Changeset 3649:3b0b868d58b0 for admin/auth.php

Timestamp:

01/12/18 07:57:00 (5 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Children:

3650:11cb6291eea7, 3651:6980a7a06518

Message:

Fix potential XSS - thank's Trí Chim Trích for report

File:

• admin/auth.php (modified) (1 diff)

admin/auth.php

@@ -83 +83 @@
 {
      $user_id = !empty($_POST['user_id']) ? $_POST['user_id'] : null;
-     $user_email = !empty($_POST['user_email']) ? $_POST['user_email'] : '';
+     $user_email = !empty($_POST['user_email']) ? html::escapeHTML($_POST['user_email']) : '';
      try
      {