
<meta request="<?php echo $_REQUEST['pagename'] ?> ">
|
||||
<meta request="<?php echo htmlspecialchars($_REQUEST['pagename']) ?> ">
|
||||
<script>var baseurl="<?php echo $a->get_baseurl() ?>";</script>
|
||||
<script>var frio="<?php echo "view/theme/frio"; ?>";</script>
|
||||
<?php $baseurl = $a->get_baseurl(); ?>
|
||||
|
|
|
@ -11,7 +11,7 @@
|
|||
<head>
|
||||
<title><?php if(x($page,'title')) echo $page['title'] ?></title>
|
||||
<meta name="viewport" content="initial-scale=1.0">
|
||||
<meta request="<?php echo $_REQUEST['pagename'] ?> ">
|
||||
<meta request="<?php echo htmlspecialchars($_REQUEST['pagename']) ?> ">
|
||||
<script>var baseurl="<?php echo $a->get_baseurl() ?>";</script>
|
||||
<script>var frio="<?php echo "view/theme/frio"; ?>";</script>
|
||||
<?php $baseurl = $a->get_baseurl(); ?>
|
||||
|
|
Ładowanie…
Reference in New Issue