line 2913 added urlencode · f6cffdbb90 - THC的仓库

line 2913 added urlencode

There was a cross site scripting vulnerability due to insufficient input sanitation on the $pg parameter.  This patch fixes that issue.

ouɐɹɔs ʞɹɐɯ 12 years ago

parent

c1ce84c227

commit

f6cffdbb90

1 changed files with 1 additions and 1 deletions

Split View Show Diff Stats

						
							+ 1
							
							- 1
						
miner.php
							 
								View File
							
				@@ -2803,7 +2803,7 @@ function display()
			
				  if ($allowcustompages === true)
			
				  {
			
				-	$pg = trim(getparam('pg', true));
			
				+	$pg = urlencode(trim(getparam('pg', true)));
			
				 	if ($pagesonly === true)
			
				 	{
			
				 		if ($pg !== null && $pg !== '')