Please reply using this URL only: http://bugs.wpkg.org/show_bug.cgi?id=43

           Summary: packages_xml_out doesn't escape characters in the checks
                    section.
           Product: WPKG-http
           Version: unspecified
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: normal
          Priority: P2
         Component: WPKG-http
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]
         QAContact: [email protected]


Using an uninstall condition that has "&" in the text causes XML validation 
error.


Patch follows.

--- packages_xml_out.php.orig   2006-12-19 14:05:25.831684250 -0500
+++ packages_xml_out.php        2006-12-19 14:04:51.412540589 -0500
@@ -140,6 +140,7 @@
   $chk_h=mysql_query(sprintf($chk_sql,quote_smart($pack_id))) or
die(sprintf($chk_sql,quote_smart($pack_id)) . " --- " . mysql_error());
   $count=0;
   while($chk_data=mysql_fetch_array($chk_h)) {
+    escape_str($chk_data);
     $count++;
     if($chk_data[1]!='') {
       if ( $chk_count>2 )

-- 
Configure bugmail: http://bugs.wpkg.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
wpkg-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wpkg-users

Reply via email to