Revision: 1180
          http://mrbs.svn.sourceforge.net/mrbs/?rev=1180&view=rev
Author:   cimorrison
Date:     2009-08-28 14:01:59 +0000 (Fri, 28 Aug 2009)

Log Message:
-----------
Fixed the display in the header ("You are <user>") of usernames that contain 
html special chars.

Modified Paths:
--------------
    mrbs/trunk/web/session_cookie.inc
    mrbs/trunk/web/session_http.inc
    mrbs/trunk/web/session_php.inc
    mrbs/trunk/web/session_remote_user.inc

Modified: mrbs/trunk/web/session_cookie.inc
===================================================================
--- mrbs/trunk/web/session_cookie.inc   2009-08-28 13:50:52 UTC (rev 1179)
+++ mrbs/trunk/web/session_cookie.inc   2009-08-28 14:01:59 UTC (rev 1180)
@@ -275,7 +275,7 @@
       <a name="logonBox" href="<?php echo "$search_string\" title=\""
          . get_vocab('show_my_entries') . "\">
         " . get_vocab('you_are')." "
-         .$user ?>
+         . htmlspecialchars($user) ?>
       </a>
       <form method="post" action="admin.php">
         <div>

Modified: mrbs/trunk/web/session_http.inc
===================================================================
--- mrbs/trunk/web/session_http.inc     2009-08-28 13:50:52 UTC (rev 1179)
+++ mrbs/trunk/web/session_http.inc     2009-08-28 14:01:59 UTC (rev 1180)
@@ -95,7 +95,7 @@
 
       <a name="logonBox" href="<?php echo "$search_string\" title=\""
          . get_vocab('show_my_entries') . "\">" . get_vocab('you_are')." "
-         .$user ?></a>
+         . htmlspecialchars($user) ?></a>
 <?php
   }
   else

Modified: mrbs/trunk/web/session_php.inc
===================================================================
--- mrbs/trunk/web/session_php.inc      2009-08-28 13:50:52 UTC (rev 1179)
+++ mrbs/trunk/web/session_php.inc      2009-08-28 14:01:59 UTC (rev 1180)
@@ -237,7 +237,7 @@
 
                 <a name="logonBox" href="<?php echo "$search_string\" title=\""
          . get_vocab('show_my_entries') . "\">" . get_vocab('you_are')." "
-         .$user ?></a>
+         . htmlspecialchars($user) ?></a>
                 <form method="post" action="admin.php">
                   <div>
                     <input type="hidden" name="TargetURL" value="<?php echo 
htmlspecialchars($TargetURL) ?>">

Modified: mrbs/trunk/web/session_remote_user.inc
===================================================================
--- mrbs/trunk/web/session_remote_user.inc      2009-08-28 13:50:52 UTC (rev 
1179)
+++ mrbs/trunk/web/session_remote_user.inc      2009-08-28 14:01:59 UTC (rev 
1180)
@@ -66,7 +66,7 @@
 
       <a name="logonBox" href="<?php echo "$search_string\" title=\""
          . get_vocab('show_my_entries') . "\">" . get_vocab('you_are')." "
-         .$user ?></a>
+         . htmlspecialchars($user) ?></a>
 <?php
     if (isset($user_list_link))
     {


This was sent by the SourceForge.net collaborative development platform, the 
world's largest Open Source development site.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Mrbs-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mrbs-commits

Reply via email to