https://bugzilla.wikimedia.org/show_bug.cgi?id=14314





--- Comment #4 from Li Ding <[EMAIL PROTECTED]>  2008-12-02 02:12:30 UTC ---
well, below should be the correct ones, they changes '.' and ' ' to '_'.
-------------------------------
$generated_page_name = str_replace('.', '_',$generated_page_name);
$generated_page_name = str_replace(' ', '_',$generated_page_name);
$generated_page_name = str_ireplace("<$input_name>",$cur_value_in_template,
$generated_page_name);
---------------------------------

The problem is related to the use of ' ', '.', and '_'. 
* $input_name is extracted from an escaped string $query_template_name, which
is escaped
* $generated_page_name, however, is directly copied from param, which has not
bee escaped.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to