[PHP-WEBMASTER] com web/news: article: escape attachment filenames (cherry picked from commit 75fe8ffab26ad9013282695a73f1b9b313c467a4): article.php

[Johannes Schlüter]

Commit:    e12e69603c000bec368742e07e7f1759c019885c
Author:    Johannes Schlüter <johan...@schlueters.de>         Tue, 29 Jan 2013 
00:22:57 +0100
Parents:   ca64213e7b68c11cc83e53d708d9dbd810278742
Branches:  master

Link:       
http://git.php.net/?p=web/news.git;a=commitdiff;h=e12e69603c000bec368742e07e7f1759c019885c

Log:
article: escape attachment filenames
(cherry picked from commit 75fe8ffab26ad9013282695a73f1b9b313c467a4)

Conflicts:

        article.php

Changed paths:
  M  article.php


Diff:
diff --git a/article.php b/article.php
index 41bb50d..f15dca2 100644
--- a/article.php
+++ b/article.php
@@ -94,7 +94,8 @@ while (!feof($s)) {
                        }
 
                        $dl_link = 
"/getpart.php?group=$group&amp;article=$article&amp;part=$mimecount";
-
+                       $link_desc = 
htmlspecialchars($link_desc,ENT_QUOTES,"UTF-8");
+                       
                        echo "Attachment: <a 
href=\"$dl_link\">${link_desc}</a><br />\n";
                }
 
@@ -279,7 +280,7 @@ function navbar($group, $current) {
        } else {
                echo '&nbsp;';
        }
-
+1
        echo '    </td>' . "\n";
        echo '    <td align="center" class="alisthead">' . "$group 
(#$current)</td>\n";
        echo '    <td align="right" class="nav">';


--
PHP Webmaster List Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php